<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.986013,5.6411,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_0{
style=filled;
color=gray75;
724[label="155.148.86.90;s;69pkt 69fpkt", shape=diamond, color=yellow];
812[label="210.125.91.205;s;11pkt 11fpkt", shape=diamond, color=yellow];
997[label="93.192.65.0;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1810[label="134.253.247.36;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1852[label="136.151.110.38;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2728[label="41.48.58.82;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4840[label="197.17.26.199;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4854[label="109.195.4.200;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5172[label="136.151.123.220;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5451[label="93.239.118.237;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5651[label="136.151.126.252;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat0[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.86.90:*, *:80}[38.4146%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 445: (3.96341%)&lt;BR/&gt; 1863: (2.13415%)&lt;BR/&gt; 0: (1.82927%)&lt;BR/&gt; 8080: (1.21951%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="155.148.86.90"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.237.228.164"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733758" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.225.174.202"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734019" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_7{
style=filled;
color=gray75;
115[label="54.179.76.74;s;8764pkt 8764fpkt", shape=diamond, color=yellow];
stat7[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.179.76.74:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 1091: (0.0342309%)&lt;BR/&gt; 1090: (0.0342309%)&lt;BR/&gt; 1089: (0.0342309%)&lt;BR/&gt; 1088: (0.0342309%)&gt;];
}
115--977[label="0.00159744;1pkt 1fpkt"];
115--978[label="0.00187266;1pkt 1fpkt"];
115--979[label="0.00207469;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="54.179.76.74"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="41.232.39.226"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="155.148.8.202"/>
      <from sec="1083733210" usec="0"/>
      <to sec="1083733386" usec="0"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083733386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="94.176.247.24"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733480" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_11{
style=filled;
color=gray75;
62[label="198.189.13.38;s;8pkt 8fpkt", shape=diamond, color=yellow];
130[label="208.96.49.183;d;8pkt 8fpkt", shape=diamond, color=yellow];
1843[label="198.189.13.38;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat11[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.189.13.38:*, 208.96.49.183:119}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (50%)&lt;BR/&gt; 52434: (6.25%)&lt;BR/&gt; 52431: (6.25%)&lt;BR/&gt; 52412: (6.25%)&lt;BR/&gt; 52411: (6.25%)&gt;];
}
62--130[label="1;8pkt 8fpkt"];
62--1843[label="1;8pkt 8fpkt"];
130--1843[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.49.183" dst_port="119" src_ip="198.189.13.38"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_12{
style=filled;
color=gray75;
134[label="217.20.159.121;d;2pkt 2fpkt", shape=diamond, color=yellow];
135[label="173.138.210.107;s;5pkt 5fpkt", shape=diamond, color=yellow];
3234[label="173.138.210.107;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat12[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.210.107:*, 217.20.159.121:20}[50%]&lt;BR/&gt;{173.138.210.107:80, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (23.0769%)&lt;BR/&gt; 80: (15.3846%)&lt;BR/&gt; 4717: (11.5385%)&lt;BR/&gt; 3737: (11.5385%)&lt;BR/&gt; 21: (11.5385%)&gt;];
}
134--135[label="1;2pkt 2fpkt"];
134--3234[label="1;2pkt 2fpkt"];
135--3234[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.210.107" src_port="80"/>
      <filter dst_ip="217.20.159.121" dst_port="20" src_ip="173.138.210.107"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="109.66.176.64"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733398" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.150.100.125"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="155.148.182.240"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734025" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_16{
style=filled;
color=gray75;
103[label="196.36.142.42;d;25pkt 25fpkt", shape=diamond, color=yellow];
157[label="155.148.65.7;s;34pkt 34fpkt", shape=diamond, color=yellow];
stat16[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.65.7:*, 196.36.142.42:21}[25.641%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (18.6441%)&lt;BR/&gt; 80: (3.38983%)&lt;BR/&gt; 1863: (2.54237%)&lt;BR/&gt; 3096: (1.69492%)&lt;BR/&gt; 3092: (1.69492%)&gt;];
}
103--157[label="0.8;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="196.36.142.42" dst_port="21" src_ip="155.148.65.7"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="109.157.147.23"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733298" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
699[label="155.148.77.91;s;10pkt 10fpkt", shape=diamond, color=yellow];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.77.91:*, 198.215.106.186:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49582: (5%)&lt;BR/&gt; 49525: (5%)&lt;BR/&gt; 49509: (5%)&lt;BR/&gt; 49457: (5%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="198.215.106.186" dst_port="80" src_ip="155.148.77.91"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="93.6.192.12"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083733476" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.248.224.44"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083733668" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
153[label="136.151.241.155;s;6pkt 6fpkt", shape=diamond, color=yellow];
256[label="210.116.154.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
4092[label="136.151.241.155;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7861[label="136.151.241.155;6pkt 6fpkt", shape=invtriangle, color=brown];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.241.155:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4494: (10.5263%)&lt;BR/&gt; 1075: (10.5263%)&lt;BR/&gt; 14615: (7.89474%)&lt;BR/&gt; 6667: (7.89474%)&lt;BR/&gt; 4841: (7.89474%)&gt;];
}
153--256[label="1;1pkt 1fpkt"];
153--4092[label="1;6pkt 6fpkt"];
153--7861[label="1;6pkt 6fpkt"];
256--4092[label="1;1pkt 1fpkt"];
256--7861[label="1;1pkt 1fpkt"];
4092--7861[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.241.155"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="54.161.122.53"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734027" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_23{
style=filled;
color=gray75;
263[label="155.148.138.139;s;3pkt 3fpkt", shape=diamond, color=yellow];
264[label="192.201.175.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
3797[label="155.148.138.139;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat23[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.138.139:1026, 192.209.110.6:10015}[33.3333%]&lt;BR/&gt;{155.148.138.139:4613, 192.201.175.96:7131}[33.3333%]&lt;BR/&gt;{155.148.138.139:4398, 213.101.192.209:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7131: (21.4286%)&lt;BR/&gt; 4613: (21.4286%)&lt;BR/&gt; 10015: (14.2857%)&lt;BR/&gt; 4398: (14.2857%)&lt;BR/&gt; 1863: (14.2857%)&gt;];
}
263--264[label="1;1pkt 1fpkt"];
263--3797[label="1;3pkt 3fpkt"];
264--3797[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.192.209" dst_port="1863" src_ip="155.148.138.139" src_port="4398"/>
      <filter dst_ip="192.201.175.96" dst_port="7131" src_ip="155.148.138.139" src_port="4613"/>
      <filter dst_ip="192.209.110.6" dst_port="10015" src_ip="155.148.138.139" src_port="1026"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.24.192.110"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
101[label="168.127.114.106;s;5pkt 5fpkt", shape=diamond, color=yellow];
279[label="197.116.101.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
3213[label="168.127.114.106;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.114.106:3849, 208.45.143.50:25407}[20%]&lt;BR/&gt;{168.127.114.106:3109, 208.45.143.64:80}[20%]&lt;BR/&gt;{168.127.114.106:4407, 197.116.101.128:15031}[20%]&lt;BR/&gt;{168.127.114.106:3110, 208.45.143.212:8080}[20%]&lt;BR/&gt;{168.127.114.106:3111, 208.45.143.216:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.1818%)&lt;BR/&gt; 15031: (13.6364%)&lt;BR/&gt; 4407: (13.6364%)&lt;BR/&gt; 25407: (9.09091%)&lt;BR/&gt; 8080: (9.09091%)&gt;];
}
101--279[label="1;1pkt 1fpkt"];
101--3213[label="1;5pkt 5fpkt"];
279--3213[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.45.143.216" dst_port="80" src_ip="168.127.114.106" src_port="3111"/>
      <filter dst_ip="208.45.143.212" dst_port="8080" src_ip="168.127.114.106" src_port="3110"/>
      <filter dst_ip="197.116.101.128" dst_port="15031" src_ip="168.127.114.106" src_port="4407"/>
      <filter dst_ip="208.45.143.64" dst_port="80" src_ip="168.127.114.106" src_port="3109"/>
      <filter dst_ip="208.45.143.50" dst_port="25407" src_ip="168.127.114.106" src_port="3849"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="95.41.94.150"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733938" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.6.82.176"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733848" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.22.160.101"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.18.55.155"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733488" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="54.7.230.92"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="198.107.182.114"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="46.202.20.88"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083733487" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.122.103.253"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083733377" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.138.156.234"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
216[label="208.96.48.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
324[label="192.211.51.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.211.51.120:65530, 208.96.48.192:2401}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65530: (50%)&lt;BR/&gt; 2401: (50%)&gt;];
}
216--324[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.48.192" dst_port="2401" src_ip="192.211.51.120" src_port="65530"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
64[label="136.150.112.115;s;11pkt 11fpkt", shape=diamond, color=yellow];
351[label="52.73.90.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
3371[label="136.150.112.115;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7355[label="136.150.112.115;11pkt 11fpkt", shape=invtriangle, color=brown];
9987[label="136.150.112.115;11pkt 11fpkt", shape=invhouse, color=bisque];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.112.115:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (8.88889%)&lt;BR/&gt; 37669: (5.55556%)&lt;BR/&gt; 16476: (5.55556%)&lt;BR/&gt; 37706: (4.44444%)&lt;BR/&gt; 37705: (4.44444%)&gt;];
}
64--351[label="1;1pkt 1fpkt"];
64--3371[label="1;11pkt 11fpkt"];
64--7355[label="1;11pkt 11fpkt"];
64--9987[label="1;11pkt 11fpkt"];
351--3371[label="1;1pkt 1fpkt"];
351--7355[label="1;1pkt 1fpkt"];
351--9987[label="1;1pkt 1fpkt"];
3371--7355[label="1;11pkt 11fpkt"];
3371--9987[label="1;11pkt 11fpkt"];
7355--9987[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="136.150.112.115"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.236.84.51"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733612" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.127.68.129"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733668" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
179[label="155.148.141.125;s;18pkt 18fpkt", shape=diamond, color=yellow];
370[label="208.109.245.76;d;13pkt 13fpkt", shape=diamond, color=yellow];
3532[label="155.148.141.125;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.141.125:*, 208.109.245.76:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58329: (3.06122%)&lt;BR/&gt; 58328: (3.06122%)&lt;BR/&gt; 58327: (3.06122%)&lt;BR/&gt; 58326: (3.06122%)&gt;];
}
179--370[label="1;13pkt 13fpkt"];
179--982[label="0.0555556;1pkt 1fpkt"];
179--3532[label="0.944444;17pkt 17fpkt"];
370--982[label="0.0769231;1pkt 1fpkt"];
370--3532[label="0.923077;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="208.109.245.76" dst_port="80" src_ip="155.148.141.125"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
299[label="136.151.44.141;s;4pkt 4fpkt", shape=diamond, color=yellow];
381[label="208.6.248.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.44.141:1801, 208.6.248.130:13201}[25%]&lt;BR/&gt;{136.151.44.141:1803, 208.6.248.132:17201}[25%]&lt;BR/&gt;{136.151.44.141:1804, 192.198.11.227:80}[25%]&lt;BR/&gt;{136.151.44.141:1806, 192.198.11.227:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13201: (20%)&lt;BR/&gt; 1801: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 17201: (10%)&lt;BR/&gt; 1806: (10%)&gt;];
}
299--381[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.198.11.227" dst_port="80" src_ip="136.151.44.141" src_port="1806"/>
      <filter dst_ip="192.198.11.227" dst_port="80" src_ip="136.151.44.141" src_port="1804"/>
      <filter dst_ip="208.6.248.132" dst_port="17201" src_ip="136.151.44.141" src_port="1803"/>
      <filter dst_ip="208.6.248.130" dst_port="13201" src_ip="136.151.44.141" src_port="1801"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="41.201.41.181"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.127.115.141"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733848" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.63.138.149"/>
      <from sec="1083733293" usec="0"/>
      <to sec="1083733610" usec="0"/>
    </slice>
    <from sec="1083733293" usec="0"/>
    <to sec="1083733610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
436[label="155.148.137.93;s;13pkt 13fpkt", shape=diamond, color=yellow];
437[label="200.211.53.64;d;3pkt 3fpkt", shape=diamond, color=yellow];
7077[label="155.148.137.93;12pkt 12fpkt", shape=invtriangle, color=brown];
9817[label="155.148.137.93;12pkt 12fpkt", shape=invhouse, color=bisque];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.137.93:34440, *:*}[46.1538%]&lt;BR/&gt;{155.148.137.93:*, *:1863}[23.0769%]&lt;BR/&gt;{155.148.137.93:*, 200.211.53.64:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34440: (22.5%)&lt;BR/&gt; 1755: (10%)&lt;BR/&gt; 0: (10%)&lt;BR/&gt; 1863: (8.75%)&lt;BR/&gt; 1124: (5%)&gt;];
}
436--437[label="1;3pkt 3fpkt"];
436--7077[label="1;12pkt 12fpkt"];
436--9817[label="1;12pkt 12fpkt"];
437--7077[label="1;3pkt 3fpkt"];
437--9817[label="1;3pkt 3fpkt"];
7077--9817[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="200.211.53.64" src_ip="155.148.137.93"/>
      <filter src_ip="155.148.137.93" src_port="34440"/>
      <filter dst_port="1863" src_ip="155.148.137.93"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.96.33.153"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734027" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
355[label="196.1.20.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
444[label="173.138.209.60;s;13pkt 13fpkt", shape=diamond, color=yellow];
2306[label="173.138.209.60;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.209.60:25, 53.230.216.10:*}[61.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.7407%)&lt;BR/&gt; 0: (7.40741%)&lt;BR/&gt; 1575: (5.55556%)&lt;BR/&gt; 80: (5.55556%)&lt;BR/&gt; 33319: (3.7037%)&gt;];
}
355--444[label="1;1pkt 1fpkt"];
355--2306[label="1;1pkt 1fpkt"];
444--2306[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="53.230.216.10" src_ip="173.138.209.60" src_port="25"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
273[label="196.2.38.192;d;27pkt 27fpkt", shape=diamond, color=yellow];
458[label="136.150.163.207;s;53pkt 53fpkt", shape=diamond, color=yellow];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.163.207:*, 196.2.38.192:82}[50.9434%]&lt;BR/&gt;{136.150.163.207:*, *:80}[26.4151%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 82: (30.625%)&lt;BR/&gt; 80: (11.875%)&lt;BR/&gt; 1328: (1.875%)&lt;BR/&gt; 63996: (1.25%)&lt;BR/&gt; 54970: (1.25%)&gt;];
}
273--458[label="1;27pkt 27fpkt"];
458--982[label="0.0377358;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.150.163.207"/>
      <filter dst_ip="196.2.38.192" dst_port="82" src_ip="136.150.163.207"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.172.170.82"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733897" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="93.216.67.126"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.96.50.182"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733847" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.14.223.190"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734025" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="203.218.37.29"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.29.130.60"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.101.100.144"/>
      <from sec="1083733202" usec="0"/>
      <to sec="1083733928" usec="0"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="94.186.202.220"/>
      <from sec="1083733249" usec="0"/>
      <to sec="1083734027" usec="0"/>
    </slice>
    <from sec="1083733249" usec="0"/>
    <to sec="1083734027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="109.199.128.95"/>
      <from sec="1083733290" usec="0"/>
      <to sec="1083733661" usec="0"/>
    </slice>
    <from sec="1083733290" usec="0"/>
    <to sec="1083733661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="46.202.23.10"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
148[label="136.151.247.143;s;3pkt 3fpkt", shape=diamond, color=yellow];
560[label="140.114.105.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
3886[label="136.151.247.143;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7725[label="136.151.247.143;2pkt 2fpkt", shape=invtriangle, color=brown];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.247.143:61911, 140.114.105.57:7070}[33.3333%]&lt;BR/&gt;{136.151.247.143:61896, 213.101.192.147:1863}[33.3333%]&lt;BR/&gt;{136.151.247.143:62044, 120.139.220.148:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61911: (22.2222%)&lt;BR/&gt; 7070: (22.2222%)&lt;BR/&gt; 62044: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 61896: (11.1111%)&gt;];
}
148--560[label="1;1pkt 1fpkt"];
148--3886[label="1;3pkt 3fpkt"];
148--7725[label="1;2pkt 2fpkt"];
560--3886[label="1;1pkt 1fpkt"];
560--7725[label="1;1pkt 1fpkt"];
3886--7725[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="120.139.220.148" dst_port="80" src_ip="136.151.247.143" src_port="62044"/>
      <filter dst_ip="213.101.192.147" dst_port="1863" src_ip="136.151.247.143" src_port="61896"/>
      <filter dst_ip="140.114.105.57" dst_port="7070" src_ip="136.151.247.143" src_port="61911"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
569[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
570[label="136.151.89.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.89.112:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
569--570[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="136.151.89.112" src_port="4445"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.127.107.176"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="202.53.57.4"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
589[label="209.29.155.118;s;510pkt 510fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.155.118:53, *:*}[95.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.5098%)&lt;BR/&gt; 32769: (1.96078%)&lt;BR/&gt; 32772: (1.66667%)&lt;BR/&gt; 0: (1.56863%)&lt;BR/&gt; 65534: (1.27451%)&gt;];
}
</description>
    <slice>
      <filter src_ip="209.29.155.118" src_port="53"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="71.182.31.90"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734024" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.151.106.152"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="95.2.179.17"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.117.57.35"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.138.210.194"/>
      <from sec="1083733203" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.160.178.191"/>
      <from sec="1083733208" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.101.59.111"/>
      <from sec="1083733297" usec="0"/>
      <to sec="1083733943" usec="0"/>
    </slice>
    <from sec="1083733297" usec="0"/>
    <to sec="1083733943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
353[label="196.6.82.165;d;65pkt 65fpkt", shape=diamond, color=yellow];
658[label="155.148.137.165;s;80pkt 80fpkt", shape=diamond, color=yellow];
4264[label="155.148.137.165;106pkt 106fpkt", shape=pentagon, color=darkviolet];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.137.165:*, 196.6.82.165:30}[46.2264%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30: (22.9084%)&lt;BR/&gt; 80: (0.796813%)&lt;BR/&gt; 4993: (0.59761%)&lt;BR/&gt; 4990: (0.59761%)&lt;BR/&gt; 4989: (0.59761%)&gt;];
}
353--658[label="1;65pkt 65fpkt"];
353--4264[label="1;65pkt 65fpkt"];
658--4264[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="196.6.82.165" dst_port="30" src_ip="155.148.137.165"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
575[label="213.101.72.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
671[label="168.127.113.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.72.43:28805, 168.127.113.187:1188}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28805: (50%)&lt;BR/&gt; 1188: (50%)&gt;];
}
575--671[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.187" dst_port="1188" src_ip="213.101.72.43" src_port="28805"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
574[label="168.127.113.187;s;6pkt 6fpkt", shape=diamond, color=yellow];
672[label="213.101.72.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
4655[label="168.127.113.187;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8262[label="168.127.113.187;34pkt 34fpkt", shape=invtriangle, color=brown];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.113.187:*, 120.52.64.242:80}[70.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3333%)&lt;BR/&gt; 28805: (4.66667%)&lt;BR/&gt; 1188: (2.66667%)&lt;BR/&gt; 1220: (2%)&lt;BR/&gt; 1219: (2%)&gt;];
}
574--672[label="1;1pkt 1fpkt"];
574--4655[label="1;6pkt 6fpkt"];
574--8262[label="1;6pkt 6fpkt"];
672--4655[label="1;1pkt 1fpkt"];
672--8262[label="1;1pkt 1fpkt"];
4655--8262[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="120.52.64.242" dst_port="80" src_ip="168.127.113.187"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="53.133.154.4"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733848" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
676[label="219.223.235.136;s;547pkt 547fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.223.235.136:53, *:*}[92.3218%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.4625%)&lt;BR/&gt; 25: (3.83912%)&lt;BR/&gt; 1028: (1.73675%)&lt;BR/&gt; 32768: (1.46252%)&lt;BR/&gt; 32769: (1.09689%)&gt;];
}
</description>
    <slice>
      <filter src_ip="219.223.235.136" src_port="53"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="93.241.3.154"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083733848" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
623[label="216.143.132.11;s;7pkt 7fpkt", shape=diamond, color=yellow];
715[label="168.127.31.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
1265[label="216.143.132.11;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5887[label="216.143.132.11;6pkt 6fpkt", shape=invtriangle, color=brown];
9107[label="216.143.132.11;6pkt 6fpkt", shape=invhouse, color=bisque];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.143.132.11:80, 141.22.29.70:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1047: (9.61538%)&lt;BR/&gt; 40796: (7.69231%)&lt;BR/&gt; 37471: (7.69231%)&lt;BR/&gt; 37470: (7.69231%)&gt;];
}
623--715[label="1;1pkt 1fpkt"];
623--1265[label="1;6pkt 6fpkt"];
623--5887[label="1;6pkt 6fpkt"];
623--9107[label="1;6pkt 6fpkt"];
715--1265[label="1;1pkt 1fpkt"];
715--5887[label="1;1pkt 1fpkt"];
715--9107[label="1;1pkt 1fpkt"];
1265--5887[label="1;6pkt 6fpkt"];
1265--9107[label="1;6pkt 6fpkt"];
5887--9107[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.29.70" src_ip="216.143.132.11" src_port="80"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
522[label="173.138.129.224;s;208pkt 208fpkt", shape=diamond, color=yellow];
736[label="154.34.213.199;d;161pkt 161fpkt", shape=diamond, color=yellow];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.129.224:*, 154.34.213.199:53}[95.8525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.8645%)&lt;BR/&gt; 33629: (1.08401%)&lt;BR/&gt; 1640: (0.271003%)&lt;BR/&gt; 1639: (0.271003%)&lt;BR/&gt; 1638: (0.271003%)&gt;];
}
522--736[label="0.944099;152pkt 152fpkt"];
736--845[label="0.00621118;1pkt 1fpkt"];
736--869[label="0.00621118;1pkt 1fpkt"];
736--2371[label="0.00621118;1pkt 1fpkt"];
736--3369[label="0.00621118;1pkt 1fpkt"];
736--5638[label="0.00621118;1pkt 1fpkt"];
736--6650[label="0.00621118;1pkt 1fpkt"];
736--8941[label="0.00621118;1pkt 1fpkt"];
736--9573[label="0.00621118;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.34.213.199" dst_port="53" src_ip="173.138.129.224"/>
    </slice>
    <from sec="1083733298" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
3457[label="93.163.185.120;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.163.185.120:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62336: (8.33333%)&lt;BR/&gt; 52560: (8.33333%)&lt;BR/&gt; 35665: (8.33333%)&lt;BR/&gt; 33524: (8.33333%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="93.163.185.120"/>
    </slice>
    <from sec="1083733343" usec="0"/>
    <to sec="1083733983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
762[label="136.151.247.52;s;216pkt 216fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.247.52:*, 208.40.142.67:25}[32.8704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.213%)&lt;BR/&gt; 80: (4.16667%)&lt;BR/&gt; 113: (1.38889%)&lt;BR/&gt; 61813: (0.231481%)&lt;BR/&gt; 55650: (0.231481%)&gt;];
}
762--982[label="0.00462963;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.40.142.67" dst_port="25" src_ip="136.151.247.52"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
691[label="93.150.21.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
775[label="136.150.25.115;s;174pkt 174fpkt", shape=diamond, color=yellow];
3364[label="136.150.25.115;192pkt 192fpkt", shape=pentagon, color=darkviolet];
7349[label="136.150.25.115;192pkt 192fpkt", shape=invtriangle, color=brown];
9983[label="136.150.25.115;192pkt 192fpkt", shape=invhouse, color=bisque];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.25.115:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (7.98935%)&lt;BR/&gt; 16881: (6.52463%)&lt;BR/&gt; 9207: (5.19308%)&lt;BR/&gt; 36075: (3.86152%)&lt;BR/&gt; 8887: (3.86152%)&gt;];
}
691--775[label="1;1pkt 1fpkt"];
691--3364[label="1;1pkt 1fpkt"];
691--7349[label="1;1pkt 1fpkt"];
691--9983[label="1;1pkt 1fpkt"];
775--982[label="0.0632184;11pkt 11fpkt"];
775--3364[label="1;174pkt 174fpkt"];
775--7349[label="1;174pkt 174fpkt"];
775--9983[label="1;174pkt 174fpkt"];
3364--7349[label="1;192pkt 192fpkt"];
3364--9983[label="1;192pkt 192fpkt"];
7349--9983[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter src_ip="136.150.25.115"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.127.3.206"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
142[label="136.150.104.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
819[label="214.108.209.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.104.202:49810, 214.108.209.6:8020}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49810: (50%)&lt;BR/&gt; 8020: (50%)&gt;];
}
142--819[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.108.209.6" dst_port="8020" src_ip="136.150.104.202" src_port="49810"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.127.40.213"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="141.132.98.18"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734025" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.101.187.181"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
97[label="155.148.137.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
832[label="214.108.209.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.137.48:49161, 214.108.209.74:8026}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49161: (50%)&lt;BR/&gt; 8026: (50%)&gt;];
}
97--832[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.108.209.74" dst_port="8026" src_ip="155.148.137.48" src_port="49161"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
175[label="168.127.107.176;d;2pkt 2fpkt", shape=diamond, color=yellow];
836[label="40.241.19.246;s;2pkt 2fpkt", shape=diamond, color=yellow];
5576[label="40.241.19.246;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.241.19.246:1755, 168.127.107.176:4771}[50%]&lt;BR/&gt;{40.241.19.246:4220, 168.127.107.176:7000}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (25%)&lt;BR/&gt; 4771: (25%)&lt;BR/&gt; 4220: (25%)&lt;BR/&gt; 1755: (25%)&gt;];
}
175--836[label="1;2pkt 2fpkt"];
175--5576[label="1;2pkt 2fpkt"];
836--5576[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.107.176" dst_port="7000" src_ip="40.241.19.246" src_port="4220"/>
      <filter dst_ip="168.127.107.176" dst_port="4771" src_ip="40.241.19.246" src_port="1755"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.228.168.148"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="93.244.216.162"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.69.8.1"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.29.141.144"/>
      <from sec="1083733200" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.170.16.218"/>
      <from sec="1083733201" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
497[label="155.148.182.134;s;126pkt 126fpkt", shape=diamond, color=yellow];
866[label="55.42.12.219;d;108pkt 108fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.182.134:21, 55.42.12.219:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 36878: (0.42735%)&lt;BR/&gt; 36843: (0.42735%)&lt;BR/&gt; 36819: (0.42735%)&lt;BR/&gt; 36772: (0.42735%)&gt;];
}
497--866[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_ip="55.42.12.219" src_ip="155.148.182.134" src_port="21"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.138.151.121"/>
      <from sec="1083733202" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="141.22.90.201"/>
      <from sec="1083733202" usec="0"/>
      <to sec="1083734023" usec="0"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
902[label="196.23.136.9;s;172pkt 172fpkt", shape=diamond, color=yellow];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.23.136.9:*, *:2745}[86.6279%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (43.314%)&lt;BR/&gt; 1025: (3.77907%)&lt;BR/&gt; 80: (1.16279%)&lt;BR/&gt; 6129: (0.872093%)&lt;BR/&gt; 3127: (0.872093%)&gt;];
}
902--955[label="0.0116279;2pkt 2fpkt"];
902--966[label="0.0116279;2pkt 2fpkt"];
902--982[label="0.0116279;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="196.23.136.9"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.138.139.82"/>
      <from sec="1083733300" usec="0"/>
      <to sec="1083734021" usec="0"/>
    </slice>
    <from sec="1083733300" usec="0"/>
    <to sec="1083734021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="202.44.184.109"/>
      <from sec="1083733379" usec="0"/>
      <to sec="1083734016" usec="0"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.236.141.5"/>
      <from sec="1083733439" usec="0"/>
      <to sec="1083734028" usec="0"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
2742[label="93.199.173.82;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3006[label="197.9.129.95;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5064[label="205.246.171.212;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5190[label="202.200.174.221;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5293[label="196.16.77.227;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[24.2424%]&lt;BR/&gt;{93.199.173.82:*, *:*}[24.2424%]&lt;BR/&gt;{196.16.77.227:*, *:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (15.1515%)&lt;BR/&gt; 80: (12.1212%)&lt;BR/&gt; 445: (9.09091%)&lt;BR/&gt; 6129: (4.54545%)&lt;BR/&gt; 3127: (4.54545%)&gt;];
}
</description>
    <slice>
      <filter src_ip="93.199.173.82"/>
      <filter src_ip="196.16.77.227"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1083733253" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00931,5.65801,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.172.210.165"/>
      <from sec="1083733982" usec="0"/>
      <to sec="1083734027" usec="0"/>
    </slice>
    <from sec="1083733982" usec="0"/>
    <to sec="1083734027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.228.7.0"/>
    </slice>
    <from sec="1083733752" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.211.9.0"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083733457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.253.10.0"/>
    </slice>
    <from sec="1083733797" usec="0"/>
    <to sec="1083733866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.25.45.0"/>
    </slice>
    <from sec="1083733966" usec="0"/>
    <to sec="1083734048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.16.73.0"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.55.94.0"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083733549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.106.105.0"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.195.118.0"/>
    </slice>
    <from sec="1083733538" usec="0"/>
    <to sec="1083733716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.89.254.0"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083733339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.149.33.1"/>
    </slice>
    <from sec="1083733871" usec="0"/>
    <to sec="1083733974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.33.50.1"/>
    </slice>
    <from sec="1083733973" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.91.64.1"/>
    </slice>
    <from sec="1083733825" usec="0"/>
    <to sec="1083733931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.102.87.1"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.32.109.1"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083733653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
653[label="41.36.132.1;s;75pkt 75fpkt", shape=diamond, color=yellow];
1032[label="41.36.132.1;94pkt 94fpkt", shape=pentagon, color=darkviolet];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.36.132.1:*, 141.22.86.221:80}[90.4255%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4820: (0.591716%)&lt;BR/&gt; 4819: (0.591716%)&lt;BR/&gt; 4818: (0.591716%)&lt;BR/&gt; 4817: (0.591716%)&gt;];
}
653--1032[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.221" dst_port="80" src_ip="41.36.132.1"/>
    </slice>
    <from sec="1083733538" usec="0"/>
    <to sec="1083733733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.141.1"/>
    </slice>
    <from sec="1083733823" usec="0"/>
    <to sec="1083733863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.211.1"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.22.213.1"/>
    </slice>
    <from sec="1083733274" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.54.11.2"/>
    </slice>
    <from sec="1083733272" usec="0"/>
    <to sec="1083733370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.176.108.2"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.52.114.2"/>
    </slice>
    <from sec="1083733799" usec="0"/>
    <to sec="1083733895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.225.126.2"/>
    </slice>
    <from sec="1083733234" usec="0"/>
    <to sec="1083733395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.24.136.2"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.32.140.2"/>
    </slice>
    <from sec="1083733801" usec="0"/>
    <to sec="1083733895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.150.86.3"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.19.114.3"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083733355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.54.3.4"/>
    </slice>
    <from sec="1083733261" usec="0"/>
    <to sec="1083733501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.66.42.4"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.134.43.4"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083733268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.139.85.4"/>
    </slice>
    <from sec="1083733269" usec="0"/>
    <to sec="1083733891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.187.104.4"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.133.154.4"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.66.228.4"/>
    </slice>
    <from sec="1083733652" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.29.29.5"/>
    </slice>
    <from sec="1083733590" usec="0"/>
    <to sec="1083733667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.4.36.5"/>
    </slice>
    <from sec="1083733314" usec="0"/>
    <to sec="1083733407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
888[label="213.101.103.5;s;38pkt 38fpkt", shape=diamond, color=yellow];
1112[label="213.101.103.5;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.103.5:80, 141.22.92.200:*}[34.2105%]&lt;BR/&gt;{213.101.103.5:80, 136.151.247.151:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1447: (2.66667%)&lt;BR/&gt; 30615: (1.33333%)&lt;BR/&gt; 29415: (1.33333%)&lt;BR/&gt; 29411: (1.33333%)&gt;];
}
888--1112[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.92.200" src_ip="213.101.103.5" src_port="80"/>
      <filter dst_ip="136.151.247.151" src_ip="213.101.103.5" src_port="80"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.211.199.5"/>
    </slice>
    <from sec="1083733861" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.5.6"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.212.6.6"/>
    </slice>
    <from sec="1083733322" usec="0"/>
    <to sec="1083733342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.18.16.6"/>
    </slice>
    <from sec="1083733315" usec="0"/>
    <to sec="1083733649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.25.74.6"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.221.88.6"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083733329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.80.104.6"/>
    </slice>
    <from sec="1083733637" usec="0"/>
    <to sec="1083733752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.220.134.6"/>
    </slice>
    <from sec="1083733540" usec="0"/>
    <to sec="1083733637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
141[label="168.112.139.6;s;15981pkt 15981fpkt", shape=diamond, color=yellow];
1144[label="168.112.139.6;17390pkt 17390fpkt", shape=pentagon, color=darkviolet];
5796[label="168.112.139.6;17390pkt 17390fpkt", shape=invtriangle, color=brown];
9051[label="168.112.139.6;17391pkt 17391fpkt", shape=invhouse, color=bisque];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.112.139.6:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1449: (0.0344817%)&lt;BR/&gt; 3231: (0.0315471%)&lt;BR/&gt; 2973: (0.0315471%)&lt;BR/&gt; 2806: (0.0315471%)&gt;];
}
141--978[label="0.00187266;1pkt 1fpkt"];
141--979[label="0.00207469;1pkt 1fpkt"];
141--982[label="0.0626995;1002pkt 1002fpkt"];
141--1144[label="0.999937;15980pkt 15980fpkt"];
141--5796[label="0.999937;15980pkt 15980fpkt"];
141--9051[label="1;15981pkt 15981fpkt"];
1144--5796[label="1;17390pkt 17390fpkt"];
1144--9051[label="1;17390pkt 17390fpkt"];
5796--9051[label="1;17390pkt 17390fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.112.139.6"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.98.176.6"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083733301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.84.200.6"/>
    </slice>
    <from sec="1083733312" usec="0"/>
    <to sec="1083733654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.224.238.6"/>
    </slice>
    <from sec="1083733763" usec="0"/>
    <to sec="1083733830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.230.243.6"/>
    </slice>
    <from sec="1083733339" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.5.7"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
940[label="93.209.11.7;s;28pkt 28fpkt", shape=diamond, color=yellow];
1152[label="93.209.11.7;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.209.11.7:*, 208.96.53.229:21}[60.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (27.4194%)&lt;BR/&gt; 39740: (3.22581%)&lt;BR/&gt; 36772: (3.22581%)&lt;BR/&gt; 35446: (3.22581%)&lt;BR/&gt; 2574: (3.22581%)&gt;];
}
940--1152[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.53.229" dst_port="21" src_ip="93.209.11.7"/>
    </slice>
    <from sec="1083733775" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.16.16.7"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083733286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.164.35.7"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083733411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.17.49.7"/>
    </slice>
    <from sec="1083733831" usec="0"/>
    <to sec="1083733942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.28.97.7"/>
    </slice>
    <from sec="1083733600" usec="0"/>
    <to sec="1083733688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.24.108.7"/>
    </slice>
    <from sec="1083733783" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.5.130.7"/>
    </slice>
    <from sec="1083733268" usec="0"/>
    <to sec="1083733310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.111.132.7"/>
    </slice>
    <from sec="1083733854" usec="0"/>
    <to sec="1083734041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.171.7"/>
    </slice>
    <from sec="1083733486" usec="0"/>
    <to sec="1083733604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.11.213.7"/>
    </slice>
    <from sec="1083733337" usec="0"/>
    <to sec="1083733510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.27.229.7"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083733787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.96.15.8"/>
    </slice>
    <from sec="1083733384" usec="0"/>
    <to sec="1083733536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.69.76.8"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083733478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.111.82.8"/>
    </slice>
    <from sec="1083733488" usec="0"/>
    <to sec="1083733861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.194.98.8"/>
    </slice>
    <from sec="1083733856" usec="0"/>
    <to sec="1083733917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.132.106.8"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.26.120.8"/>
    </slice>
    <from sec="1083733380" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.32.142.8"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083733291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.11.170.8"/>
    </slice>
    <from sec="1083733721" usec="0"/>
    <to sec="1083733799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
896[label="173.138.209.8;s;3pkt 3fpkt", shape=diamond, color=yellow];
1196[label="173.138.209.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5836[label="173.138.209.8;2pkt 2fpkt", shape=invtriangle, color=brown];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.209.8:1058, 216.137.23.80:21}[33.3333%]&lt;BR/&gt;{173.138.209.8:1246, 216.137.23.80:20}[33.3333%]&lt;BR/&gt;{173.138.209.8:1247, 216.137.23.80:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (42.8571%)&lt;BR/&gt; 1247: (21.4286%)&lt;BR/&gt; 1246: (21.4286%)&lt;BR/&gt; 1058: (7.14286%)&lt;BR/&gt; 21: (7.14286%)&gt;];
}
896--1196[label="1;2pkt 2fpkt"];
896--5836[label="1;2pkt 2fpkt"];
1196--5836[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.137.23.80" dst_port="20" src_ip="173.138.209.8" src_port="1247"/>
      <filter dst_ip="216.137.23.80" dst_port="20" src_ip="173.138.209.8" src_port="1246"/>
      <filter dst_ip="216.137.23.80" dst_port="21" src_ip="173.138.209.8" src_port="1058"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.242.8"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083733766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.140.3.9"/>
    </slice>
    <from sec="1083733701" usec="0"/>
    <to sec="1083733913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.198.11.9"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.16.43.9"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083734038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.176.44.9"/>
    </slice>
    <from sec="1083733757" usec="0"/>
    <to sec="1083733854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.3.52.9"/>
    </slice>
    <from sec="1083733925" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.166.60.9"/>
    </slice>
    <from sec="1083733656" usec="0"/>
    <to sec="1083733978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.10.84.9"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.40.89.9"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.25.154.9"/>
    </slice>
    <from sec="1083733685" usec="0"/>
    <to sec="1083733785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.182.163.9"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.197.9"/>
    </slice>
    <from sec="1083733482" usec="0"/>
    <to sec="1083733520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.210.200.9"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.199.217.9"/>
    </slice>
    <from sec="1083733884" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.217.220.9"/>
    </slice>
    <from sec="1083733770" usec="0"/>
    <to sec="1083734037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.35.233.9"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.28.20.10"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.230.23.10"/>
    </slice>
    <from sec="1083733575" usec="0"/>
    <to sec="1083733806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.42.42.10"/>
    </slice>
    <from sec="1083733712" usec="0"/>
    <to sec="1083733927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.127.52.10"/>
    </slice>
    <from sec="1083733586" usec="0"/>
    <to sec="1083733840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.51.73.10"/>
    </slice>
    <from sec="1083733325" usec="0"/>
    <to sec="1083733415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1242[label="136.151.105.10;119pkt 119fpkt", shape=pentagon, color=darkviolet];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.105.10:46327, *:53}[47.8992%]&lt;BR/&gt;{136.151.105.10:53, *:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.3193%)&lt;BR/&gt; 46327: (23.9496%)&lt;BR/&gt; 0: (9.2437%)&lt;BR/&gt; 9253: (2.94118%)&lt;BR/&gt; 1028: (1.2605%)&gt;];
}
</description>
    <slice>
      <filter src_ip="136.151.105.10" src_port="53"/>
      <filter dst_port="53" src_ip="136.151.105.10" src_port="46327"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.89.136.10"/>
    </slice>
    <from sec="1083733746" usec="0"/>
    <to sec="1083734009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.217.216.10"/>
    </slice>
    <from sec="1083733963" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.22.238.10"/>
    </slice>
    <from sec="1083733622" usec="0"/>
    <to sec="1083733736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.0.4.11"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.149.9.11"/>
    </slice>
    <from sec="1083733702" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.1.40.11"/>
    </slice>
    <from sec="1083733451" usec="0"/>
    <to sec="1083733514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.10.80.11"/>
    </slice>
    <from sec="1083733234" usec="0"/>
    <to sec="1083733326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.138.94.11"/>
    </slice>
    <from sec="1083733301" usec="0"/>
    <to sec="1083733354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.103.130.11"/>
    </slice>
    <from sec="1083733775" usec="0"/>
    <to sec="1083733885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.246.136.11"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.69.172.11"/>
    </slice>
    <from sec="1083733696" usec="0"/>
    <to sec="1083734010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.127.177.11"/>
    </slice>
    <from sec="1083734005" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.139.20.12"/>
    </slice>
    <from sec="1083733347" usec="0"/>
    <to sec="1083733685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.198.42.12"/>
    </slice>
    <from sec="1083733372" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.240.42.12"/>
    </slice>
    <from sec="1083733287" usec="0"/>
    <to sec="1083733967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
601[label="209.198.65.12;s;35pkt 35fpkt", shape=diamond, color=yellow];
1280[label="209.198.65.12;46pkt 46fpkt", shape=pentagon, color=darkviolet];
5896[label="209.198.65.12;45pkt 45fpkt", shape=invtriangle, color=brown];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.198.65.12:*, 173.138.153.48:80}[80.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4984: (1.19048%)&lt;BR/&gt; 4735: (1.19048%)&lt;BR/&gt; 4433: (1.19048%)&lt;BR/&gt; 4422: (1.19048%)&gt;];
}
601--982[label="0.0571429;2pkt 2fpkt"];
601--1280[label="1;35pkt 35fpkt"];
601--5896[label="0.971429;34pkt 34fpkt"];
1280--5896[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.153.48" dst_port="80" src_ip="209.198.65.12"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.214.68.12"/>
    </slice>
    <from sec="1083733517" usec="0"/>
    <to sec="1083733626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.228.92.12"/>
    </slice>
    <from sec="1083733911" usec="0"/>
    <to sec="1083733974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.179.105.12"/>
    </slice>
    <from sec="1083733360" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.36.147.12"/>
    </slice>
    <from sec="1083733686" usec="0"/>
    <to sec="1083733784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.140.153.12"/>
    </slice>
    <from sec="1083733854" usec="0"/>
    <to sec="1083733988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.80.72.13"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083733313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.240.134.13"/>
    </slice>
    <from sec="1083733805" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.187.152.13"/>
    </slice>
    <from sec="1083733253" usec="0"/>
    <to sec="1083733347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.208.13"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.192.226.13"/>
    </slice>
    <from sec="1083733245" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.171.14.14"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.202.20.14"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.112.117.14"/>
    </slice>
    <from sec="1083733385" usec="0"/>
    <to sec="1083733493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.167.183.14"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.193.14"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.249.14"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.90.91.15"/>
    </slice>
    <from sec="1083733359" usec="0"/>
    <to sec="1083733468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.28.156.15"/>
    </slice>
    <from sec="1083733843" usec="0"/>
    <to sec="1083733935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.66.177.15"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.153.228.15"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.23.240.15"/>
    </slice>
    <from sec="1083733720" usec="0"/>
    <to sec="1083733797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.53.8.16"/>
    </slice>
    <from sec="1083733653" usec="0"/>
    <to sec="1083733754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
668[label="155.148.68.16;s;117pkt 117fpkt", shape=diamond, color=yellow];
1361[label="155.148.68.16;116pkt 116fpkt", shape=pentagon, color=darkviolet];
5959[label="155.148.68.16;117pkt 117fpkt", shape=invtriangle, color=brown];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.68.16:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
668--1361[label="1;116pkt 116fpkt"];
668--5959[label="1;117pkt 117fpkt"];
1361--5959[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter src_ip="155.148.68.16"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
1367[label="168.76.132.16;172pkt 172fpkt", shape=pentagon, color=darkviolet];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.132.16:*, *:80}[25%]&lt;BR/&gt;{168.76.132.16:*, *:1433}[25%]&lt;BR/&gt;{168.76.132.16:*, *:2745}[25%]&lt;BR/&gt;{168.76.132.16:*, *:6129}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (12.5%)&lt;BR/&gt; 2745: (12.5%)&lt;BR/&gt; 1433: (12.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 1625: (0.872093%)&gt;];
}
</description>
    <slice>
      <filter dst_port="6129" src_ip="168.76.132.16"/>
      <filter dst_port="2745" src_ip="168.76.132.16"/>
      <filter dst_port="1433" src_ip="168.76.132.16"/>
      <filter dst_port="80" src_ip="168.76.132.16"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.194.133.16"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083733266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.192.204.16"/>
    </slice>
    <from sec="1083733315" usec="0"/>
    <to sec="1083733513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.202.23.17"/>
    </slice>
    <from sec="1083733238" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
511[label="208.96.38.17;s;89pkt 89fpkt", shape=diamond, color=yellow];
1376[label="208.96.38.17;90pkt 90fpkt", shape=pentagon, color=darkviolet];
5969[label="208.96.38.17;90pkt 90fpkt", shape=invtriangle, color=brown];
9166[label="208.96.38.17;89pkt 89fpkt", shape=invhouse, color=bisque];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.38.17:*, 204.20.45.57:80}[36.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5754%)&lt;BR/&gt; 0: (9.49721%)&lt;BR/&gt; 64063: (0.558659%)&lt;BR/&gt; 64058: (0.558659%)&lt;BR/&gt; 63712: (0.558659%)&gt;];
}
511--1376[label="1;89pkt 89fpkt"];
511--5969[label="1;89pkt 89fpkt"];
511--9166[label="0.988764;88pkt 88fpkt"];
1376--5969[label="1;90pkt 90fpkt"];
1376--9166[label="1;89pkt 89fpkt"];
5969--9166[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="204.20.45.57" dst_port="80" src_ip="208.96.38.17"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.121.53.17"/>
    </slice>
    <from sec="1083733618" usec="0"/>
    <to sec="1083733735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.36.75.17"/>
    </slice>
    <from sec="1083733705" usec="0"/>
    <to sec="1083733765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.23.110.17"/>
    </slice>
    <from sec="1083733695" usec="0"/>
    <to sec="1083733763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.18.121.17"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1390[label="168.76.132.17;211pkt 211fpkt", shape=pentagon, color=darkviolet];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.132.17:*, *:2745}[25.5924%]&lt;BR/&gt;{168.76.132.17:*, *:80}[25.1185%]&lt;BR/&gt;{168.76.132.17:*, *:1433}[24.6445%]&lt;BR/&gt;{168.76.132.17:*, *:6129}[24.6445%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (12.7962%)&lt;BR/&gt; 80: (12.5592%)&lt;BR/&gt; 6129: (12.3223%)&lt;BR/&gt; 1433: (12.3223%)&lt;BR/&gt; 4393: (0.473934%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="168.76.132.17"/>
      <filter dst_port="80" src_ip="168.76.132.17"/>
      <filter dst_port="6129" src_ip="168.76.132.17"/>
      <filter dst_port="1433" src_ip="168.76.132.17"/>
    </slice>
    <from sec="1083733242" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.95.168.17"/>
    </slice>
    <from sec="1083733779" usec="0"/>
    <to sec="1083733878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.2.179.17"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.117.203.17"/>
    </slice>
    <from sec="1083733475" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.17.216.17"/>
    </slice>
    <from sec="1083733313" usec="0"/>
    <to sec="1083733379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.175.59.18"/>
    </slice>
    <from sec="1083733596" usec="0"/>
    <to sec="1083733928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.107.88.18"/>
    </slice>
    <from sec="1083733496" usec="0"/>
    <to sec="1083733597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.194.98.18"/>
    </slice>
    <from sec="1083733540" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.101.109.18"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.28.128.18"/>
    </slice>
    <from sec="1083733373" usec="0"/>
    <to sec="1083734042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.220.133.18"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.148.136.18"/>
    </slice>
    <from sec="1083733233" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.112.151.18"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.17.164.18"/>
    </slice>
    <from sec="1083733616" usec="0"/>
    <to sec="1083733757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.218.168.18"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083733475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.11.209.18"/>
    </slice>
    <from sec="1083734007" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.174.249.18"/>
    </slice>
    <from sec="1083733319" usec="0"/>
    <to sec="1083733622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.26.5.19"/>
    </slice>
    <from sec="1083734000" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.46.43.19"/>
    </slice>
    <from sec="1083733285" usec="0"/>
    <to sec="1083733435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.26.49.19"/>
    </slice>
    <from sec="1083733528" usec="0"/>
    <to sec="1083733643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.183.77.19"/>
    </slice>
    <from sec="1083733823" usec="0"/>
    <to sec="1083733853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.28.84.19"/>
    </slice>
    <from sec="1083733408" usec="0"/>
    <to sec="1083733423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.182.112.19"/>
    </slice>
    <from sec="1083733488" usec="0"/>
    <to sec="1083733579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.222.122.19"/>
    </slice>
    <from sec="1083733533" usec="0"/>
    <to sec="1083733785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.164.19"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.32.167.19"/>
    </slice>
    <from sec="1083734011" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.182.168.19"/>
    </slice>
    <from sec="1083733817" usec="0"/>
    <to sec="1083733911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.169.19"/>
    </slice>
    <from sec="1083733451" usec="0"/>
    <to sec="1083733735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.19.210.19"/>
    </slice>
    <from sec="1083733468" usec="0"/>
    <to sec="1083733566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.198.40.20"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083733932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.211.108.20"/>
    </slice>
    <from sec="1083733525" usec="0"/>
    <to sec="1083733976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.238.118.20"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.82.154.20"/>
    </slice>
    <from sec="1083733488" usec="0"/>
    <to sec="1083733765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.106.192.20"/>
    </slice>
    <from sec="1083733345" usec="0"/>
    <to sec="1083733406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.81.228.20"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
748[label="141.22.142.154;d;5pkt 5fpkt", shape=diamond, color=yellow];
1477[label="71.180.11.21;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6034[label="71.180.11.21;5pkt 5fpkt", shape=invtriangle, color=brown];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.180.11.21:80, 141.22.142.154:1274}[20%]&lt;BR/&gt;{71.180.11.21:80, 141.22.142.154:1275}[20%]&lt;BR/&gt;{71.180.11.21:80, 141.22.142.154:1276}[20%]&lt;BR/&gt;{71.180.11.21:80, 141.22.142.154:1278}[20%]&lt;BR/&gt;{71.180.11.21:80, 141.22.142.154:1279}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1279: (10%)&lt;BR/&gt; 1278: (10%)&lt;BR/&gt; 1276: (10%)&lt;BR/&gt; 1275: (10%)&gt;];
}
748--1477[label="1;5pkt 5fpkt"];
748--6034[label="1;5pkt 5fpkt"];
1477--6034[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.142.154" dst_port="1279" src_ip="71.180.11.21" src_port="80"/>
      <filter dst_ip="141.22.142.154" dst_port="1278" src_ip="71.180.11.21" src_port="80"/>
      <filter dst_ip="141.22.142.154" dst_port="1276" src_ip="71.180.11.21" src_port="80"/>
      <filter dst_ip="141.22.142.154" dst_port="1275" src_ip="71.180.11.21" src_port="80"/>
      <filter dst_ip="141.22.142.154" dst_port="1274" src_ip="71.180.11.21" src_port="80"/>
    </slice>
    <from sec="1083733603" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.150.37.21"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.220.59.21"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.8.62.21"/>
    </slice>
    <from sec="1083733466" usec="0"/>
    <to sec="1083733691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.14.146.21"/>
    </slice>
    <from sec="1083733300" usec="0"/>
    <to sec="1083733416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.17.216.21"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.106.60.22"/>
    </slice>
    <from sec="1083733822" usec="0"/>
    <to sec="1083733882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
1505[label="168.127.142.22;53pkt 53fpkt", shape=pentagon, color=darkviolet];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.142.22:*, 133.208.135.232:80}[94.3396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0566%)&lt;BR/&gt; 4062: (0.943396%)&lt;BR/&gt; 4061: (0.943396%)&lt;BR/&gt; 4060: (0.943396%)&lt;BR/&gt; 4059: (0.943396%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="133.208.135.232" dst_port="80" src_ip="168.127.142.22"/>
    </slice>
    <from sec="1083733457" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.169.180.22"/>
    </slice>
    <from sec="1083734029" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.14.198.22"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
364[label="95.5.39.23;s;1075pkt 1075fpkt", shape=diamond, color=yellow];
1516[label="95.5.39.23;1074pkt 1074fpkt", shape=pentagon, color=darkviolet];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.5.39.23:*, 136.151.205.215:53}[76.3721%]&lt;BR/&gt;{95.5.39.23:*, 141.22.167.193:53}[23.6279%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 31169: (0.0930665%)&lt;BR/&gt; 27267: (0.0930665%)&lt;BR/&gt; 18754: (0.0930665%)&lt;BR/&gt; 64494: (0.0465333%)&gt;];
}
364--1516[label="1;1074pkt 1074fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.205.215" dst_port="53" src_ip="95.5.39.23"/>
      <filter dst_ip="141.22.167.193" dst_port="53" src_ip="95.5.39.23"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.88.47.23"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.70.23"/>
    </slice>
    <from sec="1083733944" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.11.212.23"/>
    </slice>
    <from sec="1083733775" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.9.226.23"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.46.242.23"/>
    </slice>
    <from sec="1083733348" usec="0"/>
    <to sec="1083733422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.127.3.24"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.205.93.24"/>
    </slice>
    <from sec="1083733877" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.180.96.24"/>
    </slice>
    <from sec="1083733385" usec="0"/>
    <to sec="1083733678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.184.169.24"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.197.24"/>
    </slice>
    <from sec="1083733687" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.20.251.24"/>
    </slice>
    <from sec="1083733835" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.20.58.25"/>
    </slice>
    <from sec="1083733381" usec="0"/>
    <to sec="1083733394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1678[label="197.10.193.30;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.10.193.30:*, 155.211.122.130:445}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (11.5385%)&lt;BR/&gt; 1025: (7.69231%)&lt;BR/&gt; 139: (7.69231%)&lt;BR/&gt; 80: (7.69231%)&lt;BR/&gt; 6129: (3.84615%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="155.211.122.130" dst_port="445" src_ip="197.10.193.30"/>
    </slice>
    <from sec="1083733841" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.170.92.25"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083733353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.188.98.25"/>
    </slice>
    <from sec="1083733375" usec="0"/>
    <to sec="1083733947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.187.174.25"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.197.25"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.36.9.26"/>
    </slice>
    <from sec="1083733695" usec="0"/>
    <to sec="1083733884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.118.23.26"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083733270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.202.23.26"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.68.57.26"/>
    </slice>
    <from sec="1083733298" usec="0"/>
    <to sec="1083733422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.194.80.26"/>
    </slice>
    <from sec="1083733483" usec="0"/>
    <to sec="1083733573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.3.133.26"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083733969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.32.145.26"/>
    </slice>
    <from sec="1083733341" usec="0"/>
    <to sec="1083733355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
396[label="209.29.165.26;s;252pkt 252fpkt", shape=diamond, color=yellow];
1590[label="209.29.165.26;279pkt 279fpkt", shape=pentagon, color=darkviolet];
6109[label="209.29.165.26;279pkt 279fpkt", shape=invtriangle, color=brown];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.165.26:33031, *:53}[69.5341%]&lt;BR/&gt;{209.29.165.26:53, *:*}[29.7491%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.1111%)&lt;BR/&gt; 33031: (34.9383%)&lt;BR/&gt; 32768: (0.925926%)&lt;BR/&gt; 32770: (0.555556%)&lt;BR/&gt; 32769: (0.37037%)&gt;];
}
396--881[label="0.0121951;1pkt 1fpkt"];
396--1590[label="1;252pkt 252fpkt"];
396--6109[label="1;252pkt 252fpkt"];
1590--6109[label="1;279pkt 279fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.165.26" src_port="53"/>
      <filter dst_port="53" src_ip="209.29.165.26" src_port="33031"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.5.222.26"/>
    </slice>
    <from sec="1083733774" usec="0"/>
    <to sec="1083734000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.245.233.26"/>
    </slice>
    <from sec="1083733765" usec="0"/>
    <to sec="1083733886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.100.18.27"/>
    </slice>
    <from sec="1083733953" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.99.23.27"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.252.35.27"/>
    </slice>
    <from sec="1083733752" usec="0"/>
    <to sec="1083733988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.198.92.27"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.91.115.27"/>
    </slice>
    <from sec="1083733957" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.39.132.27"/>
    </slice>
    <from sec="1083733917" usec="0"/>
    <to sec="1083734053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.117.21.28"/>
    </slice>
    <from sec="1083733292" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.14.34.28"/>
    </slice>
    <from sec="1083733491" usec="0"/>
    <to sec="1083733748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.207.64.28"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.90.99.28"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.26.150.28"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083733662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.172.168.28"/>
    </slice>
    <from sec="1083733251" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.8.176.28"/>
    </slice>
    <from sec="1083733897" usec="0"/>
    <to sec="1083733958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.23.0.29"/>
    </slice>
    <from sec="1083733980" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.202.23.29"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.238.86.29"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.178.155.29"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.27.229.29"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083733407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
590[label="141.22.241.29;s;1407pkt 1407fpkt", shape=diamond, color=yellow];
1666[label="141.22.241.29;1517pkt 1517fpkt", shape=pentagon, color=darkviolet];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.241.29:53, *:*}[97.8906%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.2155%)&lt;BR/&gt; 0: (2.01778%)&lt;BR/&gt; 32768: (1.86389%)&lt;BR/&gt; 32769: (1.57319%)&lt;BR/&gt; 1024: (1.14569%)&gt;];
}
590--1666[label="1;1407pkt 1407fpkt"];
</description>
    <slice>
      <filter src_ip="141.22.241.29" src_port="53"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.51.34.30"/>
    </slice>
    <from sec="1083733270" usec="0"/>
    <to sec="1083733472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.196.207.30"/>
    </slice>
    <from sec="1083733873" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.10.91.31"/>
    </slice>
    <from sec="1083733386" usec="0"/>
    <to sec="1083733789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.26.151.31"/>
    </slice>
    <from sec="1083734046" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.165.173.31"/>
    </slice>
    <from sec="1083733638" usec="0"/>
    <to sec="1083733713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
527[label="44.212.34.32;s;2pkt 2fpkt", shape=diamond, color=yellow];
1698[label="44.212.34.32;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6183[label="44.212.34.32;2pkt 2fpkt", shape=invtriangle, color=brown];
9293[label="44.212.34.32;1pkt 1fpkt", shape=invhouse, color=bisque];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.34.32:80, 209.29.138.126:3753}[50%]&lt;BR/&gt;{44.212.34.32:80, 209.29.138.127:2177}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2177: (28.5714%)&lt;BR/&gt; 3753: (21.4286%)&gt;];
}
527--1698[label="1;2pkt 2fpkt"];
527--6183[label="1;2pkt 2fpkt"];
527--9293[label="1;1pkt 1fpkt"];
1698--6183[label="1;2pkt 2fpkt"];
1698--9293[label="1;1pkt 1fpkt"];
6183--9293[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" dst_port="2177" src_ip="44.212.34.32" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="3753" src_ip="44.212.34.32" src_port="80"/>
    </slice>
    <from sec="1083733365" usec="0"/>
    <to sec="1083734055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.72.43.32"/>
    </slice>
    <from sec="1083733259" usec="0"/>
    <to sec="1083733904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.218.183.32"/>
    </slice>
    <from sec="1083733305" usec="0"/>
    <to sec="1083733767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.206.32"/>
    </slice>
    <from sec="1083733492" usec="0"/>
    <to sec="1083733603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.212.46.33"/>
    </slice>
    <from sec="1083733546" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.8.193.33"/>
    </slice>
    <from sec="1083733529" usec="0"/>
    <to sec="1083733648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.194.197.33"/>
    </slice>
    <from sec="1083733593" usec="0"/>
    <to sec="1083733800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.54.210.33"/>
    </slice>
    <from sec="1083734049" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.69.222.33"/>
    </slice>
    <from sec="1083733785" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.93.18.34"/>
    </slice>
    <from sec="1083733475" usec="0"/>
    <to sec="1083733605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.66.72.34"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083734033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.27.117.34"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083734070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.196.195.34"/>
    </slice>
    <from sec="1083733238" usec="0"/>
    <to sec="1083733447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.152.75.35"/>
    </slice>
    <from sec="1083733787" usec="0"/>
    <to sec="1083733897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.45.151.35"/>
    </slice>
    <from sec="1083733999" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
344[label="209.29.181.35;s;310pkt 310fpkt", shape=diamond, color=yellow];
1772[label="209.29.181.35;353pkt 353fpkt", shape=pentagon, color=darkviolet];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.181.35:*, 221.153.123.117:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33443: (3.01659%)&lt;BR/&gt; 33442: (3.01659%)&lt;BR/&gt; 33441: (3.01659%)&lt;BR/&gt; 33440: (3.01659%)&lt;BR/&gt; 33439: (3.01659%)&gt;];
}
344--1772[label="1;310pkt 310fpkt"];
</description>
    <slice>
      <filter dst_ip="221.153.123.117" src_ip="209.29.181.35"/>
    </slice>
    <from sec="1083733443" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.82.191.35"/>
    </slice>
    <from sec="1083733704" usec="0"/>
    <to sec="1083733792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.95.192.35"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083733299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.188.194.35"/>
    </slice>
    <from sec="1083733786" usec="0"/>
    <to sec="1083733912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.197.35"/>
    </slice>
    <from sec="1083733559" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.51.224.35"/>
    </slice>
    <from sec="1083733554" usec="0"/>
    <to sec="1083733683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.3.229.35"/>
    </slice>
    <from sec="1083733794" usec="0"/>
    <to sec="1083733965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.192.230.35"/>
    </slice>
    <from sec="1083733583" usec="0"/>
    <to sec="1083733746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.115.3.36"/>
    </slice>
    <from sec="1083733999" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.214.20.36"/>
    </slice>
    <from sec="1083733332" usec="0"/>
    <to sec="1083733593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.208.42.36"/>
    </slice>
    <from sec="1083733371" usec="0"/>
    <to sec="1083733487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.183.131.36"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.197.3.37"/>
    </slice>
    <from sec="1083733830" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.221.47.37"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.10.79.37"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
439[label="155.148.87.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1821[label="155.148.87.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.87.37:49161, 198.19.84.237:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49161: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
439--1821[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.19.84.237" dst_port="8000" src_ip="155.148.87.37" src_port="49161"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.176.106.37"/>
    </slice>
    <from sec="1083733432" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.110.37"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
1825[label="168.41.125.37;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.41.125.37:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (6.47668%)&lt;BR/&gt; 6129: (6.21762%)&lt;BR/&gt; 3127: (6.21762%)&lt;BR/&gt; 1025: (6.21762%)&lt;BR/&gt; 445: (6.21762%)&gt;];
}
</description>
    <slice>
      <filter src_ip="168.41.125.37"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
890[label="45.172.171.37;s;17pkt 17fpkt", shape=diamond, color=yellow];
1829[label="45.172.171.37;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6276[label="45.172.171.37;17pkt 17fpkt", shape=invtriangle, color=brown];
9352[label="45.172.171.37;18pkt 18fpkt", shape=invhouse, color=bisque];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.172.171.37:80, 136.151.241.142:*}[50%]&lt;BR/&gt;{45.172.171.37:80, 209.29.138.127:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4643: (2.85714%)&lt;BR/&gt; 4564: (2.85714%)&lt;BR/&gt; 4563: (2.85714%)&lt;BR/&gt; 4548: (2.85714%)&gt;];
}
890--1829[label="1;17pkt 17fpkt"];
890--6276[label="0.941176;16pkt 16fpkt"];
890--9352[label="1;17pkt 17fpkt"];
1829--6276[label="1;17pkt 17fpkt"];
1829--9352[label="1;18pkt 18fpkt"];
6276--9352[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.241.142" src_ip="45.172.171.37" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="45.172.171.37" src_port="80"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.36.183.37"/>
    </slice>
    <from sec="1083734053" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
174[label="199.236.192.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1832[label="199.236.192.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.236.192.37:6881, 168.127.113.129:2686}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2686: (50%)&gt;];
}
174--1832[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2686" src_ip="199.236.192.37" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.221.209.37"/>
    </slice>
    <from sec="1083733655" usec="0"/>
    <to sec="1083733787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.22.245.37"/>
    </slice>
    <from sec="1083733886" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
342[label="202.241.29.38;s;117pkt 117fpkt", shape=diamond, color=yellow];
1844[label="202.241.29.38;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6287[label="202.241.29.38;117pkt 117fpkt", shape=invtriangle, color=brown];
9357[label="202.241.29.38;116pkt 116fpkt", shape=invhouse, color=bisque];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.241.29.38:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49466: (0.429185%)&lt;BR/&gt; 48590: (0.429185%)&lt;BR/&gt; 48585: (0.429185%)&lt;BR/&gt; 48584: (0.429185%)&gt;];
}
342--1844[label="1;116pkt 116fpkt"];
342--6287[label="1;117pkt 117fpkt"];
342--9357[label="1;116pkt 116fpkt"];
1844--6287[label="1;116pkt 116fpkt"];
1844--9357[label="1;116pkt 116fpkt"];
6287--9357[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="202.241.29.38" src_port="80"/>
    </slice>
    <from sec="1083733375" usec="0"/>
    <to sec="1083733628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.101.67.38"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.212.104.38"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
211[label="168.127.114.38;s;21pkt 21fpkt", shape=diamond, color=yellow];
1853[label="168.127.114.38;54pkt 54fpkt", shape=pentagon, color=darkviolet];
6291[label="168.127.114.38;53pkt 53fpkt", shape=invtriangle, color=brown];
9360[label="168.127.114.38;53pkt 53fpkt", shape=invhouse, color=bisque];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.114.38:*, 203.212.159.177:80}[35.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1713%)&lt;BR/&gt; 1374: (1.10497%)&lt;BR/&gt; 1373: (1.10497%)&lt;BR/&gt; 1372: (1.10497%)&lt;BR/&gt; 1371: (1.10497%)&gt;];
}
211--1853[label="1;21pkt 21fpkt"];
211--6291[label="1;21pkt 21fpkt"];
211--9360[label="1;21pkt 21fpkt"];
1853--6291[label="1;53pkt 53fpkt"];
1853--9360[label="1;53pkt 53fpkt"];
6291--9360[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="203.212.159.177" dst_port="80" src_ip="168.127.114.38"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.192.122.38"/>
    </slice>
    <from sec="1083733604" usec="0"/>
    <to sec="1083733912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.2.162.38"/>
    </slice>
    <from sec="1083733449" usec="0"/>
    <to sec="1083733709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.15.232.38"/>
    </slice>
    <from sec="1083733965" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.240.104.39"/>
    </slice>
    <from sec="1083733688" usec="0"/>
    <to sec="1083733788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.151.146.39"/>
    </slice>
    <from sec="1083733324" usec="0"/>
    <to sec="1083733599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.133.225.39"/>
    </slice>
    <from sec="1083733647" usec="0"/>
    <to sec="1083733783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.71.9.40"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.38.16.40"/>
    </slice>
    <from sec="1083733440" usec="0"/>
    <to sec="1083733554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
395[label="155.148.19.40;s;108pkt 108fpkt", shape=diamond, color=yellow];
1888[label="155.148.19.40;112pkt 112fpkt", shape=pentagon, color=darkviolet];
6313[label="155.148.19.40;112pkt 112fpkt", shape=invtriangle, color=brown];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.19.40:10000, *:10000}[58.0357%]&lt;BR/&gt;{155.148.19.40:*, 172.25.182.1:1199}[41.9643%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10000: (58.7349%)&lt;BR/&gt; 1199: (20.6325%)&lt;BR/&gt; 49958: (0.451807%)&lt;BR/&gt; 49957: (0.451807%)&lt;BR/&gt; 49956: (0.451807%)&gt;];
}
395--1888[label="1;108pkt 108fpkt"];
395--6313[label="1;108pkt 108fpkt"];
1888--6313[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="172.25.182.1" dst_port="1199" src_ip="155.148.19.40"/>
      <filter dst_port="10000" src_ip="155.148.19.40" src_port="10000"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.240.42.40"/>
    </slice>
    <from sec="1083733303" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.136.57.40"/>
    </slice>
    <from sec="1083733965" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.204.198.40"/>
    </slice>
    <from sec="1083733739" usec="0"/>
    <to sec="1083733791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.1.230.40"/>
    </slice>
    <from sec="1083733930" usec="0"/>
    <to sec="1083734017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
774[label="136.151.4.41;s;113pkt 113fpkt", shape=diamond, color=yellow];
1909[label="136.151.4.41;125pkt 125fpkt", shape=pentagon, color=darkviolet];
6327[label="136.151.4.41;125pkt 125fpkt", shape=invtriangle, color=brown];
9382[label="136.151.4.41;125pkt 125fpkt", shape=invhouse, color=bisque];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.4.41:*, *:25}[68.8%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.5205%)&lt;BR/&gt; 113: (6.04508%)&lt;BR/&gt; 53: (1.43443%)&lt;BR/&gt; 54370: (0.409836%)&lt;BR/&gt; 54369: (0.409836%)&gt;];
}
774--1909[label="1;113pkt 113fpkt"];
774--6327[label="1;113pkt 113fpkt"];
774--9382[label="1;113pkt 113fpkt"];
1909--6327[label="1;125pkt 125fpkt"];
1909--9382[label="1;125pkt 125fpkt"];
6327--9382[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="136.151.4.41"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
443[label="94.212.68.41;s;126pkt 126fpkt", shape=diamond, color=yellow];
1914[label="94.212.68.41;126pkt 126fpkt", shape=pentagon, color=darkviolet];
6330[label="94.212.68.41;126pkt 126fpkt", shape=invtriangle, color=brown];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.212.68.41:443, 209.29.138.10:*}[64.2857%]&lt;BR/&gt;{94.212.68.41:80, 209.29.138.10:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (32.1429%)&lt;BR/&gt; 80: (17.8571%)&lt;BR/&gt; 49990: (0.396825%)&lt;BR/&gt; 49747: (0.396825%)&lt;BR/&gt; 49722: (0.396825%)&gt;];
}
443--1914[label="1;126pkt 126fpkt"];
443--6330[label="1;126pkt 126fpkt"];
1914--6330[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="94.212.68.41" src_port="443"/>
      <filter dst_ip="209.29.138.10" src_ip="94.212.68.41" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.122.96.41"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083733603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.85.107.41"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.136.125.41"/>
    </slice>
    <from sec="1083733648" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.138.13.42"/>
    </slice>
    <from sec="1083733491" usec="0"/>
    <to sec="1083733708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.53.14.42"/>
    </slice>
    <from sec="1083733795" usec="0"/>
    <to sec="1083733916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.33.42"/>
    </slice>
    <from sec="1083733505" usec="0"/>
    <to sec="1083734072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
942[label="136.151.52.42;s;58pkt 58fpkt", shape=diamond, color=yellow];
1932[label="136.151.52.42;112pkt 112fpkt", shape=pentagon, color=darkviolet];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.52.42:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59819: (0.588235%)&lt;BR/&gt; 59817: (0.588235%)&lt;BR/&gt; 59816: (0.588235%)&lt;BR/&gt; 59815: (0.588235%)&gt;];
}
942--1932[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.151.52.42"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.64.42"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.22.66.42"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.176.102.42"/>
    </slice>
    <from sec="1083733867" usec="0"/>
    <to sec="1083734000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
281[label="196.36.142.42;s;20pkt 20fpkt", shape=diamond, color=yellow];
1940[label="196.36.142.42;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6349[label="196.36.142.42;25pkt 25fpkt", shape=invtriangle, color=brown];
9396[label="196.36.142.42;24pkt 24fpkt", shape=invhouse, color=bisque];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.36.142.42:21, 155.148.65.7:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (19.1489%)&lt;BR/&gt; 3096: (2.12766%)&lt;BR/&gt; 3092: (2.12766%)&lt;BR/&gt; 3091: (2.12766%)&lt;BR/&gt; 3090: (2.12766%)&gt;];
}
281--1940[label="1;20pkt 20fpkt"];
281--6349[label="1;20pkt 20fpkt"];
281--9396[label="0.95;19pkt 19fpkt"];
1940--6349[label="1;25pkt 25fpkt"];
1940--9396[label="1;24pkt 24fpkt"];
6349--9396[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.65.7" src_ip="196.36.142.42" src_port="21"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.102.170.42"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.59.201.42"/>
    </slice>
    <from sec="1083733643" usec="0"/>
    <to sec="1083733813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.178.212.42"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083733762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.21.17.43"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
933[label="213.101.36.43;s;13pkt 13fpkt", shape=diamond, color=yellow];
1955[label="213.101.36.43;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6357[label="213.101.36.43;13pkt 13fpkt", shape=invtriangle, color=brown];
9401[label="213.101.36.43;12pkt 12fpkt", shape=invhouse, color=bisque];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.36.43:80, *:*}[61.5385%]&lt;BR/&gt;{213.101.36.43:443, *:*}[38.4615%]&lt;BR/&gt;{213.101.36.43:*, 155.148.139.49:*}[30.7692%]&lt;BR/&gt;{213.101.36.43:*, 208.96.51.17:*}[23.0769%]&lt;BR/&gt;{213.101.36.43:*, 155.148.141.136:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.3922%)&lt;BR/&gt; 443: (19.6078%)&lt;BR/&gt; 30909: (3.92157%)&lt;BR/&gt; 30874: (3.92157%)&lt;BR/&gt; 4976: (3.92157%)&gt;];
}
933--1955[label="1;13pkt 13fpkt"];
933--6357[label="1;13pkt 13fpkt"];
933--9401[label="1;12pkt 12fpkt"];
1955--6357[label="1;13pkt 13fpkt"];
1955--9401[label="1;12pkt 12fpkt"];
6357--9401[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.139.49" src_ip="213.101.36.43"/>
      <filter dst_ip="155.148.141.136" src_ip="213.101.36.43"/>
      <filter dst_ip="208.96.51.17" src_ip="213.101.36.43"/>
      <filter src_ip="213.101.36.43" src_port="80"/>
      <filter src_ip="213.101.36.43" src_port="443"/>
    </slice>
    <from sec="1083733670" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
234[label="46.9.69.43;s;6pkt 6fpkt", shape=diamond, color=yellow];
1957[label="46.9.69.43;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.9.69.43:80, 209.29.138.126:*}[66.6667%]&lt;BR/&gt;{46.9.69.43:80, 209.29.138.127:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4131: (8.33333%)&lt;BR/&gt; 4043: (8.33333%)&lt;BR/&gt; 3737: (8.33333%)&lt;BR/&gt; 2989: (8.33333%)&gt;];
}
234--1957[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.9.69.43" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.9.69.43" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.9.70.43"/>
    </slice>
    <from sec="1083733627" usec="0"/>
    <to sec="1083734047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.72.43"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
236[label="208.96.50.84;s;482pkt 482fpkt", shape=diamond, color=yellow];
429[label="197.165.26.127;d;2pkt 2fpkt", shape=diamond, color=yellow];
559[label="173.138.129.43;s;98pkt 98fpkt", shape=diamond, color=yellow];
619[label="109.130.118.50;d;2pkt 2fpkt", shape=diamond, color=yellow];
709[label="109.230.102.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
717[label="196.160.178.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
851[label="161.187.73.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
897[label="208.74.225.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
1965[label="173.138.129.43;98pkt 98fpkt", shape=pentagon, color=darkviolet];
2777[label="208.96.50.84;714pkt 714fpkt", shape=pentagon, color=darkviolet];
6933[label="208.96.50.84;713pkt 713fpkt", shape=invtriangle, color=brown];
9726[label="208.96.50.84;714pkt 714fpkt", shape=invhouse, color=bisque];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.50.84:6881, *:*}[23.1527%]&lt;BR/&gt;{208.96.50.84:*, *:6881}[20.4433%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (24.2129%)&lt;BR/&gt; 6882: (4.8815%)&lt;BR/&gt; 6883: (3.18359%)&lt;BR/&gt; 6346: (2.9006%)&lt;BR/&gt; 6884: (2.44075%)&gt;];
}
236--429[label="1;2pkt 2fpkt"];
236--619[label="0.5;1pkt 1fpkt"];
236--709[label="1;1pkt 1fpkt"];
236--717[label="1;1pkt 1fpkt"];
236--851[label="1;1pkt 1fpkt"];
236--897[label="1;1pkt 1fpkt"];
236--2777[label="1;482pkt 482fpkt"];
236--6933[label="0.997925;481pkt 481fpkt"];
236--9726[label="1;482pkt 482fpkt"];
429--2777[label="1;2pkt 2fpkt"];
429--6933[label="1;2pkt 2fpkt"];
429--9726[label="1;2pkt 2fpkt"];
559--619[label="0.5;1pkt 1fpkt"];
559--1965[label="1;98pkt 98fpkt"];
619--1965[label="0.5;1pkt 1fpkt"];
619--2777[label="0.5;1pkt 1fpkt"];
619--6933[label="0.5;1pkt 1fpkt"];
619--9726[label="0.5;1pkt 1fpkt"];
709--2777[label="1;1pkt 1fpkt"];
709--6933[label="1;1pkt 1fpkt"];
709--9726[label="1;1pkt 1fpkt"];
717--2777[label="1;1pkt 1fpkt"];
717--6933[label="1;1pkt 1fpkt"];
717--9726[label="1;1pkt 1fpkt"];
851--2777[label="1;1pkt 1fpkt"];
851--6933[label="1;1pkt 1fpkt"];
851--9726[label="1;1pkt 1fpkt"];
897--2777[label="1;1pkt 1fpkt"];
897--6933[label="1;1pkt 1fpkt"];
897--9726[label="1;1pkt 1fpkt"];
2777--6933[label="1;713pkt 713fpkt"];
2777--9726[label="1;714pkt 714fpkt"];
6933--9726[label="1;713pkt 713fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.50.84" src_port="6881"/>
      <filter dst_port="6881" src_ip="208.96.50.84"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.186.130.43"/>
    </slice>
    <from sec="1083733281" usec="0"/>
    <to sec="1083733985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.197.43"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.219.43"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.82.240.43"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.85.19.44"/>
    </slice>
    <from sec="1083733385" usec="0"/>
    <to sec="1083733892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.209.29.44"/>
    </slice>
    <from sec="1083733370" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.240.42.44"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.202.48.44"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.176.106.44"/>
    </slice>
    <from sec="1083733313" usec="0"/>
    <to sec="1083733620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.251.144.44"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.82.165.44"/>
    </slice>
    <from sec="1083733891" usec="0"/>
    <to sec="1083733954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
669[label="198.234.3.45;s;13pkt 13fpkt", shape=diamond, color=yellow];
1994[label="198.234.3.45;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.234.3.45:80, 209.29.138.126:*}[69.2308%]&lt;BR/&gt;{198.234.3.45:80, 209.29.138.127:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4804: (4%)&lt;BR/&gt; 4689: (4%)&lt;BR/&gt; 3514: (4%)&lt;BR/&gt; 3420: (4%)&gt;];
}
669--1994[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.234.3.45" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.234.3.45" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.23.22.45"/>
    </slice>
    <from sec="1083733443" usec="0"/>
    <to sec="1083733552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.232.27.45"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.26.108.45"/>
    </slice>
    <from sec="1083733753" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.44.128.45"/>
    </slice>
    <from sec="1083733369" usec="0"/>
    <to sec="1083733429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.148.136.45"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.32.184.45"/>
    </slice>
    <from sec="1083733425" usec="0"/>
    <to sec="1083733506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.197.45"/>
    </slice>
    <from sec="1083733829" usec="0"/>
    <to sec="1083734050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.221.213.45"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.155.229.45"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.26.46"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.205.92.46"/>
    </slice>
    <from sec="1083733833" usec="0"/>
    <to sec="1083733930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.70.116.46"/>
    </slice>
    <from sec="1083733621" usec="0"/>
    <to sec="1083734055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.184.158.46"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.193.206.46"/>
    </slice>
    <from sec="1083733548" usec="0"/>
    <to sec="1083733702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.147.40.47"/>
    </slice>
    <from sec="1083733881" usec="0"/>
    <to sec="1083734045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.129.43.47"/>
    </slice>
    <from sec="1083733506" usec="0"/>
    <to sec="1083733701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.45.49.47"/>
    </slice>
    <from sec="1083734017" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.105.70.47"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083733467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.225.132.47"/>
    </slice>
    <from sec="1083733829" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.228.49.48"/>
    </slice>
    <from sec="1083733660" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
688[label="209.29.137.48;s;215pkt 215fpkt", shape=diamond, color=yellow];
2066[label="209.29.137.48;229pkt 229fpkt", shape=pentagon, color=darkviolet];
6435[label="209.29.137.48;228pkt 228fpkt", shape=invtriangle, color=brown];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.137.48:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
688--2066[label="1;215pkt 215fpkt"];
688--6435[label="0.995349;214pkt 214fpkt"];
2066--6435[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.137.48"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.148.137.48"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.162.48"/>
    </slice>
    <from sec="1083733753" usec="0"/>
    <to sec="1083733847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.229.204.48"/>
    </slice>
    <from sec="1083733767" usec="0"/>
    <to sec="1083733836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.251.146.49"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083733621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.82.148.49"/>
    </slice>
    <from sec="1083733404" usec="0"/>
    <to sec="1083733508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
655[label="173.138.153.49;s;103pkt 103fpkt", shape=diamond, color=yellow];
2094[label="173.138.153.49;108pkt 108fpkt", shape=pentagon, color=darkviolet];
6453[label="173.138.153.49;108pkt 108fpkt", shape=invtriangle, color=brown];
9460[label="173.138.153.49;107pkt 107fpkt", shape=invhouse, color=bisque];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.153.49:*, 194.11.245.253:25}[24.0741%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.0751%)&lt;BR/&gt; 53: (6.33803%)&lt;BR/&gt; 1024: (1.87793%)&lt;BR/&gt; 113: (0.938967%)&lt;BR/&gt; 64997: (0.469484%)&gt;];
}
655--2094[label="1;103pkt 103fpkt"];
655--6453[label="1;103pkt 103fpkt"];
655--9460[label="0.990291;102pkt 102fpkt"];
2094--6453[label="1;108pkt 108fpkt"];
2094--9460[label="1;107pkt 107fpkt"];
6453--9460[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="194.11.245.253" dst_port="25" src_ip="173.138.153.49"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.181.195.49"/>
    </slice>
    <from sec="1083733709" usec="0"/>
    <to sec="1083733925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.29.8.50"/>
    </slice>
    <from sec="1083733652" usec="0"/>
    <to sec="1083733781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
100[label="109.83.215.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
127[label="52.118.181.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
165[label="140.114.167.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
192[label="109.204.150.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
219[label="145.130.156.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
270[label="47.67.149.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
345[label="136.150.69.50;s;578pkt 578fpkt", shape=diamond, color=yellow];
442[label="47.74.242.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
496[label="53.73.64.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
627[label="52.3.65.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
678[label="54.212.74.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
686[label="109.161.248.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
703[label="109.250.126.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
706[label="199.150.8.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
768[label="41.82.62.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
840[label="41.60.31.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
858[label="41.69.24.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
2104[label="136.150.69.50;609pkt 609fpkt", shape=pentagon, color=darkviolet];
6460[label="136.150.69.50;609pkt 609fpkt", shape=invtriangle, color=brown];
9466[label="136.150.69.50;608pkt 608fpkt", shape=invhouse, color=bisque];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.69.50:*, *:6881}[22.8243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (11.6942%)&lt;BR/&gt; 6887: (10.0413%)&lt;BR/&gt; 63551: (7.19008%)&lt;BR/&gt; 6882: (4.75207%)&lt;BR/&gt; 6883: (4.56612%)&gt;];
}
100--345[label="1;1pkt 1fpkt"];
100--2104[label="1;1pkt 1fpkt"];
100--6460[label="1;1pkt 1fpkt"];
100--9466[label="1;1pkt 1fpkt"];
127--345[label="1;1pkt 1fpkt"];
127--2104[label="1;1pkt 1fpkt"];
127--6460[label="1;1pkt 1fpkt"];
127--9466[label="1;1pkt 1fpkt"];
165--345[label="1;1pkt 1fpkt"];
165--2104[label="1;1pkt 1fpkt"];
165--6460[label="1;1pkt 1fpkt"];
165--9466[label="1;1pkt 1fpkt"];
192--345[label="1;1pkt 1fpkt"];
192--2104[label="1;1pkt 1fpkt"];
192--6460[label="1;1pkt 1fpkt"];
192--9466[label="1;1pkt 1fpkt"];
219--345[label="1;1pkt 1fpkt"];
219--2104[label="1;1pkt 1fpkt"];
219--6460[label="1;1pkt 1fpkt"];
219--9466[label="1;1pkt 1fpkt"];
270--345[label="1;1pkt 1fpkt"];
270--2104[label="1;1pkt 1fpkt"];
270--6460[label="1;1pkt 1fpkt"];
270--9466[label="1;1pkt 1fpkt"];
345--442[label="1;1pkt 1fpkt"];
345--496[label="1;1pkt 1fpkt"];
345--627[label="1;1pkt 1fpkt"];
345--678[label="1;1pkt 1fpkt"];
345--686[label="1;1pkt 1fpkt"];
345--703[label="1;1pkt 1fpkt"];
345--706[label="1;1pkt 1fpkt"];
345--768[label="1;1pkt 1fpkt"];
345--840[label="1;1pkt 1fpkt"];
345--858[label="1;1pkt 1fpkt"];
345--982[label="0.0017301;1pkt 1fpkt"];
345--2104[label="1;578pkt 578fpkt"];
345--6460[label="1;578pkt 578fpkt"];
345--9466[label="0.99827;577pkt 577fpkt"];
442--2104[label="1;1pkt 1fpkt"];
442--6460[label="1;1pkt 1fpkt"];
442--9466[label="1;1pkt 1fpkt"];
496--2104[label="1;1pkt 1fpkt"];
496--6460[label="1;1pkt 1fpkt"];
496--9466[label="1;1pkt 1fpkt"];
627--2104[label="1;1pkt 1fpkt"];
627--6460[label="1;1pkt 1fpkt"];
627--9466[label="1;1pkt 1fpkt"];
678--2104[label="1;1pkt 1fpkt"];
678--6460[label="1;1pkt 1fpkt"];
678--9466[label="1;1pkt 1fpkt"];
686--2104[label="1;1pkt 1fpkt"];
686--6460[label="1;1pkt 1fpkt"];
686--9466[label="1;1pkt 1fpkt"];
703--2104[label="1;1pkt 1fpkt"];
703--6460[label="1;1pkt 1fpkt"];
703--9466[label="1;1pkt 1fpkt"];
706--2104[label="1;1pkt 1fpkt"];
706--6460[label="1;1pkt 1fpkt"];
706--9466[label="1;1pkt 1fpkt"];
768--2104[label="1;1pkt 1fpkt"];
768--6460[label="1;1pkt 1fpkt"];
768--9466[label="1;1pkt 1fpkt"];
840--2104[label="1;1pkt 1fpkt"];
840--6460[label="1;1pkt 1fpkt"];
840--9466[label="1;1pkt 1fpkt"];
858--2104[label="1;1pkt 1fpkt"];
858--6460[label="1;1pkt 1fpkt"];
858--9466[label="1;1pkt 1fpkt"];
2104--6460[label="1;609pkt 609fpkt"];
2104--9466[label="1;608pkt 608fpkt"];
6460--9466[label="1;608pkt 608fpkt"];
</description>
    <slice>
      <filter dst_port="6881" src_ip="136.150.69.50"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.69.78.50"/>
    </slice>
    <from sec="1083733472" usec="0"/>
    <to sec="1083733579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.194.140.50"/>
    </slice>
    <from sec="1083733339" usec="0"/>
    <to sec="1083733950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.152.50"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.31.169.50"/>
    </slice>
    <from sec="1083733703" usec="0"/>
    <to sec="1083733886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.119.247.50"/>
    </slice>
    <from sec="1083733233" usec="0"/>
    <to sec="1083733463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.24.33.51"/>
    </slice>
    <from sec="1083733397" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,002,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
125[label="205.51.66.51;s;254pkt 254fpkt", shape=diamond, color=yellow];
2132[label="205.51.66.51;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.51.66.51:137, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (100%)&gt;];
}
125--2132[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.51.66.51" src_port="137"/>
    </slice>
    <from sec="1083733273" usec="0"/>
    <to sec="1083733318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.120.85.51"/>
    </slice>
    <from sec="1083733808" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.218.93.51"/>
    </slice>
    <from sec="1083733419" usec="0"/>
    <to sec="1083733838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.149.102.51"/>
    </slice>
    <from sec="1083733835" usec="0"/>
    <to sec="1083733877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.25.138.51"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.165.148.51"/>
    </slice>
    <from sec="1083733905" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.103.227.51"/>
    </slice>
    <from sec="1083734045" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
789[label="44.140.77.52;s;81pkt 81fpkt", shape=diamond, color=yellow];
2152[label="44.140.77.52;88pkt 88fpkt", shape=pentagon, color=darkviolet];
6494[label="44.140.77.52;87pkt 87fpkt", shape=invtriangle, color=brown];
9489[label="44.140.77.52;88pkt 88fpkt", shape=invhouse, color=bisque];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.140.77.52:*, *:80}[89.7727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9128%)&lt;BR/&gt; 53: (4.50581%)&lt;BR/&gt; 65396: (0.581395%)&lt;BR/&gt; 65205: (0.581395%)&lt;BR/&gt; 64467: (0.581395%)&gt;];
}
789--982[label="0.037037;3pkt 3fpkt"];
789--2152[label="1;81pkt 81fpkt"];
789--6494[label="0.987654;80pkt 80fpkt"];
789--9489[label="1;81pkt 81fpkt"];
2152--6494[label="1;87pkt 87fpkt"];
2152--9489[label="1;88pkt 88fpkt"];
6494--9489[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="44.140.77.52"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.128.92.52"/>
    </slice>
    <from sec="1083733858" usec="0"/>
    <to sec="1083733880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.1.163.52"/>
    </slice>
    <from sec="1083733694" usec="0"/>
    <to sec="1083733788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.19.18.53"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.91.25.53"/>
    </slice>
    <from sec="1083733516" usec="0"/>
    <to sec="1083733952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.240.42.53"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.106.86.53"/>
    </slice>
    <from sec="1083733452" usec="0"/>
    <to sec="1083733571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.5.133.53"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.5.54"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
2185[label="93.17.8.54;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.17.8.54:0, *:0}[50%]&lt;BR/&gt;{93.17.8.54:*, *:445}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 445: (20%)&lt;BR/&gt; 4154: (5%)&lt;BR/&gt; 3532: (5%)&lt;BR/&gt; 1630: (5%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="93.17.8.54"/>
      <filter src_ip="93.17.8.54"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
847[label="136.150.56.54;s;123pkt 123fpkt", shape=diamond, color=yellow];
2189[label="136.150.56.54;135pkt 135fpkt", shape=pentagon, color=darkviolet];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.56.54:*, *:25}[59.5588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (35.0775%)&lt;BR/&gt; 53: (9.68992%)&lt;BR/&gt; 4038: (6.58915%)&lt;BR/&gt; 113: (5.62016%)&lt;BR/&gt; 32769: (0.775194%)&gt;];
}
847--2189[label="0.99187;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="136.150.56.54"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
606[label="41.166.175.54;s;5pkt 5fpkt", shape=diamond, color=yellow];
2199[label="41.166.175.54;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6525[label="41.166.175.54;7pkt 7fpkt", shape=invtriangle, color=brown];
9506[label="41.166.175.54;7pkt 7fpkt", shape=invhouse, color=bisque];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.166.175.54:*, *:445}[71.4286%]&lt;BR/&gt;{41.166.175.54:*, 208.96.50.84:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (34.6154%)&lt;BR/&gt; 57622: (7.69231%)&lt;BR/&gt; 56490: (7.69231%)&lt;BR/&gt; 6885: (7.69231%)&lt;BR/&gt; 6884: (7.69231%)&gt;];
}
606--2199[label="1;5pkt 5fpkt"];
606--6525[label="1;5pkt 5fpkt"];
606--9506[label="1;5pkt 5fpkt"];
2199--6525[label="1;7pkt 7fpkt"];
2199--9506[label="1;7pkt 7fpkt"];
6525--9506[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" src_ip="41.166.175.54"/>
      <filter dst_port="445" src_ip="41.166.175.54"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.230.3.55"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.85.35.55"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083733489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.154.84.55"/>
    </slice>
    <from sec="1083733509" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
705[label="168.127.116.55;s;2pkt 2fpkt", shape=diamond, color=yellow];
2215[label="168.127.116.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.116.55:4898, 208.6.250.230:10477}[50%]&lt;BR/&gt;{168.127.116.55:4901, 208.6.250.230:10477}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10477: (50%)&lt;BR/&gt; 4901: (33.3333%)&lt;BR/&gt; 4898: (16.6667%)&gt;];
}
705--2215[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.6.250.230" dst_port="10477" src_ip="168.127.116.55" src_port="4901"/>
      <filter dst_ip="208.6.250.230" dst_port="10477" src_ip="168.127.116.55" src_port="4898"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.98.139.55"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.176.147.55"/>
    </slice>
    <from sec="1083733289" usec="0"/>
    <to sec="1083733414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
269[label="109.108.24.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
2228[label="109.108.24.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.108.24.56:6881, 168.127.113.129:2564}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2564: (50%)&gt;];
}
269--2228[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2564" src_ip="109.108.24.56" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.95.162.56"/>
    </slice>
    <from sec="1083733770" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.9.195.56"/>
    </slice>
    <from sec="1083733252" usec="0"/>
    <to sec="1083733418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.238.56"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
271[label="95.71.81.57;s;3pkt 3fpkt", shape=diamond, color=yellow];
2249[label="95.71.81.57;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.71.81.57:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55133: (12.5%)&lt;BR/&gt; 51913: (12.5%)&lt;BR/&gt; 56474: (6.25%)&lt;BR/&gt; 56078: (6.25%)&gt;];
}
271--2249[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="95.71.81.57" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.8.130.57"/>
    </slice>
    <from sec="1083733265" usec="0"/>
    <to sec="1083733421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.213.147.58"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.180.164.58"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.181.58"/>
    </slice>
    <from sec="1083733412" usec="0"/>
    <to sec="1083733531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.212.134.59"/>
    </slice>
    <from sec="1083733242" usec="0"/>
    <to sec="1083733382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.238.59"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
2554[label="218.4.37.73;30pkt 30fpkt", shape=pentagon, color=darkviolet];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.4.37.73:*, 173.138.170.242:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65290: (1.66667%)&lt;BR/&gt; 65115: (1.66667%)&lt;BR/&gt; 64935: (1.66667%)&lt;BR/&gt; 64752: (1.66667%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="173.138.170.242" dst_port="80" src_ip="218.4.37.73"/>
    </slice>
    <from sec="1083733479" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.14.104.60"/>
    </slice>
    <from sec="1083733343" usec="0"/>
    <to sec="1083733493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.171.168.60"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083733585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.212.60"/>
    </slice>
    <from sec="1083733716" usec="0"/>
    <to sec="1083734073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.219.235.60"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.46.18.61"/>
    </slice>
    <from sec="1083733409" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.242.22.61"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.137.61"/>
    </slice>
    <from sec="1083733594" usec="0"/>
    <to sec="1083733656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.163.198.61"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.185.229.61"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
577[label="46.97.44.62;s;296pkt 296fpkt", shape=diamond, color=yellow];
2331[label="46.97.44.62;337pkt 337fpkt", shape=pentagon, color=darkviolet];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.97.44.62:80, 168.127.71.197:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4931: (0.157978%)&lt;BR/&gt; 4930: (0.157978%)&lt;BR/&gt; 4929: (0.157978%)&lt;BR/&gt; 4895: (0.157978%)&gt;];
}
577--2331[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.71.197" src_ip="46.97.44.62" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.212.90.62"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.12.151.62"/>
    </slice>
    <from sec="1083733692" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.52.159.62"/>
    </slice>
    <from sec="1083733951" usec="0"/>
    <to sec="1083734044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.227.10.63"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.36.36.63"/>
    </slice>
    <from sec="1083734024" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.185.44.63"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.146.16.64"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083733402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.194.20.64"/>
    </slice>
    <from sec="1083733818" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.11.32.64"/>
    </slice>
    <from sec="1083733388" usec="0"/>
    <to sec="1083733458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.17.62.64"/>
    </slice>
    <from sec="1083733976" usec="0"/>
    <to sec="1083734075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.9.36.65"/>
    </slice>
    <from sec="1083733380" usec="0"/>
    <to sec="1083733505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.217.55.65"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.65.65"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.102.65"/>
    </slice>
    <from sec="1083733436" usec="0"/>
    <to sec="1083734020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.212.163.65"/>
    </slice>
    <from sec="1083734010" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.86.165.65"/>
    </slice>
    <from sec="1083733631" usec="0"/>
    <to sec="1083733711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.171.65"/>
    </slice>
    <from sec="1083733273" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.54.6.66"/>
    </slice>
    <from sec="1083733763" usec="0"/>
    <to sec="1083733839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.98.11.66"/>
    </slice>
    <from sec="1083733723" usec="0"/>
    <to sec="1083733877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
868[label="173.138.45.66;s;58pkt 58fpkt", shape=diamond, color=yellow];
2407[label="173.138.45.66;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.45.66:*, 200.224.98.213:*}[43.1034%]&lt;BR/&gt;{173.138.45.66:*, *:6667}[25.8621%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (12.931%)&lt;BR/&gt; 113: (6.03448%)&lt;BR/&gt; 5190: (5.17241%)&lt;BR/&gt; 1080: (5.17241%)&lt;BR/&gt; 23: (5.17241%)&gt;];
}
868--2407[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="200.224.98.213" src_ip="173.138.45.66"/>
      <filter dst_port="6667" src_ip="173.138.45.66"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.101.66"/>
    </slice>
    <from sec="1083733245" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.107.66"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.85.161.66"/>
    </slice>
    <from sec="1083733309" usec="0"/>
    <to sec="1083733645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.145.186.66"/>
    </slice>
    <from sec="1083733242" usec="0"/>
    <to sec="1083733977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.155.129.67"/>
    </slice>
    <from sec="1083733287" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
235[label="202.207.182.67;s;185pkt 185fpkt", shape=diamond, color=yellow];
2441[label="202.207.182.67;194pkt 194fpkt", shape=pentagon, color=darkviolet];
6695[label="202.207.182.67;193pkt 193fpkt", shape=invtriangle, color=brown];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.207.182.67:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60282: (0.262238%)&lt;BR/&gt; 60281: (0.262238%)&lt;BR/&gt; 60215: (0.262238%)&lt;BR/&gt; 60073: (0.262238%)&gt;];
}
235--2441[label="1;185pkt 185fpkt"];
235--6695[label="0.994595;184pkt 184fpkt"];
2441--6695[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="202.207.182.67" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.246.183.67"/>
    </slice>
    <from sec="1083733739" usec="0"/>
    <to sec="1083734082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.252.218.67"/>
    </slice>
    <from sec="1083733386" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.140.0.68"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.24.33.68"/>
    </slice>
    <from sec="1083733436" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.20.123.68"/>
    </slice>
    <from sec="1083733732" usec="0"/>
    <to sec="1083733917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.221.232.68"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083733564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.127.240.68"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.165.2.69"/>
    </slice>
    <from sec="1083733296" usec="0"/>
    <to sec="1083733530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
917[label="46.163.41.69;s;46pkt 46fpkt", shape=diamond, color=yellow];
2469[label="46.163.41.69;45pkt 45fpkt", shape=pentagon, color=darkviolet];
6714[label="46.163.41.69;45pkt 45fpkt", shape=invtriangle, color=brown];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.163.41.69:80, 209.29.138.127:*}[60.8696%]&lt;BR/&gt;{46.163.41.69:80, 209.29.138.126:*}[39.1304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3925: (1.10294%)&lt;BR/&gt; 3912: (1.10294%)&lt;BR/&gt; 3911: (1.10294%)&lt;BR/&gt; 3802: (1.10294%)&gt;];
}
917--2469[label="1;45pkt 45fpkt"];
917--6714[label="1;45pkt 45fpkt"];
2469--6714[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.163.41.69" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.163.41.69" src_port="80"/>
    </slice>
    <from sec="1083733366" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.136.65.69"/>
    </slice>
    <from sec="1083733271" usec="0"/>
    <to sec="1083734051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.107.84.69"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.115.122.69"/>
    </slice>
    <from sec="1083733251" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.22.156.69"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.176.173.69"/>
    </slice>
    <from sec="1083733511" usec="0"/>
    <to sec="1083733638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.212.173.69"/>
    </slice>
    <from sec="1083733290" usec="0"/>
    <to sec="1083733378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
246[label="201.89.202.69;s;2pkt 2fpkt", shape=diamond, color=yellow];
2483[label="201.89.202.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6723[label="201.89.202.69;1pkt 1fpkt", shape=invtriangle, color=brown];
9607[label="201.89.202.69;2pkt 2fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.89.202.69:7070, 155.148.138.246:1100}[50%]&lt;BR/&gt;{201.89.202.69:36009, 155.148.138.246:6971}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36009: (28.5714%)&lt;BR/&gt; 6971: (28.5714%)&lt;BR/&gt; 7070: (21.4286%)&lt;BR/&gt; 1100: (21.4286%)&gt;];
}
246--2483[label="1;2pkt 2fpkt"];
246--6723[label="1;1pkt 1fpkt"];
246--9607[label="1;2pkt 2fpkt"];
2483--6723[label="1;1pkt 1fpkt"];
2483--9607[label="1;2pkt 2fpkt"];
6723--9607[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.138.246" dst_port="6971" src_ip="201.89.202.69" src_port="36009"/>
      <filter dst_ip="155.148.138.246" dst_port="1100" src_ip="201.89.202.69" src_port="7070"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.208.167.70"/>
    </slice>
    <from sec="1083733553" usec="0"/>
    <to sec="1083733682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.85.18.71"/>
    </slice>
    <from sec="1083733533" usec="0"/>
    <to sec="1083733787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.16.21.71"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083733346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.57.67.71"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.208.70.71"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.136.86.71"/>
    </slice>
    <from sec="1083733588" usec="0"/>
    <to sec="1083733702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.54.96.71"/>
    </slice>
    <from sec="1083733394" usec="0"/>
    <to sec="1083733523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
2518[label="209.200.208.71;44pkt 44fpkt", shape=pentagon, color=darkviolet];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.200.208.71:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (9.09091%)&lt;BR/&gt; 6129: (6.81818%)&lt;BR/&gt; 3127: (6.81818%)&lt;BR/&gt; 1025: (6.81818%)&lt;BR/&gt; 445: (6.81818%)&gt;];
}
</description>
    <slice>
      <filter src_ip="209.200.208.71"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083733905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.188.66.72"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083733459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.199.69.72"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.225.93.72"/>
    </slice>
    <from sec="1083733336" usec="0"/>
    <to sec="1083733623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.198.94.72"/>
    </slice>
    <from sec="1083733982" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.192.98.72"/>
    </slice>
    <from sec="1083733537" usec="0"/>
    <to sec="1083734033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.214.133.72"/>
    </slice>
    <from sec="1083733537" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
189[label="46.180.171.72;s;671pkt 671fpkt", shape=diamond, color=yellow];
2538[label="46.180.171.72;762pkt 762fpkt", shape=pentagon, color=darkviolet];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.180.171.72:80, 209.29.138.10:*}[86.4829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64876: (0.0697837%)&lt;BR/&gt; 64807: (0.0697837%)&lt;BR/&gt; 64783: (0.0697837%)&lt;BR/&gt; 60538: (0.0697837%)&gt;];
}
189--2538[label="1;671pkt 671fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="46.180.171.72" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.44.192.72"/>
    </slice>
    <from sec="1083733342" usec="0"/>
    <to sec="1083733832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
360[label="168.127.217.75;d;276pkt 276fpkt", shape=diamond, color=yellow];
462[label="46.71.192.72;s;277pkt 277fpkt", shape=diamond, color=yellow];
2542[label="46.71.192.72;299pkt 299fpkt", shape=pentagon, color=darkviolet];
6763[label="46.71.192.72;298pkt 298fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.192.72:80, 168.127.217.75:*}[99%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37478: (0.173913%)&lt;BR/&gt; 37476: (0.173913%)&lt;BR/&gt; 37474: (0.173913%)&lt;BR/&gt; 37473: (0.173913%)&gt;];
}
360--462[label="0.996377;275pkt 275fpkt"];
360--2542[label="0.996377;275pkt 275fpkt"];
360--6763[label="0.996377;275pkt 275fpkt"];
462--2542[label="1;277pkt 277fpkt"];
462--6763[label="0.99639;276pkt 276fpkt"];
2542--6763[label="1;298pkt 298fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.217.75" src_ip="46.71.192.72" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.208.52.73"/>
    </slice>
    <from sec="1083733440" usec="0"/>
    <to sec="1083733533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.116.98.73"/>
    </slice>
    <from sec="1083733919" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.90.101.73"/>
    </slice>
    <from sec="1083733280" usec="0"/>
    <to sec="1083733383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.125.113.73"/>
    </slice>
    <from sec="1083733411" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.252.226.73"/>
    </slice>
    <from sec="1083733410" usec="0"/>
    <to sec="1083733541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.14.16.74"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.3.17.74"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.4.43.74"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.225.75.74"/>
    </slice>
    <from sec="1083733745" usec="0"/>
    <to sec="1083733848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.140.31.75"/>
    </slice>
    <from sec="1083733516" usec="0"/>
    <to sec="1083733597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.48.87.75"/>
    </slice>
    <from sec="1083733504" usec="0"/>
    <to sec="1083733770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.199.97.75"/>
    </slice>
    <from sec="1083733702" usec="0"/>
    <to sec="1083733811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
2598[label="136.150.100.75;221pkt 221fpkt", shape=pentagon, color=darkviolet];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.100.75:53, *:*}[96.3801%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.1674%)&lt;BR/&gt; 0: (3.61991%)&lt;BR/&gt; 33701: (1.35747%)&lt;BR/&gt; 32768: (1.35747%)&lt;BR/&gt; 9253: (1.35747%)&gt;];
}
</description>
    <slice>
      <filter src_ip="136.150.100.75" src_port="53"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
764[label="205.4.136.75;s;351pkt 351fpkt", shape=diamond, color=yellow];
2601[label="205.4.136.75;380pkt 380fpkt", shape=pentagon, color=darkviolet];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.4.136.75:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3869: (0.410397%)&lt;BR/&gt; 4853: (0.273598%)&lt;BR/&gt; 4846: (0.273598%)&lt;BR/&gt; 4839: (0.273598%)&gt;];
}
764--2601[label="1;351pkt 351fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="205.4.136.75"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.156.75"/>
    </slice>
    <from sec="1083733913" usec="0"/>
    <to sec="1083733990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
155[label="168.127.217.75;s;509pkt 509fpkt", shape=diamond, color=yellow];
277[label="46.71.192.72;d;189pkt 189fpkt", shape=diamond, color=yellow];
659[label="198.49.75.117;d;184pkt 184fpkt", shape=diamond, color=yellow];
2606[label="168.127.217.75;550pkt 550fpkt", shape=pentagon, color=darkviolet];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.217.75:*, 46.71.192.72:80}[53.6101%]&lt;BR/&gt;{168.127.217.75:*, 198.49.75.117:80}[45.6679%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37379: (0.104749%)&lt;BR/&gt; 37377: (0.104749%)&lt;BR/&gt; 37376: (0.104749%)&lt;BR/&gt; 37373: (0.104749%)&gt;];
}
155--277[label="0.989418;187pkt 187fpkt"];
155--659[label="0.98913;182pkt 182fpkt"];
155--982[label="0.0667976;34pkt 34fpkt"];
155--2606[label="1;509pkt 509fpkt"];
277--982[label="0.10582;20pkt 20fpkt"];
277--2606[label="0.989418;187pkt 187fpkt"];
277--3545[label="0.010582;2pkt 2fpkt"];
277--7480[label="0.010582;2pkt 2fpkt"];
659--982[label="0.076087;14pkt 14fpkt"];
659--1365[label="0.00543478;1pkt 1fpkt"];
659--1433[label="0.00543478;1pkt 1fpkt"];
659--2606[label="0.98913;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_ip="46.71.192.72" dst_port="80" src_ip="168.127.217.75"/>
      <filter dst_ip="198.49.75.117" dst_port="80" src_ip="168.127.217.75"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.52.230.75"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
539[label="46.202.4.76;s;2pkt 2fpkt", shape=diamond, color=yellow];
2610[label="46.202.4.76;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6817[label="46.202.4.76;1pkt 1fpkt", shape=invtriangle, color=brown];
9657[label="46.202.4.76;1pkt 1fpkt", shape=invhouse, color=bisque];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.202.4.76:80, 136.151.159.65:54194}[50%]&lt;BR/&gt;{46.202.4.76:80, 136.151.159.65:54195}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54195: (33.3333%)&lt;BR/&gt; 54194: (16.6667%)&gt;];
}
539--2610[label="1;2pkt 2fpkt"];
539--6817[label="1;1pkt 1fpkt"];
539--9657[label="1;1pkt 1fpkt"];
2610--6817[label="1;1pkt 1fpkt"];
2610--9657[label="1;1pkt 1fpkt"];
6817--9657[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.159.65" dst_port="54195" src_ip="46.202.4.76" src_port="80"/>
      <filter dst_ip="136.151.159.65" dst_port="54194" src_ip="46.202.4.76" src_port="80"/>
    </slice>
    <from sec="1083733501" usec="0"/>
    <to sec="1083734040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.122.21.76"/>
    </slice>
    <from sec="1083733280" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.12.81.76"/>
    </slice>
    <from sec="1083733409" usec="0"/>
    <to sec="1083733477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.220.177.76"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083733718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.131.196.76"/>
    </slice>
    <from sec="1083733505" usec="0"/>
    <to sec="1083734068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
323[label="155.148.90.77;s;9pkt 9fpkt", shape=diamond, color=yellow];
2633[label="155.148.90.77;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6833[label="155.148.90.77;11pkt 11fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.90.77:*, 40.230.213.130:27015}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27015: (24.1935%)&lt;BR/&gt; 0: (16.129%)&lt;BR/&gt; 27005: (9.67742%)&lt;BR/&gt; 1495: (9.67742%)&lt;BR/&gt; 1200: (9.67742%)&gt;];
}
323--2633[label="1;9pkt 9fpkt"];
323--6833[label="1;9pkt 9fpkt"];
2633--6833[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="40.230.213.130" dst_port="27015" src_ip="155.148.90.77"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.53.123.77"/>
    </slice>
    <from sec="1083733760" usec="0"/>
    <to sec="1083733903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
595[label="173.138.160.77;s;5pkt 5fpkt", shape=diamond, color=yellow];
2641[label="173.138.160.77;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.160.77:1168, 198.220.59.21:6668}[20%]&lt;BR/&gt;{173.138.160.77:1118, 214.108.4.166:5190}[20%]&lt;BR/&gt;{173.138.160.77:1044, 198.222.100.239:5050}[20%]&lt;BR/&gt;{173.138.160.77:1104, 216.160.47.147:6664}[20%]&lt;BR/&gt;{173.138.160.77:1220, 216.160.47.147:6668}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6668: (20%)&lt;BR/&gt; 6664: (10%)&lt;BR/&gt; 5190: (10%)&lt;BR/&gt; 5050: (10%)&lt;BR/&gt; 1220: (10%)&gt;];
}
595--2641[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="216.160.47.147" dst_port="6668" src_ip="173.138.160.77" src_port="1220"/>
      <filter dst_ip="216.160.47.147" dst_port="6664" src_ip="173.138.160.77" src_port="1104"/>
      <filter dst_ip="198.222.100.239" dst_port="5050" src_ip="173.138.160.77" src_port="1044"/>
      <filter dst_ip="214.108.4.166" dst_port="5190" src_ip="173.138.160.77" src_port="1118"/>
      <filter dst_ip="198.220.59.21" dst_port="6668" src_ip="173.138.160.77" src_port="1168"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.246.205.77"/>
    </slice>
    <from sec="1083733323" usec="0"/>
    <to sec="1083733394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.240.13.78"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.140.67.78"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.119.71.78"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.29.155.78"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.20.161.78"/>
    </slice>
    <from sec="1083733694" usec="0"/>
    <to sec="1083733780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.165.78"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
644[label="94.214.214.78;s;15pkt 15fpkt", shape=diamond, color=yellow];
2667[label="94.214.214.78;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6855[label="94.214.214.78;15pkt 15fpkt", shape=invtriangle, color=brown];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.214.214.78:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49274: (3.33333%)&lt;BR/&gt; 48625: (3.33333%)&lt;BR/&gt; 47825: (3.33333%)&lt;BR/&gt; 46808: (3.33333%)&gt;];
}
644--2667[label="1;15pkt 15fpkt"];
644--6855[label="1;15pkt 15fpkt"];
2667--6855[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="94.214.214.78" src_port="80"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.29.2.79"/>
    </slice>
    <from sec="1083733553" usec="0"/>
    <to sec="1083733632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.212.102.79"/>
    </slice>
    <from sec="1083733341" usec="0"/>
    <to sec="1083733972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.9.139.79"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.14.235.79"/>
    </slice>
    <from sec="1083733510" usec="0"/>
    <to sec="1083733731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.125.33.80"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.10.45.80"/>
    </slice>
    <from sec="1083733408" usec="0"/>
    <to sec="1083734040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.87.67.80"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.14.97.80"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.6.182.80"/>
    </slice>
    <from sec="1083733668" usec="0"/>
    <to sec="1083733768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
647[label="196.10.200.80;s;161pkt 161fpkt", shape=diamond, color=yellow];
2700[label="196.10.200.80;214pkt 214fpkt", shape=pentagon, color=darkviolet];
6881[label="196.10.200.80;214pkt 214fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.10.200.80:80, 168.127.21.211:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4193: (0.254669%)&lt;BR/&gt; 4192: (0.254669%)&lt;BR/&gt; 4191: (0.254669%)&lt;BR/&gt; 4190: (0.254669%)&gt;];
}
647--2700[label="1;161pkt 161fpkt"];
647--6881[label="1;161pkt 161fpkt"];
2700--6881[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.21.211" src_ip="196.10.200.80" src_port="80"/>
    </slice>
    <from sec="1083733560" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.160.33.81"/>
    </slice>
    <from sec="1083733250" usec="0"/>
    <to sec="1083733358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.24.68.81"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083733321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.115.104.81"/>
    </slice>
    <from sec="1083733851" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.151.140.81"/>
    </slice>
    <from sec="1083733903" usec="0"/>
    <to sec="1083733970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.140.200.81"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.66.82"/>
    </slice>
    <from sec="1083733287" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.32.134.82"/>
    </slice>
    <from sec="1083733786" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.26.199.82"/>
    </slice>
    <from sec="1083733242" usec="0"/>
    <to sec="1083733623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.74.240.82"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
571[label="71.182.31.83;s;4pkt 4fpkt", shape=diamond, color=yellow];
2752[label="71.182.31.83;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.182.31.83:80, 209.29.138.10:44388}[25%]&lt;BR/&gt;{71.182.31.83:80, 209.29.138.10:44582}[25%]&lt;BR/&gt;{71.182.31.83:80, 209.29.138.10:54937}[25%]&lt;BR/&gt;{71.182.31.83:80, 209.29.138.10:57830}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57830: (12.5%)&lt;BR/&gt; 54937: (12.5%)&lt;BR/&gt; 44582: (12.5%)&lt;BR/&gt; 44388: (12.5%)&gt;];
}
571--2752[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="57830" src_ip="71.182.31.83" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="54937" src_ip="71.182.31.83" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="44582" src_ip="71.182.31.83" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="44388" src_ip="71.182.31.83" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.45.83"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.153.161.83"/>
    </slice>
    <from sec="1083733578" usec="0"/>
    <to sec="1083733712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
2766[label="209.29.176.83;177pkt 177fpkt", shape=pentagon, color=darkviolet];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.176.83:53, *:*}[42.9379%]&lt;BR/&gt;{209.29.176.83:49152, *:53}[28.2486%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.7006%)&lt;BR/&gt; 49152: (14.4068%)&lt;BR/&gt; 25: (6.49718%)&lt;BR/&gt; 113: (5.9322%)&lt;BR/&gt; 0: (3.38983%)&gt;];
}
</description>
    <slice>
      <filter src_ip="209.29.176.83" src_port="53"/>
      <filter dst_port="53" src_ip="209.29.176.83" src_port="49152"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
140[label="168.127.179.83;s;20218pkt 20218fpkt", shape=diamond, color=yellow];
2768[label="168.127.179.83;21981pkt 21981fpkt", shape=pentagon, color=darkviolet];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.179.83:*, *:80}[99.9682%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9834%)&lt;BR/&gt; 3714: (0.0189578%)&lt;BR/&gt; 3713: (0.0189578%)&lt;BR/&gt; 3711: (0.0189578%)&lt;BR/&gt; 3709: (0.0189578%)&gt;];
}
140--978[label="0.00187266;1pkt 1fpkt"];
140--982[label="0.0658324;1331pkt 1331fpkt"];
140--2768[label="1;20218pkt 20218fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.127.179.83"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.26.192.83"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.2.13.84"/>
    </slice>
    <from sec="1083733916" usec="0"/>
    <to sec="1083734012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.155.22.84"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.181.96.84"/>
    </slice>
    <from sec="1083733671" usec="0"/>
    <to sec="1083733797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.232.111.84"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.139.178.84"/>
    </slice>
    <from sec="1083733729" usec="0"/>
    <to sec="1083733838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.27.198.84"/>
    </slice>
    <from sec="1083733721" usec="0"/>
    <to sec="1083733771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.150.3.85"/>
    </slice>
    <from sec="1083733304" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
272[label="41.52.14.85;s;3pkt 3fpkt", shape=diamond, color=yellow];
2802[label="41.52.14.85;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.52.14.85:6881, 208.96.50.84:56532}[33.3333%]&lt;BR/&gt;{41.52.14.85:6881, 208.96.50.84:56881}[33.3333%]&lt;BR/&gt;{41.52.14.85:6881, 208.96.50.84:58683}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 58683: (16.6667%)&lt;BR/&gt; 56881: (16.6667%)&lt;BR/&gt; 56532: (16.6667%)&gt;];
}
272--2802[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58683" src_ip="41.52.14.85" src_port="6881"/>
      <filter dst_ip="208.96.50.84" dst_port="56881" src_ip="41.52.14.85" src_port="6881"/>
      <filter dst_ip="208.96.50.84" dst_port="56532" src_ip="41.52.14.85" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.207.134.85"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.153.85"/>
    </slice>
    <from sec="1083733299" usec="0"/>
    <to sec="1083733368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.84.37.86"/>
    </slice>
    <from sec="1083733495" usec="0"/>
    <to sec="1083733776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.34.56.86"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.35.97.86"/>
    </slice>
    <from sec="1083733453" usec="0"/>
    <to sec="1083733687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.161.86"/>
    </slice>
    <from sec="1083733304" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.14.182.86"/>
    </slice>
    <from sec="1083733664" usec="0"/>
    <to sec="1083733728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.74.220.86"/>
    </slice>
    <from sec="1083733593" usec="0"/>
    <to sec="1083733607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.226.86"/>
    </slice>
    <from sec="1083733915" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.17.50.87"/>
    </slice>
    <from sec="1083733868" usec="0"/>
    <to sec="1083734038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.57.87"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083733334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.67.73.87"/>
    </slice>
    <from sec="1083733246" usec="0"/>
    <to sec="1083734057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.22.121.87"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.20.123.87"/>
    </slice>
    <from sec="1083733328" usec="0"/>
    <to sec="1083733551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.140.156.87"/>
    </slice>
    <from sec="1083733841" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.178.191.87"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.124.50.88"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.16.72.88"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.232.72.88"/>
    </slice>
    <from sec="1083734041" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
253[label="201.186.127.88;s;268pkt 268fpkt", shape=diamond, color=yellow];
2873[label="201.186.127.88;297pkt 297fpkt", shape=pentagon, color=darkviolet];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.186.127.88:*, 208.96.53.229:21}[97.6431%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (48.7611%)&lt;BR/&gt; 33549: (0.353982%)&lt;BR/&gt; 33434: (0.353982%)&lt;BR/&gt; 32836: (0.353982%)&lt;BR/&gt; 33036: (0.265487%)&gt;];
}
253--2873[label="1;268pkt 268fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.53.229" dst_port="21" src_ip="201.186.127.88"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.95.132.88"/>
    </slice>
    <from sec="1083733772" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.212.154.88"/>
    </slice>
    <from sec="1083733759" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.84.175.88"/>
    </slice>
    <from sec="1083734014" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.45.212.88"/>
    </slice>
    <from sec="1083733428" usec="0"/>
    <to sec="1083733581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.112.9.89"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.151.49.89"/>
    </slice>
    <from sec="1083733724" usec="0"/>
    <to sec="1083734019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
493[label="136.151.65.89;s;558pkt 558fpkt", shape=diamond, color=yellow];
2889[label="136.151.65.89;880pkt 880fpkt", shape=pentagon, color=darkviolet];
7013[label="136.151.65.89;879pkt 879fpkt", shape=invtriangle, color=brown];
9779[label="136.151.65.89;879pkt 879fpkt", shape=invhouse, color=bisque];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.65.89:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
493--2889[label="1;558pkt 558fpkt"];
493--7013[label="1;558pkt 558fpkt"];
493--9779[label="1;558pkt 558fpkt"];
2889--7013[label="1;879pkt 879fpkt"];
2889--9779[label="1;879pkt 879fpkt"];
7013--9779[label="1;879pkt 879fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.65.89"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.169.66.89"/>
    </slice>
    <from sec="1083734032" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.215.110.89"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.82.186.89"/>
    </slice>
    <from sec="1083733967" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.220.188.89"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.89.193.89"/>
    </slice>
    <from sec="1083733398" usec="0"/>
    <to sec="1083733454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
403[label="136.150.23.90;s;102pkt 102fpkt", shape=diamond, color=yellow];
2907[label="136.150.23.90;102pkt 102fpkt", shape=pentagon, color=darkviolet];
7025[label="136.150.23.90;102pkt 102fpkt", shape=invtriangle, color=brown];
9786[label="136.150.23.90;102pkt 102fpkt", shape=invhouse, color=bisque];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.23.90:*, *:80}[99.0196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5098%)&lt;BR/&gt; 32748: (0.490196%)&lt;BR/&gt; 32745: (0.490196%)&lt;BR/&gt; 32581: (0.490196%)&lt;BR/&gt; 32403: (0.490196%)&gt;];
}
403--982[label="0.00980392;1pkt 1fpkt"];
403--2907[label="1;102pkt 102fpkt"];
403--7025[label="1;102pkt 102fpkt"];
403--9786[label="1;102pkt 102fpkt"];
2907--7025[label="1;102pkt 102fpkt"];
2907--9786[label="1;102pkt 102fpkt"];
7025--9786[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.150.23.90"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.71.35.90"/>
    </slice>
    <from sec="1083733271" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.224.130.90"/>
    </slice>
    <from sec="1083733632" usec="0"/>
    <to sec="1083733654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.246.143.90"/>
    </slice>
    <from sec="1083733709" usec="0"/>
    <to sec="1083733841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.120.157.90"/>
    </slice>
    <from sec="1083733938" usec="0"/>
    <to sec="1083734030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.218.168.90"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
925[label="201.32.186.90;s;9pkt 9fpkt", shape=diamond, color=yellow];
2918[label="201.32.186.90;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7033[label="201.32.186.90;9pkt 9fpkt", shape=invtriangle, color=brown];
9792[label="201.32.186.90;8pkt 8fpkt", shape=invhouse, color=bisque];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.32.186.90:80, 155.148.137.32:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4398: (5.88235%)&lt;BR/&gt; 4396: (5.88235%)&lt;BR/&gt; 4327: (5.88235%)&lt;BR/&gt; 4326: (5.88235%)&gt;];
}
925--2918[label="1;8pkt 8fpkt"];
925--7033[label="1;9pkt 9fpkt"];
925--9792[label="1;8pkt 8fpkt"];
2918--7033[label="1;8pkt 8fpkt"];
2918--9792[label="1;8pkt 8fpkt"];
7033--9792[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.137.32" src_ip="201.32.186.90" src_port="80"/>
    </slice>
    <from sec="1083733462" usec="0"/>
    <to sec="1083734056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.220.90"/>
    </slice>
    <from sec="1083733508" usec="0"/>
    <to sec="1083733650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.162.8.91"/>
    </slice>
    <from sec="1083733973" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
943[label="201.92.54.91;s;2pkt 2fpkt", shape=diamond, color=yellow];
2928[label="201.92.54.91;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7042[label="201.92.54.91;1pkt 1fpkt", shape=invtriangle, color=brown];
9797[label="201.92.54.91;2pkt 2fpkt", shape=invhouse, color=bisque];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.92.54.91:15082, 155.148.8.202:3823}[50%]&lt;BR/&gt;{201.92.54.91:15082, 155.148.8.202:3897}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15082: (50%)&lt;BR/&gt; 3897: (28.5714%)&lt;BR/&gt; 3823: (21.4286%)&gt;];
}
943--2928[label="1;2pkt 2fpkt"];
943--7042[label="1;1pkt 1fpkt"];
943--9797[label="1;2pkt 2fpkt"];
2928--7042[label="1;1pkt 1fpkt"];
2928--9797[label="1;2pkt 2fpkt"];
7042--9797[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.8.202" dst_port="3897" src_ip="201.92.54.91" src_port="15082"/>
      <filter dst_ip="155.148.8.202" dst_port="3823" src_ip="201.92.54.91" src_port="15082"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083734050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.76.80.91"/>
    </slice>
    <from sec="1083733868" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.161.91"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.137.228.91"/>
    </slice>
    <from sec="1083733298" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.209.22.92"/>
    </slice>
    <from sec="1083734052" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.238.57.92"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.213.64.92"/>
    </slice>
    <from sec="1083733811" usec="0"/>
    <to sec="1083733955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.82.141.92"/>
    </slice>
    <from sec="1083733402" usec="0"/>
    <to sec="1083733599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.174.176.92"/>
    </slice>
    <from sec="1083733455" usec="0"/>
    <to sec="1083733704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.8.178.92"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083733530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.7.230.92"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.96.40.93"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
316[label="136.150.105.93;s;126pkt 126fpkt", shape=diamond, color=yellow];
2969[label="136.150.105.93;222pkt 222fpkt", shape=pentagon, color=darkviolet];
7073[label="136.150.105.93;221pkt 221fpkt", shape=invtriangle, color=brown];
9815[label="136.150.105.93;221pkt 221fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.105.93:55187, *:53}[39.1892%]&lt;BR/&gt;{136.150.105.93:*, 46.58.105.171:2703}[23.4234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (23.2911%)&lt;BR/&gt; 53: (20.9494%)&lt;BR/&gt; 55187: (19.8101%)&lt;BR/&gt; 25: (3.48101%)&lt;BR/&gt; 113: (2.27848%)&gt;];
}
316--2969[label="1;126pkt 126fpkt"];
316--7073[label="1;126pkt 126fpkt"];
316--9815[label="1;126pkt 126fpkt"];
2969--7073[label="1;221pkt 221fpkt"];
2969--9815[label="1;221pkt 221fpkt"];
7073--9815[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_ip="46.58.105.171" dst_port="2703" src_ip="136.150.105.93"/>
      <filter dst_port="53" src_ip="136.150.105.93" src_port="55187"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.176.171.93"/>
    </slice>
    <from sec="1083733762" usec="0"/>
    <to sec="1083733860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.209.93"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.82.254.93"/>
    </slice>
    <from sec="1083733676" usec="0"/>
    <to sec="1083733772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.82.153.94"/>
    </slice>
    <from sec="1083733796" usec="0"/>
    <to sec="1083733859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.64.69.95"/>
    </slice>
    <from sec="1083733755" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.76.95"/>
    </slice>
    <from sec="1083733842" usec="0"/>
    <to sec="1083734053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.123.91.95"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083733965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.92.130.95"/>
    </slice>
    <from sec="1083733280" usec="0"/>
    <to sec="1083733450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.28.232.95"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.141.1.96"/>
    </slice>
    <from sec="1083733554" usec="0"/>
    <to sec="1083733583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
791[label="199.14.39.96;s;97pkt 97fpkt", shape=diamond, color=yellow];
3020[label="199.14.39.96;116pkt 116fpkt", shape=pentagon, color=darkviolet];
7110[label="199.14.39.96;116pkt 116fpkt", shape=invtriangle, color=brown];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.14.39.96:80, 141.22.86.56:*}[84.4828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65383: (0.455927%)&lt;BR/&gt; 65101: (0.455927%)&lt;BR/&gt; 65100: (0.455927%)&lt;BR/&gt; 65099: (0.455927%)&gt;];
}
791--3020[label="1;97pkt 97fpkt"];
791--7110[label="1;97pkt 97fpkt"];
3020--7110[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.56" src_ip="199.14.39.96" src_port="80"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.56.96"/>
    </slice>
    <from sec="1083733923" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.106.96"/>
    </slice>
    <from sec="1083733903" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
85[label="168.127.106.96;s;19897pkt 19897fpkt", shape=diamond, color=yellow];
3028[label="168.127.106.96;24076pkt 24076fpkt", shape=pentagon, color=darkviolet];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.106.96:*, *:80}[99.9294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9625%)&lt;BR/&gt; 445: (0.0250154%)&lt;BR/&gt; 3596: (0.0216042%)&lt;BR/&gt; 3620: (0.0204671%)&lt;BR/&gt; 3613: (0.0204671%)&gt;];
}
85--980[label="0.000246033;4pkt 4fpkt"];
85--982[label="0.0807659;1607pkt 1607fpkt"];
85--983[label="0.00068023;11pkt 11fpkt"];
85--3028[label="1;19897pkt 19897fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.127.106.96"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.28.174.96"/>
    </slice>
    <from sec="1083733827" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.201.175.96"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.19.186.96"/>
    </slice>
    <from sec="1083733471" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.244.195.96"/>
    </slice>
    <from sec="1083733799" usec="0"/>
    <to sec="1083733896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.89.198.96"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083733330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.7.210.96"/>
    </slice>
    <from sec="1083733698" usec="0"/>
    <to sec="1083733850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
248[label="208.3.87.97;s;1049pkt 1049fpkt", shape=diamond, color=yellow];
3047[label="208.3.87.97;2124pkt 2124fpkt", shape=pentagon, color=darkviolet];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.3.87.97:1037, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
248--3047[label="0.999047;1048pkt 1048fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.3.87.97" src_port="1037"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.221.95.97"/>
    </slice>
    <from sec="1083733455" usec="0"/>
    <to sec="1083733602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.19.107.97"/>
    </slice>
    <from sec="1083733698" usec="0"/>
    <to sec="1083733984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
721[label="209.29.137.97;s;183pkt 183fpkt", shape=diamond, color=yellow];
3054[label="209.29.137.97;229pkt 229fpkt", shape=pentagon, color=darkviolet];
7131[label="209.29.137.97;228pkt 228fpkt", shape=invtriangle, color=brown];
9846[label="209.29.137.97;229pkt 229fpkt", shape=invhouse, color=bisque];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.137.97:2680, *:53}[50.655%]&lt;BR/&gt;{209.29.137.97:53, *:*}[44.9782%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.0575%)&lt;BR/&gt; 2680: (25.7768%)&lt;BR/&gt; 0: (4.14269%)&lt;BR/&gt; 1028: (1.32336%)&lt;BR/&gt; 33701: (1.20829%)&gt;];
}
721--881[label="0.0121951;1pkt 1fpkt"];
721--3054[label="1;183pkt 183fpkt"];
721--7131[label="0.994536;182pkt 182fpkt"];
721--9846[label="1;183pkt 183fpkt"];
3054--7131[label="1;228pkt 228fpkt"];
3054--9846[label="1;229pkt 229fpkt"];
7131--9846[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.137.97" src_port="53"/>
      <filter dst_port="53" src_ip="209.29.137.97" src_port="2680"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.20.138.97"/>
    </slice>
    <from sec="1083733933" usec="0"/>
    <to sec="1083734017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.127.179.97"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
838[label="198.91.194.97;s;59pkt 59fpkt", shape=diamond, color=yellow];
3063[label="198.91.194.97;61pkt 61fpkt", shape=pentagon, color=darkviolet];
7137[label="198.91.194.97;60pkt 60fpkt", shape=invtriangle, color=brown];
9850[label="198.91.194.97;60pkt 60fpkt", shape=invhouse, color=bisque];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.91.194.97:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60255: (0.833333%)&lt;BR/&gt; 59958: (0.833333%)&lt;BR/&gt; 59721: (0.833333%)&lt;BR/&gt; 59492: (0.833333%)&gt;];
}
838--3063[label="1;59pkt 59fpkt"];
838--7137[label="0.983051;58pkt 58fpkt"];
838--9850[label="0.983051;58pkt 58fpkt"];
3063--7137[label="1;60pkt 60fpkt"];
3063--9850[label="1;60pkt 60fpkt"];
7137--9850[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="198.91.194.97" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.3.146.98"/>
    </slice>
    <from sec="1083733530" usec="0"/>
    <to sec="1083733688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.183.98"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.255.98"/>
    </slice>
    <from sec="1083733394" usec="0"/>
    <to sec="1083733900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
163[label="197.183.7.99;s;182pkt 182fpkt", shape=diamond, color=yellow];
3086[label="197.183.7.99;182pkt 182fpkt", shape=pentagon, color=darkviolet];
7153[label="197.183.7.99;182pkt 182fpkt", shape=invtriangle, color=brown];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.183.7.99:*, *:23}[99.4505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (49.7253%)&lt;BR/&gt; 4753: (0.274725%)&lt;BR/&gt; 4752: (0.274725%)&lt;BR/&gt; 4751: (0.274725%)&lt;BR/&gt; 4750: (0.274725%)&gt;];
}
163--3086[label="1;182pkt 182fpkt"];
163--7153[label="1;182pkt 182fpkt"];
3086--7153[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="197.183.7.99"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
254[label="173.138.128.99;s;36pkt 36fpkt", shape=diamond, color=yellow];
3095[label="173.138.128.99;51pkt 51fpkt", shape=pentagon, color=darkviolet];
7162[label="173.138.128.99;50pkt 50fpkt", shape=invtriangle, color=brown];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.128.99:80, 205.181.75.231:*}[76.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.7007%)&lt;BR/&gt; 25: (4.37956%)&lt;BR/&gt; 113: (2.18978%)&lt;BR/&gt; 53: (1.45985%)&lt;BR/&gt; 47228: (1.09489%)&gt;];
}
254--982[label="0.0277778;1pkt 1fpkt"];
254--3095[label="1;36pkt 36fpkt"];
254--7162[label="0.972222;35pkt 35fpkt"];
3095--7162[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="205.181.75.231" src_ip="173.138.128.99" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.250.252.99"/>
    </slice>
    <from sec="1083733822" usec="0"/>
    <to sec="1083733931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.81.2.100"/>
    </slice>
    <from sec="1083733796" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.253.5.100"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.165.72.100"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.127.170.100"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
290[label="200.226.188.100;s;1834pkt 1834fpkt", shape=diamond, color=yellow];
3114[label="200.226.188.100;1994pkt 1994fpkt", shape=pentagon, color=darkviolet];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.226.188.100:4521, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4521: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
290--3114[label="0.999455;1833pkt 1833fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="200.226.188.100" src_port="4521"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.151.14.101"/>
    </slice>
    <from sec="1083733272" usec="0"/>
    <to sec="1083733368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.3.98.101"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.148.6.102"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
77[label="200.211.53.64;s;256pkt 256fpkt", shape=diamond, color=yellow];
2366[label="200.211.53.64;1048pkt 1048fpkt", shape=pentagon, color=darkviolet];
6645[label="200.211.53.64;1047pkt 1047fpkt", shape=invtriangle, color=brown];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.211.53.64:*, 155.148.137.93:80}[39.8855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.3917%)&lt;BR/&gt; 445: (5.27435%)&lt;BR/&gt; 25: (1.53126%)&lt;BR/&gt; 6881: (1.31859%)&lt;BR/&gt; 53: (1.27605%)&gt;];
}
77--977[label="0.00390625;1pkt 1fpkt"];
77--980[label="0.0195312;5pkt 5fpkt"];
77--982[label="0.00390625;1pkt 1fpkt"];
77--2366[label="1;256pkt 256fpkt"];
77--6645[label="0.996094;255pkt 255fpkt"];
2366--6645[label="1;1047pkt 1047fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.137.93" dst_port="80" src_ip="200.211.53.64"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.160.102"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.106.239.102"/>
    </slice>
    <from sec="1083733744" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.144.13.103"/>
    </slice>
    <from sec="1083733247" usec="0"/>
    <to sec="1083733781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.34.16.103"/>
    </slice>
    <from sec="1083733848" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.32.103"/>
    </slice>
    <from sec="1083733957" usec="0"/>
    <to sec="1083734047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.136.73.103"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.52.20.104"/>
    </slice>
    <from sec="1083733497" usec="0"/>
    <to sec="1083733596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.150.37.104"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
707[label="208.96.50.104;s;54pkt 54fpkt", shape=diamond, color=yellow];
3169[label="208.96.50.104;54pkt 54fpkt", shape=pentagon, color=darkviolet];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.50.104:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
707--3169[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.50.104"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.16.128.104"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.222.139.104"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083734010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
593[label="141.85.153.104;s;214pkt 214fpkt", shape=diamond, color=yellow];
3183[label="141.85.153.104;235pkt 235fpkt", shape=pentagon, color=darkviolet];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.85.153.104:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
593--3183[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter src_ip="141.85.153.104"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.164.196.104"/>
    </slice>
    <from sec="1083733496" usec="0"/>
    <to sec="1083733675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.232.246.104"/>
    </slice>
    <from sec="1083733390" usec="0"/>
    <to sec="1083733764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.181.16.105"/>
    </slice>
    <from sec="1083733739" usec="0"/>
    <to sec="1083733975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.31.52.105"/>
    </slice>
    <from sec="1083733537" usec="0"/>
    <to sec="1083733711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
313[label="40.192.100.105;s;28pkt 28fpkt", shape=diamond, color=yellow];
3198[label="40.192.100.105;44pkt 44fpkt", shape=pentagon, color=darkviolet];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.192.100.105:80, 209.29.138.127:*}[56.8182%]&lt;BR/&gt;{40.192.100.105:80, 209.29.138.126:*}[43.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4828: (1.38889%)&lt;BR/&gt; 4575: (1.38889%)&lt;BR/&gt; 4381: (1.38889%)&lt;BR/&gt; 4226: (1.38889%)&gt;];
}
313--3198[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="40.192.100.105" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="40.192.100.105" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.98.234.105"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.209.19.106"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
413[label="201.149.100.106;s;33pkt 33fpkt", shape=diamond, color=yellow];
3210[label="201.149.100.106;61pkt 61fpkt", shape=pentagon, color=darkviolet];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.149.100.106:80, 168.127.16.223:*}[96.7213%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30439: (1.06383%)&lt;BR/&gt; 3484: (1.06383%)&lt;BR/&gt; 3478: (1.06383%)&lt;BR/&gt; 3475: (1.06383%)&gt;];
}
413--3210[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.16.223" src_ip="201.149.100.106" src_port="80"/>
    </slice>
    <from sec="1083733236" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.103.104.106"/>
    </slice>
    <from sec="1083733514" usec="0"/>
    <to sec="1083733602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.226.0.107"/>
    </slice>
    <from sec="1083733530" usec="0"/>
    <to sec="1083733790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.24.8.107"/>
    </slice>
    <from sec="1083733339" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.32.22.107"/>
    </slice>
    <from sec="1083733427" usec="0"/>
    <to sec="1083733577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.121.40.107"/>
    </slice>
    <from sec="1083733765" usec="0"/>
    <to sec="1083734053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.176.112.107"/>
    </slice>
    <from sec="1083733715" usec="0"/>
    <to sec="1083733908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.129.107"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
766[label="47.72.133.108;s;312pkt 312fpkt", shape=diamond, color=yellow];
3247[label="47.72.133.108;336pkt 336fpkt", shape=pentagon, color=darkviolet];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.72.133.108:*, *:3127}[33.5312%]&lt;BR/&gt;{47.72.133.108:*, *:3128}[33.5312%]&lt;BR/&gt;{47.72.133.108:*, *:1080}[32.9377%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.9753%)&lt;BR/&gt; 3127: (16.6667%)&lt;BR/&gt; 1080: (16.5123%)&lt;BR/&gt; 4758: (0.308642%)&lt;BR/&gt; 4328: (0.308642%)&gt;];
}
766--3247[label="0.996795;311pkt 311fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="47.72.133.108"/>
      <filter dst_port="3127" src_ip="47.72.133.108"/>
      <filter dst_port="1080" src_ip="47.72.133.108"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.230.230.108"/>
    </slice>
    <from sec="1083733943" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
71[label="168.112.234.108;s;15941pkt 15941fpkt", shape=diamond, color=yellow];
3252[label="168.112.234.108;17199pkt 17199fpkt", shape=pentagon, color=darkviolet];
7268[label="168.112.234.108;17198pkt 17198fpkt", shape=invtriangle, color=brown];
9930[label="168.112.234.108;17199pkt 17199fpkt", shape=invhouse, color=bisque];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.112.234.108:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3207: (0.0259117%)&lt;BR/&gt; 3072: (0.0259117%)&lt;BR/&gt; 3005: (0.0259117%)&lt;BR/&gt; 2883: (0.0259117%)&gt;];
}
71--982[label="0.0733329;1169pkt 1169fpkt"];
71--3252[label="1;15941pkt 15941fpkt"];
71--7268[label="0.999937;15940pkt 15940fpkt"];
71--9930[label="1;15941pkt 15941fpkt"];
3252--7268[label="1;17198pkt 17198fpkt"];
3252--9930[label="1;17199pkt 17199fpkt"];
7268--9930[label="1;17198pkt 17198fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.112.234.108"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.68.68.109"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.12.83.109"/>
    </slice>
    <from sec="1083733809" usec="0"/>
    <to sec="1083734051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.134.90.109"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.165.199.109"/>
    </slice>
    <from sec="1083733637" usec="0"/>
    <to sec="1083733800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.203.218.109"/>
    </slice>
    <from sec="1083733521" usec="0"/>
    <to sec="1083733940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.128.110"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.71.136.110"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.221.193.110"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.89.26.111"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083734054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.209.39.111"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.103.41.111"/>
    </slice>
    <from sec="1083733562" usec="0"/>
    <to sec="1083733670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.6.45.111"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.136.150.111"/>
    </slice>
    <from sec="1083733865" usec="0"/>
    <to sec="1083733979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.161.111"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.26.188.111"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.42.193.111"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083733503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.210.111"/>
    </slice>
    <from sec="1083733538" usec="0"/>
    <to sec="1083733742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.150.106.112"/>
    </slice>
    <from sec="1083733448" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
506[label="209.29.165.112;s;122pkt 122fpkt", shape=diamond, color=yellow];
3315[label="209.29.165.112;156pkt 156fpkt", shape=pentagon, color=darkviolet];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.165.112:*, *:25}[64.1026%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.0072%)&lt;BR/&gt; 113: (8.27338%)&lt;BR/&gt; 0: (1.43885%)&lt;BR/&gt; 61962: (0.359712%)&lt;BR/&gt; 58197: (0.359712%)&gt;];
}
506--3315[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="209.29.165.112"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.197.205.112"/>
    </slice>
    <from sec="1083733350" usec="0"/>
    <to sec="1083733533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.240.112"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.248.112"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
3332[label="141.22.88.113;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.88.113:50042, 120.81.39.11:*}[36.7876%]&lt;BR/&gt;{141.22.88.113:50020, 120.81.39.107:*}[36.7876%]&lt;BR/&gt;{141.22.88.113:50055, 120.81.194.200:*}[25.9067%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50042: (18.3938%)&lt;BR/&gt; 50020: (18.3938%)&lt;BR/&gt; 50055: (12.9534%)&lt;BR/&gt; 33503: (0.777202%)&lt;BR/&gt; 33502: (0.777202%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="120.81.39.107" src_ip="141.22.88.113" src_port="50020"/>
      <filter dst_ip="120.81.39.11" src_ip="141.22.88.113" src_port="50042"/>
      <filter dst_ip="120.81.194.200" src_ip="141.22.88.113" src_port="50055"/>
    </slice>
    <from sec="1083733259" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.163.116.113"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.225.170.113"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.58.114"/>
    </slice>
    <from sec="1083733300" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.240.87.114"/>
    </slice>
    <from sec="1083733526" usec="0"/>
    <to sec="1083733629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06233,5.63189,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
732[label="173.138.211.114;s;28pkt 28fpkt", shape=diamond, color=yellow];
3359[label="173.138.211.114;30pkt 30fpkt", shape=pentagon, color=darkviolet];
9978[label="173.138.211.114;29pkt 29fpkt", shape=invhouse, color=bisque];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.211.114:80, 47.174.213.152:*}[46.6667%]&lt;BR/&gt;{173.138.211.114:80, 217.98.163.162:*}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63397: (1.72414%)&lt;BR/&gt; 41313: (1.72414%)&lt;BR/&gt; 40977: (1.72414%)&lt;BR/&gt; 40470: (1.72414%)&gt;];
}
732--3359[label="1;28pkt 28fpkt"];
732--9978[label="0.964286;27pkt 27fpkt"];
3359--9978[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="47.174.213.152" src_ip="173.138.211.114" src_port="80"/>
      <filter dst_ip="217.98.163.162" src_ip="173.138.211.114" src_port="80"/>
    </slice>
    <from sec="1083733237" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.5.1.115"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083733907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.71.60.115"/>
    </slice>
    <from sec="1083733309" usec="0"/>
    <to sec="1083733398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.53.154.115"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.116.231.115"/>
    </slice>
    <from sec="1083733495" usec="0"/>
    <to sec="1083733592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.183.81.116"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.30.116.116"/>
    </slice>
    <from sec="1083733341" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.176.118.116"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.162.188.116"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083733288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.240.199.117"/>
    </slice>
    <from sec="1083733354" usec="0"/>
    <to sec="1083733621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.71.203.117"/>
    </slice>
    <from sec="1083733294" usec="0"/>
    <to sec="1083733393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.155.160.118"/>
    </slice>
    <from sec="1083733971" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.161.118"/>
    </slice>
    <from sec="1083733275" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.97.164.118"/>
    </slice>
    <from sec="1083733745" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
855[label="173.138.169.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
3423[label="173.138.169.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7391[label="173.138.169.118;1pkt 1fpkt", shape=invtriangle, color=brown];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.169.118:1401, 216.160.47.147:6665}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6665: (50%)&lt;BR/&gt; 1401: (50%)&gt;];
}
855--3423[label="1;1pkt 1fpkt"];
855--7391[label="1;1pkt 1fpkt"];
3423--7391[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.160.47.147" dst_port="6665" src_ip="173.138.169.118" src_port="1401"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.170.255.118"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.29.135.119"/>
    </slice>
    <from sec="1083733695" usec="0"/>
    <to sec="1083733769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.72.142.119"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.211.51.120"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
734[label="141.22.88.120;s;70pkt 70fpkt", shape=diamond, color=yellow];
3448[label="141.22.88.120;74pkt 74fpkt", shape=pentagon, color=darkviolet];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.88.120:*, 46.202.23.22:80}[51.3514%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3056%)&lt;BR/&gt; 50464: (0.694444%)&lt;BR/&gt; 50463: (0.694444%)&lt;BR/&gt; 50462: (0.694444%)&lt;BR/&gt; 50454: (0.694444%)&gt;];
}
734--982[label="0.0285714;2pkt 2fpkt"];
734--3448[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="46.202.23.22" dst_port="80" src_ip="141.22.88.120"/>
    </slice>
    <from sec="1083733272" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.214.177.121"/>
    </slice>
    <from sec="1083733246" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.32.21.122"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083733634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.161.86.122"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.211.122"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.21.68.123"/>
    </slice>
    <from sec="1083733747" usec="0"/>
    <to sec="1083733977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.164.70.123"/>
    </slice>
    <from sec="1083733793" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.66.91.123"/>
    </slice>
    <from sec="1083733883" usec="0"/>
    <to sec="1083733982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
616[label="44.96.133.123;s;478pkt 478fpkt", shape=diamond, color=yellow];
3500[label="44.96.133.123;489pkt 489fpkt", shape=pentagon, color=darkviolet];
7454[label="44.96.133.123;489pkt 489fpkt", shape=invtriangle, color=brown];
10047[label="44.96.133.123;488pkt 488fpkt", shape=invhouse, color=bisque];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.96.133.123:0, *:0}[86.5031%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (86.4198%)&lt;BR/&gt; 445: (3.29218%)&lt;BR/&gt; 139: (3.29218%)&lt;BR/&gt; 137: (0.411523%)&lt;BR/&gt; 2924: (0.102881%)&gt;];
}
616--983[label="0.0104603;5pkt 5fpkt"];
616--3500[label="1;478pkt 478fpkt"];
616--7454[label="1;478pkt 478fpkt"];
616--10047[label="0.997908;477pkt 477fpkt"];
3500--7454[label="1;489pkt 489fpkt"];
3500--10047[label="1;488pkt 488fpkt"];
7454--10047[label="1;488pkt 488fpkt"];
</description>
    <slice>
      <filter src_ip="44.96.133.123"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.17.193.123"/>
    </slice>
    <from sec="1083733975" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
750[label="46.82.232.123;s;6pkt 6fpkt", shape=diamond, color=yellow];
3505[label="46.82.232.123;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7458[label="46.82.232.123;6pkt 6fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.82.232.123:80, 209.29.136.44:*}[66.6667%]&lt;BR/&gt;{46.82.232.123:53, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 53: (16.6667%)&lt;BR/&gt; 4056: (8.33333%)&lt;BR/&gt; 3252: (8.33333%)&lt;BR/&gt; 3248: (8.33333%)&gt;];
}
750--3505[label="1;6pkt 6fpkt"];
750--7458[label="1;6pkt 6fpkt"];
3505--7458[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="46.82.232.123" src_port="53"/>
      <filter dst_ip="209.29.136.44" src_ip="46.82.232.123" src_port="80"/>
    </slice>
    <from sec="1083733642" usec="0"/>
    <to sec="1083734003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
123[label="136.150.88.124;s;38pkt 38fpkt", shape=diamond, color=yellow];
3512[label="136.150.88.124;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7462[label="136.150.88.124;2pkt 2fpkt", shape=invtriangle, color=brown];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.88.124:*, 201.155.17.134:80}[31.5789%]&lt;BR/&gt;{136.150.88.124:*, 192.209.25.150:*}[26.3158%]&lt;BR/&gt;{136.150.88.124:*, 94.110.50.46:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.1429%)&lt;BR/&gt; 5257: (13.0952%)&lt;BR/&gt; 5256: (3.57143%)&lt;BR/&gt; 4193: (3.57143%)&lt;BR/&gt; 4191: (3.57143%)&gt;];
}
123--3512[label="1;2pkt 2fpkt"];
123--7462[label="1;2pkt 2fpkt"];
3512--7462[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.209.25.150" src_ip="136.150.88.124"/>
      <filter dst_ip="201.155.17.134" dst_port="80" src_ip="136.150.88.124"/>
      <filter dst_ip="94.110.50.46" dst_port="80" src_ip="136.150.88.124"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.125.89.124"/>
    </slice>
    <from sec="1083733912" usec="0"/>
    <to sec="1083733995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.181.112.124"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.38.217.124"/>
    </slice>
    <from sec="1083733396" usec="0"/>
    <to sec="1083733678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
772[label="193.120.12.125;s;629pkt 629fpkt", shape=diamond, color=yellow];
3523[label="193.120.12.125;684pkt 684fpkt", shape=pentagon, color=darkviolet];
7468[label="193.120.12.125;684pkt 684fpkt", shape=invtriangle, color=brown];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.120.12.125:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 45614: (0.150225%)&lt;BR/&gt; 44766: (0.150225%)&lt;BR/&gt; 31052: (0.150225%)&lt;BR/&gt; 27551: (0.150225%)&gt;];
}
772--3523[label="0.99841;628pkt 628fpkt"];
772--7468[label="0.99841;628pkt 628fpkt"];
3523--7468[label="1;684pkt 684fpkt"];
</description>
    <slice>
      <filter src_ip="193.120.12.125" src_port="7000"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.160.25.125"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.16.37.125"/>
    </slice>
    <from sec="1083733331" usec="0"/>
    <to sec="1083733881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.80.64.125"/>
    </slice>
    <from sec="1083733456" usec="0"/>
    <to sec="1083733543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.22.88.125"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.175.16.126"/>
    </slice>
    <from sec="1083733997" usec="0"/>
    <to sec="1083734011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
863[label="197.180.151.126;s;2pkt 2fpkt", shape=diamond, color=yellow];
3548[label="197.180.151.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7482[label="197.180.151.126;1pkt 1fpkt", shape=invtriangle, color=brown];
10063[label="197.180.151.126;1pkt 1fpkt", shape=invhouse, color=bisque];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.180.151.126:6883, 208.96.50.84:56915}[50%]&lt;BR/&gt;{197.180.151.126:6884, 208.96.50.84:55658}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56915: (40%)&lt;BR/&gt; 6883: (40%)&lt;BR/&gt; 55658: (10%)&lt;BR/&gt; 6884: (10%)&gt;];
}
863--3548[label="1;1pkt 1fpkt"];
863--7482[label="1;1pkt 1fpkt"];
863--10063[label="1;1pkt 1fpkt"];
3548--7482[label="1;1pkt 1fpkt"];
3548--10063[label="1;1pkt 1fpkt"];
7482--10063[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="55658" src_ip="197.180.151.126" src_port="6884"/>
      <filter dst_ip="208.96.50.84" dst_port="56915" src_ip="197.180.151.126" src_port="6883"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.14.170.126"/>
    </slice>
    <from sec="1083733407" usec="0"/>
    <to sec="1083733444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.194.194.126"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.70.21.127"/>
    </slice>
    <from sec="1083733329" usec="0"/>
    <to sec="1083733413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.16.116.127"/>
    </slice>
    <from sec="1083733341" usec="0"/>
    <to sec="1083733518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.1.137.127"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083733330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.16.0.128"/>
    </slice>
    <from sec="1083733888" usec="0"/>
    <to sec="1083734008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
770[label="205.110.32.128;s;2pkt 2fpkt", shape=diamond, color=yellow];
3570[label="205.110.32.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7496[label="205.110.32.128;2pkt 2fpkt", shape=invtriangle, color=brown];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.110.32.128:6881, 168.127.113.129:2315}[50%]&lt;BR/&gt;{205.110.32.128:6881, 168.127.113.129:2735}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2735: (25%)&lt;BR/&gt; 2315: (25%)&gt;];
}
770--3570[label="1;2pkt 2fpkt"];
770--7496[label="1;2pkt 2fpkt"];
3570--7496[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2735" src_ip="205.110.32.128" src_port="6881"/>
      <filter dst_ip="168.127.113.129" dst_port="2315" src_ip="205.110.32.128" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.9.12.129"/>
    </slice>
    <from sec="1083733559" usec="0"/>
    <to sec="1083733972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
3587[label="168.60.24.129;54pkt 54fpkt", shape=pentagon, color=darkviolet];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.60.24.129:*, *:2745}[29.6296%]&lt;BR/&gt;{168.60.24.129:*, *:1025}[27.7778%]&lt;BR/&gt;{168.60.24.129:*, *:6129}[22.2222%]&lt;BR/&gt;{168.60.24.129:*, *:80}[20.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (14.8148%)&lt;BR/&gt; 1025: (13.8889%)&lt;BR/&gt; 6129: (11.1111%)&lt;BR/&gt; 80: (10.1852%)&lt;BR/&gt; 4759: (0.925926%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="168.60.24.129"/>
      <filter dst_port="1025" src_ip="168.60.24.129"/>
      <filter dst_port="6129" src_ip="168.60.24.129"/>
      <filter dst_port="80" src_ip="168.60.24.129"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
161[label="168.127.68.129;s;20287pkt 20287fpkt", shape=diamond, color=yellow];
3589[label="168.127.68.129;21485pkt 21485fpkt", shape=pentagon, color=darkviolet];
7510[label="168.127.68.129;21484pkt 21484fpkt", shape=invtriangle, color=brown];
10081[label="168.127.68.129;21484pkt 21484fpkt", shape=invhouse, color=bisque];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.68.129:*, *:80}[99.9441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9723%)&lt;BR/&gt; 1957: (0.0188813%)&lt;BR/&gt; 1953: (0.0188813%)&lt;BR/&gt; 1952: (0.0188813%)&lt;BR/&gt; 1951: (0.0188813%)&gt;];
}
161--977[label="0.00159744;1pkt 1fpkt"];
161--978[label="0.00187266;1pkt 1fpkt"];
161--979[label="0.00207469;1pkt 1fpkt"];
161--982[label="0.0635382;1289pkt 1289fpkt"];
161--983[label="0.000247356;4pkt 4fpkt"];
161--3589[label="1;20287pkt 20287fpkt"];
161--7510[label="0.999951;20286pkt 20286fpkt"];
161--10081[label="0.999951;20286pkt 20286fpkt"];
3589--7510[label="1;21484pkt 21484fpkt"];
3589--10081[label="1;21484pkt 21484fpkt"];
7510--10081[label="1;21484pkt 21484fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.127.68.129"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
286[label="44.153.133.129;s;312pkt 312fpkt", shape=diamond, color=yellow];
3596[label="44.153.133.129;513pkt 513fpkt", shape=pentagon, color=darkviolet];
7515[label="44.153.133.129;512pkt 512fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.153.133.129:80, 209.29.138.127:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4995: (0.112191%)&lt;BR/&gt; 4994: (0.112191%)&lt;BR/&gt; 4990: (0.112191%)&lt;BR/&gt; 4965: (0.112191%)&gt;];
}
286--3596[label="1;312pkt 312fpkt"];
286--7515[label="0.996795;311pkt 311fpkt"];
3596--7515[label="1;512pkt 512fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="44.153.133.129" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.140.129"/>
    </slice>
    <from sec="1083733697" usec="0"/>
    <to sec="1083733798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
90[label="168.127.218.129;s;3663pkt 3663fpkt", shape=diamond, color=yellow];
3601[label="168.127.218.129;3968pkt 3968fpkt", shape=pentagon, color=darkviolet];
7520[label="168.127.218.129;3967pkt 3967fpkt", shape=invtriangle, color=brown];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.218.129:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3871: (0.0258665%)&lt;BR/&gt; 3870: (0.0258665%)&lt;BR/&gt; 3869: (0.0258665%)&lt;BR/&gt; 3868: (0.0258665%)&gt;];
}
90--982[label="0.0704341;258pkt 258fpkt"];
90--3601[label="1;3663pkt 3663fpkt"];
90--7520[label="0.999727;3662pkt 3662fpkt"];
3601--7520[label="1;3967pkt 3967fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.127.218.129"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.123.228.129"/>
    </slice>
    <from sec="1083733973" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
446[label="213.19.95.130;s;68pkt 68fpkt", shape=diamond, color=yellow];
3617[label="213.19.95.130;72pkt 72fpkt", shape=pentagon, color=darkviolet];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.19.95.130:80, 141.22.86.56:*}[84.7222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65405: (0.714286%)&lt;BR/&gt; 65404: (0.714286%)&lt;BR/&gt; 65397: (0.714286%)&lt;BR/&gt; 65374: (0.714286%)&gt;];
}
446--3617[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.56" src_ip="213.19.95.130" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.90.156.130"/>
    </slice>
    <from sec="1083733457" usec="0"/>
    <to sec="1083733575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.89.171.130"/>
    </slice>
    <from sec="1083733248" usec="0"/>
    <to sec="1083733323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.195.226.130"/>
    </slice>
    <from sec="1083733801" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.19.161.131"/>
    </slice>
    <from sec="1083733752" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.237.182.131"/>
    </slice>
    <from sec="1083733684" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
3650[label="208.55.15.132;44pkt 44fpkt", shape=pentagon, color=darkviolet];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.55.15.132:*, *:80}[25%]&lt;BR/&gt;{208.55.15.132:*, *:1025}[25%]&lt;BR/&gt;{208.55.15.132:*, *:2745}[25%]&lt;BR/&gt;{208.55.15.132:*, *:6129}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (12.5%)&lt;BR/&gt; 2745: (12.5%)&lt;BR/&gt; 1025: (12.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 4723: (1.13636%)&gt;];
}
</description>
    <slice>
      <filter dst_port="6129" src_ip="208.55.15.132"/>
      <filter dst_port="2745" src_ip="208.55.15.132"/>
      <filter dst_port="1025" src_ip="208.55.15.132"/>
      <filter dst_port="80" src_ip="208.55.15.132"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
712[label="209.143.175.132;s;17pkt 17fpkt", shape=diamond, color=yellow];
3661[label="209.143.175.132;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.143.175.132:*, 136.151.235.67:80}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48990: (2.85714%)&lt;BR/&gt; 48321: (2.85714%)&lt;BR/&gt; 46898: (2.85714%)&lt;BR/&gt; 45101: (2.85714%)&gt;];
}
712--955[label="0.352941;6pkt 6fpkt"];
712--966[label="0.352941;6pkt 6fpkt"];
712--982[label="0.117647;2pkt 2fpkt"];
712--3661[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="209.143.175.132"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
579[label="219.223.201.132;s;92pkt 92fpkt", shape=diamond, color=yellow];
3662[label="219.223.201.132;98pkt 98fpkt", shape=pentagon, color=darkviolet];
7570[label="219.223.201.132;97pkt 97fpkt", shape=invtriangle, color=brown];
10116[label="219.223.201.132;98pkt 98fpkt", shape=invhouse, color=bisque];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.223.201.132:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.4675%)&lt;BR/&gt; 35393: (0.519481%)&lt;BR/&gt; 34112: (0.519481%)&lt;BR/&gt; 32958: (0.519481%)&lt;BR/&gt; 32855: (0.519481%)&gt;];
}
579--3662[label="1;92pkt 92fpkt"];
579--7570[label="0.98913;91pkt 91fpkt"];
579--10116[label="1;92pkt 92fpkt"];
3662--7570[label="1;97pkt 97fpkt"];
3662--10116[label="1;98pkt 98fpkt"];
7570--10116[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="219.223.201.132" src_port="53"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.127.246.132"/>
    </slice>
    <from sec="1083733658" usec="0"/>
    <to sec="1083733754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,002,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
889[label="192.82.77.133;s;95pkt 95fpkt", shape=diamond, color=yellow];
3672[label="192.82.77.133;105pkt 105fpkt", shape=pentagon, color=darkviolet];
7580[label="192.82.77.133;105pkt 105fpkt", shape=invtriangle, color=brown];
10123[label="192.82.77.133;105pkt 105fpkt", shape=invhouse, color=bisque];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.82.77.133:*, 219.222.14.100:139}[47.619%]&lt;BR/&gt;{192.82.77.133:0, *:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.9756%)&lt;BR/&gt; 0: (20.2439%)&lt;BR/&gt; 80: (4.14634%)&lt;BR/&gt; 3127: (2.31707%)&lt;BR/&gt; 2745: (2.31707%)&gt;];
}
889--955[label="0.0526316;5pkt 5fpkt"];
889--966[label="0.0526316;5pkt 5fpkt"];
889--982[label="0.0105263;1pkt 1fpkt"];
889--3672[label="1;95pkt 95fpkt"];
889--7580[label="1;95pkt 95fpkt"];
889--10123[label="1;95pkt 95fpkt"];
3672--7580[label="1;105pkt 105fpkt"];
3672--10123[label="1;105pkt 105fpkt"];
7580--10123[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="219.222.14.100" dst_port="139" src_ip="192.82.77.133"/>
      <filter src_ip="192.82.77.133"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.72.125.133"/>
    </slice>
    <from sec="1083733671" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.179.128.133"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.239.171.133"/>
    </slice>
    <from sec="1083733522" usec="0"/>
    <to sec="1083733807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
3682[label="208.141.208.133;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.141.208.133:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (9.09091%)&lt;BR/&gt; 1025: (9.09091%)&lt;BR/&gt; 6129: (8.18182%)&lt;BR/&gt; 445: (8.18182%)&lt;BR/&gt; 80: (8.18182%)&gt;];
}
</description>
    <slice>
      <filter src_ip="208.141.208.133"/>
    </slice>
    <from sec="1083733309" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.238.133"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.81.17.134"/>
    </slice>
    <from sec="1083733234" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.22.134"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083733411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.1.135"/>
    </slice>
    <from sec="1083733792" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.242.72.135"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083733408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.140.93.135"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.20.106.135"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083733993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.19.124.135"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
886[label="173.138.129.135;s;140pkt 140fpkt", shape=diamond, color=yellow];
3719[label="173.138.129.135;148pkt 148fpkt", shape=pentagon, color=darkviolet];
7616[label="173.138.129.135;147pkt 147fpkt", shape=invtriangle, color=brown];
10142[label="173.138.129.135;148pkt 148fpkt", shape=invhouse, color=bisque];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.129.135:25, 201.1.172.109:*}[96.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3665: (0.343053%)&lt;BR/&gt; 2938: (0.343053%)&lt;BR/&gt; 2934: (0.343053%)&lt;BR/&gt; 2929: (0.343053%)&gt;];
}
886--3719[label="1;140pkt 140fpkt"];
886--7616[label="0.992857;139pkt 139fpkt"];
886--10142[label="1;140pkt 140fpkt"];
3719--7616[label="1;147pkt 147fpkt"];
3719--10142[label="1;148pkt 148fpkt"];
7616--10142[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_ip="201.1.172.109" src_ip="173.138.129.135" src_port="25"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
551[label="204.63.138.135;s;4087pkt 4087fpkt", shape=diamond, color=yellow];
3720[label="204.63.138.135;4764pkt 4764fpkt", shape=pentagon, color=darkviolet];
7617[label="204.63.138.135;4764pkt 4764fpkt", shape=invtriangle, color=brown];
10143[label="204.63.138.135;4763pkt 4763fpkt", shape=invhouse, color=bisque];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.63.138.135:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4912: (0.0217652%)&lt;BR/&gt; 4911: (0.0217652%)&lt;BR/&gt; 4910: (0.0217652%)&lt;BR/&gt; 4909: (0.0217652%)&gt;];
}
551--3720[label="1;4087pkt 4087fpkt"];
551--7617[label="1;4087pkt 4087fpkt"];
551--10143[label="0.999755;4086pkt 4086fpkt"];
3720--7617[label="1;4764pkt 4764fpkt"];
3720--10143[label="1;4763pkt 4763fpkt"];
7617--10143[label="1;4763pkt 4763fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="204.63.138.135"/>
    </slice>
    <from sec="1083733610" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.163.135"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.198.218.135"/>
    </slice>
    <from sec="1083733844" usec="0"/>
    <to sec="1083733979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.214.52.136"/>
    </slice>
    <from sec="1083733627" usec="0"/>
    <to sec="1083733876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.34.92.136"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.161.136"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.10.207.136"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.192.254.136"/>
    </slice>
    <from sec="1083733862" usec="0"/>
    <to sec="1083733991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
325[label="44.212.34.137;s;4pkt 4fpkt", shape=diamond, color=yellow];
3747[label="44.212.34.137;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.34.137:80, 209.29.138.127:4277}[25%]&lt;BR/&gt;{44.212.34.137:443, 209.29.138.126:3923}[25%]&lt;BR/&gt;{44.212.34.137:80, 209.29.138.126:4252}[25%]&lt;BR/&gt;{44.212.34.137:80, 209.29.138.126:4293}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 4277: (14.2857%)&lt;BR/&gt; 4252: (14.2857%)&lt;BR/&gt; 3923: (14.2857%)&lt;BR/&gt; 443: (14.2857%)&gt;];
}
325--3747[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" dst_port="4293" src_ip="44.212.34.137" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="4252" src_ip="44.212.34.137" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="3923" src_ip="44.212.34.137" src_port="443"/>
      <filter dst_ip="209.29.138.127" dst_port="4277" src_ip="44.212.34.137" src_port="80"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083733608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.2.42.137"/>
    </slice>
    <from sec="1083733559" usec="0"/>
    <to sec="1083733808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.106.83.137"/>
    </slice>
    <from sec="1083733889" usec="0"/>
    <to sec="1083733964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.161.83.137"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.180.94.137"/>
    </slice>
    <from sec="1083733413" usec="0"/>
    <to sec="1083733828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.217.106.137"/>
    </slice>
    <from sec="1083733279" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.237.79.138"/>
    </slice>
    <from sec="1083733604" usec="0"/>
    <to sec="1083733706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.218.80.138"/>
    </slice>
    <from sec="1083733270" usec="0"/>
    <to sec="1083733453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.215.128.138"/>
    </slice>
    <from sec="1083733251" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.131.138"/>
    </slice>
    <from sec="1083733750" usec="0"/>
    <to sec="1083733794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.195.170.138"/>
    </slice>
    <from sec="1083733579" usec="0"/>
    <to sec="1083733680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.81.0.139"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.91.0.139"/>
    </slice>
    <from sec="1083733919" usec="0"/>
    <to sec="1083734017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.247.107.139"/>
    </slice>
    <from sec="1083733236" usec="0"/>
    <to sec="1083733403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.54.135.139"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.189.139"/>
    </slice>
    <from sec="1083733525" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.198.139"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.212.19.140"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.138.27.140"/>
    </slice>
    <from sec="1083733997" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.111.33.140"/>
    </slice>
    <from sec="1083733487" usec="0"/>
    <to sec="1083733593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.118.36.140"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.120.36.140"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.96.54.140"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.176.102.140"/>
    </slice>
    <from sec="1083733265" usec="0"/>
    <to sec="1083733334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.199.108.140"/>
    </slice>
    <from sec="1083733577" usec="0"/>
    <to sec="1083733653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.153.181.140"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.151.13.141"/>
    </slice>
    <from sec="1083733509" usec="0"/>
    <to sec="1083733625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.20.64.141"/>
    </slice>
    <from sec="1083733358" usec="0"/>
    <to sec="1083733596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.23.124.141"/>
    </slice>
    <from sec="1083733730" usec="0"/>
    <to sec="1083733801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.67.130.141"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.26.151.141"/>
    </slice>
    <from sec="1083733432" usec="0"/>
    <to sec="1083733568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
168[label="199.19.200.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
3847[label="199.19.200.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7698[label="199.19.200.141;1pkt 1fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.19.200.141:1267, 136.151.241.155:1083}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1267: (50%)&lt;BR/&gt; 1083: (50%)&gt;];
}
168--3847[label="1;1pkt 1fpkt"];
168--7698[label="1;1pkt 1fpkt"];
3847--7698[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.241.155" dst_port="1083" src_ip="199.19.200.141" src_port="1267"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.41.14.142"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.52.142"/>
    </slice>
    <from sec="1083733443" usec="0"/>
    <to sec="1083733630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.14.157.142"/>
    </slice>
    <from sec="1083733587" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.221.255.142"/>
    </slice>
    <from sec="1083733481" usec="0"/>
    <to sec="1083733750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.160.78.143"/>
    </slice>
    <from sec="1083733847" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.225.142.143"/>
    </slice>
    <from sec="1083733302" usec="0"/>
    <to sec="1083733750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.166.143"/>
    </slice>
    <from sec="1083733911" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.221.166.143"/>
    </slice>
    <from sec="1083733290" usec="0"/>
    <to sec="1083733509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.154.186.143"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.65.116.144"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.75.149.144"/>
    </slice>
    <from sec="1083733395" usec="0"/>
    <to sec="1083733509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.64.158.144"/>
    </slice>
    <from sec="1083733279" usec="0"/>
    <to sec="1083734035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.243.0.145"/>
    </slice>
    <from sec="1083733469" usec="0"/>
    <to sec="1083733629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
512[label="168.127.96.145;s;34pkt 34fpkt", shape=diamond, color=yellow];
3908[label="168.127.96.145;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.96.145:*, 201.32.184.170:80}[23.5294%]&lt;BR/&gt;{168.127.96.145:*, 93.95.105.111:80}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5294%)&lt;BR/&gt; 38447: (1.47059%)&lt;BR/&gt; 32537: (1.47059%)&lt;BR/&gt; 4908: (1.47059%)&lt;BR/&gt; 4836: (1.47059%)&gt;];
}
512--3908[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="201.32.184.170" dst_port="80" src_ip="168.127.96.145"/>
      <filter dst_ip="93.95.105.111" dst_port="80" src_ip="168.127.96.145"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083733902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
793[label="174.64.158.145;s;44pkt 44fpkt", shape=diamond, color=yellow];
3911[label="174.64.158.145;46pkt 46fpkt", shape=pentagon, color=darkviolet];
7744[label="174.64.158.145;46pkt 46fpkt", shape=invtriangle, color=brown];
10220[label="174.64.158.145;45pkt 45fpkt", shape=invhouse, color=bisque];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.64.158.145:80, 209.29.138.126:*}[60.8696%]&lt;BR/&gt;{174.64.158.145:80, 209.29.138.127:*}[39.1304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4810: (1.10497%)&lt;BR/&gt; 4795: (1.10497%)&lt;BR/&gt; 4792: (1.10497%)&lt;BR/&gt; 4777: (1.10497%)&gt;];
}
793--3911[label="1;44pkt 44fpkt"];
793--7744[label="1;44pkt 44fpkt"];
793--10220[label="0.977273;43pkt 43fpkt"];
3911--7744[label="1;46pkt 46fpkt"];
3911--10220[label="1;45pkt 45fpkt"];
7744--10220[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="174.64.158.145" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="174.64.158.145" src_port="80"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083734061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.98.233.145"/>
    </slice>
    <from sec="1083733251" usec="0"/>
    <to sec="1083733388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.78.235.145"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083734005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.3.67.146"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.79.73.146"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.78.84.146"/>
    </slice>
    <from sec="1083733677" usec="0"/>
    <to sec="1083733781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.151.141.146"/>
    </slice>
    <from sec="1083733249" usec="0"/>
    <to sec="1083733861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.5.185.146"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.35.199.146"/>
    </slice>
    <from sec="1083733441" usec="0"/>
    <to sec="1083733490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.253.34.147"/>
    </slice>
    <from sec="1083733262" usec="0"/>
    <to sec="1083733326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.212.46.149"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.96.70.149"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06233,5.63189,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
138[label="220.69.172.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
3975[label="220.69.172.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10247[label="220.69.172.149;1pkt 1fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.69.172.149:80, 209.29.136.44:2083}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2083: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
138--3975[label="1;1pkt 1fpkt"];
138--10247[label="1;1pkt 1fpkt"];
3975--10247[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.44" dst_port="2083" src_ip="220.69.172.149" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.36.241.149"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.71.10.150"/>
    </slice>
    <from sec="1083733655" usec="0"/>
    <to sec="1083733818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.98.30.150"/>
    </slice>
    <from sec="1083733414" usec="0"/>
    <to sec="1083733482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.9.64.150"/>
    </slice>
    <from sec="1083733909" usec="0"/>
    <to sec="1083733987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.17.68.150"/>
    </slice>
    <from sec="1083733504" usec="0"/>
    <to sec="1083733809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
188[label="136.150.122.150;s;59pkt 59fpkt", shape=diamond, color=yellow];
3990[label="136.150.122.150;138pkt 138fpkt", shape=pentagon, color=darkviolet];
7795[label="136.150.122.150;138pkt 138fpkt", shape=invtriangle, color=brown];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.122.150:*, 209.227.158.76:80}[32.6087%]&lt;BR/&gt;{136.150.122.150:*, 209.227.159.207:80}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3200: (0.447761%)&lt;BR/&gt; 3199: (0.447761%)&lt;BR/&gt; 3197: (0.447761%)&lt;BR/&gt; 3196: (0.447761%)&gt;];
}
188--3990[label="1;59pkt 59fpkt"];
188--7795[label="1;59pkt 59fpkt"];
3990--7795[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_ip="209.227.158.76" dst_port="80" src_ip="136.150.122.150"/>
      <filter dst_ip="209.227.159.207" dst_port="80" src_ip="136.150.122.150"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.69.209.150"/>
    </slice>
    <from sec="1083733407" usec="0"/>
    <to sec="1083733764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.36.26.151"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.212.62.151"/>
    </slice>
    <from sec="1083733544" usec="0"/>
    <to sec="1083733642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
584[label="93.241.3.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
4004[label="155.148.92.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.92.151:1313, 93.241.3.154:20}[50%]&lt;BR/&gt;{155.148.92.151:4000, 209.138.11.217:8000}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1313: (33.3333%)&lt;BR/&gt; 20: (33.3333%)&lt;BR/&gt; 8000: (16.6667%)&lt;BR/&gt; 4000: (16.6667%)&gt;];
}
584--4004[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.138.11.217" dst_port="8000" src_ip="155.148.92.151" src_port="4000"/>
      <filter dst_ip="93.241.3.154" dst_port="20" src_ip="155.148.92.151" src_port="1313"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,502,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
374[label="155.148.98.151;s;13pkt 13fpkt", shape=diamond, color=yellow];
4005[label="155.148.98.151;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7803[label="155.148.98.151;13pkt 13fpkt", shape=invtriangle, color=brown];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.98.151:*, 197.21.26.176:22}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (19.2308%)&lt;BR/&gt; 8000: (7.69231%)&lt;BR/&gt; 4789: (3.84615%)&lt;BR/&gt; 4788: (3.84615%)&lt;BR/&gt; 4787: (3.84615%)&gt;];
}
374--4005[label="1;13pkt 13fpkt"];
374--7803[label="1;13pkt 13fpkt"];
4005--7803[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="197.21.26.176" dst_port="22" src_ip="155.148.98.151"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
379[label="109.230.192.151;s;3pkt 3fpkt", shape=diamond, color=yellow];
4012[label="109.230.192.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7809[label="109.230.192.151;2pkt 2fpkt", shape=invtriangle, color=brown];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.230.192.151:6881, 208.96.50.84:56818}[33.3333%]&lt;BR/&gt;{109.230.192.151:6882, 173.138.129.43:14157}[33.3333%]&lt;BR/&gt;{109.230.192.151:6881, 173.138.129.43:14056}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (28.5714%)&lt;BR/&gt; 14157: (21.4286%)&lt;BR/&gt; 14056: (21.4286%)&lt;BR/&gt; 6882: (21.4286%)&lt;BR/&gt; 56818: (7.14286%)&gt;];
}
379--4012[label="1;2pkt 2fpkt"];
379--7809[label="1;2pkt 2fpkt"];
4012--7809[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.129.43" dst_port="14056" src_ip="109.230.192.151" src_port="6881"/>
      <filter dst_ip="173.138.129.43" dst_port="14157" src_ip="109.230.192.151" src_port="6882"/>
      <filter dst_ip="208.96.50.84" dst_port="56818" src_ip="109.230.192.151" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.212.220.151"/>
    </slice>
    <from sec="1083733392" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.73.152"/>
    </slice>
    <from sec="1083733883" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.208.73.152"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.131.152"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
617[label="208.55.137.152;s;66pkt 66fpkt", shape=diamond, color=yellow];
4034[label="208.55.137.152;101pkt 101fpkt", shape=pentagon, color=darkviolet];
7823[label="208.55.137.152;101pkt 101fpkt", shape=invtriangle, color=brown];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.55.137.152:*, 141.22.88.100:80}[93.0693%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3223: (0.559701%)&lt;BR/&gt; 3222: (0.559701%)&lt;BR/&gt; 3221: (0.559701%)&lt;BR/&gt; 3220: (0.559701%)&gt;];
}
617--982[label="0.030303;2pkt 2fpkt"];
617--4034[label="1;66pkt 66fpkt"];
617--7823[label="1;66pkt 66fpkt"];
4034--7823[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.88.100" dst_port="80" src_ip="208.55.137.152"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.217.184.152"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.196.54.153"/>
    </slice>
    <from sec="1083733902" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.121.175.153"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.86.8.154"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.1.56.154"/>
    </slice>
    <from sec="1083733703" usec="0"/>
    <to sec="1083733771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.112.70.154"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.202.149.154"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.26.234.154"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083733554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.52.236.154"/>
    </slice>
    <from sec="1083733284" usec="0"/>
    <to sec="1083733747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.18.55.155"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.91.55.155"/>
    </slice>
    <from sec="1083733393" usec="0"/>
    <to sec="1083733494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
387[label="94.153.149.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
4087[label="141.22.104.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.104.155:8000, 94.153.149.59:11981}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11981: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
387--4087[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="94.153.149.59" dst_port="11981" src_ip="141.22.104.155" src_port="8000"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.151.106.156"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.98.165.156"/>
    </slice>
    <from sec="1083733384" usec="0"/>
    <to sec="1083733500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.29.194.156"/>
    </slice>
    <from sec="1083733489" usec="0"/>
    <to sec="1083733565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.36.240.156"/>
    </slice>
    <from sec="1083733863" usec="0"/>
    <to sec="1083733970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.242.19.157"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.98.48.157"/>
    </slice>
    <from sec="1083733930" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.178.162.157"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.172.171.157"/>
    </slice>
    <from sec="1083733839" usec="0"/>
    <to sec="1083733903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.110.238.157"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083733542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
491[label="168.127.96.158;s;53pkt 53fpkt", shape=diamond, color=yellow];
4133[label="168.127.96.158;52pkt 52fpkt", shape=pentagon, color=darkviolet];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.96.158:*, 208.53.14.174:80}[30.1887%]&lt;BR/&gt;{168.127.96.158:*, 201.144.145.149:80}[26.4151%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5714%)&lt;BR/&gt; 1863: (1.42857%)&lt;BR/&gt; 2864: (0.952381%)&lt;BR/&gt; 2863: (0.952381%)&lt;BR/&gt; 2862: (0.952381%)&gt;];
}
491--982[label="0.0377358;2pkt 2fpkt"];
491--4133[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="208.53.14.174" dst_port="80" src_ip="168.127.96.158"/>
      <filter dst_ip="201.144.145.149" dst_port="80" src_ip="168.127.96.158"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.10.108.158"/>
    </slice>
    <from sec="1083733295" usec="0"/>
    <to sec="1083733454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.26.132.158"/>
    </slice>
    <from sec="1083733546" usec="0"/>
    <to sec="1083733601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.4.147.158"/>
    </slice>
    <from sec="1083733496" usec="0"/>
    <to sec="1083733587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
588[label="197.8.28.159;s;382pkt 382fpkt", shape=diamond, color=yellow];
4143[label="197.8.28.159;396pkt 396fpkt", shape=pentagon, color=darkviolet];
7897[label="197.8.28.159;396pkt 396fpkt", shape=invtriangle, color=brown];
10316[label="197.8.28.159;395pkt 395fpkt", shape=invhouse, color=bisque];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.8.28.159:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (8.2218%)&lt;BR/&gt; 1025: (7.45698%)&lt;BR/&gt; 3127: (7.07457%)&lt;BR/&gt; 445: (7.07457%)&lt;BR/&gt; 6129: (6.8515%)&gt;];
}
588--980[label="0.0104712;4pkt 4fpkt"];
588--982[label="0.0026178;1pkt 1fpkt"];
588--983[label="0.0052356;2pkt 2fpkt"];
588--4143[label="1;382pkt 382fpkt"];
588--7897[label="1;382pkt 382fpkt"];
588--10316[label="0.997382;381pkt 381fpkt"];
4143--7897[label="1;396pkt 396fpkt"];
4143--10316[label="1;395pkt 395fpkt"];
7897--10316[label="1;395pkt 395fpkt"];
</description>
    <slice>
      <filter src_ip="197.8.28.159"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
4151[label="168.76.134.159;197pkt 197fpkt", shape=pentagon, color=darkviolet];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.134.159:*, *:2745}[25.8883%]&lt;BR/&gt;{168.76.134.159:*, *:80}[24.8731%]&lt;BR/&gt;{168.76.134.159:*, *:6129}[24.8731%]&lt;BR/&gt;{168.76.134.159:*, *:1433}[24.3655%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (13.198%)&lt;BR/&gt; 6129: (12.4365%)&lt;BR/&gt; 80: (12.4365%)&lt;BR/&gt; 1433: (12.1827%)&lt;BR/&gt; 4545: (0.507614%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="168.76.134.159"/>
      <filter dst_port="6129" src_ip="168.76.134.159"/>
      <filter dst_port="80" src_ip="168.76.134.159"/>
      <filter dst_port="1433" src_ip="168.76.134.159"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.11.158.159"/>
    </slice>
    <from sec="1083733714" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.55.194.159"/>
    </slice>
    <from sec="1083733492" usec="0"/>
    <to sec="1083733574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.42.201.159"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.161.227.159"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.229.247.159"/>
    </slice>
    <from sec="1083733731" usec="0"/>
    <to sec="1083733860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.16.31.160"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
4163[label="155.16.81.160;75pkt 75fpkt", shape=pentagon, color=darkviolet];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.16.81.160:*, *:445}[34.6667%]&lt;BR/&gt;{155.16.81.160:*, *:135}[24%]&lt;BR/&gt;{155.16.81.160:*, *:139}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (17.3333%)&lt;BR/&gt; 135: (12%)&lt;BR/&gt; 139: (10%)&lt;BR/&gt; 1433: (5.33333%)&lt;BR/&gt; 80: (5.33333%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="155.16.81.160"/>
      <filter dst_port="135" src_ip="155.16.81.160"/>
      <filter dst_port="139" src_ip="155.16.81.160"/>
    </slice>
    <from sec="1083733299" usec="0"/>
    <to sec="1083733972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.148.107.160"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
754[label="209.133.196.160;s;146pkt 146fpkt", shape=diamond, color=yellow];
4171[label="209.133.196.160;155pkt 155fpkt", shape=pentagon, color=darkviolet];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.133.196.160:80, 155.148.217.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3639: (0.332226%)&lt;BR/&gt; 3638: (0.332226%)&lt;BR/&gt; 3637: (0.332226%)&lt;BR/&gt; 3636: (0.332226%)&gt;];
}
754--4171[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.217.73" src_ip="209.133.196.160" src_port="80"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.25.250.160"/>
    </slice>
    <from sec="1083733804" usec="0"/>
    <to sec="1083733852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.83.19.161"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
5568[label="109.196.173.245;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.196.173.245:0, *:0}[54.5455%]&lt;BR/&gt;{109.196.173.245:*, *:445}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (54.5455%)&lt;BR/&gt; 445: (18.1818%)&lt;BR/&gt; 4643: (4.54545%)&lt;BR/&gt; 3841: (4.54545%)&lt;BR/&gt; 3795: (4.54545%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="109.196.173.245"/>
      <filter src_ip="109.196.173.245"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.116.32.161"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083733750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.156.149.161"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.138.231.161"/>
    </slice>
    <from sec="1083733703" usec="0"/>
    <to sec="1083733769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
84[label="196.27.47.162;s;5pkt 5fpkt", shape=diamond, color=yellow];
4200[label="196.27.47.162;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7941[label="196.27.47.162;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.27.47.162:1095, 155.148.136.17:1219}[20%]&lt;BR/&gt;{196.27.47.162:4000, 155.148.136.17:4000}[20%]&lt;BR/&gt;{196.27.47.162:80, 155.148.136.17:1214}[20%]&lt;BR/&gt;{196.27.47.162:80, 155.148.136.17:1221}[20%]&lt;BR/&gt;{196.27.47.162:80, 155.148.136.17:1231}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 4000: (20%)&lt;BR/&gt; 1231: (10%)&lt;BR/&gt; 1221: (10%)&lt;BR/&gt; 1219: (10%)&gt;];
}
84--4200[label="1;5pkt 5fpkt"];
84--7941[label="1;5pkt 5fpkt"];
4200--7941[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.136.17" dst_port="1231" src_ip="196.27.47.162" src_port="80"/>
      <filter dst_ip="155.148.136.17" dst_port="1221" src_ip="196.27.47.162" src_port="80"/>
      <filter dst_ip="155.148.136.17" dst_port="1214" src_ip="196.27.47.162" src_port="80"/>
      <filter dst_ip="155.148.136.17" dst_port="4000" src_ip="196.27.47.162" src_port="4000"/>
      <filter dst_ip="155.148.136.17" dst_port="1219" src_ip="196.27.47.162" src_port="1095"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
259[label="208.96.49.162;s;786pkt 786fpkt", shape=diamond, color=yellow];
4202[label="208.96.49.162;2286pkt 2286fpkt", shape=pentagon, color=darkviolet];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.49.162:53, *:*}[98.8189%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.2572%)&lt;BR/&gt; 32768: (1.5625%)&lt;BR/&gt; 1024: (1.35091%)&lt;BR/&gt; 32769: (0.976562%)&lt;BR/&gt; 0: (0.878906%)&gt;];
}
259--602[label="0.0121951;1pkt 1fpkt"];
259--4202[label="1;786pkt 786fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.49.162" src_port="53"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.19.80.162"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.22.100.162"/>
    </slice>
    <from sec="1083733297" usec="0"/>
    <to sec="1083733651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.163.128.162"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083733470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.120.160.162"/>
    </slice>
    <from sec="1083733814" usec="0"/>
    <to sec="1083733945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
952[label="71.176.160.162;s;91pkt 91fpkt", shape=diamond, color=yellow];
4213[label="71.176.160.162;140pkt 140fpkt", shape=pentagon, color=darkviolet];
7951[label="71.176.160.162;140pkt 140fpkt", shape=invtriangle, color=brown];
10349[label="71.176.160.162;140pkt 140fpkt", shape=invhouse, color=bisque];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.176.160.162:80, 136.151.159.65:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54547: (0.391389%)&lt;BR/&gt; 54545: (0.391389%)&lt;BR/&gt; 54544: (0.391389%)&lt;BR/&gt; 54543: (0.391389%)&gt;];
}
952--4213[label="1;91pkt 91fpkt"];
952--7951[label="1;91pkt 91fpkt"];
952--10349[label="1;91pkt 91fpkt"];
4213--7951[label="1;140pkt 140fpkt"];
4213--10349[label="1;140pkt 140fpkt"];
7951--10349[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.159.65" src_ip="71.176.160.162" src_port="80"/>
    </slice>
    <from sec="1083733907" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.71.53.163"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06233,5.63189,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
420[label="212.195.69.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
4223[label="212.195.69.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10354[label="212.195.69.163;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.195.69.163:80, 136.151.159.65:54097}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54097: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
420--4223[label="1;1pkt 1fpkt"];
420--10354[label="1;1pkt 1fpkt"];
4223--10354[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.159.65" dst_port="54097" src_ip="212.195.69.163" src_port="80"/>
    </slice>
    <from sec="1083733344" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.147.71.163"/>
    </slice>
    <from sec="1083733773" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.8.176.163"/>
    </slice>
    <from sec="1083733275" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.100.184.163"/>
    </slice>
    <from sec="1083733309" usec="0"/>
    <to sec="1083733457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.192.163"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.246.235.163"/>
    </slice>
    <from sec="1083733906" usec="0"/>
    <to sec="1083734037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.8.6.164"/>
    </slice>
    <from sec="1083733351" usec="0"/>
    <to sec="1083733416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.1.35.164"/>
    </slice>
    <from sec="1083733637" usec="0"/>
    <to sec="1083733753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.255.90.164"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.150.117.164"/>
    </slice>
    <from sec="1083733266" usec="0"/>
    <to sec="1083733371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.220.134.164"/>
    </slice>
    <from sec="1083733486" usec="0"/>
    <to sec="1083733576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.198.164"/>
    </slice>
    <from sec="1083733256" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.97.46.165"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.24.59.165"/>
    </slice>
    <from sec="1083733469" usec="0"/>
    <to sec="1083733563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
146[label="196.6.82.165;s;69pkt 69fpkt", shape=diamond, color=yellow];
4258[label="196.6.82.165;102pkt 102fpkt", shape=pentagon, color=darkviolet];
7985[label="196.6.82.165;102pkt 102fpkt", shape=invtriangle, color=brown];
10370[label="196.6.82.165;102pkt 102fpkt", shape=invhouse, color=bisque];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.6.82.165:30, 155.148.137.165:*}[48.0392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30: (23.8667%)&lt;BR/&gt; 4993: (0.533333%)&lt;BR/&gt; 4990: (0.533333%)&lt;BR/&gt; 4989: (0.533333%)&lt;BR/&gt; 4988: (0.533333%)&gt;];
}
146--4258[label="1;69pkt 69fpkt"];
146--7985[label="1;69pkt 69fpkt"];
146--10370[label="1;69pkt 69fpkt"];
4258--7985[label="1;102pkt 102fpkt"];
4258--10370[label="1;102pkt 102fpkt"];
7985--10370[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.137.165" src_ip="196.6.82.165" src_port="30"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.240.104.165"/>
    </slice>
    <from sec="1083733415" usec="0"/>
    <to sec="1083733544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
314[label="219.194.195.165;s;549pkt 549fpkt", shape=diamond, color=yellow];
4267[label="219.194.195.165;589pkt 589fpkt", shape=pentagon, color=darkviolet];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.194.195.165:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
314--4267[label="1;549pkt 549fpkt"];
</description>
    <slice>
      <filter src_ip="219.194.195.165"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.32.207.165"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.129.32.166"/>
    </slice>
    <from sec="1083733454" usec="0"/>
    <to sec="1083733706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.213.46.166"/>
    </slice>
    <from sec="1083733581" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.94.184.166"/>
    </slice>
    <from sec="1083733317" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.3.212.166"/>
    </slice>
    <from sec="1083733825" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.13.226.166"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.39.70.167"/>
    </slice>
    <from sec="1083733791" usec="0"/>
    <to sec="1083733954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.250.82.167"/>
    </slice>
    <from sec="1083733761" usec="0"/>
    <to sec="1083733989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.62.135.167"/>
    </slice>
    <from sec="1083733392" usec="0"/>
    <to sec="1083733590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.30.16.168"/>
    </slice>
    <from sec="1083733831" usec="0"/>
    <to sec="1083733983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.116.29.168"/>
    </slice>
    <from sec="1083733360" usec="0"/>
    <to sec="1083733584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.28.40.168"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.11.130.168"/>
    </slice>
    <from sec="1083733757" usec="0"/>
    <to sec="1083733975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.2.163.168"/>
    </slice>
    <from sec="1083733540" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1045{
style=filled;
color=gray75;
583[label="217.163.216.168;s;228pkt 228fpkt", shape=diamond, color=yellow];
4323[label="217.163.216.168;227pkt 227fpkt", shape=pentagon, color=darkviolet];
stat1045[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.163.216.168:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57265: (0.21978%)&lt;BR/&gt; 57026: (0.21978%)&lt;BR/&gt; 57015: (0.21978%)&lt;BR/&gt; 56962: (0.21978%)&gt;];
}
583--4323[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="217.163.216.168" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.80.226.168"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.76.97.169"/>
    </slice>
    <from sec="1083733484" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
723[label="198.163.100.169;s;82pkt 82fpkt", shape=diamond, color=yellow];
4334[label="198.163.100.169;82pkt 82fpkt", shape=pentagon, color=darkviolet];
8041[label="198.163.100.169;81pkt 81fpkt", shape=invtriangle, color=brown];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.163.100.169:80, 209.29.138.10:*}[95.122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59322: (0.612245%)&lt;BR/&gt; 59308: (0.612245%)&lt;BR/&gt; 59232: (0.612245%)&lt;BR/&gt; 59207: (0.612245%)&gt;];
}
723--4334[label="1;82pkt 82fpkt"];
723--8041[label="1;81pkt 81fpkt"];
4334--8041[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="198.163.100.169" src_port="80"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083733986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.133.169"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
885[label="93.236.168.169;s;201pkt 201fpkt", shape=diamond, color=yellow];
4338[label="93.236.168.169;221pkt 221fpkt", shape=pentagon, color=darkviolet];
8044[label="93.236.168.169;220pkt 220fpkt", shape=invtriangle, color=brown];
10408[label="93.236.168.169;220pkt 220fpkt", shape=invhouse, color=bisque];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.236.168.169:*, *:1080}[33.4842%]&lt;BR/&gt;{93.236.168.169:*, *:3128}[33.4842%]&lt;BR/&gt;{93.236.168.169:*, *:3127}[33.0317%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.7633%)&lt;BR/&gt; 1080: (16.7633%)&lt;BR/&gt; 3127: (16.4733%)&lt;BR/&gt; 4526: (0.464037%)&lt;BR/&gt; 4239: (0.464037%)&gt;];
}
885--4338[label="1;201pkt 201fpkt"];
885--8044[label="0.995025;200pkt 200fpkt"];
885--10408[label="0.995025;200pkt 200fpkt"];
4338--8044[label="1;220pkt 220fpkt"];
4338--10408[label="1;220pkt 220fpkt"];
8044--10408[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="93.236.168.169"/>
      <filter dst_port="1080" src_ip="93.236.168.169"/>
      <filter dst_port="3127" src_ip="93.236.168.169"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.19.203.169"/>
    </slice>
    <from sec="1083733762" usec="0"/>
    <to sec="1083734020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.151.235.169"/>
    </slice>
    <from sec="1083733313" usec="0"/>
    <to sec="1083733383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.46.86.170"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.91.187.170"/>
    </slice>
    <from sec="1083733530" usec="0"/>
    <to sec="1083733593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.5.12.171"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.96.50.171"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.140.67.171"/>
    </slice>
    <from sec="1083733926" usec="0"/>
    <to sec="1083734059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.221.80.171"/>
    </slice>
    <from sec="1083733364" usec="0"/>
    <to sec="1083733798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.12.81.171"/>
    </slice>
    <from sec="1083733424" usec="0"/>
    <to sec="1083733483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.136.96.171"/>
    </slice>
    <from sec="1083733498" usec="0"/>
    <to sec="1083733627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
879[label="208.96.50.172;s;127pkt 127fpkt", shape=diamond, color=yellow];
4383[label="208.96.50.172;127pkt 127fpkt", shape=pentagon, color=darkviolet];
8079[label="208.96.50.172;127pkt 127fpkt", shape=invtriangle, color=brown];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.50.172:0, *:0}[99.2126%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2126%)&lt;BR/&gt; 4488: (0.393701%)&lt;BR/&gt; 135: (0.393701%)&gt;];
}
879--4383[label="1;127pkt 127fpkt"];
879--8079[label="1;127pkt 127fpkt"];
4383--8079[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.50.172"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.51.63.172"/>
    </slice>
    <from sec="1083733297" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.209.85.172"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083733457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
98[label="199.136.95.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
4389[label="199.136.95.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.136.95.172:6881, 168.127.113.129:2659}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2659: (50%)&gt;];
}
98--4389[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2659" src_ip="199.136.95.172" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.114.112.172"/>
    </slice>
    <from sec="1083733421" usec="0"/>
    <to sec="1083733929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.107.133.172"/>
    </slice>
    <from sec="1083733437" usec="0"/>
    <to sec="1083733662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.171.172"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.32.179.172"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.164.179.172"/>
    </slice>
    <from sec="1083733278" usec="0"/>
    <to sec="1083733293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.217.233.172"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.149.235.172"/>
    </slice>
    <from sec="1083733818" usec="0"/>
    <to sec="1083733996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.18.62.173"/>
    </slice>
    <from sec="1083733729" usec="0"/>
    <to sec="1083733870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.171.108.173"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.219.164.173"/>
    </slice>
    <from sec="1083733667" usec="0"/>
    <to sec="1083733894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.24.189.173"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
275[label="155.148.88.174;s;184pkt 184fpkt", shape=diamond, color=yellow];
4421[label="155.148.88.174;283pkt 283fpkt", shape=pentagon, color=darkviolet];
8104[label="155.148.88.174;282pkt 282fpkt", shape=invtriangle, color=brown];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.88.174:*, 220.69.172.199:80}[71.7314%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7997%)&lt;BR/&gt; 4405: (0.200267%)&lt;BR/&gt; 4404: (0.200267%)&lt;BR/&gt; 4399: (0.200267%)&lt;BR/&gt; 4398: (0.200267%)&gt;];
}
275--982[label="0.130435;24pkt 24fpkt"];
275--4421[label="1;184pkt 184fpkt"];
275--8104[label="0.994565;183pkt 183fpkt"];
4421--8104[label="1;282pkt 282fpkt"];
</description>
    <slice>
      <filter dst_ip="220.69.172.199" dst_port="80" src_ip="155.148.88.174"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.3.139.174"/>
    </slice>
    <from sec="1083733499" usec="0"/>
    <to sec="1083733714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.160.149.174"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.136.202.174"/>
    </slice>
    <from sec="1083733735" usec="0"/>
    <to sec="1083733783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.105.212.174"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.16.215.174"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.198.220.174"/>
    </slice>
    <from sec="1083733539" usec="0"/>
    <to sec="1083733690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.6.235.174"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.198.18.175"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.92.67.175"/>
    </slice>
    <from sec="1083733253" usec="0"/>
    <to sec="1083733481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
4444[label="155.16.81.175;115pkt 115fpkt", shape=pentagon, color=darkviolet];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.16.81.175:*, *:445}[33.0435%]&lt;BR/&gt;{155.16.81.175:*, *:135}[23.4783%]&lt;BR/&gt;{155.16.81.175:*, *:139}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (16.5217%)&lt;BR/&gt; 135: (11.7391%)&lt;BR/&gt; 139: (10.8696%)&lt;BR/&gt; 80: (5.65217%)&lt;BR/&gt; 1433: (5.21739%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="155.16.81.175"/>
      <filter dst_port="135" src_ip="155.16.81.175"/>
      <filter dst_port="139" src_ip="155.16.81.175"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.171.175"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.91.224.175"/>
    </slice>
    <from sec="1083733916" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.209.228.175"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.24.97.176"/>
    </slice>
    <from sec="1083733449" usec="0"/>
    <to sec="1083733658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.118.137.176"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083733525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.18.181.176"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.192.176"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.24.205.176"/>
    </slice>
    <from sec="1083733401" usec="0"/>
    <to sec="1083733609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.14.208.176"/>
    </slice>
    <from sec="1083733948" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.18.106.177"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1097{
style=filled;
color=gray75;
566[label="168.127.113.177;s;53pkt 53fpkt", shape=diamond, color=yellow];
4477[label="168.127.113.177;63pkt 63fpkt", shape=pentagon, color=darkviolet];
stat1097[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.113.177:*, 201.155.23.96:80}[39.6825%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1379%)&lt;BR/&gt; 10015: (0.862069%)&lt;BR/&gt; 1838: (0.862069%)&lt;BR/&gt; 1837: (0.862069%)&lt;BR/&gt; 1836: (0.862069%)&gt;];
}
566--982[label="0.207547;11pkt 11fpkt"];
566--4477[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="201.155.23.96" dst_port="80" src_ip="168.127.113.177"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.134.135.177"/>
    </slice>
    <from sec="1083733694" usec="0"/>
    <to sec="1083734000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.3.40.178"/>
    </slice>
    <from sec="1083733716" usec="0"/>
    <to sec="1083733950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.22.43.178"/>
    </slice>
    <from sec="1083733976" usec="0"/>
    <to sec="1083734030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.19.130.178"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.196.142.178"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.32.184.178"/>
    </slice>
    <from sec="1083733529" usec="0"/>
    <to sec="1083734042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.22.206.178"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083733529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.10.248.178"/>
    </slice>
    <from sec="1083733557" usec="0"/>
    <to sec="1083733694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.137.4.179"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.136.12.179"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.27.15.179"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.0.44.179"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.26.77.179"/>
    </slice>
    <from sec="1083733723" usec="0"/>
    <to sec="1083733932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.39.100.179"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083733310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.70.200.179"/>
    </slice>
    <from sec="1083733534" usec="0"/>
    <to sec="1083733693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.1.15.180"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.129.24.180"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.240.75.180"/>
    </slice>
    <from sec="1083733238" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.19.149.180"/>
    </slice>
    <from sec="1083733794" usec="0"/>
    <to sec="1083733901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.115.171.181"/>
    </slice>
    <from sec="1083733740" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
807[label="215.222.199.181;s;71pkt 71fpkt", shape=diamond, color=yellow];
4569[label="215.222.199.181;78pkt 78fpkt", shape=pentagon, color=darkviolet];
8200[label="215.222.199.181;78pkt 78fpkt", shape=invtriangle, color=brown];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.222.199.181:80, 209.29.138.126:*}[57.6923%]&lt;BR/&gt;{215.222.199.181:80, 209.29.138.127:*}[42.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4826: (0.660793%)&lt;BR/&gt; 4825: (0.660793%)&lt;BR/&gt; 4597: (0.660793%)&lt;BR/&gt; 4385: (0.660793%)&gt;];
}
807--4569[label="1;71pkt 71fpkt"];
807--8200[label="1;71pkt 71fpkt"];
4569--8200[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="215.222.199.181" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="215.222.199.181" src_port="80"/>
    </slice>
    <from sec="1083733380" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.127.32.182"/>
    </slice>
    <from sec="1083733454" usec="0"/>
    <to sec="1083733540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.232.50.182"/>
    </slice>
    <from sec="1083733505" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.19.80.182"/>
    </slice>
    <from sec="1083733246" usec="0"/>
    <to sec="1083734064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.72.86.182"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.109.88.182"/>
    </slice>
    <from sec="1083733914" usec="0"/>
    <to sec="1083733998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.180.164.182"/>
    </slice>
    <from sec="1083733282" usec="0"/>
    <to sec="1083733370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.206.21.183"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1127{
style=filled;
color=gray75;
61[label="208.96.49.183;s;8pkt 8fpkt", shape=diamond, color=yellow];
4586[label="208.96.49.183;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat1127[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.49.183:119, 198.189.13.38:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (50%)&lt;BR/&gt; 52434: (6.25%)&lt;BR/&gt; 52431: (6.25%)&lt;BR/&gt; 52412: (6.25%)&lt;BR/&gt; 52411: (6.25%)&gt;];
}
61--4586[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="198.189.13.38" src_ip="208.96.49.183" src_port="119"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.24.117.183"/>
    </slice>
    <from sec="1083733257" usec="0"/>
    <to sec="1083733601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.114.153.183"/>
    </slice>
    <from sec="1083734077" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.0.164.183"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083733971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
4598[label="208.57.12.184;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.57.12.184:*, *:139}[50.6494%]&lt;BR/&gt;{208.57.12.184:*, *:80}[49.3506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.3247%)&lt;BR/&gt; 80: (24.6753%)&lt;BR/&gt; 50624: (0.649351%)&lt;BR/&gt; 50623: (0.649351%)&lt;BR/&gt; 50537: (0.649351%)&gt;];
}
</description>
    <slice>
      <filter dst_port="139" src_ip="208.57.12.184"/>
      <filter dst_port="80" src_ip="208.57.12.184"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1133{
style=filled;
color=gray75;
534[label="40.153.97.184;s;1206pkt 1206fpkt", shape=diamond, color=yellow];
4604[label="40.153.97.184;1206pkt 1206fpkt", shape=pentagon, color=darkviolet];
8228[label="40.153.97.184;1205pkt 1205fpkt", shape=invtriangle, color=brown];
10522[label="40.153.97.184;1206pkt 1206fpkt", shape=invhouse, color=bisque];
stat1133[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.153.97.184:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 60242: (0.041468%)&lt;BR/&gt; 60241: (0.041468%)&lt;BR/&gt; 60240: (0.041468%)&lt;BR/&gt; 60239: (0.041468%)&gt;];
}
534--4604[label="1;1206pkt 1206fpkt"];
534--8228[label="1;1205pkt 1205fpkt"];
534--10522[label="1;1206pkt 1206fpkt"];
4604--8228[label="1;1205pkt 1205fpkt"];
4604--10522[label="1;1206pkt 1206fpkt"];
8228--10522[label="1;1205pkt 1205fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="40.153.97.184"/>
    </slice>
    <from sec="1083733474" usec="0"/>
    <to sec="1083733656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.152.184"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.24.161.184"/>
    </slice>
    <from sec="1083733570" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.5.248.184"/>
    </slice>
    <from sec="1083733337" usec="0"/>
    <to sec="1083733416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.91.32.185"/>
    </slice>
    <from sec="1083733935" usec="0"/>
    <to sec="1083734017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.202.171.185"/>
    </slice>
    <from sec="1083733962" usec="0"/>
    <to sec="1083733992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.224.178.185"/>
    </slice>
    <from sec="1083733614" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.34.212.185"/>
    </slice>
    <from sec="1083733940" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.173.172.186"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.135.238.186"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.127.37.187"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083733400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.82.59.187"/>
    </slice>
    <from sec="1083733671" usec="0"/>
    <to sec="1083733728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.103.140.187"/>
    </slice>
    <from sec="1083733376" usec="0"/>
    <to sec="1083733890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.107.90.188"/>
    </slice>
    <from sec="1083733780" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.19.57.189"/>
    </slice>
    <from sec="1083733567" usec="0"/>
    <to sec="1083733621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.202.99.189"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.149.125.189"/>
    </slice>
    <from sec="1083733564" usec="0"/>
    <to sec="1083733625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.147.12.190"/>
    </slice>
    <from sec="1083733250" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.136.34.190"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.91.170.190"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1153{
style=filled;
color=gray75;
1076[label="93.186.133.3;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4147[label="201.144.80.159;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4999[label="93.239.10.209;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5453[label="168.127.131.237;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat1153[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.186.133.3:*, *:80}[50%]&lt;BR/&gt;{93.239.10.209:*, *:80}[29.3103%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8276%)&lt;BR/&gt; 0: (5.17241%)&lt;BR/&gt; 445: (1.72414%)&lt;BR/&gt; 54078: (0.862069%)&lt;BR/&gt; 51965: (0.862069%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="93.186.133.3"/>
      <filter dst_port="80" src_ip="93.239.10.209"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1154{
style=filled;
color=gray75;
330[label="136.150.113.191;s;25pkt 25fpkt", shape=diamond, color=yellow];
4703[label="136.150.113.191;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat1154[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.113.191:*, 138.132.142.153:80}[50%]&lt;BR/&gt;{136.150.113.191:*, 138.132.178.29:80}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2643: (1.5873%)&lt;BR/&gt; 2641: (1.5873%)&lt;BR/&gt; 2640: (1.5873%)&lt;BR/&gt; 2639: (1.5873%)&gt;];
}
330--4703[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="138.132.142.153" dst_port="80" src_ip="136.150.113.191"/>
      <filter dst_ip="138.132.178.29" dst_port="80" src_ip="136.150.113.191"/>
    </slice>
    <from sec="1083733273" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.161.160.191"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.160.178.191"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.86.191.191"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1158{
style=filled;
color=gray75;
554[label="217.149.194.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
4709[label="217.149.194.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1158[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.149.194.191:10196, 168.127.113.236:39303}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39303: (50%)&lt;BR/&gt; 10196: (50%)&gt;];
}
554--4709[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.236" dst_port="39303" src_ip="217.149.194.191" src_port="10196"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.62.232.191"/>
    </slice>
    <from sec="1083733602" usec="0"/>
    <to sec="1083733631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.18.0.192"/>
    </slice>
    <from sec="1083733700" usec="0"/>
    <to sec="1083733837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.59.0.192"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.96.48.192"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.34.76.192"/>
    </slice>
    <from sec="1083733285" usec="0"/>
    <to sec="1083733430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.26.132.192"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083733919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.220.143.192"/>
    </slice>
    <from sec="1083733605" usec="0"/>
    <to sec="1083733983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.105.181.192"/>
    </slice>
    <from sec="1083733605" usec="0"/>
    <to sec="1083733699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.200.192"/>
    </slice>
    <from sec="1083733865" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1168{
style=filled;
color=gray75;
763[label="205.51.216.192;s;2pkt 2fpkt", shape=diamond, color=yellow];
4735[label="205.51.216.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1168[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.51.216.192:5446, 209.29.136.89:1202}[50%]&lt;BR/&gt;{205.51.216.192:5446, 209.29.136.89:3748}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5446: (50%)&lt;BR/&gt; 3748: (33.3333%)&lt;BR/&gt; 1202: (16.6667%)&gt;];
}
763--4735[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3748" src_ip="205.51.216.192" src_port="5446"/>
      <filter dst_ip="209.29.136.89" dst_port="1202" src_ip="205.51.216.192" src_port="5446"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1169{
style=filled;
color=gray75;
80[label="168.127.5.193;s;22320pkt 22320fpkt", shape=diamond, color=yellow];
4736[label="168.127.5.193;24269pkt 24269fpkt", shape=pentagon, color=darkviolet];
8315[label="168.127.5.193;24269pkt 24269fpkt", shape=invtriangle, color=brown];
stat1169[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.5.193:*, *:80}[99.9629%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9809%)&lt;BR/&gt; 1365: (0.023286%)&lt;BR/&gt; 1347: (0.023286%)&lt;BR/&gt; 1336: (0.023286%)&lt;BR/&gt; 1334: (0.023286%)&gt;];
}
80--980[label="0.000184525;3pkt 3fpkt"];
80--982[label="0.0709229;1583pkt 1583fpkt"];
80--983[label="0.000371035;6pkt 6fpkt"];
80--4736[label="1;22320pkt 22320fpkt"];
80--8315[label="1;22320pkt 22320fpkt"];
4736--8315[label="1;24269pkt 24269fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.127.5.193"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.38.9.193"/>
    </slice>
    <from sec="1083733741" usec="0"/>
    <to sec="1083733917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.142.14.193"/>
    </slice>
    <from sec="1083733302" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.3.165.193"/>
    </slice>
    <from sec="1083733248" usec="0"/>
    <to sec="1083733315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.21.43.194"/>
    </slice>
    <from sec="1083733366" usec="0"/>
    <to sec="1083733382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.163.94.194"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.216.98.194"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.238.118.194"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.48.177.194"/>
    </slice>
    <from sec="1083733247" usec="0"/>
    <to sec="1083733860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.208.185.194"/>
    </slice>
    <from sec="1083733689" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.193.194"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.68.250.194"/>
    </slice>
    <from sec="1083733321" usec="0"/>
    <to sec="1083733485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.194.29.195"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083733288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.216.98.195"/>
    </slice>
    <from sec="1083733246" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.179.120.195"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.196.188.195"/>
    </slice>
    <from sec="1083733347" usec="0"/>
    <to sec="1083733765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.12.1.197"/>
    </slice>
    <from sec="1083733513" usec="0"/>
    <to sec="1083733581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.241.197"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.91.28.198"/>
    </slice>
    <from sec="1083733511" usec="0"/>
    <to sec="1083733710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.151.38.198"/>
    </slice>
    <from sec="1083733671" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.249.97.198"/>
    </slice>
    <from sec="1083733751" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.162.198"/>
    </slice>
    <from sec="1083733638" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.69.172.198"/>
    </slice>
    <from sec="1083733289" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.44.182.198"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1193{
style=filled;
color=gray75;
231[label="192.209.66.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
4842[label="192.209.66.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8390[label="192.209.66.199;1pkt 1fpkt", shape=invtriangle, color=brown];
10615[label="192.209.66.199;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1193[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.209.66.199:40189, 136.151.6.202:80}[50%]&lt;BR/&gt;{192.209.66.199:31998, 168.127.71.216:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31998: (33.3333%)&lt;BR/&gt; 40189: (16.6667%)&gt;];
}
231--4842[label="1;1pkt 1fpkt"];
231--8390[label="1;1pkt 1fpkt"];
231--10615[label="1;1pkt 1fpkt"];
4842--8390[label="1;1pkt 1fpkt"];
4842--10615[label="1;2pkt 2fpkt"];
8390--10615[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.71.216" dst_port="80" src_ip="192.209.66.199" src_port="31998"/>
      <filter dst_ip="136.151.6.202" dst_port="80" src_ip="192.209.66.199" src_port="40189"/>
    </slice>
    <from sec="1083733350" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1194{
style=filled;
color=gray75;
792[label="133.98.78.199;s;21pkt 21fpkt", shape=diamond, color=yellow];
4844[label="133.98.78.199;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8391[label="133.98.78.199;21pkt 21fpkt", shape=invtriangle, color=brown];
10616[label="133.98.78.199;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1194[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.98.78.199:80, 136.151.98.83:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45561: (2.40964%)&lt;BR/&gt; 45560: (2.40964%)&lt;BR/&gt; 3390: (2.40964%)&lt;BR/&gt; 1966: (2.40964%)&gt;];
}
792--4844[label="1;21pkt 21fpkt"];
792--8391[label="1;21pkt 21fpkt"];
792--10616[label="1;20pkt 20fpkt"];
4844--8391[label="1;21pkt 21fpkt"];
4844--10616[label="1;20pkt 20fpkt"];
8391--10616[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.98.83" src_ip="133.98.78.199" src_port="80"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.169.103.199"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.129.199"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083734046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.113.194.199"/>
    </slice>
    <from sec="1083733589" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.65.212.199"/>
    </slice>
    <from sec="1083733316" usec="0"/>
    <to sec="1083733344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.240.68.200"/>
    </slice>
    <from sec="1083733732" usec="0"/>
    <to sec="1083733915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1200{
style=filled;
color=gray75;
685[label="45.238.113.200;s;383pkt 383fpkt", shape=diamond, color=yellow];
4857[label="45.238.113.200;410pkt 410fpkt", shape=pentagon, color=darkviolet];
stat1200[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.238.113.200:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4871: (0.252207%)&lt;BR/&gt; 4615: (0.252207%)&lt;BR/&gt; 4528: (0.252207%)&lt;BR/&gt; 4318: (0.252207%)&gt;];
}
685--4857[label="1;383pkt 383fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="45.238.113.200"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.246.128.200"/>
    </slice>
    <from sec="1083733736" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.102.189.200"/>
    </slice>
    <from sec="1083733891" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.116.132.201"/>
    </slice>
    <from sec="1083733234" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1204{
style=filled;
color=gray75;
375[label="136.150.141.201;s;35pkt 35fpkt", shape=diamond, color=yellow];
4875[label="136.150.141.201;37pkt 37fpkt", shape=pentagon, color=darkviolet];
8410[label="136.150.141.201;37pkt 37fpkt", shape=invtriangle, color=brown];
10629[label="136.150.141.201;36pkt 36fpkt", shape=invhouse, color=bisque];
stat1204[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.141.201:*, 44.212.34.226:80}[45.9459%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8621%)&lt;BR/&gt; 443: (4.13793%)&lt;BR/&gt; 32810: (1.37931%)&lt;BR/&gt; 32785: (1.37931%)&lt;BR/&gt; 32784: (1.37931%)&gt;];
}
375--982[label="0.0285714;1pkt 1fpkt"];
375--4875[label="1;35pkt 35fpkt"];
375--8410[label="1;35pkt 35fpkt"];
375--10629[label="0.971429;34pkt 34fpkt"];
4875--8410[label="1;37pkt 37fpkt"];
4875--10629[label="1;36pkt 36fpkt"];
8410--10629[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="44.212.34.226" dst_port="80" src_ip="136.150.141.201"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.234.147.201"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.0.228.201"/>
    </slice>
    <from sec="1083733845" usec="0"/>
    <to sec="1083733891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.121.136.202"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.20.154.202"/>
    </slice>
    <from sec="1083733471" usec="0"/>
    <to sec="1083733560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.225.174.202"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.188.209.202"/>
    </slice>
    <from sec="1083733848" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1211{
style=filled;
color=gray75;
311[label="136.150.9.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
4897[label="136.150.9.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8422[label="136.150.9.203;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1211[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.9.203:20, 53.215.23.247:1990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1990: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
311--4897[label="1;1pkt 1fpkt"];
311--8422[label="1;1pkt 1fpkt"];
4897--8422[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="53.215.23.247" dst_port="1990" src_ip="136.150.9.203" src_port="20"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.64.71.203"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.5.80.203"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.98.117.203"/>
    </slice>
    <from sec="1083733711" usec="0"/>
    <to sec="1083733985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.23.16.204"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083733608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.68.60.204"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083733346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.86.64.204"/>
    </slice>
    <from sec="1083733334" usec="0"/>
    <to sec="1083733439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.175.71.204"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.194.174.204"/>
    </slice>
    <from sec="1083733319" usec="0"/>
    <to sec="1083733605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1220{
style=filled;
color=gray75;
911[label="41.163.169.205;s;7pkt 7fpkt", shape=diamond, color=yellow];
4935[label="41.163.169.205;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat1220[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.163.169.205:33462, 209.29.136.89:*}[71.4286%]&lt;BR/&gt;{41.163.169.205:*, 209.29.136.89:16072}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33462: (38.4615%)&lt;BR/&gt; 16072: (11.5385%)&lt;BR/&gt; 4627: (7.69231%)&lt;BR/&gt; 4606: (7.69231%)&lt;BR/&gt; 3543: (7.69231%)&gt;];
}
911--4935[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="41.163.169.205" src_port="33462"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="41.163.169.205"/>
    </slice>
    <from sec="1083733247" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.195.178.205"/>
    </slice>
    <from sec="1083733363" usec="0"/>
    <to sec="1083733715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1222{
style=filled;
color=gray75;
470[label="219.79.234.205;s;171pkt 171fpkt", shape=diamond, color=yellow];
4940[label="219.79.234.205;335pkt 335fpkt", shape=pentagon, color=darkviolet];
stat1222[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.79.234.205:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1081: (0.494071%)&lt;BR/&gt; 1476: (0.395257%)&lt;BR/&gt; 1466: (0.395257%)&lt;BR/&gt; 1124: (0.395257%)&gt;];
}
470--4940[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter src_ip="219.79.234.205" src_port="53"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.45.1.206"/>
    </slice>
    <from sec="1083733482" usec="0"/>
    <to sec="1083733608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.193.216.206"/>
    </slice>
    <from sec="1083733921" usec="0"/>
    <to sec="1083734009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.54.12.207"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.58.117.207"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.121.132.207"/>
    </slice>
    <from sec="1083733503" usec="0"/>
    <to sec="1083733626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.216.194.207"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.78.218.207"/>
    </slice>
    <from sec="1083733300" usec="0"/>
    <to sec="1083733859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.22.71.208"/>
    </slice>
    <from sec="1083733512" usec="0"/>
    <to sec="1083733615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.196.128.208"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.214.132.208"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.165.244.208"/>
    </slice>
    <from sec="1083733403" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1235{
style=filled;
color=gray75;
200[label="136.150.17.209;s;210pkt 210fpkt", shape=diamond, color=yellow];
5000[label="136.150.17.209;209pkt 209fpkt", shape=pentagon, color=darkviolet];
8483[label="136.150.17.209;210pkt 210fpkt", shape=invtriangle, color=brown];
10678[label="136.150.17.209;210pkt 210fpkt", shape=invhouse, color=bisque];
stat1235[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.17.209:*, 133.208.135.184:80}[37.619%]&lt;BR/&gt;{136.150.17.209:*, 133.208.135.198:80}[28.0952%]&lt;BR/&gt;{136.150.17.209:*, 133.208.135.215:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3909%)&lt;BR/&gt; 1863: (0.893921%)&lt;BR/&gt; 4192: (0.476758%)&lt;BR/&gt; 4183: (0.476758%)&lt;BR/&gt; 1029: (0.476758%)&gt;];
}
200--406[label="0.0163934;1pkt 1fpkt"];
200--982[label="0.00952381;2pkt 2fpkt"];
200--5000[label="1;209pkt 209fpkt"];
200--8483[label="1;210pkt 210fpkt"];
200--10678[label="1;210pkt 210fpkt"];
5000--8483[label="1;209pkt 209fpkt"];
5000--10678[label="1;209pkt 209fpkt"];
8483--10678[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter dst_ip="133.208.135.184" dst_port="80" src_ip="136.150.17.209"/>
      <filter dst_ip="133.208.135.198" dst_port="80" src_ip="136.150.17.209"/>
      <filter dst_ip="133.208.135.215" dst_port="80" src_ip="136.150.17.209"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.49.209.209"/>
    </slice>
    <from sec="1083733255" usec="0"/>
    <to sec="1083733739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1237{
style=filled;
color=gray75;
585[label="168.16.1.211;s;977pkt 977fpkt", shape=diamond, color=yellow];
5027[label="168.16.1.211;1050pkt 1050fpkt", shape=pentagon, color=darkviolet];
8506[label="168.16.1.211;1050pkt 1050fpkt", shape=invtriangle, color=brown];
10697[label="168.16.1.211;1049pkt 1049fpkt", shape=invhouse, color=bisque];
stat1237[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.16.1.211:0, *:0}[99.1437%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2002%)&lt;BR/&gt; 1080: (0.157538%)&lt;BR/&gt; 3128: (0.145419%)&lt;BR/&gt; 3127: (0.0969462%)&lt;BR/&gt; 3285: (0.0484731%)&gt;];
}
585--5027[label="0.998976;976pkt 976fpkt"];
585--8506[label="0.998976;976pkt 976fpkt"];
585--10697[label="0.997953;975pkt 975fpkt"];
5027--8506[label="1;1050pkt 1050fpkt"];
5027--10697[label="1;1049pkt 1049fpkt"];
8506--10697[label="1;1049pkt 1049fpkt"];
</description>
    <slice>
      <filter src_ip="168.16.1.211"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1238{
style=filled;
color=gray75;
751[label="136.151.2.211;s;64pkt 64fpkt", shape=diamond, color=yellow];
5029[label="136.151.2.211;158pkt 158fpkt", shape=pentagon, color=darkviolet];
8509[label="136.151.2.211;157pkt 157fpkt", shape=invtriangle, color=brown];
10700[label="136.151.2.211;157pkt 157fpkt", shape=invhouse, color=bisque];
stat1238[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.2.211:*, *:80}[63.2911%]&lt;BR/&gt;{136.151.2.211:*, *:53}[31.0127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.5299%)&lt;BR/&gt; 53: (15.9515%)&lt;BR/&gt; 0: (3.91791%)&lt;BR/&gt; 28827: (0.373134%)&lt;BR/&gt; 24901: (0.373134%)&gt;];
}
751--5029[label="1;64pkt 64fpkt"];
751--8509[label="0.984375;63pkt 63fpkt"];
751--10700[label="0.984375;63pkt 63fpkt"];
5029--8509[label="1;157pkt 157fpkt"];
5029--10700[label="1;157pkt 157fpkt"];
8509--10700[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.151.2.211"/>
      <filter dst_port="53" src_ip="136.151.2.211"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1239{
style=filled;
color=gray75;
547[label="196.10.200.80;d;161pkt 161fpkt", shape=diamond, color=yellow];
910[label="168.127.21.211;s;248pkt 248fpkt", shape=diamond, color=yellow];
5032[label="168.127.21.211;248pkt 248fpkt", shape=pentagon, color=darkviolet];
8512[label="168.127.21.211;247pkt 247fpkt", shape=invtriangle, color=brown];
stat1239[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.21.211:*, 196.10.200.80:80}[86.2903%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8341%)&lt;BR/&gt; 4193: (0.221239%)&lt;BR/&gt; 4192: (0.221239%)&lt;BR/&gt; 4191: (0.221239%)&lt;BR/&gt; 4190: (0.221239%)&gt;];
}
547--910[label="1;161pkt 161fpkt"];
547--982[label="0.590062;95pkt 95fpkt"];
547--5032[label="1;161pkt 161fpkt"];
547--8512[label="1;161pkt 161fpkt"];
910--982[label="0.451613;112pkt 112fpkt"];
910--5032[label="1;248pkt 248fpkt"];
910--8512[label="1;247pkt 247fpkt"];
5032--8512[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_ip="196.10.200.80" dst_port="80" src_ip="168.127.21.211"/>
    </slice>
    <from sec="1083733246" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.245.40.211"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.119.100.211"/>
    </slice>
    <from sec="1083733287" usec="0"/>
    <to sec="1083733413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1242{
style=filled;
color=gray75;
923[label="198.125.119.211;s;6pkt 6fpkt", shape=diamond, color=yellow];
5043[label="198.125.119.211;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8520[label="198.125.119.211;5pkt 5fpkt", shape=invtriangle, color=brown];
10705[label="198.125.119.211;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1242[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.125.119.211:80, 209.29.138.10:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60321: (9.09091%)&lt;BR/&gt; 60298: (9.09091%)&lt;BR/&gt; 60154: (9.09091%)&lt;BR/&gt; 60109: (9.09091%)&gt;];
}
923--5043[label="1;6pkt 6fpkt"];
923--8520[label="1;5pkt 5fpkt"];
923--10705[label="1;5pkt 5fpkt"];
5043--8520[label="1;5pkt 5fpkt"];
5043--10705[label="1;5pkt 5fpkt"];
8520--10705[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="198.125.119.211" src_port="80"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.236.171.211"/>
    </slice>
    <from sec="1083733513" usec="0"/>
    <to sec="1083733617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.200.210.211"/>
    </slice>
    <from sec="1083734031" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.228.211"/>
    </slice>
    <from sec="1083733269" usec="0"/>
    <to sec="1083734011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1246{
style=filled;
color=gray75;
185[label="197.8.66.212;s;2pkt 2fpkt", shape=diamond, color=yellow];
5055[label="197.8.66.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8529[label="197.8.66.212;1pkt 1fpkt", shape=invtriangle, color=brown];
10710[label="197.8.66.212;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1246[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.8.66.212:21, 209.29.138.10:58802}[50%]&lt;BR/&gt;{197.8.66.212:3985, 209.29.138.10:58913}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58802: (33.3333%)&lt;BR/&gt; 21: (33.3333%)&lt;BR/&gt; 58913: (16.6667%)&lt;BR/&gt; 3985: (16.6667%)&gt;];
}
185--5055[label="1;2pkt 2fpkt"];
185--8529[label="1;1pkt 1fpkt"];
185--10710[label="1;1pkt 1fpkt"];
5055--8529[label="1;1pkt 1fpkt"];
5055--10710[label="1;1pkt 1fpkt"];
8529--10710[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="58913" src_ip="197.8.66.212" src_port="3985"/>
      <filter dst_ip="209.29.138.10" dst_port="58802" src_ip="197.8.66.212" src_port="21"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.115.193.212"/>
    </slice>
    <from sec="1083733329" usec="0"/>
    <to sec="1083733495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.169.47.213"/>
    </slice>
    <from sec="1083733262" usec="0"/>
    <to sec="1083733333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.189.62.213"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.19.82.213"/>
    </slice>
    <from sec="1083733829" usec="0"/>
    <to sec="1083733896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.19.98.213"/>
    </slice>
    <from sec="1083734063" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.244.42.214"/>
    </slice>
    <from sec="1083733402" usec="0"/>
    <to sec="1083733741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.69.5.215"/>
    </slice>
    <from sec="1083733673" usec="0"/>
    <to sec="1083733793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.167.63.215"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.164.215"/>
    </slice>
    <from sec="1083733602" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.38.186.215"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.140.56.216"/>
    </slice>
    <from sec="1083733354" usec="0"/>
    <to sec="1083733449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1258{
style=filled;
color=gray75;
730[label="168.127.71.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
5107[label="168.127.71.216;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat1258[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.71.216:80, 192.209.66.199:31998}[33.3333%]&lt;BR/&gt;{168.127.71.216:80, 120.182.19.67:38881}[33.3333%]&lt;BR/&gt;{168.127.71.216:80, 120.182.19.67:39141}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31998: (25%)&lt;BR/&gt; 39141: (12.5%)&lt;BR/&gt; 38881: (12.5%)&gt;];
}
730--5107[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="120.182.19.67" dst_port="39141" src_ip="168.127.71.216" src_port="80"/>
      <filter dst_ip="120.182.19.67" dst_port="38881" src_ip="168.127.71.216" src_port="80"/>
      <filter dst_ip="192.209.66.199" dst_port="31998" src_ip="168.127.71.216" src_port="80"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.23.108.216"/>
    </slice>
    <from sec="1083733518" usec="0"/>
    <to sec="1083733631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.98.129.216"/>
    </slice>
    <from sec="1083734023" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.215.150.216"/>
    </slice>
    <from sec="1083733259" usec="0"/>
    <to sec="1083733409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.155.169.216"/>
    </slice>
    <from sec="1083733827" usec="0"/>
    <to sec="1083733955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.1.6.217"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083733552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.22.45.217"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.29.146.217"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.193.182.217"/>
    </slice>
    <from sec="1083733697" usec="0"/>
    <to sec="1083733943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.22.86.218"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.65.106.218"/>
    </slice>
    <from sec="1083733710" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1269{
style=filled;
color=gray75;
119[label="155.148.141.176;d;131pkt 131fpkt", shape=diamond, color=yellow];
223[label="201.155.23.219;s;5pkt 5fpkt", shape=diamond, color=yellow];
2545[label="201.18.223.72;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3220[label="201.18.223.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5143[label="201.155.23.219;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8594[label="201.155.23.219;5pkt 5fpkt", shape=invtriangle, color=brown];
10746[label="201.155.23.219;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1269[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.18.223.78:80, 155.148.141.176:*}[51.4493%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1228%)&lt;BR/&gt; 1552: (1.46199%)&lt;BR/&gt; 1551: (1.46199%)&lt;BR/&gt; 1466: (1.46199%)&lt;BR/&gt; 1604: (1.16959%)&gt;];
}
119--223[label="0.8;4pkt 4fpkt"];
119--2545[label="0.714286;15pkt 15fpkt"];
119--3220[label="1;1pkt 1fpkt"];
119--5143[label="0.75;3pkt 3fpkt"];
119--8594[label="0.8;4pkt 4fpkt"];
119--10746[label="0.75;3pkt 3fpkt"];
223--5143[label="1;4pkt 4fpkt"];
223--8594[label="1;5pkt 5fpkt"];
223--10746[label="1;4pkt 4fpkt"];
5143--8594[label="1;4pkt 4fpkt"];
5143--10746[label="1;4pkt 4fpkt"];
8594--10746[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.141.176" src_ip="201.18.223.78" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1270{
style=filled;
color=gray75;
72[label="136.150.90.219;s;18pkt 18fpkt", shape=diamond, color=yellow];
5146[label="136.150.90.219;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat1270[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.90.219:*, *:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 32769: (8.33333%)&lt;BR/&gt; 53: (8.33333%)&lt;BR/&gt; 1863: (5.55556%)&lt;BR/&gt; 123: (5.55556%)&gt;];
}
72--5146[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.150.90.219"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.14.128.219"/>
    </slice>
    <from sec="1083733910" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.13.172.219"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083734059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.73.187.219"/>
    </slice>
    <from sec="1083733652" usec="0"/>
    <to sec="1083733915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.30.4.220"/>
    </slice>
    <from sec="1083733396" usec="0"/>
    <to sec="1083733410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.151.67.220"/>
    </slice>
    <from sec="1083733846" usec="0"/>
    <to sec="1083733981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.129.220"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1277{
style=filled;
color=gray75;
799[label="209.29.136.220;s;34pkt 34fpkt", shape=diamond, color=yellow];
5174[label="209.29.136.220;46pkt 46fpkt", shape=pentagon, color=darkviolet];
8614[label="209.29.136.220;46pkt 46fpkt", shape=invtriangle, color=brown];
10760[label="209.29.136.220;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1277[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.136.220:*, 198.33.19.81:80}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 1863: (2.33918%)&lt;BR/&gt; 0: (2.33918%)&lt;BR/&gt; 1665: (1.16959%)&lt;BR/&gt; 1664: (1.16959%)&gt;];
}
799--982[label="0.0294118;1pkt 1fpkt"];
799--5174[label="1;34pkt 34fpkt"];
799--8614[label="1;34pkt 34fpkt"];
799--10760[label="0.970588;33pkt 33fpkt"];
5174--8614[label="1;46pkt 46fpkt"];
5174--10760[label="1;45pkt 45fpkt"];
8614--10760[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="198.33.19.81" dst_port="80" src_ip="209.29.136.220"/>
    </slice>
    <from sec="1083733251" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.4.156.220"/>
    </slice>
    <from sec="1083733756" usec="0"/>
    <to sec="1083733843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.163.46.221"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1280{
style=filled;
color=gray75;
133[label="168.127.113.221;s;22316pkt 22316fpkt", shape=diamond, color=yellow];
5187[label="168.127.113.221;24123pkt 24123fpkt", shape=pentagon, color=darkviolet];
stat1280[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.113.221:*, *:80}[99.9959%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9978%)&lt;BR/&gt; 4529: (0.0172269%)&lt;BR/&gt; 4996: (0.0161502%)&lt;BR/&gt; 4995: (0.0161502%)&lt;BR/&gt; 4986: (0.0161502%)&gt;];
}
133--979[label="0.00207469;1pkt 1fpkt"];
133--982[label="0.0703979;1571pkt 1571fpkt"];
133--5187[label="1;22316pkt 22316fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.127.113.221"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.26.157.221"/>
    </slice>
    <from sec="1083733615" usec="0"/>
    <to sec="1083733730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.198.18.222"/>
    </slice>
    <from sec="1083733244" usec="0"/>
    <to sec="1083734005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.241.33.222"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.137.76.222"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.140.244.222"/>
    </slice>
    <from sec="1083733549" usec="0"/>
    <to sec="1083733782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.73.5.223"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.67.23.223"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.90.125.223"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.246.182.223"/>
    </slice>
    <from sec="1083733344" usec="0"/>
    <to sec="1083733416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.119.225.223"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.16.23.224"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083733362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.81.43.224"/>
    </slice>
    <from sec="1083733929" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1294{
style=filled;
color=gray75;
635[label="136.151.126.224;s;9pkt 9fpkt", shape=diamond, color=yellow];
5231[label="136.151.126.224;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8658[label="136.151.126.224;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1294[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.126.224:80, 210.237.157.36:*}[55.5556%]&lt;BR/&gt;{136.151.126.224:80, 210.237.238.248:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56744: (6%)&lt;BR/&gt; 44368: (6%)&lt;BR/&gt; 41376: (6%)&lt;BR/&gt; 38634: (6%)&gt;];
}
635--5231[label="1;8pkt 8fpkt"];
635--8658[label="1;8pkt 8fpkt"];
5231--8658[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="210.237.157.36" src_ip="136.151.126.224" src_port="80"/>
      <filter dst_ip="210.237.238.248" src_ip="136.151.126.224" src_port="80"/>
    </slice>
    <from sec="1083733275" usec="0"/>
    <to sec="1083733629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1295{
style=filled;
color=gray75;
5233[label="168.76.144.224;132pkt 132fpkt", shape=pentagon, color=darkviolet];
stat1295[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.144.224:*, *:2745}[26.5152%]&lt;BR/&gt;{168.76.144.224:*, *:6129}[25%]&lt;BR/&gt;{168.76.144.224:*, *:80}[24.2424%]&lt;BR/&gt;{168.76.144.224:*, *:1433}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (13.2576%)&lt;BR/&gt; 6129: (12.5%)&lt;BR/&gt; 1433: (12.1212%)&lt;BR/&gt; 80: (12.1212%)&lt;BR/&gt; 4673: (0.757576%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="168.76.144.224"/>
      <filter dst_port="6129" src_ip="168.76.144.224"/>
      <filter dst_port="1433" src_ip="168.76.144.224"/>
      <filter dst_port="80" src_ip="168.76.144.224"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.0.160.224"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.197.224"/>
    </slice>
    <from sec="1083733231" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.18.0.225"/>
    </slice>
    <from sec="1083733508" usec="0"/>
    <to sec="1083733846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.23.50.225"/>
    </slice>
    <from sec="1083733603" usec="0"/>
    <to sec="1083733666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.107.57.225"/>
    </slice>
    <from sec="1083734010" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.34.92.225"/>
    </slice>
    <from sec="1083733933" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.57.108.225"/>
    </slice>
    <from sec="1083733870" usec="0"/>
    <to sec="1083733973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.44.117.225"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083734009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.163.142.225"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.239.16.226"/>
    </slice>
    <from sec="1083733273" usec="0"/>
    <to sec="1083733502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1306{
style=filled;
color=gray75;
5265[label="93.231.28.226;128pkt 128fpkt", shape=pentagon, color=darkviolet];
stat1306[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.231.28.226:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65353: (0.390625%)&lt;BR/&gt; 65352: (0.390625%)&lt;BR/&gt; 65342: (0.390625%)&lt;BR/&gt; 65341: (0.390625%)&gt;];
}
</description>
    <slice>
      <filter src_ip="93.231.28.226" src_port="25"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.11.38.226"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.232.39.226"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1309{
style=filled;
color=gray75;
425[label="136.150.49.226;s;251pkt 251fpkt", shape=diamond, color=yellow];
5270[label="136.150.49.226;263pkt 263fpkt", shape=pentagon, color=darkviolet];
8685[label="136.150.49.226;263pkt 263fpkt", shape=invtriangle, color=brown];
stat1309[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.49.226:*, 46.186.106.7:80}[24.3346%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52802: (0.19305%)&lt;BR/&gt; 52801: (0.19305%)&lt;BR/&gt; 52800: (0.19305%)&lt;BR/&gt; 52799: (0.19305%)&gt;];
}
425--982[label="0.0717131;18pkt 18fpkt"];
425--5270[label="1;251pkt 251fpkt"];
425--8685[label="1;251pkt 251fpkt"];
5270--8685[label="1;263pkt 263fpkt"];
</description>
    <slice>
      <filter dst_ip="46.186.106.7" dst_port="80" src_ip="136.150.49.226"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.86.66.226"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.67.102.226"/>
    </slice>
    <from sec="1083733800" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.167.106.226"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.0.165.226"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.46.204.226"/>
    </slice>
    <from sec="1083733704" usec="0"/>
    <to sec="1083733910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.206.226"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1316{
style=filled;
color=gray75;
631[label="46.71.211.226;s;35pkt 35fpkt", shape=diamond, color=yellow];
5283[label="46.71.211.226;41pkt 41fpkt", shape=pentagon, color=darkviolet];
8695[label="46.71.211.226;40pkt 40fpkt", shape=invtriangle, color=brown];
stat1316[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.211.226:80, 209.29.136.3:*}[68.2927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30075: (1.2931%)&lt;BR/&gt; 29400: (1.2931%)&lt;BR/&gt; 29302: (1.2931%)&lt;BR/&gt; 29114: (1.2931%)&gt;];
}
631--5283[label="1;35pkt 35fpkt"];
631--8695[label="0.971429;34pkt 34fpkt"];
5283--8695[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" src_ip="46.71.211.226" src_port="80"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.81.43.227"/>
    </slice>
    <from sec="1083733816" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.18.64.227"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.2.66.227"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.197.227"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
180[label="217.163.218.227;s;7pkt 7fpkt", shape=diamond, color=yellow];
5299[label="217.163.218.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8703[label="217.163.218.227;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.163.218.227:873, 208.96.48.67:*}[71.4286%]&lt;BR/&gt;{217.163.218.227:*, 209.29.138.10:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 873: (38.8889%)&lt;BR/&gt; 2462: (16.6667%)&lt;BR/&gt; 58063: (5.55556%)&lt;BR/&gt; 52803: (5.55556%)&lt;BR/&gt; 52433: (5.55556%)&gt;];
}
180--5299[label="1;1pkt 1fpkt"];
180--8703[label="1;1pkt 1fpkt"];
5299--8703[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="217.163.218.227"/>
      <filter dst_ip="208.96.48.67" src_ip="217.163.218.227" src_port="873"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.221.45.228"/>
    </slice>
    <from sec="1083733308" usec="0"/>
    <to sec="1083733920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.137.160.228"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1324{
style=filled;
color=gray75;
805[label="46.71.211.228;s;19pkt 19fpkt", shape=diamond, color=yellow];
5314[label="46.71.211.228;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat1324[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.211.228:80, 209.29.136.3:*}[54.1667%]&lt;BR/&gt;{46.71.211.228:80, 209.29.138.127:*}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28911: (2.32558%)&lt;BR/&gt; 28895: (2.32558%)&lt;BR/&gt; 28757: (2.32558%)&lt;BR/&gt; 28239: (2.32558%)&gt;];
}
805--5314[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" src_ip="46.71.211.228" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.71.211.228" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1325{
style=filled;
color=gray75;
145[label="201.186.127.88;d;269pkt 269fpkt", shape=diamond, color=yellow];
5320[label="208.96.53.229;356pkt 356fpkt", shape=pentagon, color=darkviolet];
8718[label="208.96.53.229;356pkt 356fpkt", shape=invtriangle, color=brown];
10823[label="208.96.53.229;356pkt 356fpkt", shape=invhouse, color=bisque];
stat1325[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.53.229:21, 201.186.127.88:*}[81.4607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (47.2326%)&lt;BR/&gt; 33554: (0.299177%)&lt;BR/&gt; 33549: (0.299177%)&lt;BR/&gt; 33434: (0.299177%)&lt;BR/&gt; 32836: (0.299177%)&gt;];
}
145--5320[label="1;269pkt 269fpkt"];
145--8718[label="1;269pkt 269fpkt"];
145--10823[label="1;269pkt 269fpkt"];
5320--8718[label="1;356pkt 356fpkt"];
5320--10823[label="1;356pkt 356fpkt"];
8718--10823[label="1;356pkt 356fpkt"];
</description>
    <slice>
      <filter dst_ip="201.186.127.88" src_ip="208.96.53.229" src_port="21"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.202.106.229"/>
    </slice>
    <from sec="1083733341" usec="0"/>
    <to sec="1083733667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.91.179.230"/>
    </slice>
    <from sec="1083733561" usec="0"/>
    <to sec="1083733944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.230.11.231"/>
    </slice>
    <from sec="1083733408" usec="0"/>
    <to sec="1083733575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1329{
style=filled;
color=gray75;
326[label="192.198.11.232;s;36pkt 36fpkt", shape=diamond, color=yellow];
5357[label="192.198.11.232;38pkt 38fpkt", shape=pentagon, color=darkviolet];
8743[label="192.198.11.232;38pkt 38fpkt", shape=invtriangle, color=brown];
stat1329[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.198.11.232:80, 209.29.136.44:*}[34.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49188: (1.33929%)&lt;BR/&gt; 40034: (1.33929%)&lt;BR/&gt; 23174: (1.33929%)&lt;BR/&gt; 18469: (1.33929%)&gt;];
}
326--5357[label="1;36pkt 36fpkt"];
326--8743[label="1;36pkt 36fpkt"];
5357--8743[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.44" src_ip="192.198.11.232" src_port="80"/>
    </slice>
    <from sec="1083733223" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.50.232"/>
    </slice>
    <from sec="1083733245" usec="0"/>
    <to sec="1083733384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.187.72.232"/>
    </slice>
    <from sec="1083733638" usec="0"/>
    <to sec="1083733734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.185.172.232"/>
    </slice>
    <from sec="1083733790" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.155.192.232"/>
    </slice>
    <from sec="1083733824" usec="0"/>
    <to sec="1083733924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.205.193.232"/>
    </slice>
    <from sec="1083733558" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.85.23.233"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.155.25.233"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083733547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.18.146.233"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.185.172.233"/>
    </slice>
    <from sec="1083733894" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1339{
style=filled;
color=gray75;
438[label="219.79.234.233;s;317pkt 317fpkt", shape=diamond, color=yellow];
5395[label="219.79.234.233;342pkt 342fpkt", shape=pentagon, color=darkviolet];
stat1339[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.79.234.233:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1477: (0.455235%)&lt;BR/&gt; 1066: (0.379363%)&lt;BR/&gt; 4550: (0.30349%)&lt;BR/&gt; 4407: (0.30349%)&gt;];
}
438--5395[label="1;317pkt 317fpkt"];
</description>
    <slice>
      <filter src_ip="219.79.234.233" src_port="53"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.22.116.234"/>
    </slice>
    <from sec="1083733280" usec="0"/>
    <to sec="1083733508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.22.138.234"/>
    </slice>
    <from sec="1083733608" usec="0"/>
    <to sec="1083733824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1342{
style=filled;
color=gray75;
562[label="46.71.204.234;s;179pkt 179fpkt", shape=diamond, color=yellow];
5405[label="46.71.204.234;316pkt 316fpkt", shape=pentagon, color=darkviolet];
8782[label="46.71.204.234;316pkt 316fpkt", shape=invtriangle, color=brown];
10861[label="46.71.204.234;316pkt 316fpkt", shape=invhouse, color=bisque];
stat1342[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.204.234:80, 209.29.138.127:*}[48.7342%]&lt;BR/&gt;{46.71.204.234:80, 209.29.138.126:*}[45.5696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3395: (0.354925%)&lt;BR/&gt; 4094: (0.310559%)&lt;BR/&gt; 3831: (0.310559%)&lt;BR/&gt; 3374: (0.310559%)&gt;];
}
562--5405[label="1;179pkt 179fpkt"];
562--8782[label="1;179pkt 179fpkt"];
562--10861[label="1;179pkt 179fpkt"];
5405--8782[label="1;316pkt 316fpkt"];
5405--10861[label="1;316pkt 316fpkt"];
8782--10861[label="1;316pkt 316fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.71.204.234" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.71.204.234" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.211.234"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.112.254.234"/>
    </slice>
    <from sec="1083733841" usec="0"/>
    <to sec="1083733923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.130.235"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1346{
style=filled;
color=gray75;
809[label="44.61.187.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
5421[label="44.61.187.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1346[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.61.187.235:8080, 141.22.188.8:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
809--5421[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.188.8" dst_port="25" src_ip="44.61.187.235" src_port="8080"/>
    </slice>
    <from sec="1083733721" usec="0"/>
    <to sec="1083733917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.71.208.235"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1348{
style=filled;
color=gray75;
565[label="46.71.211.235;s;41pkt 41fpkt", shape=diamond, color=yellow];
5424[label="46.71.211.235;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat1348[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.211.235:80, 209.29.138.126:*}[74.4186%]&lt;BR/&gt;{46.71.211.235:80, 209.29.138.127:*}[20.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27243: (1.20482%)&lt;BR/&gt; 26868: (1.20482%)&lt;BR/&gt; 4966: (1.20482%)&lt;BR/&gt; 4960: (1.20482%)&gt;];
}
565--5424[label="0.97561;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.71.211.235" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.71.211.235" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.38.44.236"/>
    </slice>
    <from sec="1083733432" usec="0"/>
    <to sec="1083733559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1350{
style=filled;
color=gray75;
529[label="136.151.47.236;s;6pkt 6fpkt", shape=diamond, color=yellow];
5432[label="136.151.47.236;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat1350[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.47.236:80, 47.79.65.228:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 49255: (8.33333%)&lt;BR/&gt; 49254: (8.33333%)&lt;BR/&gt; 49253: (8.33333%)&lt;BR/&gt; 49252: (8.33333%)&gt;];
}
529--5432[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="47.79.65.228" src_ip="136.151.47.236" src_port="80"/>
    </slice>
    <from sec="1083733416" usec="0"/>
    <to sec="1083733943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.71.50.236"/>
    </slice>
    <from sec="1083733966" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.163.56.236"/>
    </slice>
    <from sec="1083733556" usec="0"/>
    <to sec="1083733642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.36.72.236"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1354{
style=filled;
color=gray75;
431[label="168.127.113.236;s;41pkt 41fpkt", shape=diamond, color=yellow];
5438[label="168.127.113.236;42pkt 42fpkt", shape=pentagon, color=darkviolet];
8797[label="168.127.113.236;42pkt 42fpkt", shape=invtriangle, color=brown];
stat1354[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.113.236:*, 204.196.130.182:80}[35.7143%]&lt;BR/&gt;{168.127.113.236:39303, *:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.6%)&lt;BR/&gt; 39303: (18%)&lt;BR/&gt; 57960: (3.6%)&lt;BR/&gt; 48701: (2.4%)&lt;BR/&gt; 43684: (2.4%)&gt;];
}
431--982[label="0.0243902;1pkt 1fpkt"];
431--5438[label="1;41pkt 41fpkt"];
431--8797[label="1;41pkt 41fpkt"];
5438--8797[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="168.127.113.236" src_port="39303"/>
      <filter dst_ip="204.196.130.182" dst_port="80" src_ip="168.127.113.236"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.16.250.236"/>
    </slice>
    <from sec="1083733472" usec="0"/>
    <to sec="1083733734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1356{
style=filled;
color=gray75;
698[label="93.185.57.237;s;824pkt 824fpkt", shape=diamond, color=yellow];
5448[label="93.185.57.237;890pkt 890fpkt", shape=pentagon, color=darkviolet];
stat1356[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.185.57.237:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 48124: (0.116686%)&lt;BR/&gt; 46101: (0.116686%)&lt;BR/&gt; 37720: (0.116686%)&lt;BR/&gt; 27842: (0.116686%)&gt;];
}
698--5448[label="0.998786;823pkt 823fpkt"];
</description>
    <slice>
      <filter src_ip="93.185.57.237" src_port="7000"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.105.76.237"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.14.80.237"/>
    </slice>
    <from sec="1083733456" usec="0"/>
    <to sec="1083733532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.225.142.237"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1360{
style=filled;
color=gray75;
553[label="173.138.156.237;s;20pkt 20fpkt", shape=diamond, color=yellow];
5457[label="173.138.156.237;30pkt 30fpkt", shape=pentagon, color=darkviolet];
stat1360[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.156.237:25, 138.136.18.101:*}[46.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 55844: (2%)&lt;BR/&gt; 20403: (2%)&lt;BR/&gt; 4490: (2%)&lt;BR/&gt; 4345: (2%)&gt;];
}
553--5457[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="138.136.18.101" src_ip="173.138.156.237" src_port="25"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.126.216.237"/>
    </slice>
    <from sec="1083733590" usec="0"/>
    <to sec="1083733931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1362{
style=filled;
color=gray75;
503[label="219.79.234.237;s;329pkt 329fpkt", shape=diamond, color=yellow];
5467[label="219.79.234.237;361pkt 361fpkt", shape=pentagon, color=darkviolet];
8817[label="219.79.234.237;361pkt 361fpkt", shape=invtriangle, color=brown];
10881[label="219.79.234.237;359pkt 359fpkt", shape=invhouse, color=bisque];
stat1362[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.79.234.237:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 3679: (0.283688%)&lt;BR/&gt; 2196: (0.283688%)&lt;BR/&gt; 1921: (0.283688%)&lt;BR/&gt; 1896: (0.283688%)&gt;];
}
503--5467[label="1;329pkt 329fpkt"];
503--8817[label="1;329pkt 329fpkt"];
503--10881[label="1;329pkt 329fpkt"];
5467--8817[label="1;361pkt 361fpkt"];
5467--10881[label="1;359pkt 359fpkt"];
8817--10881[label="1;359pkt 359fpkt"];
</description>
    <slice>
      <filter src_ip="219.79.234.237" src_port="53"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.59.211.238"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083733571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1364{
style=filled;
color=gray75;
5484[label="109.66.55.239;67pkt 67fpkt", shape=pentagon, color=darkviolet];
stat1364[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.66.55.239:*, *:2745}[28.3582%]&lt;BR/&gt;{109.66.55.239:*, *:1025}[23.8806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (14.1791%)&lt;BR/&gt; 1025: (11.9403%)&lt;BR/&gt; 3127: (8.95522%)&lt;BR/&gt; 6129: (7.46269%)&lt;BR/&gt; 80: (7.46269%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="109.66.55.239"/>
      <filter dst_port="1025" src_ip="109.66.55.239"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.2.178.239"/>
    </slice>
    <from sec="1083733553" usec="0"/>
    <to sec="1083733682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.172.196.239"/>
    </slice>
    <from sec="1083733251" usec="0"/>
    <to sec="1083734041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.15.220.239"/>
    </slice>
    <from sec="1083733340" usec="0"/>
    <to sec="1083733632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.178.240.239"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.23.146.240"/>
    </slice>
    <from sec="1083733667" usec="0"/>
    <to sec="1083733751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.10.41.241"/>
    </slice>
    <from sec="1083733550" usec="0"/>
    <to sec="1083733627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.174.209.241"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.30.33.242"/>
    </slice>
    <from sec="1083733457" usec="0"/>
    <to sec="1083733517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.167.71.242"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1374{
style=filled;
color=gray75;
266[label="173.138.170.242;s;48pkt 48fpkt", shape=diamond, color=yellow];
296[label="200.96.3.101;d;25pkt 25fpkt", shape=diamond, color=yellow];
904[label="208.120.192.161;d;24pkt 24fpkt", shape=diamond, color=yellow];
5530[label="173.138.170.242;194pkt 194fpkt", shape=pentagon, color=darkviolet];
stat1374[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.170.242:80, *:*}[97.9381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7973%)&lt;BR/&gt; 6667: (0.687285%)&lt;BR/&gt; 57961: (0.515464%)&lt;BR/&gt; 55505: (0.515464%)&lt;BR/&gt; 53027: (0.515464%)&gt;];
}
266--296[label="0.48;12pkt 12fpkt"];
266--904[label="0.25;6pkt 6fpkt"];
266--5530[label="1;48pkt 48fpkt"];
296--5530[label="1;25pkt 25fpkt"];
904--5530[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.170.242" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.38.193.242"/>
    </slice>
    <from sec="1083733259" usec="0"/>
    <to sec="1083733514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.28.81.243"/>
    </slice>
    <from sec="1083733643" usec="0"/>
    <to sec="1083733774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.211.165.243"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083733418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.12.56.244"/>
    </slice>
    <from sec="1083733639" usec="0"/>
    <to sec="1083733931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1379{
style=filled;
color=gray75;
639[label="216.200.86.244;s;74pkt 74fpkt", shape=diamond, color=yellow];
5550[label="216.200.86.244;75pkt 75fpkt", shape=pentagon, color=darkviolet];
stat1379[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.200.86.244:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59798: (0.671141%)&lt;BR/&gt; 58090: (0.671141%)&lt;BR/&gt; 58026: (0.671141%)&lt;BR/&gt; 54302: (0.671141%)&gt;];
}
639--5550[label="0.986486;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="216.200.86.244" src_port="80"/>
    </slice>
    <from sec="1083733327" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.168.95.244"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.165.118.244"/>
    </slice>
    <from sec="1083733479" usec="0"/>
    <to sec="1083733614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1382{
style=filled;
color=gray75;
252[label="219.144.161.244;s;83pkt 83fpkt", shape=diamond, color=yellow];
5556[label="219.144.161.244;93pkt 93fpkt", shape=pentagon, color=darkviolet];
8888[label="219.144.161.244;93pkt 93fpkt", shape=invtriangle, color=brown];
10922[label="219.144.161.244;92pkt 92fpkt", shape=invhouse, color=bisque];
stat1382[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.144.161.244:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60340: (0.554017%)&lt;BR/&gt; 60294: (0.554017%)&lt;BR/&gt; 60223: (0.554017%)&lt;BR/&gt; 59837: (0.554017%)&gt;];
}
252--5556[label="1;83pkt 83fpkt"];
252--8888[label="1;83pkt 83fpkt"];
252--10922[label="0.987952;82pkt 82fpkt"];
5556--8888[label="1;93pkt 93fpkt"];
5556--10922[label="1;92pkt 92fpkt"];
8888--10922[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="219.144.161.244" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.103.250.244"/>
    </slice>
    <from sec="1083733757" usec="0"/>
    <to sec="1083733802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.16.1.245"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.172.167.245"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.189.187.245"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.101.193.245"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.140.88.246"/>
    </slice>
    <from sec="1083733453" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.3.100.246"/>
    </slice>
    <from sec="1083733345" usec="0"/>
    <to sec="1083733661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.17.157.246"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083733336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.236.249.246"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.158.192.247"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083733319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.228.200.247"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.178.3.248"/>
    </slice>
    <from sec="1083733685" usec="0"/>
    <to sec="1083733726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.216.75.248"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.32.115.248"/>
    </slice>
    <from sec="1083733511" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.68.122.248"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.39.128.249"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.244.134.249"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.10.1.250"/>
    </slice>
    <from sec="1083733515" usec="0"/>
    <to sec="1083733579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,051,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1402{
style=filled;
color=gray75;
454[label="93.244.222.250;s;164pkt 164fpkt", shape=diamond, color=yellow];
5631[label="93.244.222.250;169pkt 169fpkt", shape=pentagon, color=darkviolet];
stat1402[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.244.222.250:21, 209.29.136.89:*}[98.2249%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.0991%)&lt;BR/&gt; 4999: (0.3003%)&lt;BR/&gt; 4998: (0.3003%)&lt;BR/&gt; 4996: (0.3003%)&lt;BR/&gt; 4985: (0.3003%)&gt;];
}
454--5631[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="93.244.222.250" src_port="21"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.118.232.250"/>
    </slice>
    <from sec="1083733386" usec="0"/>
    <to sec="1083733423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.115.16.251"/>
    </slice>
    <from sec="1083733846" usec="0"/>
    <to sec="1083733925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.986013,5.6411,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1405{
style=filled;
color=gray75;
195[label="52.121.84.251;s;1pkt 1fpkt", shape=diamond, color=yellow];
5636[label="52.121.84.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1405[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.121.84.251:6881, 168.127.113.129:2203}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2203: (50%)&gt;];
}
195--5636[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2203" src_ip="52.121.84.251" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1406{
style=filled;
color=gray75;
373[label="173.138.170.251;s;17pkt 17fpkt", shape=diamond, color=yellow];
5640[label="173.138.170.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8943[label="173.138.170.251;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1406[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.170.251:80, 208.86.15.29:*}[47.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2328: (7.5%)&lt;BR/&gt; 28796: (5%)&lt;BR/&gt; 51974: (2.5%)&lt;BR/&gt; 15237: (2.5%)&gt;];
}
373--5640[label="1;1pkt 1fpkt"];
373--8943[label="1;2pkt 2fpkt"];
5640--8943[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.86.15.29" src_ip="173.138.170.251" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.43.20.252"/>
    </slice>
    <from sec="1083733416" usec="0"/>
    <to sec="1083733434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1408{
style=filled;
color=gray75;
152[label="217.105.112.252;s;19pkt 19fpkt", shape=diamond, color=yellow];
5650[label="217.105.112.252;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8951[label="217.105.112.252;19pkt 19fpkt", shape=invtriangle, color=brown];
10954[label="217.105.112.252;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1408[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.105.112.252:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57366: (2.66667%)&lt;BR/&gt; 57365: (2.66667%)&lt;BR/&gt; 57364: (2.66667%)&lt;BR/&gt; 57308: (2.66667%)&gt;];
}
152--5650[label="1;19pkt 19fpkt"];
152--8951[label="1;19pkt 19fpkt"];
152--10954[label="1;18pkt 18fpkt"];
5650--8951[label="1;19pkt 19fpkt"];
5650--10954[label="1;18pkt 18fpkt"];
8951--10954[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="217.105.112.252" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.209.22.253"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="159.86.84.254"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.32.115.254"/>
    </slice>
    <from sec="1083733594" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.223.236.254"/>
    </slice>
    <from sec="1083733388" usec="0"/>
    <to sec="1083733543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.105.196.255"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.107.238.255"/>
    </slice>
    <from sec="1083733405" usec="0"/>
    <to sec="1083733587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.209.241.255"/>
    </slice>
    <from sec="1083733491" usec="0"/>
    <to sec="1083733561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.228.7.0"/>
    </slice>
    <from sec="1083733752" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1417{
style=filled;
color=gray75;
992[label="198.198.41.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5687[label="198.198.41.0;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1417[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.41.0:80, 209.29.138.127:4460}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4460: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
992--5687[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" dst_port="4460" src_ip="198.198.41.0" src_port="80"/>
    </slice>
    <from sec="1083733819" usec="0"/>
    <to sec="1083733881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1418{
style=filled;
color=gray75;
993[label="53.240.42.0;44pkt 44fpkt", shape=pentagon, color=darkviolet];
5688[label="53.240.42.0;44pkt 44fpkt", shape=invtriangle, color=brown];
8975[label="53.240.42.0;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1418[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.240.42.0:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60867: (1.12782%)&lt;BR/&gt; 40080: (1.12782%)&lt;BR/&gt; 39908: (1.12782%)&lt;BR/&gt; 39873: (1.12782%)&gt;];
}
993--5688[label="1;44pkt 44fpkt"];
993--8975[label="1;44pkt 44fpkt"];
5688--8975[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="53.240.42.0" src_port="80"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.25.45.0"/>
    </slice>
    <from sec="1083733966" usec="0"/>
    <to sec="1083734048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1420{
style=filled;
color=gray75;
1001[label="54.163.86.0;112pkt 112fpkt", shape=pentagon, color=darkviolet];
5693[label="54.163.86.0;111pkt 111fpkt", shape=invtriangle, color=brown];
8979[label="54.163.86.0;112pkt 112fpkt", shape=invhouse, color=bisque];
stat1420[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.163.86.0:*, *:3127}[33.9286%]&lt;BR/&gt;{54.163.86.0:*, *:1080}[33.0357%]&lt;BR/&gt;{54.163.86.0:*, *:3128}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (16.8657%)&lt;BR/&gt; 3128: (16.5672%)&lt;BR/&gt; 1080: (16.5672%)&lt;BR/&gt; 4949: (0.447761%)&lt;BR/&gt; 4946: (0.447761%)&gt;];
}
1001--5693[label="1;111pkt 111fpkt"];
1001--8979[label="1;112pkt 112fpkt"];
5693--8979[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="54.163.86.0"/>
      <filter dst_port="3128" src_ip="54.163.86.0"/>
      <filter dst_port="1080" src_ip="54.163.86.0"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.195.118.0"/>
    </slice>
    <from sec="1083733538" usec="0"/>
    <to sec="1083733716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1422{
style=filled;
color=gray75;
1009[label="109.197.224.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5700[label="109.197.224.0;1pkt 1fpkt", shape=invtriangle, color=brown];
8984[label="109.197.224.0;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1422[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.197.224.0:1853, 141.211.202.122:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1853: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1009--5700[label="1;1pkt 1fpkt"];
1009--8984[label="1;1pkt 1fpkt"];
5700--8984[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.211.202.122" dst_port="80" src_ip="109.197.224.0" src_port="1853"/>
    </slice>
    <from sec="1083733457" usec="0"/>
    <to sec="1083733725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1423{
style=filled;
color=gray75;
1010[label="192.194.225.0;75pkt 75fpkt", shape=pentagon, color=darkviolet];
5701[label="192.194.225.0;75pkt 75fpkt", shape=invtriangle, color=brown];
stat1423[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.194.225.0:*, *:3128}[50.6667%]&lt;BR/&gt;{192.194.225.0:*, *:1080}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25.3333%)&lt;BR/&gt; 1080: (24.6667%)&lt;BR/&gt; 1910: (1.33333%)&lt;BR/&gt; 1780: (1.33333%)&lt;BR/&gt; 4962: (0.666667%)&gt;];
}
1010--5701[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="192.194.225.0"/>
      <filter dst_port="1080" src_ip="192.194.225.0"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1424{
style=filled;
color=gray75;
1015[label="198.198.16.1;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5705[label="198.198.16.1;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1424[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.16.1:80, 209.29.138.126:*}[62.5%]&lt;BR/&gt;{198.198.16.1:80, 209.29.138.127:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3894: (6.25%)&lt;BR/&gt; 2958: (6.25%)&lt;BR/&gt; 2860: (6.25%)&lt;BR/&gt; 2568: (6.25%)&gt;];
}
1015--5705[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.198.16.1" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.198.16.1" src_port="80"/>
    </slice>
    <from sec="1083733670" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.149.33.1"/>
    </slice>
    <from sec="1083733871" usec="0"/>
    <to sec="1083733974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.33.50.1"/>
    </slice>
    <from sec="1083733973" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1427{
style=filled;
color=gray75;
1020[label="208.183.52.1;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5710[label="208.183.52.1;13pkt 13fpkt", shape=invtriangle, color=brown];
8991[label="208.183.52.1;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1427[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.183.52.1:*, *:445}[61.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (30.7692%)&lt;BR/&gt; 2745: (7.69231%)&lt;BR/&gt; 135: (7.69231%)&lt;BR/&gt; 4787: (3.84615%)&lt;BR/&gt; 4274: (3.84615%)&gt;];
}
1020--5710[label="1;13pkt 13fpkt"];
1020--8991[label="1;13pkt 13fpkt"];
5710--8991[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="208.183.52.1"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083734071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.102.87.1"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1429{
style=filled;
color=gray75;
1028[label="109.25.104.1;223pkt 223fpkt", shape=pentagon, color=darkviolet];
5717[label="109.25.104.1;223pkt 223fpkt", shape=invtriangle, color=brown];
8997[label="109.25.104.1;223pkt 223fpkt", shape=invhouse, color=bisque];
stat1429[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.25.104.1:*, *:3127}[33.6323%]&lt;BR/&gt;{109.25.104.1:*, *:1080}[33.1839%]&lt;BR/&gt;{109.25.104.1:*, *:3128}[33.1839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (16.8161%)&lt;BR/&gt; 3128: (16.5919%)&lt;BR/&gt; 1080: (16.5919%)&lt;BR/&gt; 4256: (0.44843%)&lt;BR/&gt; 3427: (0.44843%)&gt;];
}
1028--5717[label="1;223pkt 223fpkt"];
1028--8997[label="1;223pkt 223fpkt"];
5717--8997[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="109.25.104.1"/>
      <filter dst_port="3128" src_ip="109.25.104.1"/>
      <filter dst_port="1080" src_ip="109.25.104.1"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1430{
style=filled;
color=gray75;
1031[label="141.22.118.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5719[label="141.22.118.1;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1430[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.118.1:3022, 213.101.193.114:1863}[33.3333%]&lt;BR/&gt;{141.22.118.1:3094, 213.101.197.130:1863}[33.3333%]&lt;BR/&gt;{141.22.118.1:3175, 213.101.197.130:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3175: (16.6667%)&lt;BR/&gt; 3094: (16.6667%)&lt;BR/&gt; 3022: (16.6667%)&gt;];
}
1031--5719[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.197.130" dst_port="1863" src_ip="141.22.118.1" src_port="3175"/>
      <filter dst_ip="213.101.197.130" dst_port="1863" src_ip="141.22.118.1" src_port="3094"/>
      <filter dst_ip="213.101.193.114" dst_port="1863" src_ip="141.22.118.1" src_port="3022"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1431{
style=filled;
color=gray75;
1033[label="136.150.136.1;129pkt 129fpkt", shape=pentagon, color=darkviolet];
5720[label="136.150.136.1;129pkt 129fpkt", shape=invtriangle, color=brown];
8999[label="136.150.136.1;129pkt 129fpkt", shape=invhouse, color=bisque];
stat1431[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.136.1:*, 45.172.196.239:80}[30.2326%]&lt;BR/&gt;{136.150.136.1:*, 45.172.198.144:80}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2315: (0.387597%)&lt;BR/&gt; 2314: (0.387597%)&lt;BR/&gt; 2313: (0.387597%)&lt;BR/&gt; 2312: (0.387597%)&gt;];
}
1033--5720[label="1;129pkt 129fpkt"];
1033--8999[label="1;129pkt 129fpkt"];
5720--8999[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_ip="45.172.196.239" dst_port="80" src_ip="136.150.136.1"/>
      <filter dst_ip="45.172.198.144" dst_port="80" src_ip="136.150.136.1"/>
    </slice>
    <from sec="1083733283" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.42.141.1"/>
    </slice>
    <from sec="1083733823" usec="0"/>
    <to sec="1083733863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1433{
style=filled;
color=gray75;
1035[label="173.138.149.1;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5722[label="173.138.149.1;10pkt 10fpkt", shape=invtriangle, color=brown];
9000[label="173.138.149.1;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1433[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.149.1:25, 46.71.197.25:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45%)&lt;BR/&gt; 51684: (5%)&lt;BR/&gt; 38126: (5%)&lt;BR/&gt; 37793: (5%)&lt;BR/&gt; 37107: (5%)&gt;];
}
1035--5722[label="1;10pkt 10fpkt"];
1035--9000[label="1;10pkt 10fpkt"];
5722--9000[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="46.71.197.25" src_ip="173.138.149.1" src_port="25"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1434{
style=filled;
color=gray75;
1045[label="93.238.217.1;40pkt 40fpkt", shape=pentagon, color=darkviolet];
5728[label="93.238.217.1;40pkt 40fpkt", shape=invtriangle, color=brown];
9004[label="93.238.217.1;41pkt 41fpkt", shape=invhouse, color=bisque];
stat1434[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.238.217.1:*, *:80}[51.2195%]&lt;BR/&gt;{93.238.217.1:*, *:1025}[24.3902%]&lt;BR/&gt;{93.238.217.1:*, *:6129}[24.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.2066%)&lt;BR/&gt; 6129: (12.3967%)&lt;BR/&gt; 1025: (12.3967%)&lt;BR/&gt; 4518: (1.23967%)&lt;BR/&gt; 4376: (1.23967%)&gt;];
}
1045--5728[label="1;40pkt 40fpkt"];
1045--9004[label="1;40pkt 40fpkt"];
5728--9004[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="93.238.217.1"/>
      <filter dst_port="6129" src_ip="93.238.217.1"/>
      <filter dst_port="1025" src_ip="93.238.217.1"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1435{
style=filled;
color=gray75;
1047[label="219.211.9.2;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5730[label="219.211.9.2;27pkt 27fpkt", shape=invtriangle, color=brown];
stat1435[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.211.9.2:80, 136.151.126.144:*}[71.4286%]&lt;BR/&gt;{219.211.9.2:80, 136.151.106.172:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28791: (1.81818%)&lt;BR/&gt; 28786: (1.81818%)&lt;BR/&gt; 28783: (1.81818%)&lt;BR/&gt; 28756: (1.81818%)&gt;];
}
1047--5730[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.126.144" src_ip="219.211.9.2" src_port="80"/>
      <filter dst_ip="136.151.106.172" src_ip="219.211.9.2" src_port="80"/>
    </slice>
    <from sec="1083733288" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.54.11.2"/>
    </slice>
    <from sec="1083733272" usec="0"/>
    <to sec="1083733370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1437{
style=filled;
color=gray75;
1050[label="220.88.32.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5732[label="220.88.32.2;2pkt 2fpkt", shape=invtriangle, color=brown];
9007[label="220.88.32.2;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1437[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.88.32.2:80, 209.29.138.10:59534}[50%]&lt;BR/&gt;{220.88.32.2:80, 209.29.138.10:59934}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59934: (25%)&lt;BR/&gt; 59534: (25%)&gt;];
}
1050--5732[label="1;2pkt 2fpkt"];
1050--9007[label="1;2pkt 2fpkt"];
5732--9007[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="59934" src_ip="220.88.32.2" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="59534" src_ip="220.88.32.2" src_port="80"/>
    </slice>
    <from sec="1083733984" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1438{
style=filled;
color=gray75;
1052[label="198.198.83.2;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5734[label="198.198.83.2;16pkt 16fpkt", shape=invtriangle, color=brown];
9008[label="198.198.83.2;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1438[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.83.2:*, *:25}[75%]&lt;BR/&gt;{198.198.83.2:*, 136.151.229.152:*}[37.5%]&lt;BR/&gt;{198.198.83.2:113, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.234%)&lt;BR/&gt; 113: (12.766%)&lt;BR/&gt; 52552: (3.19149%)&lt;BR/&gt; 45920: (3.19149%)&lt;BR/&gt; 45050: (3.19149%)&gt;];
}
1052--5734[label="1;15pkt 15fpkt"];
1052--9008[label="1;15pkt 15fpkt"];
5734--9008[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.229.152" src_ip="198.198.83.2"/>
      <filter src_ip="198.198.83.2" src_port="113"/>
      <filter dst_port="25" src_ip="198.198.83.2"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1439{
style=filled;
color=gray75;
1053[label="202.140.89.2;57pkt 57fpkt", shape=pentagon, color=darkviolet];
5735[label="202.140.89.2;56pkt 56fpkt", shape=invtriangle, color=brown];
stat1439[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.140.89.2:80, 209.29.138.10:*}[96.4912%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6726%)&lt;BR/&gt; 25: (1.32743%)&lt;BR/&gt; 54084: (0.884956%)&lt;BR/&gt; 53897: (0.884956%)&lt;BR/&gt; 50714: (0.884956%)&gt;];
}
1053--5735[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="202.140.89.2" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.238.104.2"/>
    </slice>
    <from sec="1083733598" usec="0"/>
    <to sec="1083733903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="174.176.108.2"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1442{
style=filled;
color=gray75;
1061[label="109.195.152.2;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5740[label="109.195.152.2;7pkt 7fpkt", shape=invtriangle, color=brown];
9013[label="109.195.152.2;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1442[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.195.152.2:0, *:0}[57.1429%]&lt;BR/&gt;{109.195.152.2:*, *:445}[28.5714%]&lt;BR/&gt;{109.195.152.2:*, 141.132.230.24:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (57.1429%)&lt;BR/&gt; 445: (14.2857%)&lt;BR/&gt; 4932: (7.14286%)&lt;BR/&gt; 2682: (7.14286%)&lt;BR/&gt; 2440: (7.14286%)&gt;];
}
1061--5740[label="1;7pkt 7fpkt"];
1061--9013[label="1;7pkt 7fpkt"];
5740--9013[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.132.230.24" src_ip="109.195.152.2"/>
      <filter dst_port="445" src_ip="109.195.152.2"/>
      <filter src_ip="109.195.152.2"/>
    </slice>
    <from sec="1083733302" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1443{
style=filled;
color=gray75;
1065[label="209.142.232.2;40pkt 40fpkt", shape=pentagon, color=darkviolet];
5743[label="209.142.232.2;39pkt 39fpkt", shape=invtriangle, color=brown];
9016[label="209.142.232.2;40pkt 40fpkt", shape=invhouse, color=bisque];
stat1443[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.142.232.2:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (7.56303%)&lt;BR/&gt; 3127: (7.56303%)&lt;BR/&gt; 1025: (7.56303%)&lt;BR/&gt; 445: (7.56303%)&lt;BR/&gt; 2745: (7.14286%)&gt;];
}
1065--5743[label="1;39pkt 39fpkt"];
1065--9016[label="1;40pkt 40fpkt"];
5743--9016[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="209.142.232.2"/>
    </slice>
    <from sec="1083733521" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.205.22.3"/>
    </slice>
    <from sec="1083733431" usec="0"/>
    <to sec="1083733640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.128.34.3"/>
    </slice>
    <from sec="1083733922" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1446{
style=filled;
color=gray75;
1070[label="198.198.83.3;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5747[label="198.198.83.3;18pkt 18fpkt", shape=invtriangle, color=brown];
9018[label="198.198.83.3;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1446[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.83.3:*, 136.151.229.152:25}[22.2222%]&lt;BR/&gt;{198.198.83.3:113, 136.151.229.152:*}[22.2222%]&lt;BR/&gt;{198.198.83.3:*, 136.151.47.226:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.3333%)&lt;BR/&gt; 113: (16.6667%)&lt;BR/&gt; 43072: (2.77778%)&lt;BR/&gt; 42021: (2.77778%)&lt;BR/&gt; 41934: (2.77778%)&gt;];
}
1070--5747[label="1;18pkt 18fpkt"];
1070--9018[label="1;18pkt 18fpkt"];
5747--9018[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.47.226" src_ip="198.198.83.3"/>
      <filter dst_ip="136.151.229.152" src_ip="198.198.83.3" src_port="113"/>
      <filter dst_ip="136.151.229.152" dst_port="25" src_ip="198.198.83.3"/>
    </slice>
    <from sec="1083733290" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1447{
style=filled;
color=gray75;
1071[label="193.114.85.3;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5748[label="193.114.85.3;22pkt 22fpkt", shape=invtriangle, color=brown];
9019[label="193.114.85.3;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1447[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.85.3:21, 155.148.45.212:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 3621: (2.20588%)&lt;BR/&gt; 3620: (2.20588%)&lt;BR/&gt; 3619: (2.20588%)&lt;BR/&gt; 3616: (2.20588%)&gt;];
}
1071--5748[label="1;22pkt 22fpkt"];
1071--9019[label="1;23pkt 23fpkt"];
5748--9019[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.45.212" src_ip="193.114.85.3" src_port="21"/>
    </slice>
    <from sec="1083733850" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.107.3"/>
    </slice>
    <from sec="1083733991" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1449{
style=filled;
color=gray75;
1077[label="198.227.133.3;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5752[label="198.227.133.3;3pkt 3fpkt", shape=invtriangle, color=brown];
9022[label="198.227.133.3;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1449[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.227.133.3:80, 155.148.182.202:30076}[33.3333%]&lt;BR/&gt;{198.227.133.3:80, 155.148.182.202:30372}[33.3333%]&lt;BR/&gt;{198.227.133.3:80, 155.148.182.202:30387}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30387: (16.6667%)&lt;BR/&gt; 30372: (16.6667%)&lt;BR/&gt; 30076: (16.6667%)&gt;];
}
1077--5752[label="1;3pkt 3fpkt"];
1077--9022[label="1;3pkt 3fpkt"];
5752--9022[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" dst_port="30387" src_ip="198.227.133.3" src_port="80"/>
      <filter dst_ip="155.148.182.202" dst_port="30372" src_ip="198.227.133.3" src_port="80"/>
      <filter dst_ip="155.148.182.202" dst_port="30076" src_ip="198.227.133.3" src_port="80"/>
    </slice>
    <from sec="1083733488" usec="0"/>
    <to sec="1083733682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.17.170.3"/>
    </slice>
    <from sec="1083734026" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1451{
style=filled;
color=gray75;
1082[label="155.148.242.3;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5756[label="155.148.242.3;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1451[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.242.3:*, 202.109.232.208:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2973%)&lt;BR/&gt; 1153: (2.7027%)&lt;BR/&gt; 1152: (2.7027%)&lt;BR/&gt; 1151: (2.7027%)&lt;BR/&gt; 1150: (2.7027%)&gt;];
}
1082--5756[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="202.109.232.208" dst_port="80" src_ip="155.148.242.3"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083734010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.66.42.4"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1453{
style=filled;
color=gray75;
1087[label="53.240.42.4;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5760[label="53.240.42.4;12pkt 12fpkt", shape=invtriangle, color=brown];
9026[label="53.240.42.4;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1453[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.240.42.4:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59582: (4.16667%)&lt;BR/&gt; 52086: (4.16667%)&lt;BR/&gt; 51896: (4.16667%)&lt;BR/&gt; 51506: (4.16667%)&gt;];
}
1087--5760[label="1;12pkt 12fpkt"];
1087--9026[label="1;12pkt 12fpkt"];
5760--9026[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="53.240.42.4" src_port="80"/>
    </slice>
    <from sec="1083733290" usec="0"/>
    <to sec="1083734000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1454{
style=filled;
color=gray75;
1090[label="208.96.54.4;91pkt 91fpkt", shape=pentagon, color=darkviolet];
5762[label="208.96.54.4;91pkt 91fpkt", shape=invtriangle, color=brown];
stat1454[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.54.4:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1090--5762[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.54.4"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1455{
style=filled;
color=gray75;
1091[label="93.192.65.4;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5763[label="93.192.65.4;32pkt 32fpkt", shape=invtriangle, color=brown];
stat1455[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.192.65.4:*, *:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 64586: (1.5625%)&lt;BR/&gt; 61933: (1.5625%)&lt;BR/&gt; 60951: (1.5625%)&lt;BR/&gt; 60566: (1.5625%)&gt;];
}
1091--5763[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="93.192.65.4"/>
    </slice>
    <from sec="1083733248" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1456{
style=filled;
color=gray75;
1097[label="173.138.129.4;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5767[label="173.138.129.4;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1456[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.129.4:80, *:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 123: (16.6667%)&lt;BR/&gt; 6667: (8.33333%)&lt;BR/&gt; 6665: (8.33333%)&lt;BR/&gt; 4655: (8.33333%)&gt;];
}
1097--5767[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.129.4" src_port="80"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.66.228.4"/>
    </slice>
    <from sec="1083733652" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.193.1.5"/>
    </slice>
    <from sec="1083733588" usec="0"/>
    <to sec="1083733749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1459{
style=filled;
color=gray75;
1107[label="109.215.32.5;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5773[label="109.215.32.5;9pkt 9fpkt", shape=invtriangle, color=brown];
9034[label="109.215.32.5;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1459[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.215.32.5:0, *:0}[70%]&lt;BR/&gt;{109.215.32.5:*, *:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (72.4138%)&lt;BR/&gt; 445: (10.3448%)&lt;BR/&gt; 2405: (5.17241%)&lt;BR/&gt; 1844: (5.17241%)&lt;BR/&gt; 1295: (3.44828%)&gt;];
}
1107--5773[label="1;9pkt 9fpkt"];
1107--9034[label="1;10pkt 10fpkt"];
5773--9034[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.215.32.5"/>
      <filter src_ip="109.215.32.5"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.4.36.5"/>
    </slice>
    <from sec="1083733314" usec="0"/>
    <to sec="1083733407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1461{
style=filled;
color=gray75;
1111[label="93.211.88.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5777[label="93.211.88.5;1pkt 1fpkt", shape=invtriangle, color=brown];
9036[label="93.211.88.5;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1461[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.211.88.5:3247, 155.148.177.0:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3247: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
1111--5777[label="1;1pkt 1fpkt"];
1111--9036[label="1;1pkt 1fpkt"];
5777--9036[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.177.0" dst_port="445" src_ip="93.211.88.5" src_port="3247"/>
    </slice>
    <from sec="1083733486" usec="0"/>
    <to sec="1083733735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1462{
style=filled;
color=gray75;
1113[label="93.16.111.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5778[label="93.16.111.5;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1462[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.16.111.5:2877, 155.148.243.93:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2877: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
1113--5778[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.243.93" dst_port="445" src_ip="93.16.111.5" src_port="2877"/>
    </slice>
    <from sec="1083733287" usec="0"/>
    <to sec="1083733697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1463{
style=filled;
color=gray75;
1115[label="173.138.149.5;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5779[label="173.138.149.5;23pkt 23fpkt", shape=invtriangle, color=brown];
9037[label="173.138.149.5;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1463[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.149.5:80, 210.3.24.15:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2147: (2.14286%)&lt;BR/&gt; 2146: (2.14286%)&lt;BR/&gt; 2143: (2.14286%)&lt;BR/&gt; 2142: (2.14286%)&gt;];
}
1115--5779[label="1;23pkt 23fpkt"];
1115--9037[label="1;23pkt 23fpkt"];
5779--9037[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="210.3.24.15" src_ip="173.138.149.5" src_port="80"/>
    </slice>
    <from sec="1083733463" usec="0"/>
    <to sec="1083734075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1464{
style=filled;
color=gray75;
1117[label="201.244.159.5;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5781[label="201.244.159.5;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1464[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.244.159.5:*, 136.151.232.127:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41371: (1.36986%)&lt;BR/&gt; 40964: (1.36986%)&lt;BR/&gt; 40961: (1.36986%)&lt;BR/&gt; 40637: (1.36986%)&gt;];
}
1117--5781[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.232.127" dst_port="80" src_ip="201.244.159.5"/>
    </slice>
    <from sec="1083733944" usec="0"/>
    <to sec="1083734002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.95.178.5"/>
    </slice>
    <from sec="1083733891" usec="0"/>
    <to sec="1083733965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1466{
style=filled;
color=gray75;
1125[label="46.71.197.5;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5785[label="46.71.197.5;12pkt 12fpkt", shape=invtriangle, color=brown];
9042[label="46.71.197.5;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1466[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.197.5:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 36015: (4.16667%)&lt;BR/&gt; 34379: (4.16667%)&lt;BR/&gt; 27754: (4.16667%)&lt;BR/&gt; 26035: (4.16667%)&gt;];
}
1125--5785[label="1;12pkt 12fpkt"];
1125--9042[label="1;12pkt 12fpkt"];
5785--9042[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="46.71.197.5"/>
    </slice>
    <from sec="1083733248" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1467{
style=filled;
color=gray75;
1129[label="192.33.231.5;239pkt 239fpkt", shape=pentagon, color=darkviolet];
5788[label="192.33.231.5;240pkt 240fpkt", shape=invtriangle, color=brown];
9045[label="192.33.231.5;239pkt 239fpkt", shape=invhouse, color=bisque];
stat1467[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.33.231.5:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1129--5788[label="1;239pkt 239fpkt"];
1129--9045[label="1;239pkt 239fpkt"];
5788--9045[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.33.231.5" src_port="1028"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.18.16.6"/>
    </slice>
    <from sec="1083733315" usec="0"/>
    <to sec="1083733649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1469{
style=filled;
color=gray75;
1135[label="94.230.17.6;163pkt 163fpkt", shape=pentagon, color=darkviolet];
5791[label="94.230.17.6;164pkt 164fpkt", shape=invtriangle, color=brown];
9047[label="94.230.17.6;164pkt 164fpkt", shape=invhouse, color=bisque];
stat1469[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.230.17.6:3693, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3693: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1135--5791[label="1;163pkt 163fpkt"];
1135--9047[label="1;163pkt 163fpkt"];
5791--9047[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="94.230.17.6" src_port="3693"/>
    </slice>
    <from sec="1083733834" usec="0"/>
    <to sec="1083733869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1470{
style=filled;
color=gray75;
1136[label="218.160.42.6;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5792[label="218.160.42.6;33pkt 33fpkt", shape=invtriangle, color=brown];
9048[label="218.160.42.6;33pkt 33fpkt", shape=invhouse, color=bisque];
stat1470[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.160.42.6:80, 141.22.86.56:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33992: (1.51515%)&lt;BR/&gt; 33990: (1.51515%)&lt;BR/&gt; 33906: (1.51515%)&lt;BR/&gt; 33899: (1.51515%)&gt;];
}
1136--5792[label="1;33pkt 33fpkt"];
1136--9048[label="1;33pkt 33fpkt"];
5792--9048[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.56" src_ip="218.160.42.6" src_port="80"/>
    </slice>
    <from sec="1083733894" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1471{
style=filled;
color=gray75;
1145[label="196.109.160.6;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5797[label="196.109.160.6;4pkt 4fpkt", shape=invtriangle, color=brown];
9052[label="196.109.160.6;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1471[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.109.160.6:3010, 136.151.235.67:80}[20%]&lt;BR/&gt;{196.109.160.6:1553, 155.148.145.68:80}[20%]&lt;BR/&gt;{196.109.160.6:2023, 141.22.49.139:80}[20%]&lt;BR/&gt;{196.109.160.6:3136, 208.96.14.206:80}[20%]&lt;BR/&gt;{196.109.160.6:2614, 141.211.66.238:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3136: (11.5385%)&lt;BR/&gt; 2614: (11.5385%)&lt;BR/&gt; 2023: (11.5385%)&lt;BR/&gt; 1553: (11.5385%)&gt;];
}
1145--5797[label="1;4pkt 4fpkt"];
1145--9052[label="1;4pkt 4fpkt"];
5797--9052[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.211.66.238" dst_port="80" src_ip="196.109.160.6" src_port="2614"/>
      <filter dst_ip="208.96.14.206" dst_port="80" src_ip="196.109.160.6" src_port="3136"/>
      <filter dst_ip="141.22.49.139" dst_port="80" src_ip="196.109.160.6" src_port="2023"/>
      <filter dst_ip="155.148.145.68" dst_port="80" src_ip="196.109.160.6" src_port="1553"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="196.109.160.6" src_port="3010"/>
    </slice>
    <from sec="1083733268" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.84.200.6"/>
    </slice>
    <from sec="1083733312" usec="0"/>
    <to sec="1083733654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1473{
style=filled;
color=gray75;
1148[label="41.32.219.6;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5800[label="41.32.219.6;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1473[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.32.219.6:3685, 209.29.136.89:16072}[25%]&lt;BR/&gt;{41.32.219.6:30778, 209.29.136.89:2417}[25%]&lt;BR/&gt;{41.32.219.6:30778, 209.29.136.89:3218}[25%]&lt;BR/&gt;{41.32.219.6:30778, 209.29.136.89:3901}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30778: (37.5%)&lt;BR/&gt; 16072: (12.5%)&lt;BR/&gt; 3901: (12.5%)&lt;BR/&gt; 3685: (12.5%)&lt;BR/&gt; 3218: (12.5%)&gt;];
}
1148--5800[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3901" src_ip="41.32.219.6" src_port="30778"/>
      <filter dst_ip="209.29.136.89" dst_port="3218" src_ip="41.32.219.6" src_port="30778"/>
      <filter dst_ip="209.29.136.89" dst_port="2417" src_ip="41.32.219.6" src_port="30778"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="41.32.219.6" src_port="3685"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.224.238.6"/>
    </slice>
    <from sec="1083733763" usec="0"/>
    <to sec="1083733830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.17.49.7"/>
    </slice>
    <from sec="1083733831" usec="0"/>
    <to sec="1083733942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1476{
style=filled;
color=gray75;
1161[label="198.62.68.7;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5808[label="198.62.68.7;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1476[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.62.68.7:80, 209.29.138.10:45325}[20%]&lt;BR/&gt;{198.62.68.7:80, 209.29.138.10:45326}[20%]&lt;BR/&gt;{198.62.68.7:80, 209.29.138.10:45327}[20%]&lt;BR/&gt;{198.62.68.7:80, 209.29.138.10:45338}[20%]&lt;BR/&gt;{198.62.68.7:80, 209.29.138.10:45371}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45371: (10%)&lt;BR/&gt; 45338: (10%)&lt;BR/&gt; 45327: (10%)&lt;BR/&gt; 45326: (10%)&gt;];
}
1161--5808[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="45371" src_ip="198.62.68.7" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="45338" src_ip="198.62.68.7" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="45327" src_ip="198.62.68.7" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="45326" src_ip="198.62.68.7" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="45325" src_ip="198.62.68.7" src_port="80"/>
    </slice>
    <from sec="1083733465" usec="0"/>
    <to sec="1083733501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1477{
style=filled;
color=gray75;
1162[label="93.232.73.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5809[label="93.232.73.7;2pkt 2fpkt", shape=invtriangle, color=brown];
9056[label="93.232.73.7;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1477[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.232.73.7:2607, 141.211.77.4:445}[50%]&lt;BR/&gt;{93.232.73.7:2772, 141.211.77.4:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 2772: (25%)&lt;BR/&gt; 2607: (25%)&gt;];
}
1162--5809[label="1;2pkt 2fpkt"];
1162--9056[label="1;2pkt 2fpkt"];
5809--9056[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.211.77.4" dst_port="445" src_ip="93.232.73.7" src_port="2772"/>
      <filter dst_ip="141.211.77.4" dst_port="445" src_ip="93.232.73.7" src_port="2607"/>
    </slice>
    <from sec="1083733707" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.28.97.7"/>
    </slice>
    <from sec="1083733600" usec="0"/>
    <to sec="1083733688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1479{
style=filled;
color=gray75;
1168[label="136.150.113.7;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5816[label="136.150.113.7;25pkt 25fpkt", shape=invtriangle, color=brown];
9061[label="136.150.113.7;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1479[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.113.7:*, 196.3.160.64:80}[53.8462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.1579%)&lt;BR/&gt; 8000: (5.92105%)&lt;BR/&gt; 1863: (5.92105%)&lt;BR/&gt; 32957: (1.97368%)&lt;BR/&gt; 32956: (1.97368%)&gt;];
}
1168--5816[label="1;25pkt 25fpkt"];
1168--9061[label="1;25pkt 25fpkt"];
5816--9061[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="196.3.160.64" dst_port="80" src_ip="136.150.113.7"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.5.130.7"/>
    </slice>
    <from sec="1083733268" usec="0"/>
    <to sec="1083733310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.111.132.7"/>
    </slice>
    <from sec="1083733854" usec="0"/>
    <to sec="1083734041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1482{
style=filled;
color=gray75;
1172[label="155.148.136.7;117pkt 117fpkt", shape=pentagon, color=darkviolet];
5820[label="155.148.136.7;117pkt 117fpkt", shape=invtriangle, color=brown];
stat1482[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.136.7:*, 93.217.160.41:21}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (46.1538%)&lt;BR/&gt; 57851: (0.42735%)&lt;BR/&gt; 56476: (0.42735%)&lt;BR/&gt; 54167: (0.42735%)&lt;BR/&gt; 41442: (0.42735%)&gt;];
}
1172--5820[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_ip="93.217.160.41" dst_port="21" src_ip="155.148.136.7"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1483{
style=filled;
color=gray75;
1173[label="40.246.140.7;79pkt 79fpkt", shape=pentagon, color=darkviolet];
5821[label="40.246.140.7;79pkt 79fpkt", shape=invtriangle, color=brown];
9064[label="40.246.140.7;80pkt 80fpkt", shape=invhouse, color=bisque];
stat1483[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.246.140.7:53, 208.96.48.84:*}[67.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.6303%)&lt;BR/&gt; 65534: (1.89076%)&lt;BR/&gt; 1026: (1.89076%)&lt;BR/&gt; 32769: (1.2605%)&lt;BR/&gt; 65064: (0.630252%)&gt;];
}
1173--5821[label="1;79pkt 79fpkt"];
1173--9064[label="1;79pkt 79fpkt"];
5821--9064[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.48.84" src_ip="40.246.140.7" src_port="53"/>
    </slice>
    <from sec="1083733250" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1484{
style=filled;
color=gray75;
1174[label="128.86.146.7;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5822[label="128.86.146.7;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1484[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.86.146.7:2086, 209.29.128.108:445}[20%]&lt;BR/&gt;{128.86.146.7:1954, 141.132.118.113:445}[20%]&lt;BR/&gt;{128.86.146.7:3149, 141.22.73.120:445}[20%]&lt;BR/&gt;{128.86.146.7:4433, 209.18.102.132:445}[20%]&lt;BR/&gt;{128.86.146.7:4412, 155.148.108.194:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4433: (10%)&lt;BR/&gt; 4412: (10%)&lt;BR/&gt; 3149: (10%)&lt;BR/&gt; 2086: (10%)&gt;];
}
1174--5822[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.108.194" dst_port="445" src_ip="128.86.146.7" src_port="4412"/>
      <filter dst_ip="209.18.102.132" dst_port="445" src_ip="128.86.146.7" src_port="4433"/>
      <filter dst_ip="141.22.73.120" dst_port="445" src_ip="128.86.146.7" src_port="3149"/>
      <filter dst_ip="141.132.118.113" dst_port="445" src_ip="128.86.146.7" src_port="1954"/>
      <filter dst_ip="209.29.128.108" dst_port="445" src_ip="128.86.146.7" src_port="2086"/>
    </slice>
    <from sec="1083733545" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1485{
style=filled;
color=gray75;
1176[label="209.29.165.7;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5823[label="209.29.165.7;10pkt 10fpkt", shape=invtriangle, color=brown];
9065[label="209.29.165.7;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1485[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.165.7:80, 109.249.220.3:*}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3331: (4.83871%)&lt;BR/&gt; 2860: (4.83871%)&lt;BR/&gt; 2251: (4.83871%)&lt;BR/&gt; 2250: (4.83871%)&gt;];
}
1176--5823[label="1;10pkt 10fpkt"];
1176--9065[label="1;10pkt 10fpkt"];
5823--9065[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="109.249.220.3" src_ip="209.29.165.7" src_port="80"/>
    </slice>
    <from sec="1083733349" usec="0"/>
    <to sec="1083733893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.229.7"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083733787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.69.76.8"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083733478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1488{
style=filled;
color=gray75;
1187[label="40.213.90.8;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5828[label="40.213.90.8;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1488[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.213.90.8:80, 209.29.138.10:46439}[20%]&lt;BR/&gt;{40.213.90.8:80, 209.29.138.10:47589}[20%]&lt;BR/&gt;{40.213.90.8:80, 209.29.138.10:54323}[20%]&lt;BR/&gt;{40.213.90.8:80, 209.29.138.10:54422}[20%]&lt;BR/&gt;{40.213.90.8:80, 209.29.138.10:56027}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56027: (10%)&lt;BR/&gt; 54422: (10%)&lt;BR/&gt; 54323: (10%)&lt;BR/&gt; 47589: (10%)&gt;];
}
1187--5828[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="56027" src_ip="40.213.90.8" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="54422" src_ip="40.213.90.8" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="54323" src_ip="40.213.90.8" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="47589" src_ip="40.213.90.8" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="46439" src_ip="40.213.90.8" src_port="80"/>
    </slice>
    <from sec="1083733512" usec="0"/>
    <to sec="1083733902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.194.98.8"/>
    </slice>
    <from sec="1083733856" usec="0"/>
    <to sec="1083733917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.26.120.8"/>
    </slice>
    <from sec="1083733380" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1491{
style=filled;
color=gray75;
1192[label="168.76.132.8;111pkt 111fpkt", shape=pentagon, color=darkviolet];
5832[label="168.76.132.8;111pkt 111fpkt", shape=invtriangle, color=brown];
9070[label="168.76.132.8;111pkt 111fpkt", shape=invhouse, color=bisque];
stat1491[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.132.8:*, *:80}[25.2252%]&lt;BR/&gt;{168.76.132.8:*, *:1433}[25.2252%]&lt;BR/&gt;{168.76.132.8:*, *:6129}[25.2252%]&lt;BR/&gt;{168.76.132.8:*, *:2745}[24.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (12.6126%)&lt;BR/&gt; 1433: (12.6126%)&lt;BR/&gt; 80: (12.6126%)&lt;BR/&gt; 2745: (12.1622%)&lt;BR/&gt; 2427: (0.900901%)&gt;];
}
1192--5832[label="1;111pkt 111fpkt"];
1192--9070[label="1;111pkt 111fpkt"];
5832--9070[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="168.76.132.8"/>
      <filter dst_port="1433" src_ip="168.76.132.8"/>
      <filter dst_port="80" src_ip="168.76.132.8"/>
      <filter dst_port="2745" src_ip="168.76.132.8"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.32.142.8"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083733291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.11.170.8"/>
    </slice>
    <from sec="1083733721" usec="0"/>
    <to sec="1083733799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1494{
style=filled;
color=gray75;
808[label="44.61.187.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
1195[label="141.22.188.8;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5835[label="141.22.188.8;4pkt 4fpkt", shape=invtriangle, color=brown];
9073[label="141.22.188.8;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1494[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.188.8:25, 215.114.143.48:40258}[20%]&lt;BR/&gt;{141.22.188.8:25, 216.30.16.142:1747}[20%]&lt;BR/&gt;{141.22.188.8:25, 44.61.187.235:8080}[20%]&lt;BR/&gt;{141.22.188.8:25, 198.198.112.234:24748}[20%]&lt;BR/&gt;{141.22.188.8:25, 198.198.112.234:25249}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 40258: (10.7143%)&lt;BR/&gt; 25249: (10.7143%)&lt;BR/&gt; 24748: (10.7143%)&lt;BR/&gt; 1747: (10.7143%)&gt;];
}
808--9073[label="1;1pkt 1fpkt"];
1195--5835[label="1;4pkt 4fpkt"];
1195--9073[label="1;4pkt 4fpkt"];
5835--9073[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="198.198.112.234" dst_port="25249" src_ip="141.22.188.8" src_port="25"/>
      <filter dst_ip="198.198.112.234" dst_port="24748" src_ip="141.22.188.8" src_port="25"/>
      <filter dst_ip="44.61.187.235" dst_port="8080" src_ip="141.22.188.8" src_port="25"/>
      <filter dst_ip="216.30.16.142" dst_port="1747" src_ip="141.22.188.8" src_port="25"/>
      <filter dst_ip="215.114.143.48" dst_port="40258" src_ip="141.22.188.8" src_port="25"/>
    </slice>
    <from sec="1083733412" usec="0"/>
    <to sec="1083734015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.42.242.8"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083733766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1496{
style=filled;
color=gray75;
1202[label="44.217.37.9;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5840[label="44.217.37.9;27pkt 27fpkt", shape=invtriangle, color=brown];
9076[label="44.217.37.9;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1496[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.217.37.9:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50587: (1.85185%)&lt;BR/&gt; 50528: (1.85185%)&lt;BR/&gt; 50500: (1.85185%)&lt;BR/&gt; 50470: (1.85185%)&gt;];
}
1202--5840[label="1;27pkt 27fpkt"];
1202--9076[label="1;27pkt 27fpkt"];
5840--9076[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="44.217.37.9" src_port="80"/>
    </slice>
    <from sec="1083733599" usec="0"/>
    <to sec="1083733693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.166.60.9"/>
    </slice>
    <from sec="1083733656" usec="0"/>
    <to sec="1083733978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.10.84.9"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.40.89.9"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.54.100.9"/>
    </slice>
    <from sec="1083733768" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1501{
style=filled;
color=gray75;
1213[label="136.151.126.9;43pkt 43fpkt", shape=pentagon, color=darkviolet];
5848[label="136.151.126.9;43pkt 43fpkt", shape=invtriangle, color=brown];
9081[label="136.151.126.9;44pkt 44fpkt", shape=invhouse, color=bisque];
stat1501[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.126.9:*, 175.0.84.180:80}[43.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 17411: (1.15385%)&lt;BR/&gt; 17408: (1.15385%)&lt;BR/&gt; 17398: (1.15385%)&lt;BR/&gt; 17378: (1.15385%)&gt;];
}
1213--5848[label="1;43pkt 43fpkt"];
1213--9081[label="1;43pkt 43fpkt"];
5848--9081[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="175.0.84.180" dst_port="80" src_ip="136.151.126.9"/>
    </slice>
    <from sec="1083733672" usec="0"/>
    <to sec="1083733996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.25.154.9"/>
    </slice>
    <from sec="1083733685" usec="0"/>
    <to sec="1083733785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.182.163.9"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1504{
style=filled;
color=gray75;
1217[label="192.50.192.9;245pkt 245fpkt", shape=pentagon, color=darkviolet];
5851[label="192.50.192.9;245pkt 245fpkt", shape=invtriangle, color=brown];
9083[label="192.50.192.9;245pkt 245fpkt", shape=invhouse, color=bisque];
stat1504[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.50.192.9:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1217--5851[label="1;245pkt 245fpkt"];
1217--9083[label="1;245pkt 245fpkt"];
5851--9083[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.50.192.9" src_port="1030"/>
    </slice>
    <from sec="1083733447" usec="0"/>
    <to sec="1083733462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.210.200.9"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1506{
style=filled;
color=gray75;
1220[label="214.60.202.9;35pkt 35fpkt", shape=pentagon, color=darkviolet];
5853[label="214.60.202.9;35pkt 35fpkt", shape=invtriangle, color=brown];
9084[label="214.60.202.9;35pkt 35fpkt", shape=invhouse, color=bisque];
stat1506[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.60.202.9:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41486: (1.42857%)&lt;BR/&gt; 41467: (1.42857%)&lt;BR/&gt; 41452: (1.42857%)&lt;BR/&gt; 41435: (1.42857%)&gt;];
}
1220--5853[label="1;35pkt 35fpkt"];
1220--9084[label="1;35pkt 35fpkt"];
5853--9084[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="214.60.202.9" src_port="80"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083733326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1507{
style=filled;
color=gray75;
837[label="141.22.210.9;s;54pkt 54fpkt", shape=diamond, color=yellow];
1221[label="141.22.210.9;57pkt 57fpkt", shape=pentagon, color=darkviolet];
5854[label="141.22.210.9;57pkt 57fpkt", shape=invtriangle, color=brown];
stat1507[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.210.9:25, *:*}[86.2069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.9167%)&lt;BR/&gt; 4685: (2.08333%)&lt;BR/&gt; 53: (2.08333%)&lt;BR/&gt; 4253: (1.78571%)&lt;BR/&gt; 60972: (0.892857%)&gt;];
}
837--1221[label="0.981481;53pkt 53fpkt"];
837--5854[label="0.981481;53pkt 53fpkt"];
1221--5854[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter src_ip="141.22.210.9" src_port="25"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.199.217.9"/>
    </slice>
    <from sec="1083733884" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1509{
style=filled;
color=gray75;
1224[label="53.90.224.9;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5856[label="53.90.224.9;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1509[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.90.224.9:80, 209.29.136.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2915: (3.125%)&lt;BR/&gt; 2914: (3.125%)&lt;BR/&gt; 2911: (3.125%)&lt;BR/&gt; 2910: (3.125%)&gt;];
}
1224--5856[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="53.90.224.9" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.35.233.9"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="94.230.23.10"/>
    </slice>
    <from sec="1083733575" usec="0"/>
    <to sec="1083733806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.127.52.10"/>
    </slice>
    <from sec="1083733586" usec="0"/>
    <to sec="1083733840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.51.73.10"/>
    </slice>
    <from sec="1083733325" usec="0"/>
    <to sec="1083733415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1514{
style=filled;
color=gray75;
1238[label="212.169.79.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5866[label="212.169.79.10;3pkt 3fpkt", shape=invtriangle, color=brown];
9093[label="212.169.79.10;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1514[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.169.79.10:38021, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{212.169.79.10:3230, 141.211.253.116:445}[33.3333%]&lt;BR/&gt;{212.169.79.10:1644, 173.138.217.172:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 38021: (16.6667%)&lt;BR/&gt; 3230: (16.6667%)&lt;BR/&gt; 1644: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
1238--5866[label="1;3pkt 3fpkt"];
1238--9093[label="1;3pkt 3fpkt"];
5866--9093[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.217.172" dst_port="445" src_ip="212.169.79.10" src_port="1644"/>
      <filter dst_ip="141.211.253.116" dst_port="445" src_ip="212.169.79.10" src_port="3230"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="212.169.79.10" src_port="38021"/>
    </slice>
    <from sec="1083733586" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.91.148.10"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083733609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1516{
style=filled;
color=gray75;
1247[label="136.150.149.10;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5872[label="136.150.149.10;8pkt 8fpkt", shape=invtriangle, color=brown];
9098[label="136.150.149.10;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1516[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.149.10:*, 46.65.3.187:80}[50%]&lt;BR/&gt;{136.150.149.10:*, 44.67.69.215:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33049: (6.25%)&lt;BR/&gt; 33048: (6.25%)&lt;BR/&gt; 33042: (6.25%)&lt;BR/&gt; 33026: (6.25%)&gt;];
}
1247--5872[label="1;8pkt 8fpkt"];
1247--9098[label="1;8pkt 8fpkt"];
5872--9098[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="46.65.3.187" dst_port="80" src_ip="136.150.149.10"/>
      <filter dst_ip="44.67.69.215" dst_port="80" src_ip="136.150.149.10"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.217.216.10"/>
    </slice>
    <from sec="1083733963" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.22.238.10"/>
    </slice>
    <from sec="1083733622" usec="0"/>
    <to sec="1083733736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="94.149.9.11"/>
    </slice>
    <from sec="1083733702" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1520{
style=filled;
color=gray75;
1257[label="209.136.33.11;72pkt 72fpkt", shape=pentagon, color=darkviolet];
5881[label="209.136.33.11;72pkt 72fpkt", shape=invtriangle, color=brown];
9102[label="209.136.33.11;72pkt 72fpkt", shape=invhouse, color=bisque];
stat1520[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.136.33.11:*, *:1025}[20.8333%]&lt;BR/&gt;{209.136.33.11:*, *:3127}[20.8333%]&lt;BR/&gt;{209.136.33.11:*, *:6129}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (10.4167%)&lt;BR/&gt; 3127: (10.4167%)&lt;BR/&gt; 1025: (10.4167%)&lt;BR/&gt; 80: (9.72222%)&lt;BR/&gt; 2745: (9.02778%)&gt;];
}
1257--5881[label="1;72pkt 72fpkt"];
1257--9102[label="1;72pkt 72fpkt"];
5881--9102[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="209.136.33.11"/>
      <filter dst_port="3127" src_ip="209.136.33.11"/>
      <filter dst_port="1025" src_ip="209.136.33.11"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.1.40.11"/>
    </slice>
    <from sec="1083733451" usec="0"/>
    <to sec="1083733514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1522{
style=filled;
color=gray75;
1260[label="53.240.42.11;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5884[label="53.240.42.11;15pkt 15fpkt", shape=invtriangle, color=brown];
9104[label="53.240.42.11;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1522[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.240.42.11:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60131: (3.33333%)&lt;BR/&gt; 53522: (3.33333%)&lt;BR/&gt; 52834: (3.33333%)&lt;BR/&gt; 50970: (3.33333%)&gt;];
}
1260--5884[label="1;15pkt 15fpkt"];
1260--9104[label="1;15pkt 15fpkt"];
5884--9104[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="53.240.42.11" src_port="80"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083734019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1523{
style=filled;
color=gray75;
1261[label="208.96.50.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5885[label="208.96.50.11;1pkt 1fpkt", shape=invtriangle, color=brown];
9105[label="208.96.50.11;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1523[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.50.11:80, 217.147.195.138:2650}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2650: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1261--5885[label="1;1pkt 1fpkt"];
1261--9105[label="1;1pkt 1fpkt"];
5885--9105[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.147.195.138" dst_port="2650" src_ip="208.96.50.11" src_port="80"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.103.130.11"/>
    </slice>
    <from sec="1083733775" usec="0"/>
    <to sec="1083733885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.127.177.11"/>
    </slice>
    <from sec="1083734005" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.139.20.12"/>
    </slice>
    <from sec="1083733347" usec="0"/>
    <to sec="1083733685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1527{
style=filled;
color=gray75;
1277[label="210.118.38.12;104pkt 104fpkt", shape=pentagon, color=darkviolet];
5895[label="210.118.38.12;103pkt 103fpkt", shape=invtriangle, color=brown];
9113[label="210.118.38.12;103pkt 103fpkt", shape=invhouse, color=bisque];
stat1527[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.118.38.12:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1277--5895[label="1;103pkt 103fpkt"];
1277--9113[label="1;103pkt 103fpkt"];
5895--9113[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.118.38.12" src_port="1025"/>
    </slice>
    <from sec="1083734000" usec="0"/>
    <to sec="1083734025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.214.68.12"/>
    </slice>
    <from sec="1083733517" usec="0"/>
    <to sec="1083733626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.179.105.12"/>
    </slice>
    <from sec="1083733360" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.36.147.12"/>
    </slice>
    <from sec="1083733686" usec="0"/>
    <to sec="1083733784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.140.153.12"/>
    </slice>
    <from sec="1083733854" usec="0"/>
    <to sec="1083733988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1532{
style=filled;
color=gray75;
96[label="44.112.167.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
5902[label="44.112.167.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1532[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.112.167.12:6881, 168.127.113.129:2652}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2652: (50%)&gt;];
}
96--5902[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2652" src_ip="44.112.167.12" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1534{
style=filled;
color=gray75;
1300[label="40.243.113.13;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5913[label="40.243.113.13;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1534[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.243.113.13:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46390: (2.94118%)&lt;BR/&gt; 46363: (2.94118%)&lt;BR/&gt; 46310: (2.94118%)&lt;BR/&gt; 46261: (2.94118%)&gt;];
}
1300--5913[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="40.243.113.13" src_port="80"/>
    </slice>
    <from sec="1083733461" usec="0"/>
    <to sec="1083733526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.240.134.13"/>
    </slice>
    <from sec="1083733805" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1536{
style=filled;
color=gray75;
611[label="136.151.144.13;s;149pkt 149fpkt", shape=diamond, color=yellow];
5917[label="136.151.144.13;200pkt 200fpkt", shape=invtriangle, color=brown];
9127[label="136.151.144.13;200pkt 200fpkt", shape=invhouse, color=bisque];
stat1536[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.144.13:*, 46.202.106.229:80}[24.5%]&lt;BR/&gt;{136.151.144.13:*, 46.50.116.252:80}[24.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49887: (0.364299%)&lt;BR/&gt; 49845: (0.273224%)&lt;BR/&gt; 49844: (0.273224%)&lt;BR/&gt; 49843: (0.273224%)&gt;];
}
611--982[label="0.00671141;1pkt 1fpkt"];
611--5917[label="1;149pkt 149fpkt"];
611--9127[label="1;149pkt 149fpkt"];
5917--9127[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter dst_ip="46.50.116.252" dst_port="80" src_ip="136.151.144.13"/>
      <filter dst_ip="46.202.106.229" dst_port="80" src_ip="136.151.144.13"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.187.152.13"/>
    </slice>
    <from sec="1083733253" usec="0"/>
    <to sec="1083733347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1538{
style=filled;
color=gray75;
1305[label="46.71.196.13;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5920[label="46.71.196.13;6pkt 6fpkt", shape=invtriangle, color=brown];
9129[label="46.71.196.13;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1538[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.196.13:*, 173.138.149.0:25}[33.3333%]&lt;BR/&gt;{46.71.196.13:*, 173.138.170.250:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 39708: (8.82353%)&lt;BR/&gt; 36483: (8.82353%)&lt;BR/&gt; 31953: (8.82353%)&lt;BR/&gt; 31940: (8.82353%)&gt;];
}
1305--5920[label="1;6pkt 6fpkt"];
1305--9129[label="1;5pkt 5fpkt"];
5920--9129[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.170.250" dst_port="25" src_ip="46.71.196.13"/>
      <filter dst_ip="173.138.149.0" dst_port="25" src_ip="46.71.196.13"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.208.13"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.192.226.13"/>
    </slice>
    <from sec="1083733245" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.218.250.13"/>
    </slice>
    <from sec="1083733927" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1542{
style=filled;
color=gray75;
1310[label="136.151.252.13;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5924[label="136.151.252.13;59pkt 59fpkt", shape=invtriangle, color=brown];
stat1542[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.252.13:*, *:113}[43.3333%]&lt;BR/&gt;{136.151.252.13:25, *:*}[43.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.1513%)&lt;BR/&gt; 113: (21.8487%)&lt;BR/&gt; 59632: (0.840336%)&lt;BR/&gt; 57143: (0.840336%)&lt;BR/&gt; 56463: (0.840336%)&gt;];
}
1310--5924[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.252.13" src_port="25"/>
      <filter dst_port="113" src_ip="136.151.252.13"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.171.14.14"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1544{
style=filled;
color=gray75;
1317[label="196.116.85.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5928[label="196.116.85.14;1pkt 1fpkt", shape=invtriangle, color=brown];
9136[label="196.116.85.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1544[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.116.85.14:4497, 141.85.114.42:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4497: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
1317--5928[label="1;1pkt 1fpkt"];
1317--9136[label="1;1pkt 1fpkt"];
5928--9136[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.114.42" dst_port="445" src_ip="196.116.85.14" src_port="4497"/>
    </slice>
    <from sec="1083733776" usec="0"/>
    <to sec="1083734008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1545{
style=filled;
color=gray75;
895[label="136.150.109.219;s;32pkt 32fpkt", shape=diamond, color=yellow];
1248[label="141.22.163.10;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5147[label="136.150.109.219;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5873[label="141.22.163.10;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1545[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.109.219:*, 198.222.103.197:80}[58.8235%]&lt;BR/&gt;{141.22.163.10:*, *:*}[31.3725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 1863: (4.08163%)&lt;BR/&gt; 62351: (3.06122%)&lt;BR/&gt; 62332: (3.06122%)&lt;BR/&gt; 443: (3.06122%)&gt;];
}
895--982[label="0.09375;3pkt 3fpkt"];
895--5147[label="0.96875;31pkt 31fpkt"];
1248--5873[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="141.22.163.10"/>
      <filter dst_ip="198.222.103.197" dst_port="80" src_ip="136.150.109.219"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.167.183.14"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1547{
style=filled;
color=gray75;
1336[label="197.108.53.15;443pkt 443fpkt", shape=pentagon, color=darkviolet];
5942[label="197.108.53.15;444pkt 444fpkt", shape=invtriangle, color=brown];
stat1547[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.108.53.15:1143, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1143: (50%)&gt;];
}
1336--5942[label="1;443pkt 443fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.108.53.15" src_port="1143"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.90.91.15"/>
    </slice>
    <from sec="1083733359" usec="0"/>
    <to sec="1083733468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.111.101.15"/>
    </slice>
    <from sec="1083733623" usec="0"/>
    <to sec="1083733755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.24.117.15"/>
    </slice>
    <from sec="1083733633" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.28.156.15"/>
    </slice>
    <from sec="1083733843" usec="0"/>
    <to sec="1083733935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.66.177.15"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.153.228.15"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1554{
style=filled;
color=gray75;
1353[label="136.151.249.15;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5953[label="136.151.249.15;25pkt 25fpkt", shape=invtriangle, color=brown];
9154[label="136.151.249.15;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1554[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.249.15:80, 45.108.82.184:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59878: (2.05479%)&lt;BR/&gt; 58298: (2.05479%)&lt;BR/&gt; 56800: (2.05479%)&lt;BR/&gt; 54984: (2.05479%)&gt;];
}
1353--5953[label="1;24pkt 24fpkt"];
1353--9154[label="1;24pkt 24fpkt"];
5953--9154[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="136.151.249.15" src_port="80"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1555{
style=filled;
color=gray75;
1355[label="46.225.4.16;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5954[label="46.225.4.16;29pkt 29fpkt", shape=invtriangle, color=brown];
9155[label="46.225.4.16;29pkt 29fpkt", shape=invhouse, color=bisque];
stat1555[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.225.4.16:80, 136.151.88.140:*}[82.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3846: (1.72414%)&lt;BR/&gt; 3669: (1.72414%)&lt;BR/&gt; 3249: (1.72414%)&lt;BR/&gt; 3229: (1.72414%)&gt;];
}
1355--5954[label="1;29pkt 29fpkt"];
1355--9155[label="1;29pkt 29fpkt"];
5954--9155[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.88.140" src_ip="46.225.4.16" src_port="80"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.53.8.16"/>
    </slice>
    <from sec="1083733653" usec="0"/>
    <to sec="1083733754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.19.82.16"/>
    </slice>
    <from sec="1083733720" usec="0"/>
    <to sec="1083733796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.22.86.16"/>
    </slice>
    <from sec="1083733875" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1559{
style=filled;
color=gray75;
1366[label="137.108.127.16;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5962[label="137.108.127.16;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1559[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.108.127.16:80, 209.29.138.127:*}[54.5455%]&lt;BR/&gt;{137.108.127.16:80, 209.29.138.126:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3572: (4.54545%)&lt;BR/&gt; 3571: (4.54545%)&lt;BR/&gt; 3407: (4.54545%)&lt;BR/&gt; 2984: (4.54545%)&gt;];
}
1366--5962[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="137.108.127.16" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="137.108.127.16" src_port="80"/>
    </slice>
    <from sec="1083733984" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1560{
style=filled;
color=gray75;
1372[label="141.22.210.16;69pkt 69fpkt", shape=pentagon, color=darkviolet];
5966[label="141.22.210.16;69pkt 69fpkt", shape=invtriangle, color=brown];
9165[label="141.22.210.16;69pkt 69fpkt", shape=invhouse, color=bisque];
stat1560[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.210.16:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.3478%)&lt;BR/&gt; 32768: (2.89855%)&lt;BR/&gt; 32770: (1.44928%)&lt;BR/&gt; 1024: (1.44928%)&lt;BR/&gt; 64967: (0.724638%)&gt;];
}
1372--5966[label="1;69pkt 69fpkt"];
1372--9165[label="1;69pkt 69fpkt"];
5966--9165[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter src_ip="141.22.210.16" src_port="53"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1561{
style=filled;
color=gray75;
1374[label="47.38.13.17;221pkt 221fpkt", shape=pentagon, color=darkviolet];
5968[label="47.38.13.17;221pkt 221fpkt", shape=invtriangle, color=brown];
stat1561[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.38.13.17:43717, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43717: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1374--5968[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="47.38.13.17" src_port="43717"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1562{
style=filled;
color=gray75;
1378[label="208.96.48.17;83pkt 83fpkt", shape=pentagon, color=darkviolet];
5970[label="208.96.48.17;84pkt 84fpkt", shape=invtriangle, color=brown];
stat1562[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.48.17:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1378--5970[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.48.17"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1563{
style=filled;
color=gray75;
1379[label="208.96.51.17;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5971[label="208.96.51.17;9pkt 9fpkt", shape=invtriangle, color=brown];
9167[label="208.96.51.17;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1563[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.51.17:*, 213.101.36.85:80}[22.2222%]&lt;BR/&gt;{208.96.51.17:*, 213.101.100.90:80}[22.2222%]&lt;BR/&gt;{208.96.51.17:*, 213.101.36.43:80}[22.2222%]&lt;BR/&gt;{208.96.51.17:*, *:443}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4615%)&lt;BR/&gt; 443: (11.5385%)&lt;BR/&gt; 1588: (5.76923%)&lt;BR/&gt; 1577: (5.76923%)&lt;BR/&gt; 1572: (5.76923%)&gt;];
}
1379--5971[label="1;9pkt 9fpkt"];
1379--9167[label="1;8pkt 8fpkt"];
5971--9167[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="208.96.51.17"/>
      <filter dst_ip="213.101.36.43" dst_port="80" src_ip="208.96.51.17"/>
      <filter dst_ip="213.101.100.90" dst_port="80" src_ip="208.96.51.17"/>
      <filter dst_ip="213.101.36.85" dst_port="80" src_ip="208.96.51.17"/>
    </slice>
    <from sec="1083733940" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.121.53.17"/>
    </slice>
    <from sec="1083733618" usec="0"/>
    <to sec="1083733735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1565{
style=filled;
color=gray75;
930[label="216.143.120.17;s;24pkt 24fpkt", shape=diamond, color=yellow];
1387[label="216.143.120.17;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5978[label="216.143.120.17;31pkt 31fpkt", shape=invtriangle, color=brown];
stat1565[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.143.120.17:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59859: (1.74419%)&lt;BR/&gt; 57870: (1.74419%)&lt;BR/&gt; 55310: (1.74419%)&lt;BR/&gt; 54409: (1.74419%)&gt;];
}
930--1387[label="0.958333;23pkt 23fpkt"];
930--5978[label="0.958333;23pkt 23fpkt"];
1387--5978[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="216.143.120.17" src_port="80"/>
    </slice>
    <from sec="1083733543" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1566{
style=filled;
color=gray75;
1394[label="44.48.176.17;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5983[label="44.48.176.17;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1566[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.48.176.17:80, 155.148.182.202:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30146: (3.84615%)&lt;BR/&gt; 30145: (3.84615%)&lt;BR/&gt; 30098: (3.84615%)&lt;BR/&gt; 29922: (3.84615%)&gt;];
}
1394--5983[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" src_ip="44.48.176.17" src_port="80"/>
    </slice>
    <from sec="1083733279" usec="0"/>
    <to sec="1083733510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.2.179.17"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1568{
style=filled;
color=gray75;
1396[label="213.101.193.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5985[label="213.101.193.17;2pkt 2fpkt", shape=invtriangle, color=brown];
9172[label="213.101.193.17;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1568[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.193.17:1863, 168.127.218.32:3680}[50%]&lt;BR/&gt;{213.101.193.17:1863, 173.138.129.53:3097}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3680: (25%)&lt;BR/&gt; 3097: (25%)&gt;];
}
1396--5985[label="1;2pkt 2fpkt"];
1396--9172[label="1;2pkt 2fpkt"];
5985--9172[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.129.53" dst_port="3097" src_ip="213.101.193.17" src_port="1863"/>
      <filter dst_ip="168.127.218.32" dst_port="3680" src_ip="213.101.193.17" src_port="1863"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.117.203.17"/>
    </slice>
    <from sec="1083733475" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1570{
style=filled;
color=gray75;
1399[label="217.24.226.17;110pkt 110fpkt", shape=pentagon, color=darkviolet];
5987[label="217.24.226.17;110pkt 110fpkt", shape=invtriangle, color=brown];
stat1570[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.24.226.17:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60830: (0.454545%)&lt;BR/&gt; 60829: (0.454545%)&lt;BR/&gt; 60668: (0.454545%)&lt;BR/&gt; 51837: (0.454545%)&gt;];
}
1399--5987[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="217.24.226.17" src_port="80"/>
    </slice>
    <from sec="1083733426" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1571{
style=filled;
color=gray75;
1400[label="41.51.38.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5988[label="41.51.38.18;1pkt 1fpkt", shape=invtriangle, color=brown];
9174[label="41.51.38.18;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1571[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.51.38.18:1707, 208.96.80.56:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1707: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
1400--5988[label="1;1pkt 1fpkt"];
1400--9174[label="1;1pkt 1fpkt"];
5988--9174[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.80.56" dst_port="445" src_ip="41.51.38.18" src_port="1707"/>
    </slice>
    <from sec="1083733314" usec="0"/>
    <to sec="1083733480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1572{
style=filled;
color=gray75;
1401[label="208.96.48.18;88pkt 88fpkt", shape=pentagon, color=darkviolet];
5989[label="208.96.48.18;89pkt 89fpkt", shape=invtriangle, color=brown];
9175[label="208.96.48.18;89pkt 89fpkt", shape=invhouse, color=bisque];
stat1572[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.48.18:0, *:0}[97.7528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7444%)&lt;BR/&gt; 4691: (0.56391%)&lt;BR/&gt; 4052: (0.56391%)&lt;BR/&gt; 445: (0.56391%)&lt;BR/&gt; 135: (0.56391%)&gt;];
}
1401--5989[label="1;88pkt 88fpkt"];
1401--9175[label="1;88pkt 88fpkt"];
5989--9175[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.48.18"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.194.98.18"/>
    </slice>
    <from sec="1083733540" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1574{
style=filled;
color=gray75;
1406[label="136.151.100.18;80pkt 80fpkt", shape=pentagon, color=darkviolet];
5992[label="136.151.100.18;81pkt 81fpkt", shape=invtriangle, color=brown];
stat1574[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.100.18:25, *:*}[80.2469%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.3727%)&lt;BR/&gt; 53: (12.1118%)&lt;BR/&gt; 2649: (1.24224%)&lt;BR/&gt; 64890: (0.621118%)&lt;BR/&gt; 64885: (0.621118%)&gt;];
}
1406--5992[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.100.18" src_port="25"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1575{
style=filled;
color=gray75;
1408[label="209.18.125.18;62pkt 62fpkt", shape=pentagon, color=darkviolet];
5994[label="209.18.125.18;62pkt 62fpkt", shape=invtriangle, color=brown];
9179[label="209.18.125.18;62pkt 62fpkt", shape=invhouse, color=bisque];
stat1575[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.125.18:*, 204.241.33.222:9070}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9070: (50%)&lt;BR/&gt; 4978: (0.806452%)&lt;BR/&gt; 4958: (0.806452%)&lt;BR/&gt; 4916: (0.806452%)&lt;BR/&gt; 4896: (0.806452%)&gt;];
}
1408--5994[label="1;62pkt 62fpkt"];
1408--9179[label="1;62pkt 62fpkt"];
5994--9179[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="204.241.33.222" dst_port="9070" src_ip="209.18.125.18"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.220.133.18"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1577{
style=filled;
color=gray75;
1412[label="168.127.136.18;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5997[label="168.127.136.18;42pkt 42fpkt", shape=invtriangle, color=brown];
9181[label="168.127.136.18;42pkt 42fpkt", shape=invhouse, color=bisque];
stat1577[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.136.18:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 46192: (1.2%)&lt;BR/&gt; 46175: (1.2%)&lt;BR/&gt; 38258: (1.2%)&lt;BR/&gt; 23987: (1.2%)&gt;];
}
1412--5997[label="1;41pkt 41fpkt"];
1412--9181[label="1;41pkt 41fpkt"];
5997--9181[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="168.127.136.18" src_port="25"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1578{
style=filled;
color=gray75;
1418[label="201.32.184.18;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5999[label="201.32.184.18;11pkt 11fpkt", shape=invtriangle, color=brown];
9182[label="201.32.184.18;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1578[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.32.184.18:80, 136.151.251.52:*}[54.5455%]&lt;BR/&gt;{201.32.184.18:80, 155.148.182.202:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30368: (4.6875%)&lt;BR/&gt; 30223: (4.6875%)&lt;BR/&gt; 30167: (4.6875%)&lt;BR/&gt; 30099: (4.6875%)&gt;];
}
1418--5999[label="1;10pkt 10fpkt"];
1418--9182[label="1;10pkt 10fpkt"];
5999--9182[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.251.52" src_ip="201.32.184.18" src_port="80"/>
      <filter dst_ip="155.148.182.202" src_ip="201.32.184.18" src_port="80"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083733802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.46.43.19"/>
    </slice>
    <from sec="1083733285" usec="0"/>
    <to sec="1083733435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.26.49.19"/>
    </slice>
    <from sec="1083733528" usec="0"/>
    <to sec="1083733643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1581{
style=filled;
color=gray75;
1432[label="40.248.98.19;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6006[label="40.248.98.19;29pkt 29fpkt", shape=invtriangle, color=brown];
9185[label="40.248.98.19;29pkt 29fpkt", shape=invhouse, color=bisque];
stat1581[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.248.98.19:80, 136.151.144.13:*}[96.5517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8372%)&lt;BR/&gt; 53: (2.32558%)&lt;BR/&gt; 49894: (1.74419%)&lt;BR/&gt; 49777: (1.74419%)&lt;BR/&gt; 49775: (1.74419%)&gt;];
}
1432--6006[label="1;28pkt 28fpkt"];
1432--9185[label="1;28pkt 28fpkt"];
6006--9185[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.144.13" src_ip="40.248.98.19" src_port="80"/>
    </slice>
    <from sec="1083733718" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.164.19"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.42.169.19"/>
    </slice>
    <from sec="1083733451" usec="0"/>
    <to sec="1083733735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1584{
style=filled;
color=gray75;
1445[label="46.66.184.19;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6015[label="46.66.184.19;7pkt 7fpkt", shape=invtriangle, color=brown];
9189[label="46.66.184.19;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1584[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.66.184.19:*, 141.132.178.146:445}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 4445: (7.14286%)&lt;BR/&gt; 4185: (7.14286%)&lt;BR/&gt; 3462: (7.14286%)&lt;BR/&gt; 2680: (7.14286%)&gt;];
}
1445--6015[label="1;7pkt 7fpkt"];
1445--9189[label="1;7pkt 7fpkt"];
6015--9189[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.132.178.146" dst_port="445" src_ip="46.66.184.19"/>
    </slice>
    <from sec="1083733305" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.19.210.19"/>
    </slice>
    <from sec="1083733468" usec="0"/>
    <to sec="1083733566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1586{
style=filled;
color=gray75;
1448[label="46.71.210.19;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6017[label="46.71.210.19;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1586[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.210.19:80, 209.29.136.3:*}[44.4444%]&lt;BR/&gt;{46.71.210.19:80, 209.29.138.127:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28826: (5.88235%)&lt;BR/&gt; 28589: (5.88235%)&lt;BR/&gt; 28545: (5.88235%)&lt;BR/&gt; 28063: (5.88235%)&gt;];
}
1448--6017[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.71.210.19" src_port="80"/>
      <filter dst_ip="209.29.136.3" src_ip="46.71.210.19" src_port="80"/>
    </slice>
    <from sec="1083733236" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1587{
style=filled;
color=gray75;
1456[label="201.221.96.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6019[label="201.221.96.20;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1587[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.221.96.20:4325, 155.211.221.65:445}[25%]&lt;BR/&gt;{201.221.96.20:3052, 141.211.160.140:445}[25%]&lt;BR/&gt;{201.221.96.20:3004, 136.151.235.67:80}[25%]&lt;BR/&gt;{201.221.96.20:3005, 136.151.235.67:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 4325: (12.5%)&lt;BR/&gt; 3052: (12.5%)&lt;BR/&gt; 3005: (12.5%)&gt;];
}
1456--6019[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.221.96.20" src_port="3005"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.221.96.20" src_port="3004"/>
      <filter dst_ip="141.211.160.140" dst_port="445" src_ip="201.221.96.20" src_port="3052"/>
      <filter dst_ip="155.211.221.65" dst_port="445" src_ip="201.221.96.20" src_port="4325"/>
    </slice>
    <from sec="1083733703" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1588{
style=filled;
color=gray75;
1458[label="204.70.99.20;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6021[label="204.70.99.20;6pkt 6fpkt", shape=invtriangle, color=brown];
9192[label="204.70.99.20;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1588[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.70.99.20:80, 141.22.160.32:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50842: (8.33333%)&lt;BR/&gt; 50841: (8.33333%)&lt;BR/&gt; 50838: (8.33333%)&lt;BR/&gt; 50835: (8.33333%)&gt;];
}
1458--6021[label="1;6pkt 6fpkt"];
1458--9192[label="1;6pkt 6fpkt"];
6021--9192[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.160.32" src_ip="204.70.99.20" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1589{
style=filled;
color=gray75;
1459[label="213.208.100.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6022[label="213.208.100.20;1pkt 1fpkt", shape=invtriangle, color=brown];
9193[label="213.208.100.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1589[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.208.100.20:25, 173.138.130.155:3573}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3573: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
1459--6022[label="1;1pkt 1fpkt"];
1459--9193[label="1;1pkt 1fpkt"];
6022--9193[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.130.155" dst_port="3573" src_ip="213.208.100.20" src_port="25"/>
    </slice>
    <from sec="1083733283" usec="0"/>
    <to sec="1083733533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1590{
style=filled;
color=gray75;
1462[label="141.22.120.20;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6023[label="141.22.120.20;13pkt 13fpkt", shape=invtriangle, color=brown];
9194[label="141.22.120.20;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1590[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.120.20:*, 44.212.48.110:7001}[30.7692%]&lt;BR/&gt;{141.22.120.20:*, *:1863}[30.7692%]&lt;BR/&gt;{141.22.120.20:*, *:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (15.7895%)&lt;BR/&gt; 7001: (14.4737%)&lt;BR/&gt; 80: (11.8421%)&lt;BR/&gt; 443: (7.89474%)&lt;BR/&gt; 3186: (3.94737%)&gt;];
}
1462--6023[label="1;12pkt 12fpkt"];
1462--9194[label="1;12pkt 12fpkt"];
6023--9194[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="141.22.120.20"/>
      <filter dst_port="80" src_ip="141.22.120.20"/>
      <filter dst_ip="44.212.48.110" dst_port="7001" src_ip="141.22.120.20"/>
    </slice>
    <from sec="1083733588" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1591{
style=filled;
color=gray75;
1465[label="196.103.157.20;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6026[label="196.103.157.20;51pkt 51fpkt", shape=invtriangle, color=brown];
stat1591[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.103.157.20:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3966: (1.96078%)&lt;BR/&gt; 4991: (0.980392%)&lt;BR/&gt; 4946: (0.980392%)&lt;BR/&gt; 4926: (0.980392%)&gt;];
}
1465--6026[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="196.103.157.20"/>
    </slice>
    <from sec="1083733534" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1592{
style=filled;
color=gray75;
320[label="136.150.23.82;s;56pkt 56fpkt", shape=diamond, color=yellow];
327[label="136.151.149.153;s;54pkt 54fpkt", shape=diamond, color=yellow];
417[label="201.155.5.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
507[label="120.139.220.233;d;172pkt 172fpkt", shape=diamond, color=yellow];
542[label="136.151.241.195;s;19pkt 19fpkt", shape=diamond, color=yellow];
1635[label="168.127.126.28;54pkt 54fpkt", shape=pentagon, color=darkviolet];
2299[label="136.151.144.60;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2725[label="136.150.23.82;63pkt 63fpkt", shape=pentagon, color=darkviolet];
4049[label="136.151.149.153;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4570[label="168.127.4.182;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4793[label="136.151.241.195;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4938[label="168.127.198.205;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7835[label="136.151.149.153;54pkt 54fpkt", shape=invtriangle, color=brown];
10276[label="136.151.149.153;54pkt 54fpkt", shape=invhouse, color=bisque];
stat1592[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 120.139.220.233:80}[50.1425%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6468%)&lt;BR/&gt; 443: (1.19225%)&lt;BR/&gt; 6200: (0.596125%)&lt;BR/&gt; 0: (0.596125%)&lt;BR/&gt; 53: (0.52161%)&gt;];
}
320--417[label="1;1pkt 1fpkt"];
320--507[label="0.0357143;2pkt 2fpkt"];
320--982[label="0.107143;6pkt 6fpkt"];
320--2725[label="1;56pkt 56fpkt"];
327--507[label="0.0740741;4pkt 4fpkt"];
327--982[label="0.0185185;1pkt 1fpkt"];
327--4049[label="1;54pkt 54fpkt"];
327--7835[label="1;54pkt 54fpkt"];
327--10276[label="1;54pkt 54fpkt"];
417--2725[label="1;1pkt 1fpkt"];
507--542[label="0.736842;14pkt 14fpkt"];
507--632[label="0.00826446;1pkt 1fpkt"];
507--818[label="0.00581395;1pkt 1fpkt"];
507--874[label="0.0174419;3pkt 3fpkt"];
507--982[label="0.0755814;13pkt 13fpkt"];
507--1502[label="0.00769231;1pkt 1fpkt"];
507--1635[label="0.925926;50pkt 50fpkt"];
507--1989[label="0.00581395;1pkt 1fpkt"];
507--2168[label="0.0174419;3pkt 3fpkt"];
507--2231[label="0.00581395;1pkt 1fpkt"];
507--2299[label="0.0555556;1pkt 1fpkt"];
507--2725[label="0.031746;2pkt 2fpkt"];
507--4049[label="0.0740741;4pkt 4fpkt"];
507--4227[label="0.0909091;1pkt 1fpkt"];
507--4570[label="1;10pkt 10fpkt"];
507--4793[label="0.388889;14pkt 14fpkt"];
507--4938[label="0.0384615;1pkt 1fpkt"];
507--6027[label="0.0523256;9pkt 9fpkt"];
507--6051[label="0.00775194;1pkt 1fpkt"];
507--6377[label="0.00581395;1pkt 1fpkt"];
507--6505[label="0.0174419;3pkt 3fpkt"];
507--6548[label="0.00581395;1pkt 1fpkt"];
507--6742[label="0.0523256;9pkt 9fpkt"];
507--7835[label="0.0740741;4pkt 4fpkt"];
507--9495[label="0.0174419;3pkt 3fpkt"];
507--9516[label="0.00581395;1pkt 1fpkt"];
507--10276[label="0.0740741;4pkt 4fpkt"];
542--4793[label="1;19pkt 19fpkt"];
4049--7835[label="1;54pkt 54fpkt"];
4049--10276[label="1;54pkt 54fpkt"];
7835--10276[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="120.139.220.233" dst_port="80"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1593{
style=filled;
color=gray75;
1470[label="95.164.179.20;37pkt 37fpkt", shape=pentagon, color=darkviolet];
6030[label="95.164.179.20;37pkt 37fpkt", shape=invtriangle, color=brown];
stat1593[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.164.179.20:49262, 209.29.136.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49262: (50%)&lt;BR/&gt; 4751: (1.35135%)&lt;BR/&gt; 4700: (1.35135%)&lt;BR/&gt; 4589: (1.35135%)&lt;BR/&gt; 4551: (1.35135%)&gt;];
}
1470--6030[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="95.164.179.20" src_port="49262"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.106.192.20"/>
    </slice>
    <from sec="1083733345" usec="0"/>
    <to sec="1083733406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.81.228.20"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.8.62.21"/>
    </slice>
    <from sec="1083733466" usec="0"/>
    <to sec="1083733691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1597{
style=filled;
color=gray75;
1484[label="218.24.67.21;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6038[label="218.24.67.21;5pkt 5fpkt", shape=invtriangle, color=brown];
9202[label="218.24.67.21;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1597[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.24.67.21:80, 209.29.138.10:51470}[20%]&lt;BR/&gt;{218.24.67.21:80, 209.29.138.10:52853}[20%]&lt;BR/&gt;{218.24.67.21:80, 209.29.138.10:52889}[20%]&lt;BR/&gt;{218.24.67.21:80, 209.29.138.10:54372}[20%]&lt;BR/&gt;{218.24.67.21:80, 209.29.138.10:54537}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54537: (10%)&lt;BR/&gt; 54372: (10%)&lt;BR/&gt; 52889: (10%)&lt;BR/&gt; 52853: (10%)&gt;];
}
1484--6038[label="1;5pkt 5fpkt"];
1484--9202[label="1;5pkt 5fpkt"];
6038--9202[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="54537" src_ip="218.24.67.21" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="54372" src_ip="218.24.67.21" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="52889" src_ip="218.24.67.21" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="52853" src_ip="218.24.67.21" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="51470" src_ip="218.24.67.21" src_port="80"/>
    </slice>
    <from sec="1083733697" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.14.146.21"/>
    </slice>
    <from sec="1083733300" usec="0"/>
    <to sec="1083733416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.42.166.21"/>
    </slice>
    <from sec="1083733800" usec="0"/>
    <to sec="1083733882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.17.216.21"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.165.10.22"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1602{
style=filled;
color=gray75;
1501[label="141.22.78.22;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6050[label="141.22.78.22;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1602[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.78.22:*, 213.101.100.91:80}[33.3333%]&lt;BR/&gt;{141.22.78.22:*, 213.101.59.76:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9091%)&lt;BR/&gt; 4190: (9.09091%)&lt;BR/&gt; 4187: (9.09091%)&lt;BR/&gt; 4186: (9.09091%)&lt;BR/&gt; 4185: (9.09091%)&gt;];
}
1501--6050[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.59.76" dst_port="80" src_ip="141.22.78.22"/>
      <filter dst_ip="213.101.100.91" dst_port="80" src_ip="141.22.78.22"/>
    </slice>
    <from sec="1083733465" usec="0"/>
    <to sec="1083733540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.116.96.22"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.3.149.22"/>
    </slice>
    <from sec="1083733384" usec="0"/>
    <to sec="1083733474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1605{
style=filled;
color=gray75;
1510[label="211.138.202.22;114pkt 114fpkt", shape=pentagon, color=darkviolet];
6056[label="211.138.202.22;113pkt 113fpkt", shape=invtriangle, color=brown];
9213[label="211.138.202.22;113pkt 113fpkt", shape=invhouse, color=bisque];
stat1605[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.138.202.22:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1510--6056[label="1;113pkt 113fpkt"];
1510--9213[label="1;113pkt 113fpkt"];
6056--9213[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.138.202.22" src_port="1028"/>
    </slice>
    <from sec="1083733435" usec="0"/>
    <to sec="1083733454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1606{
style=filled;
color=gray75;
1511[label="168.127.210.22;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6057[label="168.127.210.22;7pkt 7fpkt", shape=invtriangle, color=brown];
9214[label="168.127.210.22;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1606[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.210.22:*, 213.101.66.12:80}[28.5714%]&lt;BR/&gt;{168.127.210.22:*, 213.101.36.85:80}[28.5714%]&lt;BR/&gt;{168.127.210.22:*, 213.101.36.106:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5%)&lt;BR/&gt; 2087: (7.5%)&lt;BR/&gt; 2085: (7.5%)&lt;BR/&gt; 2083: (7.5%)&lt;BR/&gt; 2082: (7.5%)&gt;];
}
1511--6057[label="1;7pkt 7fpkt"];
1511--9214[label="1;6pkt 6fpkt"];
6057--9214[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.36.106" dst_port="80" src_ip="168.127.210.22"/>
      <filter dst_ip="213.101.36.85" dst_port="80" src_ip="168.127.210.22"/>
      <filter dst_ip="213.101.66.12" dst_port="80" src_ip="168.127.210.22"/>
    </slice>
    <from sec="1083733259" usec="0"/>
    <to sec="1083733352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1607{
style=filled;
color=gray75;
1512[label="141.22.234.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6058[label="141.22.234.22;1pkt 1fpkt", shape=invtriangle, color=brown];
9215[label="141.22.234.22;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1607[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.234.22:4846, 213.101.193.53:1863}[50%]&lt;BR/&gt;{141.22.234.22:4559, 213.101.197.156:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4559: (37.5%)&lt;BR/&gt; 4846: (12.5%)&gt;];
}
1512--6058[label="1;1pkt 1fpkt"];
1512--9215[label="1;1pkt 1fpkt"];
6058--9215[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.197.156" dst_port="1863" src_ip="141.22.234.22" src_port="4559"/>
      <filter dst_ip="213.101.193.53" dst_port="1863" src_ip="141.22.234.22" src_port="4846"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1608{
style=filled;
color=gray75;
1513[label="93.78.254.22;75pkt 75fpkt", shape=pentagon, color=darkviolet];
6059[label="93.78.254.22;74pkt 74fpkt", shape=invtriangle, color=brown];
stat1608[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.78.254.22:*, *:3128}[50.6667%]&lt;BR/&gt;{93.78.254.22:*, *:1080}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25.1678%)&lt;BR/&gt; 1080: (24.8322%)&lt;BR/&gt; 4938: (0.671141%)&lt;BR/&gt; 4906: (0.671141%)&lt;BR/&gt; 4728: (0.671141%)&gt;];
}
1513--6059[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="93.78.254.22"/>
      <filter dst_port="1080" src_ip="93.78.254.22"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1609{
style=filled;
color=gray75;
1515[label="44.162.8.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6061[label="44.162.8.23;1pkt 1fpkt", shape=invtriangle, color=brown];
9217[label="44.162.8.23;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1609[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.162.8.23:1547, 136.151.235.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1547: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1515--6061[label="1;1pkt 1fpkt"];
1515--9217[label="1;1pkt 1fpkt"];
6061--9217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="44.162.8.23" src_port="1547"/>
    </slice>
    <from sec="1083733666" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.50.70.23"/>
    </slice>
    <from sec="1083733944" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1611{
style=filled;
color=gray75;
1521[label="136.151.88.23;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6065[label="136.151.88.23;41pkt 41fpkt", shape=invtriangle, color=brown];
stat1611[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.88.23:*, 198.96.135.43:80}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7805%)&lt;BR/&gt; 0: (2.43902%)&lt;BR/&gt; 2520: (1.21951%)&lt;BR/&gt; 2519: (1.21951%)&lt;BR/&gt; 2518: (1.21951%)&gt;];
}
1521--6065[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="198.96.135.43" dst_port="80" src_ip="136.151.88.23"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1612{
style=filled;
color=gray75;
1527[label="196.24.169.23;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6068[label="196.24.169.23;7pkt 7fpkt", shape=invtriangle, color=brown];
9222[label="196.24.169.23;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1612[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.24.169.23:*, 219.222.14.225:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (7.14286%)&lt;BR/&gt; 4829: (7.14286%)&lt;BR/&gt; 4827: (7.14286%)&lt;BR/&gt; 4825: (7.14286%)&lt;BR/&gt; 4824: (7.14286%)&gt;];
}
1527--6068[label="1;7pkt 7fpkt"];
1527--9222[label="1;7pkt 7fpkt"];
6068--9222[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="219.222.14.225" src_ip="196.24.169.23"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083733550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1613{
style=filled;
color=gray75;
1528[label="200.182.178.23;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6069[label="200.182.178.23;2pkt 2fpkt", shape=invtriangle, color=brown];
9223[label="200.182.178.23;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1613[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.182.178.23:4779, 141.85.49.69:445}[50%]&lt;BR/&gt;{200.182.178.23:1132, 136.151.25.237:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4779: (25%)&lt;BR/&gt; 1132: (25%)&gt;];
}
1528--6069[label="1;2pkt 2fpkt"];
1528--9223[label="1;2pkt 2fpkt"];
6069--9223[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.25.237" dst_port="445" src_ip="200.182.178.23" src_port="1132"/>
      <filter dst_ip="141.85.49.69" dst_port="445" src_ip="200.182.178.23" src_port="4779"/>
    </slice>
    <from sec="1083733748" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.11.212.23"/>
    </slice>
    <from sec="1083733775" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.46.242.23"/>
    </slice>
    <from sec="1083733348" usec="0"/>
    <to sec="1083733422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1616{
style=filled;
color=gray75;
1534[label="136.151.255.23;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6072[label="136.151.255.23;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1616[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.255.23:80, 44.218.160.185:*}[66.6667%]&lt;BR/&gt;{136.151.255.23:80, 44.218.161.32:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58127: (5.55556%)&lt;BR/&gt; 54539: (5.55556%)&lt;BR/&gt; 51461: (5.55556%)&lt;BR/&gt; 51450: (5.55556%)&gt;];
}
1534--6072[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="44.218.160.185" src_ip="136.151.255.23" src_port="80"/>
      <filter dst_ip="44.218.161.32" src_ip="136.151.255.23" src_port="80"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.127.3.24"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.205.93.24"/>
    </slice>
    <from sec="1083733877" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.180.96.24"/>
    </slice>
    <from sec="1083733385" usec="0"/>
    <to sec="1083733678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.38.203.24"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1621{
style=filled;
color=gray75;
1552[label="109.197.235.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6085[label="109.197.235.24;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1621[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.197.235.24:1901, 141.135.11.89:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1901: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
1552--6085[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.135.11.89" dst_port="445" src_ip="109.197.235.24" src_port="1901"/>
    </slice>
    <from sec="1083733621" usec="0"/>
    <to sec="1083733788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.20.251.24"/>
    </slice>
    <from sec="1083733835" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.170.92.25"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083733353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1624{
style=filled;
color=gray75;
1567[label="109.216.137.25;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6094[label="109.216.137.25;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1624[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.216.137.25:0, 173.138.127.173:0}[33.3333%]&lt;BR/&gt;{109.216.137.25:4643, 141.211.119.230:445}[33.3333%]&lt;BR/&gt;{109.216.137.25:4811, 141.135.194.240:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 4811: (16.6667%)&lt;BR/&gt; 4643: (16.6667%)&gt;];
}
1567--6094[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.135.194.240" dst_port="445" src_ip="109.216.137.25" src_port="4811"/>
      <filter dst_ip="141.211.119.230" dst_port="445" src_ip="109.216.137.25" src_port="4643"/>
      <filter dst_ip="173.138.127.173" src_ip="109.216.137.25"/>
    </slice>
    <from sec="1083733572" usec="0"/>
    <to sec="1083733920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.18.152.25"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1626{
style=filled;
color=gray75;
1575[label="136.151.213.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6098[label="136.151.213.25;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1626[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.213.25:25, 47.162.193.43:2848}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2848: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
1575--6098[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="47.162.193.43" dst_port="2848" src_ip="136.151.213.25" src_port="25"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1627{
style=filled;
color=gray75;
1576[label="197.3.220.25;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6099[label="197.3.220.25;2pkt 2fpkt", shape=invtriangle, color=brown];
9238[label="197.3.220.25;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1627[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.3.220.25:0, 155.148.158.51:0}[33.3333%]&lt;BR/&gt;{197.3.220.25:3866, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{197.3.220.25:0, 155.211.110.88:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 3866: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
1576--6099[label="1;2pkt 2fpkt"];
1576--9238[label="1;3pkt 3fpkt"];
6099--9238[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.110.88" src_ip="197.3.220.25"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="197.3.220.25" src_port="3866"/>
      <filter dst_ip="155.148.158.51" src_ip="197.3.220.25"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1628{
style=filled;
color=gray75;
1578[label="141.22.234.25;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6101[label="141.22.234.25;7pkt 7fpkt", shape=invtriangle, color=brown];
9239[label="141.22.234.25;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1628[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.234.25:*, *:1863}[37.5%]&lt;BR/&gt;{141.22.234.25:*, 44.212.48.110:7001}[25%]&lt;BR/&gt;{141.22.234.25:*, *:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (15.9091%)&lt;BR/&gt; 7001: (13.6364%)&lt;BR/&gt; 80: (13.6364%)&lt;BR/&gt; 3049: (6.81818%)&lt;BR/&gt; 3021: (6.81818%)&gt;];
}
1578--6101[label="1;7pkt 7fpkt"];
1578--9239[label="1;7pkt 7fpkt"];
6101--9239[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="141.22.234.25"/>
      <filter dst_port="80" src_ip="141.22.234.25"/>
      <filter dst_ip="44.212.48.110" dst_port="7001" src_ip="141.22.234.25"/>
    </slice>
    <from sec="1083733830" usec="0"/>
    <to sec="1083734078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.68.57.26"/>
    </slice>
    <from sec="1083733298" usec="0"/>
    <to sec="1083733422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1630{
style=filled;
color=gray75;
1584[label="136.150.72.26;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6104[label="136.150.72.26;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1630[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.72.26:80, 196.131.156.9:26725}[33.3333%]&lt;BR/&gt;{136.150.72.26:80, 46.86.70.244:53556}[33.3333%]&lt;BR/&gt;{136.150.72.26:80, 46.86.70.244:53568}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53568: (20%)&lt;BR/&gt; 26725: (20%)&lt;BR/&gt; 53556: (10%)&gt;];
}
1584--6104[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="46.86.70.244" dst_port="53568" src_ip="136.150.72.26" src_port="80"/>
      <filter dst_ip="46.86.70.244" dst_port="53556" src_ip="136.150.72.26" src_port="80"/>
      <filter dst_ip="196.131.156.9" dst_port="26725" src_ip="136.150.72.26" src_port="80"/>
    </slice>
    <from sec="1083733576" usec="0"/>
    <to sec="1083733722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.194.80.26"/>
    </slice>
    <from sec="1083733483" usec="0"/>
    <to sec="1083733573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1632{
style=filled;
color=gray75;
1587[label="136.150.105.26;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6106[label="136.150.105.26;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1632[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.105.26:*, 44.230.206.208:80}[42.8571%]&lt;BR/&gt;{136.150.105.26:*, 45.130.55.210:80}[35.7143%]&lt;BR/&gt;{136.150.105.26:*, *:1863}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.7407%)&lt;BR/&gt; 1863: (9.25926%)&lt;BR/&gt; 63166: (3.7037%)&lt;BR/&gt; 63163: (3.7037%)&lt;BR/&gt; 63159: (3.7037%)&gt;];
}
1587--6106[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="136.150.105.26"/>
      <filter dst_ip="44.230.206.208" dst_port="80" src_ip="136.150.105.26"/>
      <filter dst_ip="45.130.55.210" dst_port="80" src_ip="136.150.105.26"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.3.133.26"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083733969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.245.233.26"/>
    </slice>
    <from sec="1083733765" usec="0"/>
    <to sec="1083733886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.100.18.27"/>
    </slice>
    <from sec="1083733953" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.99.23.27"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1637{
style=filled;
color=gray75;
1599[label="141.22.76.27;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6116[label="141.22.76.27;6pkt 6fpkt", shape=invtriangle, color=brown];
9246[label="141.22.76.27;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1637[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.76.27:*, 213.101.36.85:80}[28.5714%]&lt;BR/&gt;{141.22.76.27:*, 44.212.34.203:443}[28.5714%]&lt;BR/&gt;{141.22.76.27:*, 44.212.34.203:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35%)&lt;BR/&gt; 443: (15%)&lt;BR/&gt; 1536: (7.5%)&lt;BR/&gt; 1532: (7.5%)&lt;BR/&gt; 1530: (7.5%)&gt;];
}
1599--6116[label="1;6pkt 6fpkt"];
1599--9246[label="1;7pkt 7fpkt"];
6116--9246[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="44.212.34.203" dst_port="80" src_ip="141.22.76.27"/>
      <filter dst_ip="44.212.34.203" dst_port="443" src_ip="141.22.76.27"/>
      <filter dst_ip="213.101.36.85" dst_port="80" src_ip="141.22.76.27"/>
    </slice>
    <from sec="1083733886" usec="0"/>
    <to sec="1083733927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.39.132.27"/>
    </slice>
    <from sec="1083733917" usec="0"/>
    <to sec="1083734053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1639{
style=filled;
color=gray75;
1604[label="196.140.133.27;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6119[label="196.140.133.27;5pkt 5fpkt", shape=invtriangle, color=brown];
9249[label="196.140.133.27;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1639[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.140.133.27:*, 136.151.232.127:80}[66.6667%]&lt;BR/&gt;{196.140.133.27:*, 136.151.232.114:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3069: (8.82353%)&lt;BR/&gt; 3063: (8.82353%)&lt;BR/&gt; 1654: (8.82353%)&lt;BR/&gt; 1091: (8.82353%)&gt;];
}
1604--6119[label="1;5pkt 5fpkt"];
1604--9249[label="1;6pkt 6fpkt"];
6119--9249[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.232.127" dst_port="80" src_ip="196.140.133.27"/>
      <filter dst_ip="136.151.232.114" dst_port="80" src_ip="196.140.133.27"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083733964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1640{
style=filled;
color=gray75;
1605[label="193.189.133.27;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6120[label="193.189.133.27;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1640[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.189.133.27:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63211: (4.34783%)&lt;BR/&gt; 51565: (4.34783%)&lt;BR/&gt; 50778: (4.34783%)&lt;BR/&gt; 46450: (4.34783%)&gt;];
}
1605--6120[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="193.189.133.27"/>
    </slice>
    <from sec="1083733322" usec="0"/>
    <to sec="1083734048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.69.151.27"/>
    </slice>
    <from sec="1083733248" usec="0"/>
    <to sec="1083733501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.10.160.27"/>
    </slice>
    <from sec="1083733561" usec="0"/>
    <to sec="1083733757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.39.208.27"/>
    </slice>
    <from sec="1083733869" usec="0"/>
    <to sec="1083733991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1644{
style=filled;
color=gray75;
1625[label="217.82.6.28;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6132[label="217.82.6.28;4pkt 4fpkt", shape=invtriangle, color=brown];
9256[label="217.82.6.28;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1644[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.82.6.28:80, 168.127.170.170:1205}[20%]&lt;BR/&gt;{217.82.6.28:80, 168.127.170.170:1208}[20%]&lt;BR/&gt;{217.82.6.28:80, 168.127.170.170:1209}[20%]&lt;BR/&gt;{217.82.6.28:80, 168.127.170.170:1210}[20%]&lt;BR/&gt;{217.82.6.28:80, 168.127.170.170:1212}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1212: (11.5385%)&lt;BR/&gt; 1210: (11.5385%)&lt;BR/&gt; 1209: (11.5385%)&lt;BR/&gt; 1208: (11.5385%)&gt;];
}
1625--6132[label="1;4pkt 4fpkt"];
1625--9256[label="1;4pkt 4fpkt"];
6132--9256[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.170.170" dst_port="1212" src_ip="217.82.6.28" src_port="80"/>
      <filter dst_ip="168.127.170.170" dst_port="1210" src_ip="217.82.6.28" src_port="80"/>
      <filter dst_ip="168.127.170.170" dst_port="1209" src_ip="217.82.6.28" src_port="80"/>
      <filter dst_ip="168.127.170.170" dst_port="1208" src_ip="217.82.6.28" src_port="80"/>
      <filter dst_ip="168.127.170.170" dst_port="1205" src_ip="217.82.6.28" src_port="80"/>
    </slice>
    <from sec="1083733610" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="94.30.11.28"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.117.21.28"/>
    </slice>
    <from sec="1083733292" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1647{
style=filled;
color=gray75;
1634[label="199.115.125.28;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6136[label="199.115.125.28;6pkt 6fpkt", shape=invtriangle, color=brown];
9260[label="199.115.125.28;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1647[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.115.125.28:80, 209.29.138.127:*}[57.1429%]&lt;BR/&gt;{199.115.125.28:80, 209.29.138.126:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4774: (7.5%)&lt;BR/&gt; 4658: (7.5%)&lt;BR/&gt; 4541: (7.5%)&lt;BR/&gt; 4527: (7.5%)&gt;];
}
1634--6136[label="1;6pkt 6fpkt"];
1634--9260[label="1;7pkt 7fpkt"];
6136--9260[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="199.115.125.28" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="199.115.125.28" src_port="80"/>
    </slice>
    <from sec="1083733257" usec="0"/>
    <to sec="1083733690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1648{
style=filled;
color=gray75;
1636[label="208.8.128.28;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6137[label="208.8.128.28;34pkt 34fpkt", shape=invtriangle, color=brown];
9261[label="208.8.128.28;34pkt 34fpkt", shape=invhouse, color=bisque];
stat1648[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.8.128.28:*, 208.96.41.10:*}[20%]&lt;BR/&gt;{208.8.128.28:*, 208.96.8.34:*}[20%]&lt;BR/&gt;{208.8.128.28:*, 208.96.52.129:*}[20%]&lt;BR/&gt;{208.8.128.28:*, 208.96.55.140:*}[20%]&lt;BR/&gt;{208.8.128.28:*, 208.96.58.141:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (7.28155%)&lt;BR/&gt; 3127: (7.28155%)&lt;BR/&gt; 1025: (7.28155%)&lt;BR/&gt; 445: (7.28155%)&lt;BR/&gt; 139: (7.28155%)&gt;];
}
1636--6137[label="1;34pkt 34fpkt"];
1636--9261[label="1;34pkt 34fpkt"];
6137--9261[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.58.141" src_ip="208.8.128.28"/>
      <filter dst_ip="208.96.55.140" src_ip="208.8.128.28"/>
      <filter dst_ip="208.96.52.129" src_ip="208.8.128.28"/>
      <filter dst_ip="208.96.8.34" src_ip="208.8.128.28"/>
      <filter dst_ip="208.96.41.10" src_ip="208.8.128.28"/>
    </slice>
    <from sec="1083733413" usec="0"/>
    <to sec="1083733974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.26.150.28"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083733662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.8.176.28"/>
    </slice>
    <from sec="1083733897" usec="0"/>
    <to sec="1083733958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1651{
style=filled;
color=gray75;
1642[label="209.131.196.28;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6141[label="209.131.196.28;17pkt 17fpkt", shape=invtriangle, color=brown];
9264[label="209.131.196.28;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1651[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.131.196.28:*, 136.151.235.67:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63895: (2.83019%)&lt;BR/&gt; 52738: (2.83019%)&lt;BR/&gt; 42274: (2.83019%)&lt;BR/&gt; 31469: (2.83019%)&gt;];
}
1642--6141[label="1;17pkt 17fpkt"];
1642--9264[label="1;18pkt 18fpkt"];
6141--9264[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="209.131.196.28"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083734070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.23.0.29"/>
    </slice>
    <from sec="1083733980" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.22.14.29"/>
    </slice>
    <from sec="1083733500" usec="0"/>
    <to sec="1083733577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1654{
style=filled;
color=gray75;
1649[label="201.146.32.29;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6147[label="201.146.32.29;17pkt 17fpkt", shape=invtriangle, color=brown];
9270[label="201.146.32.29;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1654[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.146.32.29:*, 141.22.68.53:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60487: (2.88462%)&lt;BR/&gt; 59494: (2.88462%)&lt;BR/&gt; 54216: (2.88462%)&lt;BR/&gt; 54140: (2.88462%)&gt;];
}
1649--6147[label="1;17pkt 17fpkt"];
1649--9270[label="1;17pkt 17fpkt"];
6147--9270[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.68.53" dst_port="80" src_ip="201.146.32.29"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1655{
style=filled;
color=gray75;
1650[label="134.253.72.29;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6148[label="134.253.72.29;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1655[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.253.72.29:*, *:445}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (38.4615%)&lt;BR/&gt; 0: (15.3846%)&lt;BR/&gt; 4978: (7.69231%)&lt;BR/&gt; 3570: (7.69231%)&lt;BR/&gt; 3481: (7.69231%)&gt;];
}
1650--6148[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="134.253.72.29"/>
    </slice>
    <from sec="1083733293" usec="0"/>
    <to sec="1083733843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1656{
style=filled;
color=gray75;
1651[label="53.204.83.29;57pkt 57fpkt", shape=pentagon, color=darkviolet];
6149[label="53.204.83.29;56pkt 56fpkt", shape=invtriangle, color=brown];
9271[label="53.204.83.29;57pkt 57fpkt", shape=invhouse, color=bisque];
stat1656[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.204.83.29:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4941: (0.882353%)&lt;BR/&gt; 4885: (0.882353%)&lt;BR/&gt; 4878: (0.882353%)&lt;BR/&gt; 4738: (0.882353%)&gt;];
}
1651--6149[label="1;56pkt 56fpkt"];
1651--9271[label="1;57pkt 57fpkt"];
6149--9271[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="53.204.83.29"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.208.83.29"/>
    </slice>
    <from sec="1083733354" usec="0"/>
    <to sec="1083733472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1658{
style=filled;
color=gray75;
1656[label="209.18.125.29;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6153[label="209.18.125.29;15pkt 15fpkt", shape=invtriangle, color=brown];
9273[label="209.18.125.29;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1658[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.125.29:*, 120.139.220.153:80}[56.25%]&lt;BR/&gt;{209.18.125.29:1632, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.1739%)&lt;BR/&gt; 1632: (13.0435%)&lt;BR/&gt; 18838: (3.26087%)&lt;BR/&gt; 8772: (3.26087%)&lt;BR/&gt; 7742: (3.26087%)&gt;];
}
1656--6153[label="1;15pkt 15fpkt"];
1656--9273[label="1;15pkt 15fpkt"];
6153--9273[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="209.18.125.29" src_port="1632"/>
      <filter dst_ip="120.139.220.153" dst_port="80" src_ip="209.18.125.29"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="174.178.155.29"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.188.192.29"/>
    </slice>
    <from sec="1083733960" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.229.29"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083733407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.0.18.30"/>
    </slice>
    <from sec="1083733654" usec="0"/>
    <to sec="1083733726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.51.34.30"/>
    </slice>
    <from sec="1083733270" usec="0"/>
    <to sec="1083733472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.24.143.30"/>
    </slice>
    <from sec="1083733322" usec="0"/>
    <to sec="1083733821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1665{
style=filled;
color=gray75;
1675[label="41.162.146.30;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6165[label="41.162.146.30;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1665[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.162.146.30:*, *:445}[66.6667%]&lt;BR/&gt;{41.162.146.30:*, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (35.2941%)&lt;BR/&gt; 80: (14.7059%)&lt;BR/&gt; 4896: (5.88235%)&lt;BR/&gt; 4481: (5.88235%)&lt;BR/&gt; 4367: (5.88235%)&gt;];
}
1675--6165[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="41.162.146.30"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.162.146.30"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.11.152.30"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083733364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1667{
style=filled;
color=gray75;
1677[label="209.29.181.30;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6167[label="209.29.181.30;59pkt 59fpkt", shape=invtriangle, color=brown];
stat1667[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.181.30:*, 115.125.241.6:2010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2010: (50%)&lt;BR/&gt; 1795: (0.847458%)&lt;BR/&gt; 1794: (0.847458%)&lt;BR/&gt; 1793: (0.847458%)&lt;BR/&gt; 1792: (0.847458%)&gt;];
}
1677--6167[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="115.125.241.6" dst_port="2010" src_ip="209.29.181.30"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.196.207.30"/>
    </slice>
    <from sec="1083733873" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.221.26.31"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1670{
style=filled;
color=gray75;
1687[label="40.243.114.31;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6175[label="40.243.114.31;22pkt 22fpkt", shape=invtriangle, color=brown];
9286[label="40.243.114.31;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1670[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.243.114.31:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47237: (2.27273%)&lt;BR/&gt; 46004: (2.27273%)&lt;BR/&gt; 46003: (2.27273%)&lt;BR/&gt; 46002: (2.27273%)&gt;];
}
1687--6175[label="1;22pkt 22fpkt"];
1687--9286[label="1;22pkt 22fpkt"];
6175--9286[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="40.243.114.31" src_port="80"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1671{
style=filled;
color=gray75;
1695[label="135.16.214.31;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6180[label="135.16.214.31;3pkt 3fpkt", shape=invtriangle, color=brown];
9290[label="135.16.214.31;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1671[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.16.214.31:80, 209.29.138.127:1734}[33.3333%]&lt;BR/&gt;{135.16.214.31:80, 209.29.138.127:1959}[33.3333%]&lt;BR/&gt;{135.16.214.31:80, 209.29.138.127:1962}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1962: (16.6667%)&lt;BR/&gt; 1959: (16.6667%)&lt;BR/&gt; 1734: (16.6667%)&gt;];
}
1695--6180[label="1;3pkt 3fpkt"];
1695--9290[label="1;3pkt 3fpkt"];
6180--9290[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" dst_port="1962" src_ip="135.16.214.31" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="1959" src_ip="135.16.214.31" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="1734" src_ip="135.16.214.31" src_port="80"/>
    </slice>
    <from sec="1083733901" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1672{
style=filled;
color=gray75;
1699[label="53.240.42.32;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6184[label="53.240.42.32;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1672[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.240.42.32:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60999: (2.94118%)&lt;BR/&gt; 60997: (2.94118%)&lt;BR/&gt; 60967: (2.94118%)&lt;BR/&gt; 60965: (2.94118%)&gt;];
}
1699--6184[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="53.240.42.32" src_port="80"/>
    </slice>
    <from sec="1083733231" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1674{
style=filled;
color=gray75;
1709[label="141.22.160.32;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6191[label="141.22.160.32;7pkt 7fpkt", shape=invtriangle, color=brown];
9299[label="141.22.160.32;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1674[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.160.32:*, 204.70.99.20:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50842: (7.14286%)&lt;BR/&gt; 50841: (7.14286%)&lt;BR/&gt; 50838: (7.14286%)&lt;BR/&gt; 50835: (7.14286%)&gt;];
}
1709--6191[label="1;7pkt 7fpkt"];
1709--9299[label="1;7pkt 7fpkt"];
6191--9299[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="204.70.99.20" dst_port="80" src_ip="141.22.160.32"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1675{
style=filled;
color=gray75;
1711[label="46.111.176.32;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6192[label="46.111.176.32;42pkt 42fpkt", shape=invtriangle, color=brown];
9300[label="46.111.176.32;41pkt 41fpkt", shape=invhouse, color=bisque];
stat1675[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.111.176.32:80, 209.29.165.20:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37617: (1.2%)&lt;BR/&gt; 37616: (1.2%)&lt;BR/&gt; 37571: (1.2%)&lt;BR/&gt; 37529: (1.2%)&gt;];
}
1711--6192[label="1;42pkt 42fpkt"];
1711--9300[label="1;41pkt 41fpkt"];
6192--9300[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.165.20" src_ip="46.111.176.32" src_port="80"/>
    </slice>
    <from sec="1083733602" usec="0"/>
    <to sec="1083734078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1676{
style=filled;
color=gray75;
1716[label="41.164.211.32;79pkt 79fpkt", shape=pentagon, color=darkviolet];
6195[label="41.164.211.32;78pkt 78fpkt", shape=invtriangle, color=brown];
9303[label="41.164.211.32;78pkt 78fpkt", shape=invhouse, color=bisque];
stat1676[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.164.211.32:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4383: (1.2766%)&lt;BR/&gt; 3846: (1.2766%)&lt;BR/&gt; 4924: (0.638298%)&lt;BR/&gt; 4856: (0.638298%)&gt;];
}
1716--6195[label="1;78pkt 78fpkt"];
1716--9303[label="1;78pkt 78fpkt"];
6195--9303[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="41.164.211.32"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1677{
style=filled;
color=gray75;
1724[label="53.170.132.33;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6200[label="53.170.132.33;3pkt 3fpkt", shape=invtriangle, color=brown];
9306[label="53.170.132.33;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1677[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.170.132.33:0, 141.85.222.92:0}[33.3333%]&lt;BR/&gt;{53.170.132.33:3500, 141.132.156.33:445}[33.3333%]&lt;BR/&gt;{53.170.132.33:0, 141.132.156.33:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (66.6667%)&lt;BR/&gt; 3500: (16.6667%)&lt;BR/&gt; 445: (16.6667%)&gt;];
}
1724--6200[label="1;3pkt 3fpkt"];
1724--9306[label="1;3pkt 3fpkt"];
6200--9306[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.132.156.33" src_ip="53.170.132.33"/>
      <filter dst_ip="141.132.156.33" dst_port="445" src_ip="53.170.132.33" src_port="3500"/>
      <filter dst_ip="141.85.222.92" src_ip="53.170.132.33"/>
    </slice>
    <from sec="1083733762" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1678{
style=filled;
color=gray75;
1725[label="197.14.139.33;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6201[label="197.14.139.33;4pkt 4fpkt", shape=invtriangle, color=brown];
9307[label="197.14.139.33;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1678[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.14.139.33:1812, 136.151.235.67:80}[25%]&lt;BR/&gt;{197.14.139.33:0, 136.151.1.129:0}[25%]&lt;BR/&gt;{197.14.139.33:0, 209.29.160.174:0}[25%]&lt;BR/&gt;{197.14.139.33:0, 173.138.177.224:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (81.8182%)&lt;BR/&gt; 1812: (9.09091%)&lt;BR/&gt; 80: (9.09091%)&gt;];
}
1725--6201[label="1;4pkt 4fpkt"];
1725--9307[label="1;3pkt 3fpkt"];
6201--9307[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.177.224" src_ip="197.14.139.33"/>
      <filter dst_ip="209.29.160.174" src_ip="197.14.139.33"/>
      <filter dst_ip="136.151.1.129" src_ip="197.14.139.33"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="197.14.139.33" src_port="1812"/>
    </slice>
    <from sec="1083733312" usec="0"/>
    <to sec="1083734012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.14.149.33"/>
    </slice>
    <from sec="1083733977" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.84.149.33"/>
    </slice>
    <from sec="1083733803" usec="0"/>
    <to sec="1083733881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.222.155.33"/>
    </slice>
    <from sec="1083733695" usec="0"/>
    <to sec="1083733811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1682{
style=filled;
color=gray75;
1729[label="155.148.161.33;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6205[label="155.148.161.33;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1682[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.161.33:*, *:443}[30%]&lt;BR/&gt;{155.148.161.33:*, 213.101.194.25:1863}[20%]&lt;BR/&gt;{155.148.161.33:*, 44.212.48.110:7001}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 443: (15%)&lt;BR/&gt; 7001: (10%)&lt;BR/&gt; 4845: (5%)&lt;BR/&gt; 4844: (5%)&gt;];
}
1729--6205[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="155.148.161.33"/>
      <filter dst_ip="44.212.48.110" dst_port="7001" src_ip="155.148.161.33"/>
      <filter dst_ip="213.101.194.25" dst_port="1863" src_ip="155.148.161.33"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1683{
style=filled;
color=gray75;
1730[label="196.33.166.33;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6206[label="196.33.166.33;15pkt 15fpkt", shape=invtriangle, color=brown];
9308[label="196.33.166.33;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1683[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.33.166.33:*, 219.24.89.93:*}[26.6667%]&lt;BR/&gt;{196.33.166.33:*, 136.151.235.67:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 59711: (3.33333%)&lt;BR/&gt; 58531: (3.33333%)&lt;BR/&gt; 55819: (3.33333%)&lt;BR/&gt; 50424: (3.33333%)&gt;];
}
1730--6206[label="1;15pkt 15fpkt"];
1730--9308[label="1;15pkt 15fpkt"];
6206--9308[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="219.24.89.93" src_ip="196.33.166.33"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="196.33.166.33"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.8.193.33"/>
    </slice>
    <from sec="1083733529" usec="0"/>
    <to sec="1083733648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.194.197.33"/>
    </slice>
    <from sec="1083733593" usec="0"/>
    <to sec="1083733800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.16.208.33"/>
    </slice>
    <from sec="1083733763" usec="0"/>
    <to sec="1083733888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.54.210.33"/>
    </slice>
    <from sec="1083734049" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.69.222.33"/>
    </slice>
    <from sec="1083733785" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1689{
style=filled;
color=gray75;
1740[label="94.176.247.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6215[label="94.176.247.33;2pkt 2fpkt", shape=invtriangle, color=brown];
9316[label="94.176.247.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1689[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.176.247.33:80, 209.29.138.126:2675}[50%]&lt;BR/&gt;{94.176.247.33:80, 209.29.138.127:3006}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3006: (25%)&lt;BR/&gt; 2675: (25%)&gt;];
}
1740--6215[label="1;2pkt 2fpkt"];
1740--9316[label="1;2pkt 2fpkt"];
6215--9316[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" dst_port="3006" src_ip="94.176.247.33" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="2675" src_ip="94.176.247.33" src_port="80"/>
    </slice>
    <from sec="1083733975" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.4.34"/>
    </slice>
    <from sec="1083733704" usec="0"/>
    <to sec="1083733803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.93.18.34"/>
    </slice>
    <from sec="1083733475" usec="0"/>
    <to sec="1083733605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1692{
style=filled;
color=gray75;
1747[label="196.117.57.34;735pkt 735fpkt", shape=pentagon, color=darkviolet];
6222[label="196.117.57.34;734pkt 734fpkt", shape=invtriangle, color=brown];
9321[label="196.117.57.34;734pkt 734fpkt", shape=invhouse, color=bisque];
stat1692[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.117.57.34:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38540: (0.136178%)&lt;BR/&gt; 38063: (0.136178%)&lt;BR/&gt; 33240: (0.136178%)&lt;BR/&gt; 31809: (0.136178%)&gt;];
}
1747--6222[label="1;734pkt 734fpkt"];
1747--9321[label="1;734pkt 734fpkt"];
6222--9321[label="1;734pkt 734fpkt"];
</description>
    <slice>
      <filter src_ip="196.117.57.34" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1693{
style=filled;
color=gray75;
1750[label="198.198.92.34;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6224[label="198.198.92.34;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1693[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.92.34:80, 209.29.136.3:*}[57.1429%]&lt;BR/&gt;{198.198.92.34:80, 209.29.138.127:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29636: (3.7037%)&lt;BR/&gt; 29541: (3.7037%)&lt;BR/&gt; 29438: (3.7037%)&lt;BR/&gt; 29411: (3.7037%)&gt;];
}
1750--6224[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" src_ip="198.198.92.34" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.198.92.34" src_port="80"/>
    </slice>
    <from sec="1083733356" usec="0"/>
    <to sec="1083734073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1694{
style=filled;
color=gray75;
1751[label="136.151.104.34;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6225[label="136.151.104.34;12pkt 12fpkt", shape=invtriangle, color=brown];
9322[label="136.151.104.34;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1694[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.104.34:*, 44.212.34.203:80}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.7838%)&lt;BR/&gt; 6668: (4.05405%)&lt;BR/&gt; 6667: (4.05405%)&lt;BR/&gt; 3980: (4.05405%)&lt;BR/&gt; 3367: (4.05405%)&gt;];
}
1751--6225[label="1;12pkt 12fpkt"];
1751--9322[label="1;12pkt 12fpkt"];
6225--9322[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="44.212.34.203" dst_port="80" src_ip="136.151.104.34"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1695{
style=filled;
color=gray75;
1754[label="45.172.171.34;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6226[label="45.172.171.34;18pkt 18fpkt", shape=invtriangle, color=brown];
9323[label="45.172.171.34;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1695[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.172.171.34:80, 209.29.136.89:*}[33.3333%]&lt;BR/&gt;{45.172.171.34:80, 155.148.182.202:*}[33.3333%]&lt;BR/&gt;{45.172.171.34:80, 136.151.29.211:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31227: (2.77778%)&lt;BR/&gt; 31226: (2.77778%)&lt;BR/&gt; 31224: (2.77778%)&lt;BR/&gt; 31153: (2.77778%)&gt;];
}
1754--6226[label="1;18pkt 18fpkt"];
1754--9323[label="1;18pkt 18fpkt"];
6226--9323[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.29.211" src_ip="45.172.171.34" src_port="80"/>
      <filter dst_ip="155.148.182.202" src_ip="45.172.171.34" src_port="80"/>
      <filter dst_ip="209.29.136.89" src_ip="45.172.171.34" src_port="80"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.150.10.35"/>
    </slice>
    <from sec="1083733734" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1697{
style=filled;
color=gray75;
1760[label="201.16.92.35;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6230[label="201.16.92.35;34pkt 34fpkt", shape=invtriangle, color=brown];
stat1697[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.16.92.35:80, 168.127.16.223:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3877: (1.47059%)&lt;BR/&gt; 3827: (1.47059%)&lt;BR/&gt; 3809: (1.47059%)&lt;BR/&gt; 3808: (1.47059%)&gt;];
}
1760--6230[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.16.223" src_ip="201.16.92.35" src_port="80"/>
    </slice>
    <from sec="1083733236" usec="0"/>
    <to sec="1083733964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1698{
style=filled;
color=gray75;
1762[label="209.18.96.35;125pkt 125fpkt", shape=pentagon, color=darkviolet];
6231[label="209.18.96.35;125pkt 125fpkt", shape=invtriangle, color=brown];
stat1698[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.96.35:4131, *:53}[58.4%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (32.4%)&lt;BR/&gt; 4131: (29.2%)&lt;BR/&gt; 25: (10.4%)&lt;BR/&gt; 113: (6.8%)&lt;BR/&gt; 32772: (0.8%)&gt;];
}
1762--6231[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="209.18.96.35" src_port="4131"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1699{
style=filled;
color=gray75;
1763[label="136.150.116.35;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6232[label="136.150.116.35;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1699[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.116.35:*, 45.130.37.129:80}[52.6316%]&lt;BR/&gt;{136.150.116.35:*, 71.179.128.169:80}[26.3158%]&lt;BR/&gt;{136.150.116.35:*, 44.230.147.101:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50190: (2.7027%)&lt;BR/&gt; 50189: (2.7027%)&lt;BR/&gt; 50185: (2.7027%)&lt;BR/&gt; 50184: (2.7027%)&gt;];
}
1763--6232[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="45.130.37.129" dst_port="80" src_ip="136.150.116.35"/>
      <filter dst_ip="71.179.128.169" dst_port="80" src_ip="136.150.116.35"/>
      <filter dst_ip="44.230.147.101" dst_port="80" src_ip="136.150.116.35"/>
    </slice>
    <from sec="1083733260" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,010,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1700{
style=filled;
color=gray75;
790[label="41.223.128.35;s;327pkt 327fpkt", shape=diamond, color=yellow];
6233[label="41.223.128.35;402pkt 402fpkt", shape=invtriangle, color=brown];
stat1700[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.223.128.35:*, *:135}[99.7512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (49.8628%)&lt;BR/&gt; 4890: (0.274348%)&lt;BR/&gt; 4820: (0.274348%)&lt;BR/&gt; 4494: (0.274348%)&lt;BR/&gt; 3437: (0.274348%)&gt;];
}
790--6233[label="1;327pkt 327fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="41.223.128.35"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1701{
style=filled;
color=gray75;
1766[label="44.59.149.35;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6236[label="44.59.149.35;12pkt 12fpkt", shape=invtriangle, color=brown];
9327[label="44.59.149.35;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1701[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.59.149.35:*, 209.29.136.89:16072}[50%]&lt;BR/&gt;{44.59.149.35:10398, 209.29.136.89:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16072: (25%)&lt;BR/&gt; 10398: (25%)&lt;BR/&gt; 4372: (4.16667%)&lt;BR/&gt; 4184: (4.16667%)&lt;BR/&gt; 3255: (4.16667%)&gt;];
}
1766--6236[label="1;12pkt 12fpkt"];
1766--9327[label="1;12pkt 12fpkt"];
6236--9327[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="44.59.149.35" src_port="10398"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="44.59.149.35"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.45.151.35"/>
    </slice>
    <from sec="1083733999" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.82.191.35"/>
    </slice>
    <from sec="1083733704" usec="0"/>
    <to sec="1083733792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.95.192.35"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083733299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1705{
style=filled;
color=gray75;
1778[label="193.0.228.35;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6244[label="193.0.228.35;5pkt 5fpkt", shape=invtriangle, color=brown];
9334[label="193.0.228.35;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1705[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.0.228.35:15031, 155.148.8.202:3799}[20%]&lt;BR/&gt;{193.0.228.35:15031, 155.148.8.202:3869}[20%]&lt;BR/&gt;{193.0.228.35:15031, 155.148.8.202:3912}[20%]&lt;BR/&gt;{193.0.228.35:15031, 155.148.8.202:3955}[20%]&lt;BR/&gt;{193.0.228.35:15031, 155.148.8.202:3990}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15031: (50%)&lt;BR/&gt; 3990: (10%)&lt;BR/&gt; 3955: (10%)&lt;BR/&gt; 3912: (10%)&lt;BR/&gt; 3869: (10%)&gt;];
}
1778--6244[label="1;5pkt 5fpkt"];
1778--9334[label="1;5pkt 5fpkt"];
6244--9334[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.8.202" dst_port="3990" src_ip="193.0.228.35" src_port="15031"/>
      <filter dst_ip="155.148.8.202" dst_port="3955" src_ip="193.0.228.35" src_port="15031"/>
      <filter dst_ip="155.148.8.202" dst_port="3912" src_ip="193.0.228.35" src_port="15031"/>
      <filter dst_ip="155.148.8.202" dst_port="3869" src_ip="193.0.228.35" src_port="15031"/>
      <filter dst_ip="155.148.8.202" dst_port="3799" src_ip="193.0.228.35" src_port="15031"/>
    </slice>
    <from sec="1083733777" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.214.20.36"/>
    </slice>
    <from sec="1083733332" usec="0"/>
    <to sec="1083733593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.208.42.36"/>
    </slice>
    <from sec="1083733371" usec="0"/>
    <to sec="1083733487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1708{
style=filled;
color=gray75;
1788[label="53.240.42.36;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6249[label="53.240.42.36;27pkt 27fpkt", shape=invtriangle, color=brown];
9338[label="53.240.42.36;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1708[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.240.42.36:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60998: (1.85185%)&lt;BR/&gt; 60996: (1.85185%)&lt;BR/&gt; 60966: (1.85185%)&lt;BR/&gt; 60964: (1.85185%)&gt;];
}
1788--6249[label="1;27pkt 27fpkt"];
1788--9338[label="1;27pkt 27fpkt"];
6249--9338[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="53.240.42.36" src_port="80"/>
    </slice>
    <from sec="1083733520" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.136.90.36"/>
    </slice>
    <from sec="1083733751" usec="0"/>
    <to sec="1083733958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1710{
style=filled;
color=gray75;
1797[label="71.179.128.36;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6256[label="71.179.128.36;14pkt 14fpkt", shape=invtriangle, color=brown];
9343[label="71.179.128.36;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1710[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.179.128.36:80, 209.29.165.20:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37094: (3.57143%)&lt;BR/&gt; 37061: (3.57143%)&lt;BR/&gt; 37045: (3.57143%)&lt;BR/&gt; 37044: (3.57143%)&gt;];
}
1797--6256[label="1;14pkt 14fpkt"];
1797--9343[label="1;14pkt 14fpkt"];
6256--9343[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.165.20" src_ip="71.179.128.36" src_port="80"/>
    </slice>
    <from sec="1083733718" usec="0"/>
    <to sec="1083733885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.100.149.36"/>
    </slice>
    <from sec="1083733791" usec="0"/>
    <to sec="1083733908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1712{
style=filled;
color=gray75;
1802[label="210.237.157.36;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6260[label="210.237.157.36;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1712[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.237.157.36:37785, 136.151.126.224:80}[20%]&lt;BR/&gt;{210.237.157.36:38168, 136.151.126.224:80}[20%]&lt;BR/&gt;{210.237.157.36:38634, 136.151.126.224:80}[20%]&lt;BR/&gt;{210.237.157.36:41376, 136.151.126.224:80}[20%]&lt;BR/&gt;{210.237.157.36:44368, 136.151.126.224:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44368: (10%)&lt;BR/&gt; 41376: (10%)&lt;BR/&gt; 38634: (10%)&lt;BR/&gt; 38168: (10%)&gt;];
}
1802--6260[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.126.224" dst_port="80" src_ip="210.237.157.36" src_port="44368"/>
      <filter dst_ip="136.151.126.224" dst_port="80" src_ip="210.237.157.36" src_port="41376"/>
      <filter dst_ip="136.151.126.224" dst_port="80" src_ip="210.237.157.36" src_port="38634"/>
      <filter dst_ip="136.151.126.224" dst_port="80" src_ip="210.237.157.36" src_port="38168"/>
      <filter dst_ip="136.151.126.224" dst_port="80" src_ip="210.237.157.36" src_port="37785"/>
    </slice>
    <from sec="1083733480" usec="0"/>
    <to sec="1083733572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1713{
style=filled;
color=gray75;
1805[label="213.101.193.36;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6262[label="213.101.193.36;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1713[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.193.36:1863, 155.148.25.92:3475}[33.3333%]&lt;BR/&gt;{213.101.193.36:1863, 136.151.126.140:41408}[33.3333%]&lt;BR/&gt;{213.101.193.36:1863, 209.18.180.179:1149}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 41408: (16.6667%)&lt;BR/&gt; 3475: (16.6667%)&lt;BR/&gt; 1149: (16.6667%)&gt;];
}
1805--6262[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.18.180.179" dst_port="1149" src_ip="213.101.193.36" src_port="1863"/>
      <filter dst_ip="136.151.126.140" dst_port="41408" src_ip="213.101.193.36" src_port="1863"/>
      <filter dst_ip="155.148.25.92" dst_port="3475" src_ip="213.101.193.36" src_port="1863"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.30.226.36"/>
    </slice>
    <from sec="1083733512" usec="0"/>
    <to sec="1083733631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1715{
style=filled;
color=gray75;
1809[label="93.205.237.36;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6265[label="93.205.237.36;13pkt 13fpkt", shape=invtriangle, color=brown];
9347[label="93.205.237.36;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1715[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.205.237.36:80, 155.148.182.202:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31294: (3.65854%)&lt;BR/&gt; 31158: (3.65854%)&lt;BR/&gt; 31157: (3.65854%)&lt;BR/&gt; 31156: (3.65854%)&gt;];
}
1809--6265[label="1;13pkt 13fpkt"];
1809--9347[label="1;14pkt 14fpkt"];
6265--9347[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" src_ip="93.205.237.36" src_port="80"/>
    </slice>
    <from sec="1083733504" usec="0"/>
    <to sec="1083733834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.42.248.36"/>
    </slice>
    <from sec="1083733400" usec="0"/>
    <to sec="1083733685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.55.17.37"/>
    </slice>
    <from sec="1083733474" usec="0"/>
    <to sec="1083733570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1718{
style=filled;
color=gray75;
1817[label="46.237.50.37;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6270[label="46.237.50.37;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1718[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.237.50.37:*, 141.22.88.100:80}[76.9231%]&lt;BR/&gt;{46.237.50.37:*, 141.22.86.221:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2003: (4%)&lt;BR/&gt; 2002: (4%)&lt;BR/&gt; 2001: (4%)&lt;BR/&gt; 2000: (4%)&gt;];
}
1817--6270[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.88.100" dst_port="80" src_ip="46.237.50.37"/>
      <filter dst_ip="141.22.86.221" dst_port="80" src_ip="46.237.50.37"/>
    </slice>
    <from sec="1083733712" usec="0"/>
    <to sec="1083733833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.148.87.37"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1720{
style=filled;
color=gray75;
1822[label="41.23.101.37;226pkt 226fpkt", shape=pentagon, color=darkviolet];
6272[label="41.23.101.37;226pkt 226fpkt", shape=invtriangle, color=brown];
stat1720[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.23.101.37:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1822--6272[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="41.23.101.37" src_port="1032"/>
    </slice>
    <from sec="1083733373" usec="0"/>
    <to sec="1083733413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.236.192.37"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1722{
style=filled;
color=gray75;
1833[label="155.148.194.37;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6279[label="155.148.194.37;14pkt 14fpkt", shape=invtriangle, color=brown];
9353[label="155.148.194.37;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1722[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.194.37:*, 201.96.48.173:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 4677: (3.75%)&lt;BR/&gt; 4676: (3.75%)&lt;BR/&gt; 4675: (3.75%)&lt;BR/&gt; 4674: (3.75%)&gt;];
}
1833--6279[label="1;13pkt 13fpkt"];
1833--9353[label="1;13pkt 13fpkt"];
6279--9353[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="201.96.48.173" dst_port="21" src_ip="155.148.194.37"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.221.209.37"/>
    </slice>
    <from sec="1083733655" usec="0"/>
    <to sec="1083733787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.229.219.37"/>
    </slice>
    <from sec="1083733837" usec="0"/>
    <to sec="1083734044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.54.11.38"/>
    </slice>
    <from sec="1083733727" usec="0"/>
    <to sec="1083733946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1726{
style=filled;
color=gray75;
1850[label="136.151.102.38;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6290[label="136.151.102.38;13pkt 13fpkt", shape=invtriangle, color=brown];
9359[label="136.151.102.38;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1726[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.102.38:*, 44.212.53.108:80}[53.8462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0526%)&lt;BR/&gt; 2140: (3.94737%)&lt;BR/&gt; 2139: (3.94737%)&lt;BR/&gt; 2138: (3.94737%)&lt;BR/&gt; 2137: (3.94737%)&gt;];
}
1850--6290[label="1;13pkt 13fpkt"];
1850--9359[label="1;12pkt 12fpkt"];
6290--9359[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="44.212.53.108" dst_port="80" src_ip="136.151.102.38"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.192.122.38"/>
    </slice>
    <from sec="1083733604" usec="0"/>
    <to sec="1083733912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.180.139.38"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1729{
style=filled;
color=gray75;
1857[label="46.180.167.38;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6295[label="46.180.167.38;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1729[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.180.167.38:80, 136.151.25.180:*}[66.6667%]&lt;BR/&gt;{46.180.167.38:80, 155.148.182.202:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30242: (5.55556%)&lt;BR/&gt; 29560: (5.55556%)&lt;BR/&gt; 28097: (5.55556%)&lt;BR/&gt; 1110: (5.55556%)&gt;];
}
1857--6295[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.25.180" src_ip="46.180.167.38" src_port="80"/>
      <filter dst_ip="155.148.182.202" src_ip="46.180.167.38" src_port="80"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083733963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1730{
style=filled;
color=gray75;
1866[label="213.173.35.39;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6299[label="213.173.35.39;23pkt 23fpkt", shape=invtriangle, color=brown];
9365[label="213.173.35.39;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1730[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.173.35.39:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46834: (2.23881%)&lt;BR/&gt; 46833: (2.23881%)&lt;BR/&gt; 46814: (2.23881%)&lt;BR/&gt; 46743: (2.23881%)&gt;];
}
1866--6299[label="1;22pkt 22fpkt"];
1866--9365[label="1;22pkt 22fpkt"];
6299--9365[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="213.173.35.39" src_port="80"/>
    </slice>
    <from sec="1083733437" usec="0"/>
    <to sec="1083733540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1731{
style=filled;
color=gray75;
1870[label="93.166.46.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6301[label="93.166.46.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1731[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.166.46.39:3901, 173.138.148.161:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3901: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
1870--6301[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.148.161" dst_port="445" src_ip="93.166.46.39" src_port="3901"/>
    </slice>
    <from sec="1083733304" usec="0"/>
    <to sec="1083733479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.209.71.39"/>
    </slice>
    <from sec="1083733634" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1733{
style=filled;
color=gray75;
139[label="174.64.158.196;s;13pkt 13fpkt", shape=diamond, color=yellow];
151[label="46.71.203.92;s;383pkt 383fpkt", shape=diamond, color=yellow];
267[label="46.180.167.56;s;51pkt 51fpkt", shape=diamond, color=yellow];
276[label="46.180.167.50;s;73pkt 73fpkt", shape=diamond, color=yellow];
371[label="173.138.128.106;d;39pkt 39fpkt", shape=diamond, color=yellow];
378[label="46.71.197.42;s;10pkt 10fpkt", shape=diamond, color=yellow];
388[label="201.244.134.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
405[label="198.0.44.184;s;57pkt 57fpkt", shape=diamond, color=yellow];
469[label="205.210.153.1;s;47pkt 47fpkt", shape=diamond, color=yellow];
526[label="46.71.197.208;s;15pkt 15fpkt", shape=diamond, color=yellow];
596[label="174.64.158.200;s;35pkt 35fpkt", shape=diamond, color=yellow];
615[label="46.71.210.5;s;47pkt 47fpkt", shape=diamond, color=yellow];
624[label="46.71.197.187;s;6pkt 6fpkt", shape=diamond, color=yellow];
626[label="174.64.158.240;s;41pkt 41fpkt", shape=diamond, color=yellow];
629[label="46.71.197.182;s;89pkt 89fpkt", shape=diamond, color=yellow];
654[label="173.138.128.114;d;480pkt 480fpkt", shape=diamond, color=yellow];
788[label="174.64.158.244;s;47pkt 47fpkt", shape=diamond, color=yellow];
798[label="46.71.206.215;s;18pkt 18fpkt", shape=diamond, color=yellow];
852[label="46.71.192.80;s;124pkt 124fpkt", shape=diamond, color=yellow];
905[label="174.64.158.245;s;28pkt 28fpkt", shape=diamond, color=yellow];
919[label="213.101.48.179;s;33pkt 33fpkt", shape=diamond, color=yellow];
1026[label="198.198.95.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1036[label="205.210.153.1;47pkt 47fpkt", shape=pentagon, color=darkviolet];
1092[label="217.10.79.4;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1128[label="46.71.210.5;51pkt 51fpkt", shape=pentagon, color=darkviolet];
1208[label="46.9.66.9;75pkt 75fpkt", shape=pentagon, color=darkviolet];
1340[label="217.10.79.15;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1586[label="198.94.102.26;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1849[label="46.9.70.38;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1878[label="40.242.147.39;48pkt 48fpkt", shape=pentagon, color=darkviolet];
1943[label="46.71.197.42;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2062[label="199.115.112.48;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2236[label="46.180.167.56;92pkt 92fpkt", shape=pentagon, color=darkviolet];
2267[label="46.134.88.58;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2342[label="46.71.206.62;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2729[label="46.9.64.82;71pkt 71fpkt", shape=pentagon, color=darkviolet];
2836[label="46.71.206.86;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2902[label="46.71.203.89;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2956[label="46.71.203.92;404pkt 404fpkt", shape=pentagon, color=darkviolet];
2995[label="202.24.32.95;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3011[label="44.48.177.95;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3071[label="46.134.90.98;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3177[label="221.119.118.104;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3955[label="174.64.158.148;67pkt 67fpkt", shape=pentagon, color=darkviolet];
4067[label="174.64.158.154;52pkt 52fpkt", shape=pentagon, color=darkviolet];
4514[label="213.101.48.179;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4601[label="198.0.44.184;59pkt 59fpkt", shape=pentagon, color=darkviolet];
4611[label="46.71.197.184;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4639[label="46.71.197.186;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4685[label="46.71.197.189;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4729[label="46.84.152.192;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4802[label="174.64.158.196;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4878[label="46.221.156.201;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4991[label="46.71.197.208;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5009[label="46.71.197.209;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5078[label="46.71.222.213;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5104[label="46.71.206.215;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5330[label="46.202.224.229;104pkt 104fpkt", shape=pentagon, color=darkviolet];
5345[label="46.71.211.230;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5354[label="174.64.158.231;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5375[label="46.71.211.232;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5416[label="198.163.126.235;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5502[label="174.64.158.240;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5525[label="46.58.103.242;96pkt 96fpkt", shape=pentagon, color=darkviolet];
5552[label="46.249.97.244;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5555[label="174.64.158.244;57pkt 57fpkt", shape=pentagon, color=darkviolet];
5566[label="174.64.158.245;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5723[label="205.210.153.1;46pkt 46fpkt", shape=invtriangle, color=brown];
5764[label="217.10.79.4;7pkt 7fpkt", shape=invtriangle, color=brown];
5843[label="46.9.66.9;75pkt 75fpkt", shape=invtriangle, color=brown];
6305[label="40.242.147.39;49pkt 49fpkt", shape=invtriangle, color=brown];
6432[label="199.115.112.48;31pkt 31fpkt", shape=invtriangle, color=brown];
6552[label="46.180.167.56;91pkt 91fpkt", shape=invtriangle, color=brown];
6571[label="46.134.88.58;37pkt 37fpkt", shape=invtriangle, color=brown];
6626[label="46.71.206.62;9pkt 9fpkt", shape=invtriangle, color=brown];
7064[label="46.71.203.92;404pkt 404fpkt", shape=invtriangle, color=brown];
7104[label="44.48.177.95;17pkt 17fpkt", shape=invtriangle, color=brown];
7771[label="174.64.158.148;67pkt 67fpkt", shape=invtriangle, color=brown];
7846[label="174.64.158.154;52pkt 52fpkt", shape=invtriangle, color=brown];
8166[label="213.101.48.179;38pkt 38fpkt", shape=invtriangle, color=brown];
8224[label="198.0.44.184;58pkt 58fpkt", shape=invtriangle, color=brown];
8232[label="46.71.197.184;7pkt 7fpkt", shape=invtriangle, color=brown];
8251[label="46.71.197.186;12pkt 12fpkt", shape=invtriangle, color=brown];
8283[label="46.71.197.189;9pkt 9fpkt", shape=invtriangle, color=brown];
8311[label="46.84.152.192;34pkt 34fpkt", shape=invtriangle, color=brown];
8477[label="46.71.197.208;14pkt 14fpkt", shape=invtriangle, color=brown];
8491[label="46.71.197.209;8pkt 8fpkt", shape=invtriangle, color=brown];
8547[label="46.71.222.213;17pkt 17fpkt", shape=invtriangle, color=brown];
8709[label="198.163.126.228;10pkt 10fpkt", shape=invtriangle, color=brown];
8724[label="46.202.224.229;104pkt 104fpkt", shape=invtriangle, color=brown];
8732[label="46.71.211.230;10pkt 10fpkt", shape=invtriangle, color=brown];
8740[label="174.64.158.231;16pkt 16fpkt", shape=invtriangle, color=brown];
8758[label="46.71.211.232;18pkt 18fpkt", shape=invtriangle, color=brown];
8787[label="198.163.126.235;25pkt 25fpkt", shape=invtriangle, color=brown];
8846[label="174.64.158.240;40pkt 40fpkt", shape=invtriangle, color=brown];
8884[label="46.249.97.244;59pkt 59fpkt", shape=invtriangle, color=brown];
8887[label="174.64.158.244;56pkt 56fpkt", shape=invtriangle, color=brown];
8895[label="174.64.158.245;29pkt 29fpkt", shape=invtriangle, color=brown];
9001[label="205.210.153.1;46pkt 46fpkt", shape=invhouse, color=bisque];
9028[label="217.10.79.4;7pkt 7fpkt", shape=invhouse, color=bisque];
9077[label="46.9.66.9;75pkt 75fpkt", shape=invhouse, color=bisque];
9368[label="40.242.147.39;48pkt 48fpkt", shape=invhouse, color=bisque];
9560[label="46.71.206.62;9pkt 9fpkt", shape=invhouse, color=bisque];
10236[label="174.64.158.148;66pkt 66fpkt", shape=invhouse, color=bisque];
10518[label="198.0.44.184;59pkt 59fpkt", shape=invhouse, color=bisque];
10535[label="46.71.197.186;12pkt 12fpkt", shape=invhouse, color=bisque];
10569[label="46.84.152.192;34pkt 34fpkt", shape=invhouse, color=bisque];
10685[label="46.71.197.209;8pkt 8fpkt", shape=invhouse, color=bisque];
10816[label="198.163.126.228;10pkt 10fpkt", shape=invhouse, color=bisque];
10833[label="174.64.158.231;16pkt 16fpkt", shape=invhouse, color=bisque];
10844[label="46.71.211.232;17pkt 17fpkt", shape=invhouse, color=bisque];
10900[label="174.64.158.240;41pkt 41fpkt", shape=invhouse, color=bisque];
stat1733[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.29.138.126:*}[27.8518%]&lt;BR/&gt;{*:80, 209.29.138.127:*}[26.5612%]&lt;BR/&gt;{*:80, 173.138.128.114:*}[23.0641%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7555%)&lt;BR/&gt; 443: (0.543879%)&lt;BR/&gt; 8200: (0.470133%)&lt;BR/&gt; 25: (0.193584%)&lt;BR/&gt; 4976: (0.0921829%)&gt;];
}
139--654[label="0.0769231;1pkt 1fpkt"];
139--4802[label="1;13pkt 13fpkt"];
151--654[label="0.0809399;31pkt 31fpkt"];
151--2956[label="1;383pkt 383fpkt"];
151--7064[label="1;383pkt 383fpkt"];
267--654[label="0.392157;20pkt 20fpkt"];
267--2236[label="1;51pkt 51fpkt"];
267--6552[label="0.980392;50pkt 50fpkt"];
276--654[label="0.356164;26pkt 26fpkt"];
371--378[label="0.1;1pkt 1fpkt"];
371--388[label="1;1pkt 1fpkt"];
371--1878[label="0.717949;28pkt 28fpkt"];
371--1943[label="0.1;1pkt 1fpkt"];
371--5330[label="0.102564;4pkt 4fpkt"];
371--6305[label="0.74359;29pkt 29fpkt"];
371--8724[label="0.102564;4pkt 4fpkt"];
371--9368[label="0.717949;28pkt 28fpkt"];
378--1943[label="1;10pkt 10fpkt"];
405--654[label="0.0175439;1pkt 1fpkt"];
405--4601[label="1;57pkt 57fpkt"];
405--8224[label="0.982456;56pkt 56fpkt"];
405--10518[label="1;57pkt 57fpkt"];
469--654[label="0.297872;14pkt 14fpkt"];
469--1036[label="1;47pkt 47fpkt"];
469--5723[label="1;46pkt 46fpkt"];
469--9001[label="1;46pkt 46fpkt"];
526--654[label="0.733333;11pkt 11fpkt"];
526--4991[label="1;15pkt 15fpkt"];
526--8477[label="1;14pkt 14fpkt"];
596--654[label="0.0285714;1pkt 1fpkt"];
615--654[label="0.170213;8pkt 8fpkt"];
615--1128[label="0.978723;46pkt 46fpkt"];
624--654[label="0.166667;1pkt 1fpkt"];
626--654[label="0.0487805;2pkt 2fpkt"];
626--5502[label="1;41pkt 41fpkt"];
626--8846[label="1;40pkt 40fpkt"];
626--10900[label="1;41pkt 41fpkt"];
629--654[label="0.0561798;5pkt 5fpkt"];
654--788[label="0.170213;8pkt 8fpkt"];
654--798[label="0.111111;2pkt 2fpkt"];
654--852[label="0.0645161;8pkt 8fpkt"];
654--905[label="0.0714286;2pkt 2fpkt"];
654--1026[label="0.333333;1pkt 1fpkt"];
654--1036[label="0.297872;14pkt 14fpkt"];
654--1092[label="0.142857;1pkt 1fpkt"];
654--1128[label="0.156863;8pkt 8fpkt"];
654--1208[label="0.04;3pkt 3fpkt"];
654--1340[label="0.181818;2pkt 2fpkt"];
654--1586[label="0.444444;8pkt 8fpkt"];
654--1849[label="0.5;3pkt 3fpkt"];
654--2062[label="0.129032;4pkt 4fpkt"];
654--2085[label="0.0434783;1pkt 1fpkt"];
654--2236[label="0.293478;27pkt 27fpkt"];
654--2267[label="0.184211;7pkt 7fpkt"];
654--2342[label="0.3;3pkt 3fpkt"];
654--2687[label="0.0243902;1pkt 1fpkt"];
654--2729[label="0.112676;8pkt 8fpkt"];
654--2836[label="0.166667;2pkt 2fpkt"];
654--2902[label="0.333333;3pkt 3fpkt"];
654--2956[label="0.0767327;31pkt 31fpkt"];
654--2995[label="0.0285714;1pkt 1fpkt"];
654--3011[label="0.166667;3pkt 3fpkt"];
654--3071[label="0.0666667;1pkt 1fpkt"];
654--3177[label="0.0967742;3pkt 3fpkt"];
654--3456[label="0.0461538;3pkt 3fpkt"];
654--3955[label="0.0298507;2pkt 2fpkt"];
654--4067[label="0.0192308;1pkt 1fpkt"];
654--4514[label="0.0263158;1pkt 1fpkt"];
654--4601[label="0.0169492;1pkt 1fpkt"];
654--4611[label="0.571429;4pkt 4fpkt"];
654--4639[label="0.307692;4pkt 4fpkt"];
654--4685[label="0.666667;6pkt 6fpkt"];
654--4729[label="0.0857143;3pkt 3fpkt"];
654--4802[label="0.0625;2pkt 2fpkt"];
654--4878[label="0.173913;4pkt 4fpkt"];
654--4991[label="0.733333;11pkt 11fpkt"];
654--5009[label="0.75;6pkt 6fpkt"];
654--5078[label="0.176471;3pkt 3fpkt"];
654--5104[label="0.117647;2pkt 2fpkt"];
654--5330[label="0.346154;36pkt 36fpkt"];
654--5345[label="0.2;2pkt 2fpkt"];
654--5354[label="0.0625;1pkt 1fpkt"];
654--5375[label="0.0555556;1pkt 1fpkt"];
654--5416[label="0.12;3pkt 3fpkt"];
654--5502[label="0.0487805;2pkt 2fpkt"];
654--5525[label="0.322917;31pkt 31fpkt"];
654--5552[label="0.0166667;1pkt 1fpkt"];
654--5555[label="0.140351;8pkt 8fpkt"];
654--5566[label="0.0689655;2pkt 2fpkt"];
654--5723[label="0.304348;14pkt 14fpkt"];
654--5764[label="0.142857;1pkt 1fpkt"];
654--5843[label="0.04;3pkt 3fpkt"];
654--6432[label="0.129032;4pkt 4fpkt"];
654--6552[label="0.296703;27pkt 27fpkt"];
654--6571[label="0.189189;7pkt 7fpkt"];
654--6626[label="0.333333;3pkt 3fpkt"];
654--7064[label="0.0767327;31pkt 31fpkt"];
654--7104[label="0.176471;3pkt 3fpkt"];
654--7417[label="0.0461538;3pkt 3fpkt"];
654--7771[label="0.0298507;2pkt 2fpkt"];
654--7846[label="0.0192308;1pkt 1fpkt"];
654--8166[label="0.0263158;1pkt 1fpkt"];
654--8224[label="0.0172414;1pkt 1fpkt"];
654--8232[label="0.571429;4pkt 4fpkt"];
654--8251[label="0.333333;4pkt 4fpkt"];
654--8283[label="0.666667;6pkt 6fpkt"];
654--8311[label="0.0882353;3pkt 3fpkt"];
654--8477[label="0.785714;11pkt 11fpkt"];
654--8491[label="0.75;6pkt 6fpkt"];
654--8547[label="0.176471;3pkt 3fpkt"];
654--8709[label="0.2;2pkt 2fpkt"];
654--8724[label="0.346154;36pkt 36fpkt"];
654--8732[label="0.2;2pkt 2fpkt"];
654--8740[label="0.0625;1pkt 1fpkt"];
654--8758[label="0.0555556;1pkt 1fpkt"];
654--8787[label="0.12;3pkt 3fpkt"];
654--8846[label="0.05;2pkt 2fpkt"];
654--8884[label="0.0169492;1pkt 1fpkt"];
654--8887[label="0.142857;8pkt 8fpkt"];
654--8895[label="0.0689655;2pkt 2fpkt"];
654--9001[label="0.304348;14pkt 14fpkt"];
654--9028[label="0.142857;1pkt 1fpkt"];
654--9077[label="0.04;3pkt 3fpkt"];
654--9560[label="0.333333;3pkt 3fpkt"];
654--10020[label="0.0461538;3pkt 3fpkt"];
654--10236[label="0.030303;2pkt 2fpkt"];
654--10518[label="0.0169492;1pkt 1fpkt"];
654--10535[label="0.333333;4pkt 4fpkt"];
654--10569[label="0.0882353;3pkt 3fpkt"];
654--10685[label="0.75;6pkt 6fpkt"];
654--10816[label="0.2;2pkt 2fpkt"];
654--10833[label="0.0625;1pkt 1fpkt"];
654--10844[label="0.0588235;1pkt 1fpkt"];
654--10900[label="0.0487805;2pkt 2fpkt"];
788--5555[label="1;47pkt 47fpkt"];
788--8887[label="0.978723;46pkt 46fpkt"];
798--5104[label="1;17pkt 17fpkt"];
905--5566[label="1;28pkt 28fpkt"];
905--8895[label="1;28pkt 28fpkt"];
919--4514[label="1;33pkt 33fpkt"];
919--8166[label="1;33pkt 33fpkt"];
1036--5723[label="1;46pkt 46fpkt"];
1036--9001[label="1;46pkt 46fpkt"];
1092--5764[label="1;7pkt 7fpkt"];
1092--9028[label="1;7pkt 7fpkt"];
1208--5843[label="1;75pkt 75fpkt"];
1208--9077[label="1;75pkt 75fpkt"];
1878--6305[label="1;48pkt 48fpkt"];
1878--9368[label="1;48pkt 48fpkt"];
2062--6432[label="1;31pkt 31fpkt"];
2236--6552[label="1;91pkt 91fpkt"];
2267--6571[label="1;37pkt 37fpkt"];
2342--6626[label="1;9pkt 9fpkt"];
2342--9560[label="1;9pkt 9fpkt"];
2956--7064[label="1;404pkt 404fpkt"];
3011--7104[label="1;17pkt 17fpkt"];
3955--7771[label="1;67pkt 67fpkt"];
3955--10236[label="1;66pkt 66fpkt"];
4067--7846[label="1;52pkt 52fpkt"];
4514--8166[label="1;38pkt 38fpkt"];
4601--8224[label="1;58pkt 58fpkt"];
4601--10518[label="1;59pkt 59fpkt"];
4611--8232[label="1;7pkt 7fpkt"];
4639--8251[label="1;12pkt 12fpkt"];
4639--10535[label="1;12pkt 12fpkt"];
4685--8283[label="1;9pkt 9fpkt"];
4729--8311[label="1;34pkt 34fpkt"];
4729--10569[label="1;34pkt 34fpkt"];
4991--8477[label="1;14pkt 14fpkt"];
5009--8491[label="1;8pkt 8fpkt"];
5009--10685[label="1;8pkt 8fpkt"];
5078--8547[label="1;17pkt 17fpkt"];
5330--8724[label="1;104pkt 104fpkt"];
5345--8732[label="1;10pkt 10fpkt"];
5354--8740[label="1;16pkt 16fpkt"];
5354--10833[label="1;16pkt 16fpkt"];
5375--8758[label="1;18pkt 18fpkt"];
5375--10844[label="1;17pkt 17fpkt"];
5416--8787[label="1;25pkt 25fpkt"];
5502--8846[label="1;40pkt 40fpkt"];
5502--10900[label="1;41pkt 41fpkt"];
5552--8884[label="1;59pkt 59fpkt"];
5555--8887[label="1;56pkt 56fpkt"];
5566--8895[label="1;29pkt 29fpkt"];
5723--9001[label="1;46pkt 46fpkt"];
5764--9028[label="1;7pkt 7fpkt"];
5843--9077[label="1;75pkt 75fpkt"];
6305--9368[label="1;48pkt 48fpkt"];
6626--9560[label="1;9pkt 9fpkt"];
7771--10236[label="1;66pkt 66fpkt"];
8224--10518[label="1;58pkt 58fpkt"];
8251--10535[label="1;12pkt 12fpkt"];
8311--10569[label="1;34pkt 34fpkt"];
8491--10685[label="1;8pkt 8fpkt"];
8709--10816[label="1;10pkt 10fpkt"];
8740--10833[label="1;16pkt 16fpkt"];
8758--10844[label="1;17pkt 17fpkt"];
8846--10900[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_port="80"/>
      <filter dst_ip="173.138.128.114" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1734{
style=filled;
color=gray75;
1880[label="208.8.170.39;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6306[label="208.8.170.39;61pkt 61fpkt", shape=invtriangle, color=brown];
stat1734[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.8.170.39:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (6.55738%)&lt;BR/&gt; 3127: (6.55738%)&lt;BR/&gt; 2745: (6.55738%)&lt;BR/&gt; 1025: (6.55738%)&lt;BR/&gt; 80: (6.55738%)&gt;];
}
1880--6306[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter src_ip="208.8.170.39"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083733984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.192.174.39"/>
    </slice>
    <from sec="1083734036" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.133.225.39"/>
    </slice>
    <from sec="1083733647" usec="0"/>
    <to sec="1083733783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1737{
style=filled;
color=gray75;
1883[label="41.54.230.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6309[label="41.54.230.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1737[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.54.230.39:6881, 208.96.50.84:57395}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57395: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
1883--6309[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="57395" src_ip="41.54.230.39" src_port="6881"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1738{
style=filled;
color=gray75;
1885[label="46.174.12.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6310[label="46.174.12.40;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1738[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.174.12.40:6882, 208.96.50.84:56726}[50%]&lt;BR/&gt;{46.174.12.40:6885, 208.96.50.84:58670}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58670: (25%)&lt;BR/&gt; 56726: (25%)&lt;BR/&gt; 6885: (25%)&lt;BR/&gt; 6882: (25%)&gt;];
}
1885--6310[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58670" src_ip="46.174.12.40" src_port="6885"/>
      <filter dst_ip="208.96.50.84" dst_port="56726" src_ip="46.174.12.40" src_port="6882"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.38.16.40"/>
    </slice>
    <from sec="1083733440" usec="0"/>
    <to sec="1083733554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1740{
style=filled;
color=gray75;
1889[label="53.197.27.40;224pkt 224fpkt", shape=pentagon, color=darkviolet];
6314[label="53.197.27.40;223pkt 223fpkt", shape=invtriangle, color=brown];
stat1740[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.197.27.40:*, *:3128}[33.9286%]&lt;BR/&gt;{53.197.27.40:*, *:1080}[33.0357%]&lt;BR/&gt;{53.197.27.40:*, *:3127}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (17.0022%)&lt;BR/&gt; 1080: (16.5548%)&lt;BR/&gt; 3127: (16.443%)&lt;BR/&gt; 2992: (0.447427%)&lt;BR/&gt; 1290: (0.447427%)&gt;];
}
1889--6314[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="53.197.27.40"/>
      <filter dst_port="3127" src_ip="53.197.27.40"/>
      <filter dst_port="1080" src_ip="53.197.27.40"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1741{
style=filled;
color=gray75;
1891[label="136.151.43.40;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6315[label="136.151.43.40;27pkt 27fpkt", shape=invtriangle, color=brown];
9372[label="136.151.43.40;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1741[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.43.40:*, *:25}[60.7143%]&lt;BR/&gt;{136.151.43.40:53, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.1951%)&lt;BR/&gt; 53: (12.8049%)&lt;BR/&gt; 4652: (3.65854%)&lt;BR/&gt; 55276: (1.82927%)&lt;BR/&gt; 46594: (1.82927%)&gt;];
}
1891--6315[label="1;27pkt 27fpkt"];
1891--9372[label="1;27pkt 27fpkt"];
6315--9372[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.43.40" src_port="53"/>
      <filter dst_port="25" src_ip="136.151.43.40"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083734010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.136.57.40"/>
    </slice>
    <from sec="1083733965" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1743{
style=filled;
color=gray75;
1897[label="196.102.124.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6319[label="196.102.124.40;1pkt 1fpkt", shape=invtriangle, color=brown];
9374[label="196.102.124.40;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1743[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.102.124.40:3005, 141.132.74.208:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3005: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
1897--6319[label="1;1pkt 1fpkt"];
1897--9374[label="1;1pkt 1fpkt"];
6319--9374[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.132.74.208" dst_port="445" src_ip="196.102.124.40" src_port="3005"/>
    </slice>
    <from sec="1083733674" usec="0"/>
    <to sec="1083734035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1744{
style=filled;
color=gray75;
1899[label="41.197.130.40;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6320[label="41.197.130.40;9pkt 9fpkt", shape=invtriangle, color=brown];
9375[label="41.197.130.40;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1744[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.197.130.40:10455, 209.29.136.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10455: (50%)&lt;BR/&gt; 4784: (5.55556%)&lt;BR/&gt; 4176: (5.55556%)&lt;BR/&gt; 4130: (5.55556%)&lt;BR/&gt; 3566: (5.55556%)&gt;];
}
1899--6320[label="1;9pkt 9fpkt"];
1899--9375[label="1;9pkt 9fpkt"];
6320--9375[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="41.197.130.40" src_port="10455"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1745{
style=filled;
color=gray75;
1901[label="201.151.138.40;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6322[label="201.151.138.40;4pkt 4fpkt", shape=invtriangle, color=brown];
9377[label="201.151.138.40;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1745[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.151.138.40:4901, 173.138.233.16:445}[25%]&lt;BR/&gt;{201.151.138.40:3820, 141.211.156.183:445}[25%]&lt;BR/&gt;{201.151.138.40:1331, 136.151.235.67:80}[25%]&lt;BR/&gt;{201.151.138.40:3528, 136.151.235.67:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.2727%)&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 4901: (13.6364%)&lt;BR/&gt; 3820: (13.6364%)&lt;BR/&gt; 3528: (13.6364%)&gt;];
}
1901--6322[label="1;4pkt 4fpkt"];
1901--9377[label="1;3pkt 3fpkt"];
6322--9377[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.151.138.40" src_port="3528"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.151.138.40" src_port="1331"/>
      <filter dst_ip="141.211.156.183" dst_port="445" src_ip="201.151.138.40" src_port="3820"/>
      <filter dst_ip="173.138.233.16" dst_port="445" src_ip="201.151.138.40" src_port="4901"/>
    </slice>
    <from sec="1083733466" usec="0"/>
    <to sec="1083733842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1746{
style=filled;
color=gray75;
1912[label="198.129.48.41;234pkt 234fpkt", shape=pentagon, color=darkviolet];
6329[label="198.129.48.41;233pkt 233fpkt", shape=invtriangle, color=brown];
stat1746[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.129.48.41:1026, *:137}[60.2564%]&lt;BR/&gt;{198.129.48.41:1025, *:137}[39.7436%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (30.0857%)&lt;BR/&gt; 1025: (19.9143%)&gt;];
}
1912--6329[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.129.48.41" src_port="1026"/>
      <filter dst_port="137" src_ip="198.129.48.41" src_port="1025"/>
    </slice>
    <from sec="1083733269" usec="0"/>
    <to sec="1083733563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1747{
style=filled;
color=gray75;
1917[label="155.16.89.41;53pkt 53fpkt", shape=pentagon, color=darkviolet];
6332[label="155.16.89.41;52pkt 52fpkt", shape=invtriangle, color=brown];
stat1747[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.16.89.41:*, *:445}[30.1887%]&lt;BR/&gt;{155.16.89.41:*, *:135}[22.6415%]&lt;BR/&gt;{155.16.89.41:*, *:139}[22.6415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (15.2381%)&lt;BR/&gt; 139: (11.4286%)&lt;BR/&gt; 135: (11.4286%)&lt;BR/&gt; 80: (6.19048%)&lt;BR/&gt; 1433: (5.71429%)&gt;];
}
1917--6332[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="155.16.89.41"/>
      <filter dst_port="139" src_ip="155.16.89.41"/>
      <filter dst_port="135" src_ip="155.16.89.41"/>
    </slice>
    <from sec="1083733312" usec="0"/>
    <to sec="1083733402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.122.96.41"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083733603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1749{
style=filled;
color=gray75;
1920[label="204.70.99.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6335[label="204.70.99.41;1pkt 1fpkt", shape=invtriangle, color=brown];
9386[label="204.70.99.41;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1749[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.70.99.41:80, 209.29.136.44:2245}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2245: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1920--6335[label="1;1pkt 1fpkt"];
1920--9386[label="1;1pkt 1fpkt"];
6335--9386[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.44" dst_port="2245" src_ip="204.70.99.41" src_port="80"/>
    </slice>
    <from sec="1083733295" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.136.125.41"/>
    </slice>
    <from sec="1083733648" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,501,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1751{
style=filled;
color=gray75;
561[label="155.148.136.7;d;111pkt 111fpkt", shape=diamond, color=yellow];
6340[label="93.217.160.41;117pkt 117fpkt", shape=invtriangle, color=brown];
stat1751[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.217.160.41:21, 155.148.136.7:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (45.3947%)&lt;BR/&gt; 57851: (0.438596%)&lt;BR/&gt; 56476: (0.438596%)&lt;BR/&gt; 54167: (0.438596%)&lt;BR/&gt; 41442: (0.438596%)&gt;];
}
561--3944[label="0.00900901;1pkt 1fpkt"];
561--6340[label="0.972973;108pkt 108fpkt"];
561--7763[label="0.00900901;1pkt 1fpkt"];
561--10232[label="0.00900901;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.136.7" src_ip="93.217.160.41" src_port="21"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.9.216.41"/>
    </slice>
    <from sec="1083733580" usec="0"/>
    <to sec="1083733647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.138.13.42"/>
    </slice>
    <from sec="1083733491" usec="0"/>
    <to sec="1083733708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.53.14.42"/>
    </slice>
    <from sec="1083733795" usec="0"/>
    <to sec="1083733916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1755{
style=filled;
color=gray75;
1930[label="109.193.21.42;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6344[label="109.193.21.42;4pkt 4fpkt", shape=invtriangle, color=brown];
9392[label="109.193.21.42;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1755[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.193.21.42:1615, 168.127.177.38:445}[20%]&lt;BR/&gt;{109.193.21.42:4583, 136.151.235.67:80}[20%]&lt;BR/&gt;{109.193.21.42:1444, 155.148.165.148:445}[20%]&lt;BR/&gt;{109.193.21.42:1969, 141.145.133.174:445}[20%]&lt;BR/&gt;{109.193.21.42:1699, 136.151.29.240:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 1969: (10.7143%)&lt;BR/&gt; 1699: (10.7143%)&lt;BR/&gt; 1615: (10.7143%)&lt;BR/&gt; 1444: (10.7143%)&gt;];
}
1930--6344[label="1;4pkt 4fpkt"];
1930--9392[label="1;5pkt 5fpkt"];
6344--9392[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.29.240" dst_port="445" src_ip="109.193.21.42" src_port="1699"/>
      <filter dst_ip="141.145.133.174" dst_port="445" src_ip="109.193.21.42" src_port="1969"/>
      <filter dst_ip="155.148.165.148" dst_port="445" src_ip="109.193.21.42" src_port="1444"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.193.21.42" src_port="4583"/>
      <filter dst_ip="168.127.177.38" dst_port="445" src_ip="109.193.21.42" src_port="1615"/>
    </slice>
    <from sec="1083733684" usec="0"/>
    <to sec="1083733995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1756{
style=filled;
color=gray75;
1937[label="213.19.95.42;82pkt 82fpkt", shape=pentagon, color=darkviolet];
6347[label="213.19.95.42;81pkt 81fpkt", shape=invtriangle, color=brown];
9394[label="213.19.95.42;81pkt 81fpkt", shape=invhouse, color=bisque];
stat1756[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.19.95.42:80, 209.29.165.20:*}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64873: (0.614754%)&lt;BR/&gt; 36490: (0.614754%)&lt;BR/&gt; 36486: (0.614754%)&lt;BR/&gt; 36456: (0.614754%)&gt;];
}
1937--6347[label="1;81pkt 81fpkt"];
1937--9394[label="1;81pkt 81fpkt"];
6347--9394[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.165.20" src_ip="213.19.95.42" src_port="80"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.102.170.42"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.59.201.42"/>
    </slice>
    <from sec="1083733643" usec="0"/>
    <to sec="1083733813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="174.178.212.42"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083733762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.69.243.42"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.21.17.43"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1762{
style=filled;
color=gray75;
1956[label="208.96.57.43;97pkt 97fpkt", shape=pentagon, color=darkviolet];
6358[label="208.96.57.43;97pkt 97fpkt", shape=invtriangle, color=brown];
9402[label="208.96.57.43;96pkt 96fpkt", shape=invhouse, color=bisque];
stat1762[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.57.43:*, *:7}[49.4845%]&lt;BR/&gt;{208.96.57.43:1470, *:53}[23.7113%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7: (24.8276%)&lt;BR/&gt; 53: (12.2414%)&lt;BR/&gt; 1470: (11.7241%)&lt;BR/&gt; 2703: (9.31034%)&lt;BR/&gt; 0: (3.10345%)&gt;];
}
1956--6358[label="1;97pkt 97fpkt"];
1956--9402[label="1;96pkt 96fpkt"];
6358--9402[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_port="7" src_ip="208.96.57.43"/>
      <filter dst_port="53" src_ip="208.96.57.43" src_port="1470"/>
    </slice>
    <from sec="1083733293" usec="0"/>
    <to sec="1083733957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.101.72.43"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1764{
style=filled;
color=gray75;
102[label="120.139.220.244;d;6pkt 6fpkt", shape=diamond, color=yellow];
110[label="192.198.11.226;d;19pkt 19fpkt", shape=diamond, color=yellow];
131[label="136.151.200.157;s;120pkt 120fpkt", shape=diamond, color=yellow];
449[label="141.22.86.56;s;451pkt 451fpkt", shape=diamond, color=yellow];
463[label="141.22.142.189;s;41pkt 41fpkt", shape=diamond, color=yellow];
2231[label="141.22.86.56;742pkt 742fpkt", shape=pentagon, color=darkviolet];
4127[label="136.151.200.157;166pkt 166fpkt", shape=pentagon, color=darkviolet];
4683[label="141.22.142.189;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6548[label="141.22.86.56;741pkt 741fpkt", shape=invtriangle, color=brown];
8281[label="141.22.142.189;41pkt 41fpkt", shape=invtriangle, color=brown];
9516[label="141.22.86.56;742pkt 742fpkt", shape=invhouse, color=bisque];
10554[label="141.22.142.189;40pkt 40fpkt", shape=invhouse, color=bisque];
stat1764[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.86.56:*, *:80}[78%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4444%)&lt;BR/&gt; 443: (0.238095%)&lt;BR/&gt; 64913: (0.126984%)&lt;BR/&gt; 1863: (0.0952381%)&lt;BR/&gt; 1033: (0.0952381%)&gt;];
}
102--463[label="1;6pkt 6fpkt"];
102--4683[label="1;6pkt 6fpkt"];
102--8281[label="1;6pkt 6fpkt"];
102--10554[label="1;6pkt 6fpkt"];
110--131[label="0.105263;2pkt 2fpkt"];
110--449[label="0.684211;13pkt 13fpkt"];
110--463[label="0.157895;3pkt 3fpkt"];
110--982[label="0.157895;3pkt 3fpkt"];
110--2231[label="0.684211;13pkt 13fpkt"];
110--4127[label="0.105263;2pkt 2fpkt"];
110--4683[label="0.157895;3pkt 3fpkt"];
110--6548[label="0.684211;13pkt 13fpkt"];
110--8281[label="0.157895;3pkt 3fpkt"];
110--9516[label="0.684211;13pkt 13fpkt"];
110--10554[label="0.157895;3pkt 3fpkt"];
131--224[label="0.0212766;1pkt 1fpkt"];
131--348[label="0.0689655;4pkt 4fpkt"];
131--708[label="0.0185185;2pkt 2fpkt"];
131--823[label="0.010989;1pkt 1fpkt"];
131--982[label="0.0583333;7pkt 7fpkt"];
131--4127[label="1;120pkt 120fpkt"];
449--499[label="0.0454545;4pkt 4fpkt"];
449--708[label="0.0277778;3pkt 3fpkt"];
449--771[label="0.0177384;8pkt 8fpkt"];
449--982[label="0.0709534;32pkt 32fpkt"];
449--2231[label="1;451pkt 451fpkt"];
449--6548[label="0.997783;450pkt 450fpkt"];
449--9516[label="1;451pkt 451fpkt"];
463--4683[label="1;41pkt 41fpkt"];
463--8281[label="1;41pkt 41fpkt"];
463--10554[label="1;40pkt 40fpkt"];
2231--6548[label="1;741pkt 741fpkt"];
2231--9516[label="1;742pkt 742fpkt"];
4683--8281[label="1;41pkt 41fpkt"];
4683--10554[label="1;40pkt 40fpkt"];
6548--9516[label="1;741pkt 741fpkt"];
8281--10554[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.22.86.56"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1765{
style=filled;
color=gray75;
1962[label="109.195.107.43;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6361[label="109.195.107.43;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1765[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.195.107.43:4498, 136.151.235.67:80}[20%]&lt;BR/&gt;{109.195.107.43:3242, 173.138.115.96:445}[20%]&lt;BR/&gt;{109.195.107.43:1842, 209.29.172.192:445}[20%]&lt;BR/&gt;{109.195.107.43:0, 209.18.122.32:0}[20%]&lt;BR/&gt;{109.195.107.43:4012, 209.18.122.32:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 4498: (11.1111%)&lt;BR/&gt; 4012: (11.1111%)&lt;BR/&gt; 3242: (11.1111%)&lt;BR/&gt; 1842: (11.1111%)&gt;];
}
1962--6361[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.18.122.32" dst_port="445" src_ip="109.195.107.43" src_port="4012"/>
      <filter dst_ip="209.18.122.32" src_ip="109.195.107.43"/>
      <filter dst_ip="209.29.172.192" dst_port="445" src_ip="109.195.107.43" src_port="1842"/>
      <filter dst_ip="173.138.115.96" dst_port="445" src_ip="109.195.107.43" src_port="3242"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.195.107.43" src_port="4498"/>
    </slice>
    <from sec="1083733672" usec="0"/>
    <to sec="1083734021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.186.130.43"/>
    </slice>
    <from sec="1083733281" usec="0"/>
    <to sec="1083733985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.51.193.43"/>
    </slice>
    <from sec="1083733830" usec="0"/>
    <to sec="1083733983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.85.19.44"/>
    </slice>
    <from sec="1083733385" usec="0"/>
    <to sec="1083733892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.16.20.44"/>
    </slice>
    <from sec="1083733723" usec="0"/>
    <to sec="1083733907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.209.29.44"/>
    </slice>
    <from sec="1083733370" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.222.98.44"/>
    </slice>
    <from sec="1083733870" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.176.106.44"/>
    </slice>
    <from sec="1083733313" usec="0"/>
    <to sec="1083733620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1773{
style=filled;
color=gray75;
1988[label="209.137.134.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6376[label="209.137.134.44;1pkt 1fpkt", shape=invtriangle, color=brown];
9411[label="209.137.134.44;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1773[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.137.134.44:80, 155.148.182.202:29497}[50%]&lt;BR/&gt;{209.137.134.44:80, 155.148.182.202:30127}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30127: (37.5%)&lt;BR/&gt; 29497: (12.5%)&gt;];
}
1988--6376[label="1;1pkt 1fpkt"];
1988--9411[label="1;1pkt 1fpkt"];
6376--9411[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" dst_port="30127" src_ip="209.137.134.44" src_port="80"/>
      <filter dst_ip="155.148.182.202" dst_port="29497" src_ip="209.137.134.44" src_port="80"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083733506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.82.165.44"/>
    </slice>
    <from sec="1083733891" usec="0"/>
    <to sec="1083733954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.23.22.45"/>
    </slice>
    <from sec="1083733443" usec="0"/>
    <to sec="1083733552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1776{
style=filled;
color=gray75;
1999[label="213.101.32.45;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6386[label="213.101.32.45;3pkt 3fpkt", shape=invtriangle, color=brown];
9417[label="213.101.32.45;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1776[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.32.45:80, 209.29.138.126:3500}[33.3333%]&lt;BR/&gt;{213.101.32.45:80, 209.29.138.126:3538}[33.3333%]&lt;BR/&gt;{213.101.32.45:80, 209.29.138.126:3539}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3539: (16.6667%)&lt;BR/&gt; 3538: (16.6667%)&lt;BR/&gt; 3500: (16.6667%)&gt;];
}
1999--6386[label="1;3pkt 3fpkt"];
1999--9417[label="1;3pkt 3fpkt"];
6386--9417[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" dst_port="3539" src_ip="213.101.32.45" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="3538" src_ip="213.101.32.45" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="3500" src_ip="213.101.32.45" src_port="80"/>
    </slice>
    <from sec="1083733282" usec="0"/>
    <to sec="1083734052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1777{
style=filled;
color=gray75;
2000[label="93.230.49.45;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6387[label="93.230.49.45;2pkt 2fpkt", shape=invtriangle, color=brown];
9418[label="93.230.49.45;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1777[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.230.49.45:13948, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{93.230.49.45:23343, 155.148.133.84:80}[33.3333%]&lt;BR/&gt;{93.230.49.45:35174, 141.85.11.92:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35174: (21.4286%)&lt;BR/&gt; 23343: (21.4286%)&lt;BR/&gt; 13948: (7.14286%)&gt;];
}
2000--6387[label="1;2pkt 2fpkt"];
2000--9418[label="1;2pkt 2fpkt"];
6387--9418[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.11.92" dst_port="80" src_ip="93.230.49.45" src_port="35174"/>
      <filter dst_ip="155.148.133.84" dst_port="80" src_ip="93.230.49.45" src_port="23343"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.230.49.45" src_port="13948"/>
    </slice>
    <from sec="1083733346" usec="0"/>
    <to sec="1083734031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.8.62.45"/>
    </slice>
    <from sec="1083733500" usec="0"/>
    <to sec="1083733563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1779{
style=filled;
color=gray75;
2002[label="45.212.77.45;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6389[label="45.212.77.45;17pkt 17fpkt", shape=invtriangle, color=brown];
9420[label="45.212.77.45;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1779[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.212.77.45:50559, 209.29.136.89:*}[58.8235%]&lt;BR/&gt;{45.212.77.45:*, 209.29.136.89:16072}[41.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50559: (29.4118%)&lt;BR/&gt; 16072: (20.5882%)&lt;BR/&gt; 4924: (2.94118%)&lt;BR/&gt; 4777: (2.94118%)&lt;BR/&gt; 4301: (2.94118%)&gt;];
}
2002--6389[label="1;17pkt 17fpkt"];
2002--9420[label="1;17pkt 17fpkt"];
6389--9420[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="45.212.77.45" src_port="50559"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="45.212.77.45"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1780{
style=filled;
color=gray75;
2004[label="136.150.86.45;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6390[label="136.150.86.45;40pkt 40fpkt", shape=invtriangle, color=brown];
9421[label="136.150.86.45;41pkt 41fpkt", shape=invhouse, color=bisque];
stat1780[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.86.45:*, 46.35.115.117:80}[73.1707%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7705%)&lt;BR/&gt; 63875: (1.22951%)&lt;BR/&gt; 63872: (1.22951%)&lt;BR/&gt; 63846: (1.22951%)&lt;BR/&gt; 63841: (1.22951%)&gt;];
}
2004--6390[label="1;40pkt 40fpkt"];
2004--9421[label="1;41pkt 41fpkt"];
6390--9421[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="46.35.115.117" dst_port="80" src_ip="136.150.86.45"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1781{
style=filled;
color=gray75;
2005[label="196.25.106.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6391[label="196.25.106.45;2pkt 2fpkt", shape=invtriangle, color=brown];
9422[label="196.25.106.45;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1781[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.25.106.45:1250, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{196.25.106.45:1585, 219.197.109.236:1025}[33.3333%]&lt;BR/&gt;{196.25.106.45:1590, 219.197.109.236:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 1590: (21.4286%)&lt;BR/&gt; 1585: (21.4286%)&lt;BR/&gt; 1025: (21.4286%)&lt;BR/&gt; 1250: (7.14286%)&gt;];
}
2005--6391[label="1;2pkt 2fpkt"];
2005--9422[label="1;2pkt 2fpkt"];
6391--9422[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.197.109.236" dst_port="80" src_ip="196.25.106.45" src_port="1590"/>
      <filter dst_ip="219.197.109.236" dst_port="1025" src_ip="196.25.106.45" src_port="1585"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="196.25.106.45" src_port="1250"/>
    </slice>
    <from sec="1083733290" usec="0"/>
    <to sec="1083734019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.26.108.45"/>
    </slice>
    <from sec="1083733753" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1783{
style=filled;
color=gray75;
2010[label="201.18.146.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6394[label="201.18.146.45;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1783[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.18.146.45:2522, 136.151.235.67:80}[50%]&lt;BR/&gt;{201.18.146.45:1557, 173.138.173.242:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1557: (33.3333%)&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 2522: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
2010--6394[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.173.242" dst_port="445" src_ip="201.18.146.45" src_port="1557"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.18.146.45" src_port="2522"/>
    </slice>
    <from sec="1083733299" usec="0"/>
    <to sec="1083733345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1784{
style=filled;
color=gray75;
2012[label="109.83.169.45;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6396[label="109.83.169.45;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1784[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.83.169.45:21294, 209.29.136.89:2300}[33.3333%]&lt;BR/&gt;{109.83.169.45:21294, 209.29.136.89:3795}[33.3333%]&lt;BR/&gt;{109.83.169.45:21294, 209.29.136.89:4540}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21294: (50%)&lt;BR/&gt; 4540: (16.6667%)&lt;BR/&gt; 3795: (16.6667%)&lt;BR/&gt; 2300: (16.6667%)&gt;];
}
2012--6396[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="4540" src_ip="109.83.169.45" src_port="21294"/>
      <filter dst_ip="209.29.136.89" dst_port="3795" src_ip="109.83.169.45" src_port="21294"/>
      <filter dst_ip="209.29.136.89" dst_port="2300" src_ip="109.83.169.45" src_port="21294"/>
    </slice>
    <from sec="1083733283" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.221.213.45"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1786{
style=filled;
color=gray75;
2017[label="173.138.225.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6398[label="173.138.225.45;2pkt 2fpkt", shape=invtriangle, color=brown];
9426[label="173.138.225.45;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1786[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.225.45:25, 46.71.196.51:24491}[50%]&lt;BR/&gt;{173.138.225.45:80, 44.43.150.228:14313}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24491: (30%)&lt;BR/&gt; 25: (30%)&lt;BR/&gt; 14313: (20%)&lt;BR/&gt; 80: (20%)&gt;];
}
2017--6398[label="1;2pkt 2fpkt"];
2017--9426[label="1;1pkt 1fpkt"];
6398--9426[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="44.43.150.228" dst_port="14313" src_ip="173.138.225.45" src_port="80"/>
      <filter dst_ip="46.71.196.51" dst_port="24491" src_ip="173.138.225.45" src_port="25"/>
    </slice>
    <from sec="1083733270" usec="0"/>
    <to sec="1083733591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1787{
style=filled;
color=gray75;
2019[label="196.2.3.46;246pkt 246fpkt", shape=pentagon, color=darkviolet];
6400[label="196.2.3.46;246pkt 246fpkt", shape=invtriangle, color=brown];
9427[label="196.2.3.46;245pkt 245fpkt", shape=invhouse, color=bisque];
stat1787[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.2.3.46:65015, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65015: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2019--6400[label="1;246pkt 246fpkt"];
2019--9427[label="1;245pkt 245fpkt"];
6400--9427[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.2.3.46" src_port="65015"/>
    </slice>
    <from sec="1083734020" usec="0"/>
    <to sec="1083734035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1788{
style=filled;
color=gray75;
2020[label="44.58.5.46;66pkt 66fpkt", shape=pentagon, color=darkviolet];
6401[label="44.58.5.46;65pkt 65fpkt", shape=invtriangle, color=brown];
9428[label="44.58.5.46;65pkt 65fpkt", shape=invhouse, color=bisque];
stat1788[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.58.5.46:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4899: (0.765306%)&lt;BR/&gt; 4842: (0.765306%)&lt;BR/&gt; 4739: (0.765306%)&lt;BR/&gt; 4665: (0.765306%)&gt;];
}
2020--6401[label="1;65pkt 65fpkt"];
2020--9428[label="1;65pkt 65fpkt"];
6401--9428[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="44.58.5.46"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.151.26.46"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1790{
style=filled;
color=gray75;
2024[label="208.161.85.46;104pkt 104fpkt", shape=pentagon, color=darkviolet];
6405[label="208.161.85.46;104pkt 104fpkt", shape=invtriangle, color=brown];
stat1790[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.161.85.46:*, *:445}[33.6538%]&lt;BR/&gt;{208.161.85.46:*, *:1025}[22.1154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (16.8269%)&lt;BR/&gt; 1025: (11.0577%)&lt;BR/&gt; 6129: (5.76923%)&lt;BR/&gt; 3127: (5.76923%)&lt;BR/&gt; 2745: (5.28846%)&gt;];
}
2024--6405[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="208.161.85.46"/>
      <filter dst_port="1025" src_ip="208.161.85.46"/>
    </slice>
    <from sec="1083733446" usec="0"/>
    <to sec="1083733973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1791{
style=filled;
color=gray75;
704[label="196.33.166.46;s;16pkt 16fpkt", shape=diamond, color=yellow];
2030[label="196.33.166.46;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6408[label="196.33.166.46;20pkt 20fpkt", shape=invtriangle, color=brown];
9430[label="196.33.166.46;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1791[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.33.166.46:*, 136.151.235.67:80}[65%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59014: (2.66667%)&lt;BR/&gt; 52606: (2.66667%)&lt;BR/&gt; 50315: (2.66667%)&lt;BR/&gt; 36648: (2.66667%)&gt;];
}
704--955[label="0.625;10pkt 10fpkt"];
704--966[label="0.625;10pkt 10fpkt"];
704--976[label="0.1875;3pkt 3fpkt"];
704--982[label="0.3125;5pkt 5fpkt"];
704--987[label="0.1875;3pkt 3fpkt"];
704--2030[label="0.9375;15pkt 15fpkt"];
704--6408[label="1;16pkt 16fpkt"];
704--9430[label="1;16pkt 16fpkt"];
2030--6408[label="1;19pkt 19fpkt"];
2030--9430[label="1;19pkt 19fpkt"];
6408--9430[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="196.33.166.46"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.0.32.47"/>
    </slice>
    <from sec="1083733315" usec="0"/>
    <to sec="1083733387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.147.40.47"/>
    </slice>
    <from sec="1083733881" usec="0"/>
    <to sec="1083734045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.129.43.47"/>
    </slice>
    <from sec="1083733506" usec="0"/>
    <to sec="1083733701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.45.49.47"/>
    </slice>
    <from sec="1083734017" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1796{
style=filled;
color=gray75;
2039[label="55.6.62.47;225pkt 225fpkt", shape=pentagon, color=darkviolet];
6415[label="55.6.62.47;224pkt 224fpkt", shape=invtriangle, color=brown];
9434[label="55.6.62.47;224pkt 224fpkt", shape=invhouse, color=bisque];
stat1796[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.6.62.47:46124, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46124: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2039--6415[label="1;224pkt 224fpkt"];
2039--9434[label="1;224pkt 224fpkt"];
6415--9434[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="55.6.62.47" src_port="46124"/>
    </slice>
    <from sec="1083733568" usec="0"/>
    <to sec="1083733605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.105.70.47"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083733467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1798{
style=filled;
color=gray75;
2042[label="192.239.81.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6418[label="192.239.81.47;2pkt 2fpkt", shape=invtriangle, color=brown];
9437[label="192.239.81.47;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1798[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.239.81.47:15092, 155.148.8.202:3928}[50%]&lt;BR/&gt;{192.239.81.47:15092, 155.148.8.202:3939}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15092: (50%)&lt;BR/&gt; 3939: (25%)&lt;BR/&gt; 3928: (25%)&gt;];
}
2042--6418[label="1;2pkt 2fpkt"];
2042--9437[label="1;2pkt 2fpkt"];
6418--9437[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.8.202" dst_port="3939" src_ip="192.239.81.47" src_port="15092"/>
      <filter dst_ip="155.148.8.202" dst_port="3928" src_ip="192.239.81.47" src_port="15092"/>
    </slice>
    <from sec="1083733802" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1799{
style=filled;
color=gray75;
2052[label="202.24.33.48;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6423[label="202.24.33.48;12pkt 12fpkt", shape=invtriangle, color=brown];
9440[label="202.24.33.48;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1799[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.24.33.48:25, 209.29.137.52:*}[25%]&lt;BR/&gt;{202.24.33.48:25, 173.138.210.80:*}[25%]&lt;BR/&gt;{202.24.33.48:25, 173.138.156.227:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 51194: (4.16667%)&lt;BR/&gt; 51076: (4.16667%)&lt;BR/&gt; 51075: (4.16667%)&lt;BR/&gt; 4120: (4.16667%)&gt;];
}
2052--6423[label="1;12pkt 12fpkt"];
2052--9440[label="1;12pkt 12fpkt"];
6423--9440[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.156.227" src_ip="202.24.33.48" src_port="25"/>
      <filter dst_ip="173.138.210.80" src_ip="202.24.33.48" src_port="25"/>
      <filter dst_ip="209.29.137.52" src_ip="202.24.33.48" src_port="25"/>
    </slice>
    <from sec="1083733435" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.228.49.48"/>
    </slice>
    <from sec="1083733660" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.20.97.48"/>
    </slice>
    <from sec="1083733794" usec="0"/>
    <to sec="1083733860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1802{
style=filled;
color=gray75;
2063[label="141.22.113.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6433[label="141.22.113.48;1pkt 1fpkt", shape=invtriangle, color=brown];
9447[label="141.22.113.48;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1802[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.113.48:80, 221.170.200.107:15841}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15841: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2063--6433[label="1;1pkt 1fpkt"];
2063--9447[label="1;1pkt 1fpkt"];
6433--9447[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.170.200.107" dst_port="15841" src_ip="141.22.113.48" src_port="80"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1803{
style=filled;
color=gray75;
2064[label="209.137.134.48;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6434[label="209.137.134.48;8pkt 8fpkt", shape=invtriangle, color=brown];
9448[label="209.137.134.48;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1803[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.137.134.48:80, 168.127.113.162:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1235: (6.52174%)&lt;BR/&gt; 1233: (6.52174%)&lt;BR/&gt; 1222: (6.52174%)&lt;BR/&gt; 1169: (6.52174%)&gt;];
}
2064--6434[label="1;8pkt 8fpkt"];
2064--9448[label="1;7pkt 7fpkt"];
6434--9448[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.162" src_ip="209.137.134.48" src_port="80"/>
    </slice>
    <from sec="1083733519" usec="0"/>
    <to sec="1083733643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.148.137.48"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1805{
style=filled;
color=gray75;
2068[label="95.29.153.48;72pkt 72fpkt", shape=pentagon, color=darkviolet];
6437[label="95.29.153.48;71pkt 71fpkt", shape=invtriangle, color=brown];
9449[label="95.29.153.48;71pkt 71fpkt", shape=invhouse, color=bisque];
stat1805[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.29.153.48:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3928: (1.40187%)&lt;BR/&gt; 4749: (0.700935%)&lt;BR/&gt; 4725: (0.700935%)&lt;BR/&gt; 4699: (0.700935%)&gt;];
}
2068--6437[label="1;71pkt 71fpkt"];
2068--9449[label="1;71pkt 71fpkt"];
6437--9449[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="95.29.153.48"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1806{
style=filled;
color=gray75;
2080[label="136.151.17.49;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6444[label="136.151.17.49;81pkt 81fpkt", shape=invtriangle, color=brown];
stat1806[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.17.49:*, *:25}[70.3704%]&lt;BR/&gt;{136.151.17.49:25, *:*}[28.3951%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.3827%)&lt;BR/&gt; 53172: (0.617284%)&lt;BR/&gt; 44799: (0.617284%)&lt;BR/&gt; 40724: (0.617284%)&lt;BR/&gt; 37060: (0.617284%)&gt;];
}
2080--6444[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.17.49" src_port="25"/>
      <filter dst_port="25" src_ip="136.151.17.49"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1807{
style=filled;
color=gray75;
2087[label="46.241.114.49;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6448[label="46.241.114.49;12pkt 12fpkt", shape=invtriangle, color=brown];
9457[label="46.241.114.49;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1807[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.241.114.49:80, 209.29.136.44:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59245: (4.41176%)&lt;BR/&gt; 51543: (4.41176%)&lt;BR/&gt; 3534: (4.41176%)&lt;BR/&gt; 3488: (4.41176%)&gt;];
}
2087--6448[label="1;11pkt 11fpkt"];
2087--9457[label="1;11pkt 11fpkt"];
6448--9457[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.44" src_ip="46.241.114.49" src_port="80"/>
    </slice>
    <from sec="1083733748" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1808{
style=filled;
color=gray75;
2091[label="155.148.139.49;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6451[label="155.148.139.49;14pkt 14fpkt", shape=invtriangle, color=brown];
9459[label="155.148.139.49;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1808[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.139.49:*, 44.149.138.188:80}[26.6667%]&lt;BR/&gt;{155.148.139.49:*, 213.101.36.43:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.0233%)&lt;BR/&gt; 443: (6.97674%)&lt;BR/&gt; 3322: (3.48837%)&lt;BR/&gt; 3305: (3.48837%)&lt;BR/&gt; 3089: (3.48837%)&gt;];
}
2091--6451[label="1;14pkt 14fpkt"];
2091--9459[label="1;14pkt 14fpkt"];
6451--9459[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.36.43" src_ip="155.148.139.49"/>
      <filter dst_ip="44.149.138.188" dst_port="80" src_ip="155.148.139.49"/>
    </slice>
    <from sec="1083733317" usec="0"/>
    <to sec="1083734005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.82.148.49"/>
    </slice>
    <from sec="1083733404" usec="0"/>
    <to sec="1083733508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1810{
style=filled;
color=gray75;
2099[label="168.127.4.50;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6458[label="168.127.4.50;27pkt 27fpkt", shape=invtriangle, color=brown];
9464[label="168.127.4.50;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1810[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.4.50:*, 46.58.106.157:80}[46.4286%]&lt;BR/&gt;{168.127.4.50:*, 201.48.108.151:80}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49458: (1.80723%)&lt;BR/&gt; 49457: (1.80723%)&lt;BR/&gt; 49456: (1.80723%)&lt;BR/&gt; 49455: (1.80723%)&gt;];
}
2099--6458[label="1;27pkt 27fpkt"];
2099--9464[label="1;28pkt 28fpkt"];
6458--9464[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="46.58.106.157" dst_port="80" src_ip="168.127.4.50"/>
      <filter dst_ip="201.48.108.151" dst_port="80" src_ip="168.127.4.50"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1811{
style=filled;
color=gray75;
2102[label="208.96.54.50;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6459[label="208.96.54.50;26pkt 26fpkt", shape=invtriangle, color=brown];
9465[label="208.96.54.50;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1811[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.54.50:80, 45.108.82.184:*}[80.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9091%)&lt;BR/&gt; 65534: (7.14286%)&lt;BR/&gt; 53: (7.14286%)&lt;BR/&gt; 64893: (1.94805%)&lt;BR/&gt; 60853: (1.94805%)&gt;];
}
2102--6459[label="1;26pkt 26fpkt"];
2102--9465[label="1;25pkt 25fpkt"];
6459--9465[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="208.96.54.50" src_port="80"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.69.78.50"/>
    </slice>
    <from sec="1083733472" usec="0"/>
    <to sec="1083733579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1813{
style=filled;
color=gray75;
2107[label="155.16.81.50;89pkt 89fpkt", shape=pentagon, color=darkviolet];
6463[label="155.16.81.50;89pkt 89fpkt", shape=invtriangle, color=brown];
9469[label="155.16.81.50;88pkt 88fpkt", shape=invhouse, color=bisque];
stat1813[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.16.81.50:*, *:445}[33.7079%]&lt;BR/&gt;{155.16.81.50:*, *:135}[22.4719%]&lt;BR/&gt;{155.16.81.50:*, *:139}[21.3483%]&lt;BR/&gt;{155.16.81.50:*, 155.148.204.146:*}[20.2247%]&lt;BR/&gt;{155.16.81.50:*, 155.211.131.218:*}[20.2247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (16.9173%)&lt;BR/&gt; 135: (11.0902%)&lt;BR/&gt; 139: (10.7143%)&lt;BR/&gt; 1433: (5.6391%)&lt;BR/&gt; 80: (5.6391%)&gt;];
}
2107--6463[label="1;89pkt 89fpkt"];
2107--9469[label="1;88pkt 88fpkt"];
6463--9469[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.131.218" src_ip="155.16.81.50"/>
      <filter dst_ip="155.148.204.146" src_ip="155.16.81.50"/>
      <filter dst_port="445" src_ip="155.16.81.50"/>
      <filter dst_port="135" src_ip="155.16.81.50"/>
      <filter dst_port="139" src_ip="155.16.81.50"/>
    </slice>
    <from sec="1083733296" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1814{
style=filled;
color=gray75;
2108[label="95.71.81.50;43pkt 43fpkt", shape=pentagon, color=darkviolet];
6464[label="95.71.81.50;43pkt 43fpkt", shape=invtriangle, color=brown];
9470[label="95.71.81.50;43pkt 43fpkt", shape=invhouse, color=bisque];
stat1814[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.71.81.50:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42156: (1.16279%)&lt;BR/&gt; 42151: (1.16279%)&lt;BR/&gt; 42109: (1.16279%)&lt;BR/&gt; 42063: (1.16279%)&gt;];
}
2108--6464[label="1;43pkt 43fpkt"];
2108--9470[label="1;43pkt 43fpkt"];
6464--9470[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="95.71.81.50" src_port="80"/>
    </slice>
    <from sec="1083733323" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1815{
style=filled;
color=gray75;
2109[label="198.198.93.50;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6465[label="198.198.93.50;14pkt 14fpkt", shape=invtriangle, color=brown];
9471[label="198.198.93.50;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1815[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.93.50:80, 209.29.136.89:*}[57.1429%]&lt;BR/&gt;{198.198.93.50:80, 209.29.138.127:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4922: (3.65854%)&lt;BR/&gt; 3442: (3.65854%)&lt;BR/&gt; 3321: (3.65854%)&lt;BR/&gt; 2210: (3.65854%)&gt;];
}
2109--6465[label="1;14pkt 14fpkt"];
2109--9471[label="1;13pkt 13fpkt"];
6465--9471[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="198.198.93.50" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.198.93.50" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.0.152.50"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.31.169.50"/>
    </slice>
    <from sec="1083733703" usec="0"/>
    <to sec="1083733886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1818{
style=filled;
color=gray75;
2119[label="200.106.176.50;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6473[label="200.106.176.50;5pkt 5fpkt", shape=invtriangle, color=brown];
9477[label="200.106.176.50;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1818[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.106.176.50:1542, 155.148.140.41:445}[20%]&lt;BR/&gt;{200.106.176.50:2048, 168.16.157.131:445}[20%]&lt;BR/&gt;{200.106.176.50:3619, 141.132.217.132:445}[20%]&lt;BR/&gt;{200.106.176.50:3418, 155.211.255.188:445}[20%]&lt;BR/&gt;{200.106.176.50:4575, 173.138.118.213:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4575: (10%)&lt;BR/&gt; 3619: (10%)&lt;BR/&gt; 3418: (10%)&lt;BR/&gt; 2048: (10%)&gt;];
}
2119--6473[label="1;5pkt 5fpkt"];
2119--9477[label="1;5pkt 5fpkt"];
6473--9477[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.118.213" dst_port="445" src_ip="200.106.176.50" src_port="4575"/>
      <filter dst_ip="155.211.255.188" dst_port="445" src_ip="200.106.176.50" src_port="3418"/>
      <filter dst_ip="141.132.217.132" dst_port="445" src_ip="200.106.176.50" src_port="3619"/>
      <filter dst_ip="168.16.157.131" dst_port="445" src_ip="200.106.176.50" src_port="2048"/>
      <filter dst_ip="155.148.140.41" dst_port="445" src_ip="200.106.176.50" src_port="1542"/>
    </slice>
    <from sec="1083733590" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1819{
style=filled;
color=gray75;
2120[label="213.88.187.50;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6474[label="213.88.187.50;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1819[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.88.187.50:443, 168.127.236.130:*}[65%]&lt;BR/&gt;{213.88.187.50:443, 136.151.241.195:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3028: (2.5641%)&lt;BR/&gt; 3027: (2.5641%)&lt;BR/&gt; 3025: (2.5641%)&lt;BR/&gt; 3022: (2.5641%)&gt;];
}
2120--6474[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.236.130" src_ip="213.88.187.50" src_port="443"/>
      <filter dst_ip="136.151.241.195" src_ip="213.88.187.50" src_port="443"/>
    </slice>
    <from sec="1083733534" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.119.247.50"/>
    </slice>
    <from sec="1083733233" usec="0"/>
    <to sec="1083733463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1821{
style=filled;
color=gray75;
2124[label="44.212.5.51;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6477[label="44.212.5.51;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1821[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.5.51:80, 155.148.198.86:*}[68.4211%]&lt;BR/&gt;{44.212.5.51:80, 155.148.182.202:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31277: (2.63158%)&lt;BR/&gt; 31271: (2.63158%)&lt;BR/&gt; 31270: (2.63158%)&lt;BR/&gt; 31254: (2.63158%)&gt;];
}
2124--6477[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.198.86" src_ip="44.212.5.51" src_port="80"/>
      <filter dst_ip="155.148.182.202" src_ip="44.212.5.51" src_port="80"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083734055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.66.72.51"/>
    </slice>
    <from sec="1083733279" usec="0"/>
    <to sec="1083733642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.120.85.51"/>
    </slice>
    <from sec="1083733808" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1824{
style=filled;
color=gray75;
2139[label="40.99.108.51;194pkt 194fpkt", shape=pentagon, color=darkviolet];
6484[label="40.99.108.51;193pkt 193fpkt", shape=invtriangle, color=brown];
stat1824[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.99.108.51:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2139--6484[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="40.99.108.51" src_port="1027"/>
    </slice>
    <from sec="1083733772" usec="0"/>
    <to sec="1083733805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.25.138.51"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.165.148.51"/>
    </slice>
    <from sec="1083733905" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1827{
style=filled;
color=gray75;
2146[label="173.138.211.51;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6490[label="173.138.211.51;3pkt 3fpkt", shape=invtriangle, color=brown];
9487[label="173.138.211.51;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1827[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.211.51:1090, 198.222.100.214:5050}[33.3333%]&lt;BR/&gt;{173.138.211.51:113, 205.100.67.219:52760}[33.3333%]&lt;BR/&gt;{173.138.211.51:18190, 205.100.67.219:6667}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52760: (21.4286%)&lt;BR/&gt; 18190: (21.4286%)&lt;BR/&gt; 6667: (21.4286%)&lt;BR/&gt; 113: (21.4286%)&lt;BR/&gt; 5050: (7.14286%)&gt;];
}
2146--6490[label="1;2pkt 2fpkt"];
2146--9487[label="1;2pkt 2fpkt"];
6490--9487[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.100.67.219" dst_port="6667" src_ip="173.138.211.51" src_port="18190"/>
      <filter dst_ip="205.100.67.219" dst_port="52760" src_ip="173.138.211.51" src_port="113"/>
      <filter dst_ip="198.222.100.214" dst_port="5050" src_ip="173.138.211.51" src_port="1090"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.102.89.52"/>
    </slice>
    <from sec="1083733612" usec="0"/>
    <to sec="1083733673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1829{
style=filled;
color=gray75;
2158[label="155.148.139.52;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6499[label="155.148.139.52;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1829[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.139.52:*, 52.60.87.250:80}[97.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6111%)&lt;BR/&gt; 3941: (1.38889%)&lt;BR/&gt; 2966: (1.38889%)&lt;BR/&gt; 2964: (1.38889%)&lt;BR/&gt; 2962: (1.38889%)&gt;];
}
2158--6499[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="52.60.87.250" dst_port="80" src_ip="155.148.139.52"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1830{
style=filled;
color=gray75;
2160[label="173.138.145.52;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6501[label="173.138.145.52;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1830[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.145.52:*, *:25}[50%]&lt;BR/&gt;{173.138.145.52:25, *:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.75%)&lt;BR/&gt; 34587: (6.25%)&lt;BR/&gt; 6667: (6.25%)&lt;BR/&gt; 3650: (6.25%)&lt;BR/&gt; 3643: (6.25%)&gt;];
}
2160--6501[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.145.52" src_port="25"/>
      <filter dst_port="25" src_ip="173.138.145.52"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1831{
style=filled;
color=gray75;
2161[label="209.29.153.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6502[label="209.29.153.52;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1831[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.153.52:0, 93.83.118.89:0}[50%]&lt;BR/&gt;{209.29.153.52:0, 201.55.27.101:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2161--6502[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.55.27.101" src_ip="209.29.153.52"/>
      <filter dst_ip="93.83.118.89" src_ip="209.29.153.52"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1832{
style=filled;
color=gray75;
2170[label="141.22.8.53;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6506[label="141.22.8.53;5pkt 5fpkt", shape=invtriangle, color=brown];
9496[label="141.22.8.53;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1832[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.8.53:*, *:80}[83.3333%]&lt;BR/&gt;{141.22.8.53:*, 213.101.59.6:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.625%)&lt;BR/&gt; 1064: (9.375%)&lt;BR/&gt; 1041: (9.375%)&lt;BR/&gt; 1036: (9.375%)&lt;BR/&gt; 1034: (9.375%)&gt;];
}
2170--6506[label="1;5pkt 5fpkt"];
2170--9496[label="1;5pkt 5fpkt"];
6506--9496[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.59.6" src_ip="141.22.8.53"/>
      <filter dst_port="80" src_ip="141.22.8.53"/>
    </slice>
    <from sec="1083733685" usec="0"/>
    <to sec="1083733963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1833{
style=filled;
color=gray75;
2171[label="193.91.11.53;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6507[label="193.91.11.53;5pkt 5fpkt", shape=invtriangle, color=brown];
9497[label="193.91.11.53;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1833[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.91.11.53:0, *:0}[66.6667%]&lt;BR/&gt;{193.91.11.53:*, 136.151.235.67:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 137: (18.75%)&lt;BR/&gt; 4299: (3.125%)&lt;BR/&gt; 80: (3.125%)&gt;];
}
2171--6507[label="1;5pkt 5fpkt"];
2171--9497[label="1;5pkt 5fpkt"];
6507--9497[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" src_ip="193.91.11.53"/>
      <filter src_ip="193.91.11.53"/>
    </slice>
    <from sec="1083733721" usec="0"/>
    <to sec="1083733968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1834{
style=filled;
color=gray75;
2175[label="201.151.38.53;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6509[label="201.151.38.53;7pkt 7fpkt", shape=invtriangle, color=brown];
9498[label="201.151.38.53;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1834[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.151.38.53:*, 136.151.235.67:80}[50%]&lt;BR/&gt;{201.151.38.53:0, *:0}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (39.1304%)&lt;BR/&gt; 80: (23.913%)&lt;BR/&gt; 3377: (6.52174%)&lt;BR/&gt; 3328: (6.52174%)&lt;BR/&gt; 2546: (6.52174%)&gt;];
}
2175--6509[label="1;7pkt 7fpkt"];
2175--9498[label="1;8pkt 8fpkt"];
6509--9498[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.151.38.53"/>
      <filter src_ip="201.151.38.53"/>
    </slice>
    <from sec="1083733540" usec="0"/>
    <to sec="1083734010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.106.86.53"/>
    </slice>
    <from sec="1083733452" usec="0"/>
    <to sec="1083733571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.5.133.53"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1837{
style=filled;
color=gray75;
2181[label="209.29.137.53;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6512[label="209.29.137.53;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1837[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.137.53:25, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 53116: (1.38889%)&lt;BR/&gt; 46416: (1.38889%)&lt;BR/&gt; 46309: (1.38889%)&gt;];
}
2181--6512[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.137.53" src_port="25"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1838{
style=filled;
color=gray75;
2183[label="45.172.234.53;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6514[label="45.172.234.53;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1838[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.172.234.53:80, 209.29.138.126:*}[62.5%]&lt;BR/&gt;{45.172.234.53:80, 209.29.138.127:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4512: (3.22581%)&lt;BR/&gt; 4499: (3.22581%)&lt;BR/&gt; 4407: (3.22581%)&lt;BR/&gt; 4108: (3.22581%)&gt;];
}
2183--6514[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="45.172.234.53" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="45.172.234.53" src_port="80"/>
    </slice>
    <from sec="1083733292" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1839{
style=filled;
color=gray75;
2190[label="141.22.65.54;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6517[label="141.22.65.54;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1839[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.65.54:80, 41.44.128.45:3341}[25%]&lt;BR/&gt;{141.22.65.54:80, 41.44.128.45:3342}[25%]&lt;BR/&gt;{141.22.65.54:80, 41.44.128.45:3344}[25%]&lt;BR/&gt;{141.22.65.54:80, 41.44.128.45:3345}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3345: (14.2857%)&lt;BR/&gt; 3344: (14.2857%)&lt;BR/&gt; 3342: (14.2857%)&lt;BR/&gt; 3341: (7.14286%)&gt;];
}
2190--6517[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="41.44.128.45" dst_port="3345" src_ip="141.22.65.54" src_port="80"/>
      <filter dst_ip="41.44.128.45" dst_port="3344" src_ip="141.22.65.54" src_port="80"/>
      <filter dst_ip="41.44.128.45" dst_port="3342" src_ip="141.22.65.54" src_port="80"/>
      <filter dst_ip="41.44.128.45" dst_port="3341" src_ip="141.22.65.54" src_port="80"/>
    </slice>
    <from sec="1083733369" usec="0"/>
    <to sec="1083733429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1840{
style=filled;
color=gray75;
2191[label="201.91.106.54;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6518[label="201.91.106.54;2pkt 2fpkt", shape=invtriangle, color=brown];
9502[label="201.91.106.54;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1840[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.91.106.54:1387, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{201.91.106.54:1399, 136.151.149.139:445}[33.3333%]&lt;BR/&gt;{201.91.106.54:3630, 168.16.167.222:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 3630: (18.75%)&lt;BR/&gt; 1399: (18.75%)&lt;BR/&gt; 1387: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
2191--6518[label="1;2pkt 2fpkt"];
2191--9502[label="1;3pkt 3fpkt"];
6518--9502[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.16.167.222" dst_port="445" src_ip="201.91.106.54" src_port="3630"/>
      <filter dst_ip="136.151.149.139" dst_port="445" src_ip="201.91.106.54" src_port="1399"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.91.106.54" src_port="1387"/>
    </slice>
    <from sec="1083733388" usec="0"/>
    <to sec="1083733901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1841{
style=filled;
color=gray75;
2193[label="199.253.132.54;240pkt 240fpkt", shape=pentagon, color=darkviolet];
6520[label="199.253.132.54;240pkt 240fpkt", shape=invtriangle, color=brown];
9504[label="199.253.132.54;239pkt 239fpkt", shape=invhouse, color=bisque];
stat1841[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.253.132.54:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2193--6520[label="1;240pkt 240fpkt"];
2193--9504[label="1;239pkt 239fpkt"];
6520--9504[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.253.132.54" src_port="1028"/>
    </slice>
    <from sec="1083733928" usec="0"/>
    <to sec="1083733942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1842{
style=filled;
color=gray75;
2196[label="41.8.152.54;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6522[label="41.8.152.54;110pkt 110fpkt", shape=invtriangle, color=brown];
stat1842[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.8.152.54:*, *:3128}[34.2342%]&lt;BR/&gt;{41.8.152.54:*, *:1080}[33.3333%]&lt;BR/&gt;{41.8.152.54:*, *:3127}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (17.1946%)&lt;BR/&gt; 1080: (16.7421%)&lt;BR/&gt; 3127: (16.0633%)&lt;BR/&gt; 2129: (0.904977%)&lt;BR/&gt; 4897: (0.452489%)&gt;];
}
2196--6522[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="41.8.152.54"/>
      <filter dst_port="1080" src_ip="41.8.152.54"/>
      <filter dst_port="3127" src_ip="41.8.152.54"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1843{
style=filled;
color=gray75;
2197[label="198.186.156.54;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6523[label="198.186.156.54;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1843[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.186.156.54:21, 208.96.33.157:*}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (23.0769%)&lt;BR/&gt; 52502: (3.84615%)&lt;BR/&gt; 52501: (3.84615%)&lt;BR/&gt; 52496: (3.84615%)&lt;BR/&gt; 52495: (3.84615%)&gt;];
}
2197--6523[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.33.157" src_ip="198.186.156.54" src_port="21"/>
    </slice>
    <from sec="1083733405" usec="0"/>
    <to sec="1083733948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.22.162.54"/>
    </slice>
    <from sec="1083733855" usec="0"/>
    <to sec="1083733943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1845{
style=filled;
color=gray75;
2203[label="198.166.231.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6528[label="198.166.231.54;2pkt 2fpkt", shape=invtriangle, color=brown];
9508[label="198.166.231.54;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1845[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.166.231.54:8002, 155.148.139.128:2037}[50%]&lt;BR/&gt;{198.166.231.54:8002, 155.148.139.128:2046}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8002: (50%)&lt;BR/&gt; 2046: (25%)&lt;BR/&gt; 2037: (25%)&gt;];
}
2203--6528[label="1;2pkt 2fpkt"];
2203--9508[label="1;2pkt 2fpkt"];
6528--9508[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.139.128" dst_port="2046" src_ip="198.166.231.54" src_port="8002"/>
      <filter dst_ip="155.148.139.128" dst_port="2037" src_ip="198.166.231.54" src_port="8002"/>
    </slice>
    <from sec="1083734046" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.171.252.54"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.193.32.55"/>
    </slice>
    <from sec="1083733883" usec="0"/>
    <to sec="1083733952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1848{
style=filled;
color=gray75;
2209[label="198.198.40.55;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6532[label="198.198.40.55;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1848[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.40.55:80, 209.29.138.127:3638}[20%]&lt;BR/&gt;{198.198.40.55:80, 209.29.136.3:26022}[20%]&lt;BR/&gt;{198.198.40.55:80, 209.29.136.3:26429}[20%]&lt;BR/&gt;{198.198.40.55:80, 209.29.136.3:27394}[20%]&lt;BR/&gt;{198.198.40.55:80, 209.29.136.3:27885}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27885: (10%)&lt;BR/&gt; 27394: (10%)&lt;BR/&gt; 26429: (10%)&lt;BR/&gt; 26022: (10%)&gt;];
}
2209--6532[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" dst_port="27885" src_ip="198.198.40.55" src_port="80"/>
      <filter dst_ip="209.29.136.3" dst_port="27394" src_ip="198.198.40.55" src_port="80"/>
      <filter dst_ip="209.29.136.3" dst_port="26429" src_ip="198.198.40.55" src_port="80"/>
      <filter dst_ip="209.29.136.3" dst_port="26022" src_ip="198.198.40.55" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="3638" src_ip="198.198.40.55" src_port="80"/>
    </slice>
    <from sec="1083733289" usec="0"/>
    <to sec="1083733763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1849{
style=filled;
color=gray75;
2210[label="53.122.50.55;99pkt 99fpkt", shape=pentagon, color=darkviolet];
6533[label="53.122.50.55;98pkt 98fpkt", shape=invtriangle, color=brown];
stat1849[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.122.50.55:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4908: (0.507614%)&lt;BR/&gt; 4859: (0.507614%)&lt;BR/&gt; 4815: (0.507614%)&lt;BR/&gt; 4799: (0.507614%)&gt;];
}
2210--6533[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="53.122.50.55"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1850{
style=filled;
color=gray75;
2216[label="208.5.131.55;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6535[label="208.5.131.55;8pkt 8fpkt", shape=invtriangle, color=brown];
9509[label="208.5.131.55;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1850[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.5.131.55:*, 141.132.173.152:80}[37.5%]&lt;BR/&gt;{208.5.131.55:32768, *:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 32768: (12.5%)&lt;BR/&gt; 53: (12.5%)&lt;BR/&gt; 56009: (6.25%)&lt;BR/&gt; 51365: (6.25%)&gt;];
}
2216--6535[label="1;8pkt 8fpkt"];
2216--9509[label="1;8pkt 8fpkt"];
6535--9509[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="141.132.173.152" dst_port="80" src_ip="208.5.131.55"/>
      <filter dst_port="53" src_ip="208.5.131.55" src_port="32768"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083734002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.176.147.55"/>
    </slice>
    <from sec="1083733289" usec="0"/>
    <to sec="1083733414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1852{
style=filled;
color=gray75;
2219[label="201.177.149.55;218pkt 218fpkt", shape=pentagon, color=darkviolet];
6537[label="201.177.149.55;218pkt 218fpkt", shape=invtriangle, color=brown];
9511[label="201.177.149.55;217pkt 217fpkt", shape=invhouse, color=bisque];
stat1852[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.177.149.55:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2219--6537[label="1;218pkt 218fpkt"];
2219--9511[label="1;217pkt 217fpkt"];
6537--9511[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.177.149.55" src_port="1027"/>
    </slice>
    <from sec="1083733987" usec="0"/>
    <to sec="1083734025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.7.202.55"/>
    </slice>
    <from sec="1083733278" usec="0"/>
    <to sec="1083733551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1854{
style=filled;
color=gray75;
2223[label="93.253.212.55;238pkt 238fpkt", shape=pentagon, color=darkviolet];
6540[label="93.253.212.55;238pkt 238fpkt", shape=invtriangle, color=brown];
9512[label="93.253.212.55;237pkt 237fpkt", shape=invhouse, color=bisque];
stat1854[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.253.212.55:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2223--6540[label="1;238pkt 238fpkt"];
2223--9512[label="1;237pkt 237fpkt"];
6540--9512[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="93.253.212.55" src_port="1026"/>
    </slice>
    <from sec="1083733804" usec="0"/>
    <to sec="1083733830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1855{
style=filled;
color=gray75;
2224[label="41.15.216.55;107pkt 107fpkt", shape=pentagon, color=darkviolet];
6541[label="41.15.216.55;106pkt 106fpkt", shape=invtriangle, color=brown];
stat1855[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.15.216.55:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4991: (0.938967%)&lt;BR/&gt; 2108: (0.938967%)&lt;BR/&gt; 1414: (0.938967%)&lt;BR/&gt; 4980: (0.469484%)&gt;];
}
2224--6541[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="41.15.216.55"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1856{
style=filled;
color=gray75;
2225[label="136.151.243.55;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6542[label="136.151.243.55;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1856[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.243.55:3272, 45.172.229.0:80}[20%]&lt;BR/&gt;{136.151.243.55:3291, 45.172.229.0:80}[20%]&lt;BR/&gt;{136.151.243.55:3274, 45.172.171.37:80}[20%]&lt;BR/&gt;{136.151.243.55:3288, 45.172.171.37:80}[20%]&lt;BR/&gt;{136.151.243.55:3293, 45.172.171.37:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3293: (11.1111%)&lt;BR/&gt; 3291: (11.1111%)&lt;BR/&gt; 3288: (11.1111%)&lt;BR/&gt; 3272: (11.1111%)&gt;];
}
2225--6542[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="45.172.171.37" dst_port="80" src_ip="136.151.243.55" src_port="3293"/>
      <filter dst_ip="45.172.171.37" dst_port="80" src_ip="136.151.243.55" src_port="3288"/>
      <filter dst_ip="45.172.171.37" dst_port="80" src_ip="136.151.243.55" src_port="3274"/>
      <filter dst_ip="45.172.229.0" dst_port="80" src_ip="136.151.243.55" src_port="3291"/>
      <filter dst_ip="45.172.229.0" dst_port="80" src_ip="136.151.243.55" src_port="3272"/>
    </slice>
    <from sec="1083733303" usec="0"/>
    <to sec="1083733344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.108.24.56"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1858{
style=filled;
color=gray75;
2229[label="109.221.53.56;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6546[label="109.221.53.56;3pkt 3fpkt", shape=invtriangle, color=brown];
9514[label="109.221.53.56;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1858[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.221.53.56:3539, 141.132.72.65:445}[33.3333%]&lt;BR/&gt;{109.221.53.56:4090, 155.148.25.69:445}[33.3333%]&lt;BR/&gt;{109.221.53.56:4386, 155.211.173.198:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4386: (16.6667%)&lt;BR/&gt; 4090: (16.6667%)&lt;BR/&gt; 3539: (16.6667%)&gt;];
}
2229--6546[label="1;3pkt 3fpkt"];
2229--9514[label="1;3pkt 3fpkt"];
6546--9514[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.173.198" dst_port="445" src_ip="109.221.53.56" src_port="4386"/>
      <filter dst_ip="155.148.25.69" dst_port="445" src_ip="109.221.53.56" src_port="4090"/>
      <filter dst_ip="141.132.72.65" dst_port="445" src_ip="109.221.53.56" src_port="3539"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083733763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.152.76.56"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1860{
style=filled;
color=gray75;
2232[label="200.117.93.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6549[label="200.117.93.56;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1860[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.117.93.56:1035, 141.211.191.5:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
2232--6549[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.211.191.5" dst_port="445" src_ip="200.117.93.56" src_port="1035"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083733466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1861{
style=filled;
color=gray75;
2235[label="198.34.163.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6551[label="198.34.163.56;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1861[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.34.163.56:80, 209.29.138.10:52004}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52004: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2235--6551[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="52004" src_ip="198.34.163.56" src_port="80"/>
    </slice>
    <from sec="1083733613" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1862{
style=filled;
color=gray75;
2237[label="109.230.193.56;101pkt 101fpkt", shape=pentagon, color=darkviolet];
6553[label="109.230.193.56;100pkt 100fpkt", shape=invtriangle, color=brown];
stat1862[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.230.193.56:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4409: (0.995025%)&lt;BR/&gt; 4998: (0.497512%)&lt;BR/&gt; 4873: (0.497512%)&lt;BR/&gt; 4864: (0.497512%)&gt;];
}
2237--6553[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="109.230.193.56"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.9.195.56"/>
    </slice>
    <from sec="1083733252" usec="0"/>
    <to sec="1083733418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.136.56.57"/>
    </slice>
    <from sec="1083733559" usec="0"/>
    <to sec="1083733763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1865{
style=filled;
color=gray75;
2250[label="41.76.85.57;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6558[label="41.76.85.57;11pkt 11fpkt", shape=invtriangle, color=brown];
9518[label="41.76.85.57;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1865[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.76.85.57:*, 209.29.136.89:16072}[54.5455%]&lt;BR/&gt;{41.76.85.57:23829, 209.29.136.89:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16072: (27.2727%)&lt;BR/&gt; 23829: (22.7273%)&lt;BR/&gt; 4730: (4.54545%)&lt;BR/&gt; 4442: (4.54545%)&lt;BR/&gt; 4246: (4.54545%)&gt;];
}
2250--6558[label="1;11pkt 11fpkt"];
2250--9518[label="1;11pkt 11fpkt"];
6558--9518[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="41.76.85.57" src_port="23829"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="41.76.85.57"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1866{
style=filled;
color=gray75;
2252[label="40.243.113.57;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6559[label="40.243.113.57;59pkt 59fpkt", shape=invtriangle, color=brown];
stat1866[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.243.113.57:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43658: (0.847458%)&lt;BR/&gt; 43646: (0.847458%)&lt;BR/&gt; 43639: (0.847458%)&lt;BR/&gt; 43635: (0.847458%)&gt;];
}
2252--6559[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="40.243.113.57" src_port="80"/>
    </slice>
    <from sec="1083733319" usec="0"/>
    <to sec="1083733427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.8.130.57"/>
    </slice>
    <from sec="1083733265" usec="0"/>
    <to sec="1083733421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1868{
style=filled;
color=gray75;
2256[label="109.223.149.57;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6562[label="109.223.149.57;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1868[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.223.149.57:*, *:445}[50%]&lt;BR/&gt;{109.223.149.57:0, *:0}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (40%)&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 4933: (5%)&lt;BR/&gt; 3719: (5%)&lt;BR/&gt; 3095: (5%)&gt;];
}
2256--6562[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.223.149.57"/>
      <filter src_ip="109.223.149.57"/>
    </slice>
    <from sec="1083733273" usec="0"/>
    <to sec="1083734037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1869{
style=filled;
color=gray75;
2261[label="136.150.24.58;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6565[label="136.150.24.58;30pkt 30fpkt", shape=invtriangle, color=brown];
9522[label="136.150.24.58;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1869[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.24.58:80, 45.108.82.184:*}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58863: (1.66667%)&lt;BR/&gt; 57182: (1.66667%)&lt;BR/&gt; 55474: (1.66667%)&lt;BR/&gt; 53531: (1.66667%)&gt;];
}
2261--6565[label="1;30pkt 30fpkt"];
2261--9522[label="1;30pkt 30fpkt"];
6565--9522[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="136.150.24.58" src_port="80"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1870{
style=filled;
color=gray75;
2262[label="198.0.41.58;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6566[label="198.0.41.58;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1870[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.0.41.58:80, 209.29.136.3:*}[40%]&lt;BR/&gt;{198.0.41.58:80, 168.127.18.93:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65410: (3.44828%)&lt;BR/&gt; 49484: (3.44828%)&lt;BR/&gt; 49450: (3.44828%)&lt;BR/&gt; 49447: (3.44828%)&gt;];
}
2262--6566[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.18.93" src_ip="198.0.41.58" src_port="80"/>
      <filter dst_ip="209.29.136.3" src_ip="198.0.41.58" src_port="80"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.107.48.58"/>
    </slice>
    <from sec="1083733409" usec="0"/>
    <to sec="1083733637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1872{
style=filled;
color=gray75;
2266[label="214.33.88.58;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6570[label="214.33.88.58;1pkt 1fpkt", shape=invtriangle, color=brown];
9526[label="214.33.88.58;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1872[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.33.88.58:49661, 136.151.235.67:80}[50%]&lt;BR/&gt;{214.33.88.58:3742, 209.18.121.213:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3742: (30%)&lt;BR/&gt; 445: (30%)&lt;BR/&gt; 49661: (20%)&lt;BR/&gt; 80: (20%)&gt;];
}
2266--6570[label="1;1pkt 1fpkt"];
2266--9526[label="1;2pkt 2fpkt"];
6570--9526[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.18.121.213" dst_port="445" src_ip="214.33.88.58" src_port="3742"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="214.33.88.58" src_port="49661"/>
    </slice>
    <from sec="1083733433" usec="0"/>
    <to sec="1083733826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1873{
style=filled;
color=gray75;
2270[label="209.141.140.58;56pkt 56fpkt", shape=pentagon, color=darkviolet];
6574[label="209.141.140.58;56pkt 56fpkt", shape=invtriangle, color=brown];
stat1873[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.141.140.58:*, 208.96.52.111:80}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60565: (0.892857%)&lt;BR/&gt; 60564: (0.892857%)&lt;BR/&gt; 59785: (0.892857%)&lt;BR/&gt; 59784: (0.892857%)&gt;];
}
2270--6574[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.52.111" dst_port="80" src_ip="209.141.140.58"/>
    </slice>
    <from sec="1083733505" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.213.147.58"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1875{
style=filled;
color=gray75;
2273[label="200.34.159.58;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6577[label="200.34.159.58;23pkt 23fpkt", shape=invtriangle, color=brown];
9528[label="200.34.159.58;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1875[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.34.159.58:0, *:0}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.5882%)&lt;BR/&gt; 11002: (2.20588%)&lt;BR/&gt; 179: (2.20588%)&gt;];
}
2273--6577[label="1;23pkt 23fpkt"];
2273--9528[label="1;22pkt 22fpkt"];
6577--9528[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="200.34.159.58"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.180.164.58"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.50.181.58"/>
    </slice>
    <from sec="1083733412" usec="0"/>
    <to sec="1083733531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.212.134.59"/>
    </slice>
    <from sec="1083733242" usec="0"/>
    <to sec="1083733382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1879{
style=filled;
color=gray75;
2285[label="214.33.240.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6584[label="214.33.240.59;1pkt 1fpkt", shape=invtriangle, color=brown];
9533[label="214.33.240.59;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1879[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.33.240.59:4627, 141.85.175.138:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4627: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
2285--6584[label="1;1pkt 1fpkt"];
2285--9533[label="1;1pkt 1fpkt"];
6584--9533[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.175.138" dst_port="445" src_ip="214.33.240.59" src_port="4627"/>
    </slice>
    <from sec="1083733238" usec="0"/>
    <to sec="1083733414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.88.248.59"/>
    </slice>
    <from sec="1083733681" usec="0"/>
    <to sec="1083733784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1881{
style=filled;
color=gray75;
2290[label="136.151.42.60;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6587[label="136.151.42.60;30pkt 30fpkt", shape=invtriangle, color=brown];
9536[label="136.151.42.60;29pkt 29fpkt", shape=invhouse, color=bisque];
stat1881[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.42.60:25, *:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.573%)&lt;BR/&gt; 53: (8.42697%)&lt;BR/&gt; 64535: (1.68539%)&lt;BR/&gt; 60397: (1.68539%)&lt;BR/&gt; 57985: (1.68539%)&gt;];
}
2290--6587[label="1;30pkt 30fpkt"];
2290--9536[label="1;29pkt 29fpkt"];
6587--9536[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.42.60" src_port="25"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.14.104.60"/>
    </slice>
    <from sec="1083733343" usec="0"/>
    <to sec="1083733493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1883{
style=filled;
color=gray75;
2298[label="197.8.138.60;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6593[label="197.8.138.60;30pkt 30fpkt", shape=invtriangle, color=brown];
9539[label="197.8.138.60;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1883[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.8.138.60:*, 219.223.192.93:*}[23.3333%]&lt;BR/&gt;{197.8.138.60:*, 219.100.206.111:*}[23.3333%]&lt;BR/&gt;{197.8.138.60:*, 219.223.212.119:*}[23.3333%]&lt;BR/&gt;{197.8.138.60:*, 219.24.89.225:*}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (6.66667%)&lt;BR/&gt; 3127: (6.66667%)&lt;BR/&gt; 2745: (6.66667%)&lt;BR/&gt; 1433: (6.66667%)&lt;BR/&gt; 1025: (6.66667%)&gt;];
}
2298--6593[label="1;30pkt 30fpkt"];
2298--9539[label="1;30pkt 30fpkt"];
6593--9539[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="219.24.89.225" src_ip="197.8.138.60"/>
      <filter dst_ip="219.223.212.119" src_ip="197.8.138.60"/>
      <filter dst_ip="219.100.206.111" src_ip="197.8.138.60"/>
      <filter dst_ip="219.223.192.93" src_ip="197.8.138.60"/>
    </slice>
    <from sec="1083733265" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.171.168.60"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083733585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1885{
style=filled;
color=gray75;
2302[label="209.29.177.60;194pkt 194fpkt", shape=pentagon, color=darkviolet];
6596[label="209.29.177.60;194pkt 194fpkt", shape=invtriangle, color=brown];
stat1885[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.177.60:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2302--6596[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.177.60"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1886{
style=filled;
color=gray75;
2305[label="46.71.207.60;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6598[label="46.71.207.60;13pkt 13fpkt", shape=invtriangle, color=brown];
9542[label="46.71.207.60;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1886[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.207.60:80, 168.127.115.185:*}[61.5385%]&lt;BR/&gt;{46.71.207.60:80, 209.29.138.127:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36282: (3.94737%)&lt;BR/&gt; 36281: (3.94737%)&lt;BR/&gt; 36280: (3.94737%)&lt;BR/&gt; 36279: (3.94737%)&gt;];
}
2305--6598[label="1;13pkt 13fpkt"];
2305--9542[label="1;12pkt 12fpkt"];
6598--9542[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.115.185" src_ip="46.71.207.60" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.71.207.60" src_port="80"/>
    </slice>
    <from sec="1083733373" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1887{
style=filled;
color=gray75;
2307[label="202.200.211.60;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6599[label="202.200.211.60;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1887[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.200.211.60:*, *:445}[77.7778%]&lt;BR/&gt;{202.200.211.60:*, 136.151.235.67:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (38.8889%)&lt;BR/&gt; 80: (11.1111%)&lt;BR/&gt; 57813: (5.55556%)&lt;BR/&gt; 46453: (5.55556%)&lt;BR/&gt; 4889: (5.55556%)&gt;];
}
2307--6599[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="202.200.211.60"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="202.200.211.60"/>
    </slice>
    <from sec="1083733343" usec="0"/>
    <to sec="1083733801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.219.235.60"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.46.18.61"/>
    </slice>
    <from sec="1083733409" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1890{
style=filled;
color=gray75;
2317[label="208.96.54.61;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6607[label="208.96.54.61;20pkt 20fpkt", shape=invtriangle, color=brown];
9547[label="208.96.54.61;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1890[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.54.61:80, 45.108.82.170:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 53: (5%)&lt;BR/&gt; 61616: (2.5%)&lt;BR/&gt; 60109: (2.5%)&lt;BR/&gt; 58356: (2.5%)&gt;];
}
2317--6607[label="1;20pkt 20fpkt"];
2317--9547[label="1;20pkt 20fpkt"];
6607--9547[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.170" src_ip="208.96.54.61" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.107.57.61"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1892{
style=filled;
color=gray75;
2319[label="204.33.65.61;233pkt 233fpkt", shape=pentagon, color=darkviolet];
6609[label="204.33.65.61;233pkt 233fpkt", shape=invtriangle, color=brown];
9549[label="204.33.65.61;232pkt 232fpkt", shape=invhouse, color=bisque];
stat1892[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.33.65.61:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2319--6609[label="1;233pkt 233fpkt"];
2319--9549[label="1;232pkt 232fpkt"];
6609--9549[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.33.65.61" src_port="1026"/>
    </slice>
    <from sec="1083733517" usec="0"/>
    <to sec="1083733555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.50.137.61"/>
    </slice>
    <from sec="1083733594" usec="0"/>
    <to sec="1083733656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.143.141.61"/>
    </slice>
    <from sec="1083733446" usec="0"/>
    <to sec="1083733820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.185.229.61"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1896{
style=filled;
color=gray75;
2334[label="141.132.99.62;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6620[label="141.132.99.62;61pkt 61fpkt", shape=invtriangle, color=brown];
stat1896[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.132.99.62:65534, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65534: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
2334--6620[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="141.132.99.62" src_port="65534"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.12.151.62"/>
    </slice>
    <from sec="1083733692" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.117.161.62"/>
    </slice>
    <from sec="1083733464" usec="0"/>
    <to sec="1083733569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.227.10.63"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.36.36.63"/>
    </slice>
    <from sec="1083734024" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1901{
style=filled;
color=gray75;
2351[label="46.58.79.63;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6631[label="46.58.79.63;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1901[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.58.79.63:80, 209.29.138.127:1214}[25%]&lt;BR/&gt;{46.58.79.63:80, 209.29.138.127:1658}[25%]&lt;BR/&gt;{46.58.79.63:80, 209.29.138.127:2152}[25%]&lt;BR/&gt;{46.58.79.63:80, 209.29.138.127:3550}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3550: (12.5%)&lt;BR/&gt; 2152: (12.5%)&lt;BR/&gt; 1658: (12.5%)&lt;BR/&gt; 1214: (12.5%)&gt;];
}
2351--6631[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" dst_port="3550" src_ip="46.58.79.63" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="2152" src_ip="46.58.79.63" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="1658" src_ip="46.58.79.63" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="1214" src_ip="46.58.79.63" src_port="80"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1902{
style=filled;
color=gray75;
2358[label="93.218.220.63;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6637[label="93.218.220.63;20pkt 20fpkt", shape=invtriangle, color=brown];
9567[label="93.218.220.63;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1902[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.218.220.63:*, 219.100.206.37:*}[25%]&lt;BR/&gt;{93.218.220.63:*, 219.222.14.174:*}[25%]&lt;BR/&gt;{93.218.220.63:*, 219.223.192.202:*}[25%]&lt;BR/&gt;{93.218.220.63:*, *:1025}[20%]&lt;BR/&gt;{93.218.220.63:*, *:1433}[20%]&lt;BR/&gt;{93.218.220.63:*, *:3127}[20%]&lt;BR/&gt;{93.218.220.63:*, *:6129}[20%]&lt;BR/&gt;{93.218.220.63:*, 219.194.195.133:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (10.1695%)&lt;BR/&gt; 3127: (10.1695%)&lt;BR/&gt; 1433: (10.1695%)&lt;BR/&gt; 1025: (10.1695%)&lt;BR/&gt; 2745: (7.62712%)&gt;];
}
2358--6637[label="1;20pkt 20fpkt"];
2358--9567[label="1;19pkt 19fpkt"];
6637--9567[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.192.202" src_ip="93.218.220.63"/>
      <filter dst_ip="219.222.14.174" src_ip="93.218.220.63"/>
      <filter dst_ip="219.100.206.37" src_ip="93.218.220.63"/>
      <filter dst_ip="219.194.195.133" src_ip="93.218.220.63"/>
      <filter dst_port="6129" src_ip="93.218.220.63"/>
      <filter dst_port="3127" src_ip="93.218.220.63"/>
      <filter dst_port="1433" src_ip="93.218.220.63"/>
      <filter dst_port="1025" src_ip="93.218.220.63"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.146.16.64"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083733402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.194.20.64"/>
    </slice>
    <from sec="1083733818" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.11.32.64"/>
    </slice>
    <from sec="1083733388" usec="0"/>
    <to sec="1083733458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.162.35.64"/>
    </slice>
    <from sec="1083733234" usec="0"/>
    <to sec="1083733438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.17.62.64"/>
    </slice>
    <from sec="1083733976" usec="0"/>
    <to sec="1083734075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1908{
style=filled;
color=gray75;
2368[label="198.198.93.64;93pkt 93fpkt", shape=pentagon, color=darkviolet];
6647[label="198.198.93.64;93pkt 93fpkt", shape=invtriangle, color=brown];
stat1908[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.93.64:80, 209.29.136.3:*}[98.9247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30322: (0.537634%)&lt;BR/&gt; 30286: (0.537634%)&lt;BR/&gt; 30022: (0.537634%)&lt;BR/&gt; 30008: (0.537634%)&gt;];
}
2368--6647[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" src_ip="198.198.93.64" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.161.64"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1910{
style=filled;
color=gray75;
2370[label="173.138.162.64;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6649[label="173.138.162.64;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1910[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.162.64:25, 46.71.197.6:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 49060: (5%)&lt;BR/&gt; 37593: (5%)&lt;BR/&gt; 36941: (5%)&lt;BR/&gt; 34805: (5%)&gt;];
}
2370--6649[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="46.71.197.6" src_ip="173.138.162.64" src_port="25"/>
    </slice>
    <from sec="1083733370" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1911{
style=filled;
color=gray75;
2375[label="44.148.196.64;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6651[label="44.148.196.64;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1911[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.148.196.64:80, 209.29.138.10:41979}[50%]&lt;BR/&gt;{44.148.196.64:80, 209.29.138.10:42107}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42107: (25%)&lt;BR/&gt; 41979: (25%)&gt;];
}
2375--6651[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="42107" src_ip="44.148.196.64" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="41979" src_ip="44.148.196.64" src_port="80"/>
    </slice>
    <from sec="1083733337" usec="0"/>
    <to sec="1083733463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1912{
style=filled;
color=gray75;
2377[label="209.139.16.65;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6652[label="209.139.16.65;80pkt 80fpkt", shape=invtriangle, color=brown];
9574[label="209.139.16.65;80pkt 80fpkt", shape=invhouse, color=bisque];
stat1912[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.139.16.65:*, *:445}[40.7407%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (20.1245%)&lt;BR/&gt; 6129: (4.97925%)&lt;BR/&gt; 3127: (4.97925%)&lt;BR/&gt; 2745: (4.97925%)&lt;BR/&gt; 1025: (4.97925%)&gt;];
}
2377--6652[label="1;80pkt 80fpkt"];
2377--9574[label="1;80pkt 80fpkt"];
6652--9574[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="209.139.16.65"/>
    </slice>
    <from sec="1083733311" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.9.36.65"/>
    </slice>
    <from sec="1083733380" usec="0"/>
    <to sec="1083733505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.217.55.65"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.23.70.65"/>
    </slice>
    <from sec="1083733263" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1916{
style=filled;
color=gray75;
2386[label="198.198.94.65;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6658[label="198.198.94.65;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1916[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.94.65:80, 209.29.138.126:*}[54.5455%]&lt;BR/&gt;{198.198.94.65:80, 209.29.138.127:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3175: (4.7619%)&lt;BR/&gt; 3140: (4.7619%)&lt;BR/&gt; 2529: (4.7619%)&lt;BR/&gt; 2411: (4.7619%)&gt;];
}
2386--6658[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.198.94.65" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.198.94.65" src_port="80"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1917{
style=filled;
color=gray75;
2387[label="213.101.101.65;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6660[label="213.101.101.65;18pkt 18fpkt", shape=invtriangle, color=brown];
9578[label="213.101.101.65;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1917[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.101.65:80, 136.151.247.151:*}[33.3333%]&lt;BR/&gt;{213.101.101.65:80, 141.22.92.200:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61421: (2.83019%)&lt;BR/&gt; 53792: (2.83019%)&lt;BR/&gt; 40755: (2.83019%)&lt;BR/&gt; 26123: (2.83019%)&gt;];
}
2387--6660[label="1;18pkt 18fpkt"];
2387--9578[label="1;17pkt 17fpkt"];
6660--9578[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.247.151" src_ip="213.101.101.65" src_port="80"/>
      <filter dst_ip="141.22.92.200" src_ip="213.101.101.65" src_port="80"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1918{
style=filled;
color=gray75;
2393[label="173.138.162.65;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6664[label="173.138.162.65;15pkt 15fpkt", shape=invtriangle, color=brown];
9581[label="173.138.162.65;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1918[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.162.65:25, 138.136.18.176:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 7247: (3.33333%)&lt;BR/&gt; 4518: (3.33333%)&lt;BR/&gt; 4495: (3.33333%)&lt;BR/&gt; 4335: (3.33333%)&gt;];
}
2393--6664[label="1;15pkt 15fpkt"];
2393--9581[label="1;15pkt 15fpkt"];
6664--9581[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="138.136.18.176" src_ip="173.138.162.65" src_port="25"/>
    </slice>
    <from sec="1083733231" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.212.163.65"/>
    </slice>
    <from sec="1083734010" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.86.165.65"/>
    </slice>
    <from sec="1083733631" usec="0"/>
    <to sec="1083733711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1921{
style=filled;
color=gray75;
2398[label="46.180.171.65;738pkt 738fpkt", shape=pentagon, color=darkviolet];
6668[label="46.180.171.65;738pkt 738fpkt", shape=invtriangle, color=brown];
stat1921[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.180.171.65:80, 209.29.138.10:*}[91.0569%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64888: (0.0677507%)&lt;BR/&gt; 64836: (0.0677507%)&lt;BR/&gt; 64804: (0.0677507%)&lt;BR/&gt; 60983: (0.0677507%)&gt;];
}
2398--6668[label="1;738pkt 738fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="46.180.171.65" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.0.226.65"/>
    </slice>
    <from sec="1083733853" usec="0"/>
    <to sec="1083734013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.54.6.66"/>
    </slice>
    <from sec="1083733763" usec="0"/>
    <to sec="1083733839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.98.11.66"/>
    </slice>
    <from sec="1083733723" usec="0"/>
    <to sec="1083733877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1925{
style=filled;
color=gray75;
2414[label="196.0.109.66;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6676[label="196.0.109.66;31pkt 31fpkt", shape=invtriangle, color=brown];
9587[label="196.0.109.66;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1925[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.0.109.66:*, 219.222.12.74:*}[22.5806%]&lt;BR/&gt;{196.0.109.66:*, 219.100.206.92:*}[22.5806%]&lt;BR/&gt;{196.0.109.66:*, 219.222.14.111:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (8.06452%)&lt;BR/&gt; 1025: (8.06452%)&lt;BR/&gt; 445: (8.06452%)&lt;BR/&gt; 6129: (6.45161%)&lt;BR/&gt; 3127: (6.45161%)&gt;];
}
2414--6676[label="1;31pkt 31fpkt"];
2414--9587[label="1;31pkt 31fpkt"];
6676--9587[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="219.222.14.111" src_ip="196.0.109.66"/>
      <filter dst_ip="219.100.206.92" src_ip="196.0.109.66"/>
      <filter dst_ip="219.222.12.74" src_ip="196.0.109.66"/>
    </slice>
    <from sec="1083733334" usec="0"/>
    <to sec="1083734038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1926{
style=filled;
color=gray75;
2416[label="53.98.132.66;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6678[label="53.98.132.66;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1926[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.98.132.66:6881, 208.96.50.84:58493}[33.3333%]&lt;BR/&gt;{53.98.132.66:6881, 208.96.50.84:58545}[33.3333%]&lt;BR/&gt;{53.98.132.66:6881, 208.96.50.84:58633}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 58633: (20%)&lt;BR/&gt; 58545: (20%)&lt;BR/&gt; 58493: (10%)&gt;];
}
2416--6678[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58633" src_ip="53.98.132.66" src_port="6881"/>
      <filter dst_ip="208.96.50.84" dst_port="58545" src_ip="53.98.132.66" src_port="6881"/>
      <filter dst_ip="208.96.50.84" dst_port="58493" src_ip="53.98.132.66" src_port="6881"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.30.162.66"/>
    </slice>
    <from sec="1083733934" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1928{
style=filled;
color=gray75;
2420[label="200.30.199.66;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6680[label="200.30.199.66;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1928[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.30.199.66:0, *:0}[37.5%]&lt;BR/&gt;{200.30.199.66:*, *:445}[37.5%]&lt;BR/&gt;{200.30.199.66:*, 136.151.235.67:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (40%)&lt;BR/&gt; 445: (20%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 3918: (6.66667%)&lt;BR/&gt; 2297: (6.66667%)&gt;];
}
2420--6680[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.30.199.66"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="200.30.199.66"/>
      <filter src_ip="200.30.199.66"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.22.1.67"/>
    </slice>
    <from sec="1083733597" usec="0"/>
    <to sec="1083733714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.8.80.67"/>
    </slice>
    <from sec="1083733730" usec="0"/>
    <to sec="1083733812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.127.110.67"/>
    </slice>
    <from sec="1083733251" usec="0"/>
    <to sec="1083733379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,051,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1932{
style=filled;
color=gray75;
2435[label="173.138.141.67;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6689[label="173.138.141.67;26pkt 26fpkt", shape=invtriangle, color=brown];
9593[label="173.138.141.67;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1932[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.141.67:*, 44.193.45.144:25}[38.4615%]&lt;BR/&gt;{173.138.141.67:*, 95.115.95.71:21}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (19.4805%)&lt;BR/&gt; 21: (15.5844%)&lt;BR/&gt; 5190: (9.09091%)&lt;BR/&gt; 443: (3.8961%)&lt;BR/&gt; 64954: (1.94805%)&gt;];
}
2435--6689[label="1;26pkt 26fpkt"];
2435--9593[label="1;25pkt 25fpkt"];
6689--9593[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="44.193.45.144" dst_port="25" src_ip="173.138.141.67"/>
      <filter dst_ip="95.115.95.71" dst_port="21" src_ip="173.138.141.67"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.19.158.67"/>
    </slice>
    <from sec="1083734025" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1934{
style=filled;
color=gray75;
2437[label="93.7.161.67;212pkt 212fpkt", shape=pentagon, color=darkviolet];
6691[label="93.7.161.67;211pkt 211fpkt", shape=invtriangle, color=brown];
stat1934[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.7.161.67:1060, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1060: (50%)&gt;];
}
2437--6691[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="93.7.161.67" src_port="1060"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1935{
style=filled;
color=gray75;
2438[label="47.107.166.67;75pkt 75fpkt", shape=pentagon, color=darkviolet];
6692[label="47.107.166.67;74pkt 74fpkt", shape=invtriangle, color=brown];
stat1935[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.107.166.67:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3514: (1.34228%)&lt;BR/&gt; 4992: (0.671141%)&lt;BR/&gt; 4704: (0.671141%)&lt;BR/&gt; 4638: (0.671141%)&gt;];
}
2438--6692[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="47.107.166.67"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1936{
style=filled;
color=gray75;
2439[label="93.209.176.67;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6693[label="93.209.176.67;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1936[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.209.176.67:80, 155.148.136.25:*}[66.6667%]&lt;BR/&gt;{93.209.176.67:80, 155.148.86.90:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1854: (3.33333%)&lt;BR/&gt; 1832: (3.33333%)&lt;BR/&gt; 1824: (3.33333%)&lt;BR/&gt; 1815: (3.33333%)&gt;];
}
2439--6693[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.136.25" src_ip="93.209.176.67" src_port="80"/>
      <filter dst_ip="155.148.86.90" src_ip="93.209.176.67" src_port="80"/>
    </slice>
    <from sec="1083733471" usec="0"/>
    <to sec="1083733911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.20.178.67"/>
    </slice>
    <from sec="1083733594" usec="0"/>
    <to sec="1083733722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.246.183.67"/>
    </slice>
    <from sec="1083733739" usec="0"/>
    <to sec="1083734082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1939{
style=filled;
color=gray75;
2443[label="213.101.193.67;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6697[label="213.101.193.67;2pkt 2fpkt", shape=invtriangle, color=brown];
9595[label="213.101.193.67;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1939[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.193.67:1863, 155.148.138.50:1053}[33.3333%]&lt;BR/&gt;{213.101.193.67:1863, 136.151.50.117:58603}[33.3333%]&lt;BR/&gt;{213.101.193.67:1863, 136.151.109.195:3168}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 58603: (18.75%)&lt;BR/&gt; 3168: (18.75%)&lt;BR/&gt; 1053: (12.5%)&gt;];
}
2443--6697[label="1;2pkt 2fpkt"];
2443--9595[label="1;3pkt 3fpkt"];
6697--9595[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.109.195" dst_port="3168" src_ip="213.101.193.67" src_port="1863"/>
      <filter dst_ip="136.151.50.117" dst_port="58603" src_ip="213.101.193.67" src_port="1863"/>
      <filter dst_ip="155.148.138.50" dst_port="1053" src_ip="213.101.193.67" src_port="1863"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.252.218.67"/>
    </slice>
    <from sec="1083733386" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1941{
style=filled;
color=gray75;
2451[label="41.167.18.68;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6701[label="41.167.18.68;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1941[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.167.18.68:6882, 208.96.50.84:55940}[20%]&lt;BR/&gt;{41.167.18.68:6883, 208.96.50.84:58436}[20%]&lt;BR/&gt;{41.167.18.68:6881, 208.96.50.84:56462}[20%]&lt;BR/&gt;{41.167.18.68:6881, 208.96.50.84:58734}[20%]&lt;BR/&gt;{41.167.18.68:6881, 208.96.50.84:58735}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (30%)&lt;BR/&gt; 58735: (10%)&lt;BR/&gt; 58734: (10%)&lt;BR/&gt; 58436: (10%)&lt;BR/&gt; 56462: (10%)&gt;];
}
2451--6701[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58735" src_ip="41.167.18.68" src_port="6881"/>
      <filter dst_ip="208.96.50.84" dst_port="58734" src_ip="41.167.18.68" src_port="6881"/>
      <filter dst_ip="208.96.50.84" dst_port="56462" src_ip="41.167.18.68" src_port="6881"/>
      <filter dst_ip="208.96.50.84" dst_port="58436" src_ip="41.167.18.68" src_port="6883"/>
      <filter dst_ip="208.96.50.84" dst_port="55940" src_ip="41.167.18.68" src_port="6882"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1942{
style=filled;
color=gray75;
2454[label="210.18.56.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6703[label="210.18.56.68;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1942[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.18.56.68:24627, 209.29.136.89:2841}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24627: (50%)&lt;BR/&gt; 2841: (50%)&gt;];
}
2454--6703[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="2841" src_ip="210.18.56.68" src_port="24627"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1943{
style=filled;
color=gray75;
2455[label="46.21.81.68;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6704[label="46.21.81.68;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1943[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.21.81.68:27356, 136.151.232.127:80}[20%]&lt;BR/&gt;{46.21.81.68:27475, 136.151.232.127:80}[20%]&lt;BR/&gt;{46.21.81.68:27482, 136.151.232.127:80}[20%]&lt;BR/&gt;{46.21.81.68:27489, 136.151.232.127:80}[20%]&lt;BR/&gt;{46.21.81.68:29291, 136.151.232.127:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29291: (11.1111%)&lt;BR/&gt; 27489: (11.1111%)&lt;BR/&gt; 27482: (11.1111%)&lt;BR/&gt; 27475: (11.1111%)&gt;];
}
2455--6704[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.232.127" dst_port="80" src_ip="46.21.81.68" src_port="29291"/>
      <filter dst_ip="136.151.232.127" dst_port="80" src_ip="46.21.81.68" src_port="27489"/>
      <filter dst_ip="136.151.232.127" dst_port="80" src_ip="46.21.81.68" src_port="27482"/>
      <filter dst_ip="136.151.232.127" dst_port="80" src_ip="46.21.81.68" src_port="27475"/>
      <filter dst_ip="136.151.232.127" dst_port="80" src_ip="46.21.81.68" src_port="27356"/>
    </slice>
    <from sec="1083733374" usec="0"/>
    <to sec="1083733412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1944{
style=filled;
color=gray75;
2456[label="205.112.94.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6705[label="205.112.94.68;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1944[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.112.94.68:6881, 208.96.50.84:58471}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58471: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
2456--6705[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58471" src_ip="205.112.94.68" src_port="6881"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.20.123.68"/>
    </slice>
    <from sec="1083733732" usec="0"/>
    <to sec="1083733917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.226.141.68"/>
    </slice>
    <from sec="1083733320" usec="0"/>
    <to sec="1083733891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1947{
style=filled;
color=gray75;
2460[label="55.43.142.68;90pkt 90fpkt", shape=pentagon, color=darkviolet];
6709[label="55.43.142.68;89pkt 89fpkt", shape=invtriangle, color=brown];
stat1947[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.43.142.68:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1781: (1.11732%)&lt;BR/&gt; 4960: (0.558659%)&lt;BR/&gt; 4956: (0.558659%)&lt;BR/&gt; 4853: (0.558659%)&gt;];
}
2460--6709[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="55.43.142.68"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1948{
style=filled;
color=gray75;
2461[label="212.244.148.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6710[label="212.244.148.68;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1948[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.244.148.68:6881, 208.96.50.84:58164}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58164: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
2461--6710[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58164" src_ip="212.244.148.68" src_port="6881"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1949{
style=filled;
color=gray75;
2464[label="40.250.194.68;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6712[label="40.250.194.68;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1949[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.250.194.68:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51243: (3.57143%)&lt;BR/&gt; 50291: (3.57143%)&lt;BR/&gt; 49563: (3.57143%)&lt;BR/&gt; 49468: (3.57143%)&gt;];
}
2464--6712[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="40.250.194.68" src_port="80"/>
    </slice>
    <from sec="1083733364" usec="0"/>
    <to sec="1083733717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.127.240.68"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.107.84.69"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.135.194.69"/>
    </slice>
    <from sec="1083733499" usec="0"/>
    <to sec="1083733603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.75.76.70"/>
    </slice>
    <from sec="1083733754" usec="0"/>
    <to sec="1083733825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.188.245.70"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083733465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1955{
style=filled;
color=gray75;
2502[label="208.147.1.71;60pkt 60fpkt", shape=pentagon, color=darkviolet];
6740[label="208.147.1.71;59pkt 59fpkt", shape=invtriangle, color=brown];
9615[label="208.147.1.71;59pkt 59fpkt", shape=invhouse, color=bisque];
stat1955[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.147.1.71:0, *:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (24.1573%)&lt;BR/&gt; 445: (5.05618%)&lt;BR/&gt; 3127: (4.21348%)&lt;BR/&gt; 1025: (4.21348%)&lt;BR/&gt; 135: (4.21348%)&gt;];
}
2502--6740[label="1;59pkt 59fpkt"];
2502--9615[label="1;59pkt 59fpkt"];
6740--9615[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="208.147.1.71"/>
    </slice>
    <from sec="1083733305" usec="0"/>
    <to sec="1083734000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.85.18.71"/>
    </slice>
    <from sec="1083733533" usec="0"/>
    <to sec="1083733787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.54.96.71"/>
    </slice>
    <from sec="1083733394" usec="0"/>
    <to sec="1083733523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1958{
style=filled;
color=gray75;
2512[label="199.115.122.71;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6744[label="199.115.122.71;7pkt 7fpkt", shape=invtriangle, color=brown];
9616[label="199.115.122.71;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1958[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.115.122.71:*, 141.22.86.218:25}[37.5%]&lt;BR/&gt;{199.115.122.71:*, 136.151.193.154:25}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 41342: (6.81818%)&lt;BR/&gt; 34585: (6.81818%)&lt;BR/&gt; 33265: (6.81818%)&lt;BR/&gt; 28585: (6.81818%)&gt;];
}
2512--6744[label="1;7pkt 7fpkt"];
2512--9616[label="1;7pkt 7fpkt"];
6744--9616[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.218" dst_port="25" src_ip="199.115.122.71"/>
      <filter dst_ip="136.151.193.154" dst_port="25" src_ip="199.115.122.71"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083733970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1959{
style=filled;
color=gray75;
2513[label="204.151.138.71;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6745[label="204.151.138.71;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1959[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.151.138.71:80, 209.29.138.127:2990}[20%]&lt;BR/&gt;{204.151.138.71:80, 209.29.138.10:48751}[20%]&lt;BR/&gt;{204.151.138.71:80, 209.29.138.10:48820}[20%]&lt;BR/&gt;{204.151.138.71:80, 209.29.138.126:2129}[20%]&lt;BR/&gt;{204.151.138.71:80, 209.29.138.126:2650}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48820: (10%)&lt;BR/&gt; 48751: (10%)&lt;BR/&gt; 2990: (10%)&lt;BR/&gt; 2650: (10%)&gt;];
}
2513--6745[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" dst_port="2650" src_ip="204.151.138.71" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="2129" src_ip="204.151.138.71" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="48820" src_ip="204.151.138.71" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="48751" src_ip="204.151.138.71" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="2990" src_ip="204.151.138.71" src_port="80"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1960{
style=filled;
color=gray75;
742[label="201.82.177.71;s;3pkt 3fpkt", shape=diamond, color=yellow];
2516[label="201.82.177.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6748[label="201.82.177.71;2pkt 2fpkt", shape=invtriangle, color=brown];
9617[label="201.82.177.71;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1960[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.82.177.71:3012, 141.135.12.231:80}[33.3333%]&lt;BR/&gt;{201.82.177.71:3344, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{201.82.177.71:4265, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3344: (22.2222%)&lt;BR/&gt; 3012: (22.2222%)&lt;BR/&gt; 4265: (5.55556%)&gt;];
}
742--955[label="0.666667;2pkt 2fpkt"];
742--966[label="0.666667;2pkt 2fpkt"];
742--982[label="0.333333;1pkt 1fpkt"];
742--2516[label="1;2pkt 2fpkt"];
742--6748[label="1;2pkt 2fpkt"];
742--9617[label="1;2pkt 2fpkt"];
2516--6748[label="1;2pkt 2fpkt"];
2516--9617[label="1;2pkt 2fpkt"];
6748--9617[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.82.177.71" src_port="4265"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.82.177.71" src_port="3344"/>
      <filter dst_ip="141.135.12.231" dst_port="80" src_ip="201.82.177.71" src_port="3012"/>
    </slice>
    <from sec="1083733406" usec="0"/>
    <to sec="1083734018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1961{
style=filled;
color=gray75;
2523[label="41.41.23.72;94pkt 94fpkt", shape=pentagon, color=darkviolet];
6753[label="41.41.23.72;93pkt 93fpkt", shape=invtriangle, color=brown];
9620[label="41.41.23.72;94pkt 94fpkt", shape=invhouse, color=bisque];
stat1961[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.41.23.72:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3483: (1.06762%)&lt;BR/&gt; 4948: (0.533808%)&lt;BR/&gt; 4903: (0.533808%)&lt;BR/&gt; 4894: (0.533808%)&gt;];
}
2523--6753[label="1;93pkt 93fpkt"];
2523--9620[label="1;94pkt 94fpkt"];
6753--9620[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="41.41.23.72"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1962{
style=filled;
color=gray75;
2526[label="168.16.59.72;139pkt 139fpkt", shape=pentagon, color=darkviolet];
6756[label="168.16.59.72;138pkt 138fpkt", shape=invtriangle, color=brown];
stat1962[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.16.59.72:53, *:*}[61.8705%]&lt;BR/&gt;{168.16.59.72:0, *:0}[22.3022%]&lt;BR/&gt;{168.16.59.72:*, *:53}[21.5827%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41.6968%)&lt;BR/&gt; 0: (22.3827%)&lt;BR/&gt; 4823: (7.94224%)&lt;BR/&gt; 32768: (1.80505%)&lt;BR/&gt; 32857: (0.722022%)&gt;];
}
2526--6756[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter src_ip="168.16.59.72" src_port="53"/>
      <filter dst_port="53" src_ip="168.16.59.72"/>
      <filter src_ip="168.16.59.72"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.188.66.72"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083733459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.192.98.72"/>
    </slice>
    <from sec="1083733537" usec="0"/>
    <to sec="1083734033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.1.203.72"/>
    </slice>
    <from sec="1083733892" usec="0"/>
    <to sec="1083734025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,010,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1966{
style=filled;
color=gray75;
679[label="53.144.12.73;s;372pkt 372fpkt", shape=diamond, color=yellow];
6769[label="53.144.12.73;402pkt 402fpkt", shape=invtriangle, color=brown];
9627[label="53.144.12.73;402pkt 402fpkt", shape=invhouse, color=bisque];
stat1966[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.144.12.73:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4715: (0.255102%)&lt;BR/&gt; 4329: (0.255102%)&lt;BR/&gt; 3929: (0.255102%)&lt;BR/&gt; 3157: (0.255102%)&gt;];
}
679--6769[label="1;372pkt 372fpkt"];
679--9627[label="1;372pkt 372fpkt"];
6769--9627[label="1;402pkt 402fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="53.144.12.73"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1967{
style=filled;
color=gray75;
2550[label="44.212.13.73;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6770[label="44.212.13.73;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1967[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.13.73:80, 141.22.98.212:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28257: (3.57143%)&lt;BR/&gt; 28256: (3.57143%)&lt;BR/&gt; 28255: (3.57143%)&lt;BR/&gt; 28252: (3.57143%)&gt;];
}
2550--6770[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.98.212" src_ip="44.212.13.73" src_port="80"/>
    </slice>
    <from sec="1083733332" usec="0"/>
    <to sec="1083733709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1968{
style=filled;
color=gray75;
2552[label="210.118.29.73;55pkt 55fpkt", shape=pentagon, color=darkviolet];
6771[label="210.118.29.73;54pkt 54fpkt", shape=invtriangle, color=brown];
stat1968[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.118.29.73:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4867: (0.917431%)&lt;BR/&gt; 4720: (0.917431%)&lt;BR/&gt; 4656: (0.917431%)&lt;BR/&gt; 4614: (0.917431%)&gt;];
}
2552--6771[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="210.118.29.73"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.18.34.73"/>
    </slice>
    <from sec="1083733646" usec="0"/>
    <to sec="1083733762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.228.80.73"/>
    </slice>
    <from sec="1083733544" usec="0"/>
    <to sec="1083733619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.116.98.73"/>
    </slice>
    <from sec="1083733919" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.90.101.73"/>
    </slice>
    <from sec="1083733280" usec="0"/>
    <to sec="1083733383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1973{
style=filled;
color=gray75;
2563[label="141.22.127.73;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6780[label="141.22.127.73;7pkt 7fpkt", shape=invtriangle, color=brown];
9633[label="141.22.127.73;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1973[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.127.73:*, *:1863}[37.5%]&lt;BR/&gt;{141.22.127.73:*, 213.88.187.50:443}[25%]&lt;BR/&gt;{141.22.127.73:*, *:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (20.4545%)&lt;BR/&gt; 1863: (15.9091%)&lt;BR/&gt; 80: (13.6364%)&lt;BR/&gt; 1045: (6.81818%)&lt;BR/&gt; 1043: (6.81818%)&gt;];
}
2563--6780[label="1;7pkt 7fpkt"];
2563--9633[label="1;7pkt 7fpkt"];
6780--9633[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="141.22.127.73"/>
      <filter dst_port="80" src_ip="141.22.127.73"/>
      <filter dst_ip="213.88.187.50" dst_port="443" src_ip="141.22.127.73"/>
    </slice>
    <from sec="1083733268" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.252.226.73"/>
    </slice>
    <from sec="1083733410" usec="0"/>
    <to sec="1083733541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1975{
style=filled;
color=gray75;
2572[label="46.202.4.74;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6788[label="46.202.4.74;20pkt 20fpkt", shape=invtriangle, color=brown];
9640[label="46.202.4.74;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1975[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.202.4.74:80, 136.151.144.13:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54200: (2.41935%)&lt;BR/&gt; 54192: (2.41935%)&lt;BR/&gt; 49896: (2.41935%)&lt;BR/&gt; 49895: (2.41935%)&gt;];
}
2572--6788[label="1;20pkt 20fpkt"];
2572--9640[label="1;21pkt 21fpkt"];
6788--9640[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.144.13" src_ip="46.202.4.74" src_port="80"/>
    </slice>
    <from sec="1083733500" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1976{
style=filled;
color=gray75;
2575[label="197.22.17.74;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6790[label="197.22.17.74;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1976[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.22.17.74:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62224: (1.38889%)&lt;BR/&gt; 59831: (1.38889%)&lt;BR/&gt; 59265: (1.38889%)&lt;BR/&gt; 58826: (1.38889%)&gt;];
}
2575--6790[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="197.22.17.74"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1977{
style=filled;
color=gray75;
467[label="218.44.75.74;s;100pkt 100fpkt", shape=diamond, color=yellow];
2578[label="218.44.75.74;106pkt 106fpkt", shape=pentagon, color=darkviolet];
6791[label="218.44.75.74;106pkt 106fpkt", shape=invtriangle, color=brown];
stat1977[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.44.75.74:80, 209.29.138.127:*}[53.271%]&lt;BR/&gt;{218.44.75.74:80, 209.29.138.126:*}[46.729%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3428: (0.801282%)&lt;BR/&gt; 4914: (0.480769%)&lt;BR/&gt; 4902: (0.480769%)&lt;BR/&gt; 4889: (0.480769%)&gt;];
}
467--2578[label="0.99;99pkt 99fpkt"];
467--6791[label="0.99;99pkt 99fpkt"];
2578--6791[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="218.44.75.74" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="218.44.75.74" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.225.75.74"/>
    </slice>
    <from sec="1083733745" usec="0"/>
    <to sec="1083733848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1979{
style=filled;
color=gray75;
2580[label="95.15.81.74;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6793[label="95.15.81.74;10pkt 10fpkt", shape=invtriangle, color=brown];
9642[label="95.15.81.74;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1979[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.15.81.74:80, 136.151.2.211:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24988: (4.83871%)&lt;BR/&gt; 24879: (4.83871%)&lt;BR/&gt; 24731: (4.83871%)&lt;BR/&gt; 24567: (4.83871%)&gt;];
}
2580--6793[label="1;10pkt 10fpkt"];
2580--9642[label="1;10pkt 10fpkt"];
6793--9642[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.2.211" src_ip="95.15.81.74" src_port="80"/>
    </slice>
    <from sec="1083733738" usec="0"/>
    <to sec="1083734057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.166.131.74"/>
    </slice>
    <from sec="1083733302" usec="0"/>
    <to sec="1083733520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1981{
style=filled;
color=gray75;
2584[label="208.252.145.74;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6798[label="208.252.145.74;4pkt 4fpkt", shape=invtriangle, color=brown];
9646[label="208.252.145.74;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1981[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.252.145.74:80, 155.148.182.202:31250}[25%]&lt;BR/&gt;{208.252.145.74:80, 155.148.182.202:31261}[25%]&lt;BR/&gt;{208.252.145.74:80, 155.148.182.202:31262}[25%]&lt;BR/&gt;{208.252.145.74:80, 155.148.182.202:31264}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31264: (12.5%)&lt;BR/&gt; 31262: (12.5%)&lt;BR/&gt; 31261: (12.5%)&lt;BR/&gt; 31250: (12.5%)&gt;];
}
2584--6798[label="1;4pkt 4fpkt"];
2584--9646[label="1;4pkt 4fpkt"];
6798--9646[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" dst_port="31264" src_ip="208.252.145.74" src_port="80"/>
      <filter dst_ip="155.148.182.202" dst_port="31262" src_ip="208.252.145.74" src_port="80"/>
      <filter dst_ip="155.148.182.202" dst_port="31261" src_ip="208.252.145.74" src_port="80"/>
      <filter dst_ip="155.148.182.202" dst_port="31250" src_ip="208.252.145.74" src_port="80"/>
    </slice>
    <from sec="1083733795" usec="0"/>
    <to sec="1083733821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1982{
style=filled;
color=gray75;
835[label="173.138.160.74;s;2pkt 2fpkt", shape=diamond, color=yellow];
6801[label="173.138.160.74;1pkt 1fpkt", shape=invtriangle, color=brown];
9648[label="173.138.160.74;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1982[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.160.74:1460, 216.160.47.147:6667}[50%]&lt;BR/&gt;{173.138.160.74:1170, 198.222.100.241:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (37.5%)&lt;BR/&gt; 1460: (37.5%)&lt;BR/&gt; 5050: (12.5%)&lt;BR/&gt; 1170: (12.5%)&gt;];
}
835--6801[label="1;1pkt 1fpkt"];
835--9648[label="1;1pkt 1fpkt"];
6801--9648[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.241" dst_port="5050" src_ip="173.138.160.74" src_port="1170"/>
      <filter dst_ip="216.160.47.147" dst_port="6667" src_ip="173.138.160.74" src_port="1460"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.105.181.74"/>
    </slice>
    <from sec="1083733616" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1984{
style=filled;
color=gray75;
769[label="198.198.16.75;s;18pkt 18fpkt", shape=diamond, color=yellow];
2592[label="198.198.16.75;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6805[label="198.198.16.75;23pkt 23fpkt", shape=invtriangle, color=brown];
9651[label="198.198.16.75;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1984[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.16.75:80, 209.29.138.127:*}[45.8333%]&lt;BR/&gt;{198.198.16.75:80, 209.29.138.126:*}[33.3333%]&lt;BR/&gt;{198.198.16.75:80, 209.29.136.3:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29273: (2.29885%)&lt;BR/&gt; 29184: (2.29885%)&lt;BR/&gt; 28798: (2.29885%)&lt;BR/&gt; 28628: (2.29885%)&gt;];
}
769--2592[label="0.944444;17pkt 17fpkt"];
769--6805[label="0.944444;17pkt 17fpkt"];
769--9651[label="0.944444;17pkt 17fpkt"];
2592--6805[label="1;23pkt 23fpkt"];
2592--9651[label="1;23pkt 23fpkt"];
6805--9651[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="198.198.16.75" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="198.198.16.75" src_port="80"/>
      <filter dst_ip="209.29.136.3" src_ip="198.198.16.75" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1985{
style=filled;
color=gray75;
2595[label="54.209.38.75;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6807[label="54.209.38.75;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1985[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.209.38.75:43624, 209.29.136.89:*}[55.5556%]&lt;BR/&gt;{54.209.38.75:*, 209.29.136.89:16072}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43624: (27.7778%)&lt;BR/&gt; 16072: (22.2222%)&lt;BR/&gt; 4794: (5.55556%)&lt;BR/&gt; 4791: (5.55556%)&lt;BR/&gt; 4535: (5.55556%)&gt;];
}
2595--6807[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="54.209.38.75" src_port="43624"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="54.209.38.75"/>
    </slice>
    <from sec="1083733247" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.183.125.75"/>
    </slice>
    <from sec="1083733318" usec="0"/>
    <to sec="1083733394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1987{
style=filled;
color=gray75;
2600[label="93.108.134.75;55pkt 55fpkt", shape=pentagon, color=darkviolet];
6809[label="93.108.134.75;55pkt 55fpkt", shape=invtriangle, color=brown];
stat1987[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.108.134.75:*, *:135}[98.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (49.0909%)&lt;BR/&gt; 4400: (1.81818%)&lt;BR/&gt; 4887: (0.909091%)&lt;BR/&gt; 4885: (0.909091%)&lt;BR/&gt; 4803: (0.909091%)&gt;];
}
2600--6809[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="93.108.134.75"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.52.230.75"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1989{
style=filled;
color=gray75;
2608[label="95.2.238.75;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6815[label="95.2.238.75;9pkt 9fpkt", shape=invtriangle, color=brown];
9655[label="95.2.238.75;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1989[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.2.238.75:80, 168.127.106.96:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2819: (5.35714%)&lt;BR/&gt; 2728: (5.35714%)&lt;BR/&gt; 2691: (5.35714%)&lt;BR/&gt; 2663: (5.35714%)&gt;];
}
2608--6815[label="1;9pkt 9fpkt"];
2608--9655[label="1;9pkt 9fpkt"];
6815--9655[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.106.96" src_ip="95.2.238.75" src_port="80"/>
    </slice>
    <from sec="1083733473" usec="0"/>
    <to sec="1083733494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1990{
style=filled;
color=gray75;
2612[label="213.101.59.76;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6818[label="213.101.59.76;27pkt 27fpkt", shape=invtriangle, color=brown];
9658[label="213.101.59.76;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1990[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.59.76:80, 136.151.47.232:*}[29.6296%]&lt;BR/&gt;{213.101.59.76:443, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.8889%)&lt;BR/&gt; 443: (11.1111%)&lt;BR/&gt; 1045: (3.7037%)&lt;BR/&gt; 1044: (3.7037%)&lt;BR/&gt; 63086: (1.85185%)&gt;];
}
2612--6818[label="1;27pkt 27fpkt"];
2612--9658[label="1;27pkt 27fpkt"];
6818--9658[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="213.101.59.76" src_port="443"/>
      <filter dst_ip="136.151.47.232" src_ip="213.101.59.76" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.211.88.76"/>
    </slice>
    <from sec="1083733303" usec="0"/>
    <to sec="1083733411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1992{
style=filled;
color=gray75;
2616[label="136.151.89.76;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6821[label="136.151.89.76;30pkt 30fpkt", shape=invtriangle, color=brown];
stat1992[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.89.76:*, *:53}[43.3333%]&lt;BR/&gt;{136.151.89.76:*, 198.192.171.200:80}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (21.6667%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 1026: (6.66667%)&lt;BR/&gt; 443: (3.33333%)&gt;];
}
2616--6821[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.151.89.76"/>
      <filter dst_ip="198.192.171.200" dst_port="80" src_ip="136.151.89.76"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1993{
style=filled;
color=gray75;
2617[label="152.225.131.76;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6822[label="152.225.131.76;111pkt 111fpkt", shape=invtriangle, color=brown];
9661[label="152.225.131.76;111pkt 111fpkt", shape=invhouse, color=bisque];
stat1993[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.225.131.76:*, *:3127}[34.2342%]&lt;BR/&gt;{152.225.131.76:*, *:1080}[33.3333%]&lt;BR/&gt;{152.225.131.76:*, *:3128}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (17.1171%)&lt;BR/&gt; 1080: (16.6667%)&lt;BR/&gt; 3128: (16.2162%)&lt;BR/&gt; 4954: (0.45045%)&lt;BR/&gt; 4940: (0.45045%)&gt;];
}
2617--6822[label="1;111pkt 111fpkt"];
2617--9661[label="1;111pkt 111fpkt"];
6822--9661[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="152.225.131.76"/>
      <filter dst_port="1080" src_ip="152.225.131.76"/>
      <filter dst_port="3128" src_ip="152.225.131.76"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1994{
style=filled;
color=gray75;
2619[label="173.138.171.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6823[label="173.138.171.76;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1994[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.171.76:1038, 198.222.100.212:5050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1038: (50%)&gt;];
}
2619--6823[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.212" dst_port="5050" src_ip="173.138.171.76" src_port="1038"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.220.177.76"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083733718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.244.204.76"/>
    </slice>
    <from sec="1083733369" usec="0"/>
    <to sec="1083733493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1997{
style=filled;
color=gray75;
2625[label="136.151.226.76;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6828[label="136.151.226.76;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1997[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.226.76:80, 45.108.82.184:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4848%)&lt;BR/&gt; 60208: (3.0303%)&lt;BR/&gt; 56944: (3.0303%)&lt;BR/&gt; 54786: (3.0303%)&lt;BR/&gt; 52620: (3.0303%)&gt;];
}
2625--6828[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="136.151.226.76" src_port="80"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1998{
style=filled;
color=gray75;
2627[label="200.117.246.76;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6830[label="200.117.246.76;9pkt 9fpkt", shape=invtriangle, color=brown];
9666[label="200.117.246.76;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1998[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.117.246.76:*, *:445}[66.6667%]&lt;BR/&gt;{200.117.246.76:*, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (36%)&lt;BR/&gt; 80: (14%)&lt;BR/&gt; 4923: (6%)&lt;BR/&gt; 3791: (6%)&lt;BR/&gt; 3595: (6%)&gt;];
}
2627--6830[label="1;8pkt 8fpkt"];
2627--9666[label="1;8pkt 8fpkt"];
6830--9666[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.117.246.76"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="200.117.246.76"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1999{
style=filled;
color=gray75;
2634[label="141.132.98.77;130pkt 130fpkt", shape=pentagon, color=darkviolet];
6834[label="141.132.98.77;130pkt 130fpkt", shape=invtriangle, color=brown];
stat1999[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.132.98.77:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2634--6834[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter src_ip="141.132.98.77"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2000{
style=filled;
color=gray75;
2639[label="209.18.125.77;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6838[label="209.18.125.77;21pkt 21fpkt", shape=invtriangle, color=brown];
stat2000[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.125.77:*, 95.181.164.33:80}[59.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1088: (2.32558%)&lt;BR/&gt; 1087: (2.32558%)&lt;BR/&gt; 1084: (2.32558%)&lt;BR/&gt; 1083: (2.32558%)&gt;];
}
2639--6838[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="95.181.164.33" dst_port="80" src_ip="209.18.125.77"/>
    </slice>
    <from sec="1083733548" usec="0"/>
    <to sec="1083733858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2001{
style=filled;
color=gray75;
2644[label="204.198.200.77;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6840[label="204.198.200.77;8pkt 8fpkt", shape=invtriangle, color=brown];
9671[label="204.198.200.77;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2001[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.198.200.77:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59963: (6%)&lt;BR/&gt; 59783: (6%)&lt;BR/&gt; 59753: (6%)&lt;BR/&gt; 59739: (6%)&gt;];
}
2644--6840[label="1;8pkt 8fpkt"];
2644--9671[label="1;8pkt 8fpkt"];
6840--9671[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="204.198.200.77" src_port="80"/>
    </slice>
    <from sec="1083733985" usec="0"/>
    <to sec="1083734055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.246.205.77"/>
    </slice>
    <from sec="1083733323" usec="0"/>
    <to sec="1083733394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2003{
style=filled;
color=gray75;
2646[label="173.138.208.77;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6842[label="173.138.208.77;2pkt 2fpkt", shape=invtriangle, color=brown];
9673[label="173.138.208.77;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2003[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.208.77:1157, 41.67.21.154:443}[33.3333%]&lt;BR/&gt;{173.138.208.77:1276, 109.112.72.154:443}[33.3333%]&lt;BR/&gt;{173.138.208.77:1115, 198.222.100.241:23}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (28.5714%)&lt;BR/&gt; 1157: (21.4286%)&lt;BR/&gt; 1115: (21.4286%)&lt;BR/&gt; 23: (21.4286%)&lt;BR/&gt; 1276: (7.14286%)&gt;];
}
2646--6842[label="1;2pkt 2fpkt"];
2646--9673[label="1;2pkt 2fpkt"];
6842--9673[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.241" dst_port="23" src_ip="173.138.208.77" src_port="1115"/>
      <filter dst_ip="109.112.72.154" dst_port="443" src_ip="173.138.208.77" src_port="1276"/>
      <filter dst_ip="41.67.21.154" dst_port="443" src_ip="173.138.208.77" src_port="1157"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2004{
style=filled;
color=gray75;
2649[label="41.163.12.78;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6844[label="41.163.12.78;4pkt 4fpkt", shape=invtriangle, color=brown];
9674[label="41.163.12.78;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2004[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.163.12.78:3584, 141.145.191.11:445}[25%]&lt;BR/&gt;{41.163.12.78:4736, 155.148.101.12:445}[25%]&lt;BR/&gt;{41.163.12.78:3337, 136.151.235.67:80}[25%]&lt;BR/&gt;{41.163.12.78:4292, 173.138.157.191:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 4736: (12.5%)&lt;BR/&gt; 4292: (12.5%)&lt;BR/&gt; 3584: (12.5%)&lt;BR/&gt; 3337: (12.5%)&gt;];
}
2649--6844[label="1;4pkt 4fpkt"];
2649--9674[label="1;4pkt 4fpkt"];
6844--9674[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.157.191" dst_port="445" src_ip="41.163.12.78" src_port="4292"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.163.12.78" src_port="3337"/>
      <filter dst_ip="155.148.101.12" dst_port="445" src_ip="41.163.12.78" src_port="4736"/>
      <filter dst_ip="141.145.191.11" dst_port="445" src_ip="41.163.12.78" src_port="3584"/>
    </slice>
    <from sec="1083733233" usec="0"/>
    <to sec="1083733931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2005{
style=filled;
color=gray75;
2654[label="200.166.50.78;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6848[label="200.166.50.78;11pkt 11fpkt", shape=invtriangle, color=brown];
9677[label="200.166.50.78;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2005[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.166.50.78:*, *:445}[50%]&lt;BR/&gt;{200.166.50.78:0, *:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (34.2857%)&lt;BR/&gt; 445: (25.7143%)&lt;BR/&gt; 80: (7.14286%)&lt;BR/&gt; 3560: (4.28571%)&lt;BR/&gt; 3094: (4.28571%)&gt;];
}
2654--6848[label="1;11pkt 11fpkt"];
2654--9677[label="1;12pkt 12fpkt"];
6848--9677[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.166.50.78"/>
      <filter src_ip="200.166.50.78"/>
    </slice>
    <from sec="1083733321" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.119.71.78"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.151.90.78"/>
    </slice>
    <from sec="1083733412" usec="0"/>
    <to sec="1083734040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.44.119.78"/>
    </slice>
    <from sec="1083733470" usec="0"/>
    <to sec="1083733568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2009{
style=filled;
color=gray75;
2663[label="197.107.148.78;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6854[label="197.107.148.78;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2009[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.107.148.78:55403, 155.148.242.2:80}[20%]&lt;BR/&gt;{197.107.148.78:65375, 141.85.31.35:80}[20%]&lt;BR/&gt;{197.107.148.78:22785, 219.222.12.226:2745}[20%]&lt;BR/&gt;{197.107.148.78:1686, 136.151.235.67:80}[20%]&lt;BR/&gt;{197.107.148.78:54223, 136.151.235.67:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 65375: (10%)&lt;BR/&gt; 55403: (10%)&lt;BR/&gt; 54223: (10%)&lt;BR/&gt; 22785: (10%)&gt;];
}
2663--6854[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="197.107.148.78" src_port="54223"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="197.107.148.78" src_port="1686"/>
      <filter dst_ip="219.222.12.226" dst_port="2745" src_ip="197.107.148.78" src_port="22785"/>
      <filter dst_ip="141.85.31.35" dst_port="80" src_ip="197.107.148.78" src_port="65375"/>
      <filter dst_ip="155.148.242.2" dst_port="80" src_ip="197.107.148.78" src_port="55403"/>
    </slice>
    <from sec="1083733342" usec="0"/>
    <to sec="1083734037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.29.2.79"/>
    </slice>
    <from sec="1083733553" usec="0"/>
    <to sec="1083733632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2011{
style=filled;
color=gray75;
2672[label="109.195.71.79;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6859[label="109.195.71.79;14pkt 14fpkt", shape=invtriangle, color=brown];
stat2011[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.195.71.79:0, *:0}[57.1429%]&lt;BR/&gt;{109.195.71.79:*, 136.151.235.67:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (57.1429%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 445: (7.14286%)&lt;BR/&gt; 4381: (3.57143%)&lt;BR/&gt; 4100: (3.57143%)&gt;];
}
2672--6859[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.195.71.79"/>
      <filter src_ip="109.195.71.79"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.26.80.79"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.212.102.79"/>
    </slice>
    <from sec="1083733341" usec="0"/>
    <to sec="1083733972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.236.142.79"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083733418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2015{
style=filled;
color=gray75;
2678[label="173.138.165.79;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6865[label="173.138.165.79;23pkt 23fpkt", shape=invtriangle, color=brown];
9683[label="173.138.165.79;24pkt 24fpkt", shape=invhouse, color=bisque];
stat2015[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.165.79:25, 138.136.18.101:*}[54.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 52248: (2.11268%)&lt;BR/&gt; 50228: (2.11268%)&lt;BR/&gt; 48963: (2.11268%)&lt;BR/&gt; 44273: (2.11268%)&gt;];
}
2678--6865[label="1;23pkt 23fpkt"];
2678--9683[label="1;24pkt 24fpkt"];
6865--9683[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="138.136.18.101" src_ip="173.138.165.79" src_port="25"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_2016{
style=filled;
color=gray75;
302[label="52.125.33.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
6871[label="52.125.33.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2016[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.125.33.80:6881, 168.127.113.129:2234}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2234: (50%)&gt;];
}
302--6871[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2234" src_ip="52.125.33.80" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.10.45.80"/>
    </slice>
    <from sec="1083733408" usec="0"/>
    <to sec="1083734040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2018{
style=filled;
color=gray75;
2689[label="196.96.50.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6873[label="196.96.50.80;1pkt 1fpkt", shape=invtriangle, color=brown];
9687[label="196.96.50.80;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2018[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.96.50.80:80, 155.148.217.73:3643}[50%]&lt;BR/&gt;{196.96.50.80:80, 155.148.217.73:3644}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3644: (37.5%)&lt;BR/&gt; 3643: (12.5%)&gt;];
}
2689--6873[label="1;1pkt 1fpkt"];
2689--9687[label="1;1pkt 1fpkt"];
6873--9687[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.217.73" dst_port="3644" src_ip="196.96.50.80" src_port="80"/>
      <filter dst_ip="155.148.217.73" dst_port="3643" src_ip="196.96.50.80" src_port="80"/>
    </slice>
    <from sec="1083733926" usec="0"/>
    <to sec="1083733965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2019{
style=filled;
color=gray75;
2692[label="155.148.77.80;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6875[label="155.148.77.80;8pkt 8fpkt", shape=invtriangle, color=brown];
9688[label="155.148.77.80;9pkt 9fpkt", shape=invhouse, color=bisque];
stat2019[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.77.80:*, 213.132.153.157:80}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61090: (5.76923%)&lt;BR/&gt; 61089: (5.76923%)&lt;BR/&gt; 61082: (5.76923%)&lt;BR/&gt; 61009: (5.76923%)&gt;];
}
2692--6875[label="1;8pkt 8fpkt"];
2692--9688[label="1;9pkt 9fpkt"];
6875--9688[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="213.132.153.157" dst_port="80" src_ip="155.148.77.80"/>
    </slice>
    <from sec="1083733250" usec="0"/>
    <to sec="1083733824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.14.97.80"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.6.182.80"/>
    </slice>
    <from sec="1083733668" usec="0"/>
    <to sec="1083733768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.160.33.81"/>
    </slice>
    <from sec="1083733250" usec="0"/>
    <to sec="1083733358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2023{
style=filled;
color=gray75;
2707[label="155.148.77.81;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6886[label="155.148.77.81;12pkt 12fpkt", shape=invtriangle, color=brown];
stat2023[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.77.81:*, 44.218.208.73:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56590: (4%)&lt;BR/&gt; 56553: (4%)&lt;BR/&gt; 56552: (4%)&lt;BR/&gt; 56551: (4%)&gt;];
}
2707--6886[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="44.218.208.73" dst_port="80" src_ip="155.148.77.81"/>
    </slice>
    <from sec="1083733487" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.115.104.81"/>
    </slice>
    <from sec="1083733851" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2025{
style=filled;
color=gray75;
2709[label="53.180.108.81;56pkt 56fpkt", shape=pentagon, color=darkviolet];
6888[label="53.180.108.81;56pkt 56fpkt", shape=invtriangle, color=brown];
stat2025[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.180.108.81:*, 219.100.206.203:445}[44.6429%]&lt;BR/&gt;{53.180.108.81:*, 219.100.206.203:135}[44.6429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.8929%)&lt;BR/&gt; 445: (24.1071%)&lt;BR/&gt; 4724: (0.892857%)&lt;BR/&gt; 4701: (0.892857%)&lt;BR/&gt; 4697: (0.892857%)&gt;];
}
2709--6888[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="219.100.206.203" dst_port="135" src_ip="53.180.108.81"/>
      <filter dst_ip="219.100.206.203" dst_port="445" src_ip="53.180.108.81"/>
    </slice>
    <from sec="1083733830" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2026{
style=filled;
color=gray75;
2710[label="136.150.112.81;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6889[label="136.150.112.81;41pkt 41fpkt", shape=invtriangle, color=brown];
9694[label="136.150.112.81;41pkt 41fpkt", shape=invhouse, color=bisque];
stat2026[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.112.81:*, *:80}[69.0476%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.2742%)&lt;BR/&gt; 1863: (7.25806%)&lt;BR/&gt; 7001: (4.83871%)&lt;BR/&gt; 443: (3.62903%)&lt;BR/&gt; 1175: (1.20968%)&gt;];
}
2710--6889[label="1;41pkt 41fpkt"];
2710--9694[label="1;41pkt 41fpkt"];
6889--9694[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.150.112.81"/>
    </slice>
    <from sec="1083733339" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.151.140.81"/>
    </slice>
    <from sec="1083733903" usec="0"/>
    <to sec="1083733970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.206.145.81"/>
    </slice>
    <from sec="1083733328" usec="0"/>
    <to sec="1083733839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2029{
style=filled;
color=gray75;
2714[label="53.109.158.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6893[label="53.109.158.81;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2029[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.109.158.81:80, 136.151.147.192:1348}[50%]&lt;BR/&gt;{53.109.158.81:80, 136.151.147.192:4914}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4914: (33.3333%)&lt;BR/&gt; 1348: (16.6667%)&gt;];
}
2714--6893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.147.192" dst_port="4914" src_ip="53.109.158.81" src_port="80"/>
      <filter dst_ip="136.151.147.192" dst_port="1348" src_ip="53.109.158.81" src_port="80"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2030{
style=filled;
color=gray75;
2716[label="196.109.171.81;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6894[label="196.109.171.81;20pkt 20fpkt", shape=invtriangle, color=brown];
stat2030[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.109.171.81:*, *:2745}[35%]&lt;BR/&gt;{196.109.171.81:*, 136.151.235.67:80}[25%]&lt;BR/&gt;{196.109.171.81:*, 219.100.206.181:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 2745: (17.5%)&lt;BR/&gt; 1025: (7.5%)&lt;BR/&gt; 6129: (2.5%)&lt;BR/&gt; 4118: (2.5%)&gt;];
}
2716--6894[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="219.100.206.181" src_ip="196.109.171.81"/>
      <filter dst_port="2745" src_ip="196.109.171.81"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="196.109.171.81"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2031{
style=filled;
color=gray75;
2721[label="93.20.229.81;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6897[label="93.20.229.81;7pkt 7fpkt", shape=invtriangle, color=brown];
9698[label="93.20.229.81;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2031[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.20.229.81:*, *:445}[42.8571%]&lt;BR/&gt;{93.20.229.81:0, *:0}[28.5714%]&lt;BR/&gt;{93.20.229.81:*, 136.151.235.67:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (28.5714%)&lt;BR/&gt; 445: (21.4286%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 4929: (7.14286%)&lt;BR/&gt; 2686: (7.14286%)&gt;];
}
2721--6897[label="1;7pkt 7fpkt"];
2721--9698[label="1;7pkt 7fpkt"];
6897--9698[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="93.20.229.81"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.20.229.81"/>
      <filter src_ip="93.20.229.81"/>
    </slice>
    <from sec="1083733256" usec="0"/>
    <to sec="1083733712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_2032{
style=filled;
color=gray75;
76[label="192.196.235.81;s;2pkt 2fpkt", shape=diamond, color=yellow];
6898[label="192.196.235.81;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2032[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.196.235.81:1847, 208.96.48.67:21}[50%]&lt;BR/&gt;{192.196.235.81:1849, 208.96.48.67:35950}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35950: (25%)&lt;BR/&gt; 1849: (25%)&lt;BR/&gt; 1847: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
76--6898[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.48.67" dst_port="35950" src_ip="192.196.235.81" src_port="1849"/>
      <filter dst_ip="208.96.48.67" dst_port="21" src_ip="192.196.235.81" src_port="1847"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2033{
style=filled;
color=gray75;
2723[label="136.151.251.81;55pkt 55fpkt", shape=pentagon, color=darkviolet];
6899[label="136.151.251.81;54pkt 54fpkt", shape=invtriangle, color=brown];
stat2033[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.251.81:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2723--6899[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.251.81"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2034{
style=filled;
color=gray75;
2724[label="168.127.17.82;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6900[label="168.127.17.82;14pkt 14fpkt", shape=invtriangle, color=brown];
9699[label="168.127.17.82;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2034[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.17.82:*, 71.179.128.61:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4591: (3.57143%)&lt;BR/&gt; 4589: (3.57143%)&lt;BR/&gt; 4587: (3.57143%)&lt;BR/&gt; 1213: (3.57143%)&gt;];
}
2724--6900[label="1;14pkt 14fpkt"];
2724--9699[label="1;14pkt 14fpkt"];
6900--9699[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="71.179.128.61" dst_port="80" src_ip="168.127.17.82"/>
    </slice>
    <from sec="1083733475" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2035{
style=filled;
color=gray75;
2727[label="22.98.49.82;242pkt 242fpkt", shape=pentagon, color=darkviolet];
6902[label="22.98.49.82;241pkt 241fpkt", shape=invtriangle, color=brown];
9701[label="22.98.49.82;241pkt 241fpkt", shape=invhouse, color=bisque];
stat2035[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.98.49.82:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2727--6902[label="1;241pkt 241fpkt"];
2727--9701[label="1;241pkt 241fpkt"];
6902--9701[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="22.98.49.82" src_port="1026"/>
    </slice>
    <from sec="1083733849" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2036{
style=filled;
color=gray75;
2732[label="216.30.68.82;39pkt 39fpkt", shape=pentagon, color=darkviolet];
6903[label="216.30.68.82;39pkt 39fpkt", shape=invtriangle, color=brown];
9702[label="216.30.68.82;39pkt 39fpkt", shape=invhouse, color=bisque];
stat2036[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.30.68.82:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45698: (1.28205%)&lt;BR/&gt; 45697: (1.28205%)&lt;BR/&gt; 45694: (1.28205%)&lt;BR/&gt; 45686: (1.28205%)&gt;];
}
2732--6903[label="1;39pkt 39fpkt"];
2732--9702[label="1;39pkt 39fpkt"];
6903--9702[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="216.30.68.82" src_port="80"/>
    </slice>
    <from sec="1083733475" usec="0"/>
    <to sec="1083733601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2037{
style=filled;
color=gray75;
2733[label="197.0.71.82;132pkt 132fpkt", shape=pentagon, color=darkviolet];
6904[label="197.0.71.82;132pkt 132fpkt", shape=invtriangle, color=brown];
9703[label="197.0.71.82;131pkt 131fpkt", shape=invhouse, color=bisque];
stat2037[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.0.71.82:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51021: (0.379747%)&lt;BR/&gt; 51017: (0.379747%)&lt;BR/&gt; 51013: (0.379747%)&lt;BR/&gt; 51009: (0.379747%)&gt;];
}
2733--6904[label="1;132pkt 132fpkt"];
2733--9703[label="1;131pkt 131fpkt"];
6904--9703[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.0.71.82"/>
    </slice>
    <from sec="1083733810" usec="0"/>
    <to sec="1083733831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2038{
style=filled;
color=gray75;
2735[label="136.150.105.82;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6907[label="136.150.105.82;20pkt 20fpkt", shape=invtriangle, color=brown];
9705[label="136.150.105.82;20pkt 20fpkt", shape=invhouse, color=bisque];
stat2038[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.105.82:80, 45.108.82.184:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59879: (2.5%)&lt;BR/&gt; 58299: (2.5%)&lt;BR/&gt; 56801: (2.5%)&lt;BR/&gt; 54987: (2.5%)&gt;];
}
2735--6907[label="1;20pkt 20fpkt"];
2735--9705[label="1;20pkt 20fpkt"];
6907--9705[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="136.150.105.82" src_port="80"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.32.134.82"/>
    </slice>
    <from sec="1083733786" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2040{
style=filled;
color=gray75;
2740[label="136.151.159.82;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6910[label="136.151.159.82;26pkt 26fpkt", shape=invtriangle, color=brown];
9707[label="136.151.159.82;25pkt 25fpkt", shape=invhouse, color=bisque];
stat2040[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.159.82:*, *:113}[50%]&lt;BR/&gt;{136.151.159.82:25, *:*}[50%]&lt;BR/&gt;{136.151.159.82:*, 213.153.181.140:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25.3247%)&lt;BR/&gt; 25: (24.6753%)&lt;BR/&gt; 35460: (1.94805%)&lt;BR/&gt; 35450: (1.94805%)&lt;BR/&gt; 35438: (1.94805%)&gt;];
}
2740--6910[label="1;26pkt 26fpkt"];
2740--9707[label="1;25pkt 25fpkt"];
6910--9707[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="213.153.181.140" src_ip="136.151.159.82"/>
      <filter src_ip="136.151.159.82" src_port="25"/>
      <filter dst_port="113" src_ip="136.151.159.82"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2041{
style=filled;
color=gray75;
2745[label="212.169.195.82;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6913[label="212.169.195.82;7pkt 7fpkt", shape=invtriangle, color=brown];
9709[label="212.169.195.82;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2041[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.169.195.82:*, *:445}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 55371: (7.14286%)&lt;BR/&gt; 4575: (7.14286%)&lt;BR/&gt; 4402: (7.14286%)&lt;BR/&gt; 3778: (7.14286%)&gt;];
}
2745--6913[label="1;7pkt 7fpkt"];
2745--9709[label="1;7pkt 7fpkt"];
6913--9709[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="212.169.195.82"/>
    </slice>
    <from sec="1083733395" usec="0"/>
    <to sec="1083733953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2042{
style=filled;
color=gray75;
2748[label="52.177.235.82;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6915[label="52.177.235.82;3pkt 3fpkt", shape=invtriangle, color=brown];
9711[label="52.177.235.82;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2042[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.177.235.82:4212, 209.29.136.89:2920}[33.3333%]&lt;BR/&gt;{52.177.235.82:4212, 209.29.136.89:3061}[33.3333%]&lt;BR/&gt;{52.177.235.82:4212, 209.29.136.89:3366}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4212: (50%)&lt;BR/&gt; 3366: (16.6667%)&lt;BR/&gt; 3061: (16.6667%)&lt;BR/&gt; 2920: (16.6667%)&gt;];
}
2748--6915[label="1;3pkt 3fpkt"];
2748--9711[label="1;3pkt 3fpkt"];
6915--9711[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3366" src_ip="52.177.235.82" src_port="4212"/>
      <filter dst_ip="209.29.136.89" dst_port="3061" src_ip="52.177.235.82" src_port="4212"/>
      <filter dst_ip="209.29.136.89" dst_port="2920" src_ip="52.177.235.82" src_port="4212"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_2043{
style=filled;
color=gray75;
487[label="208.74.240.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
6916[label="208.74.240.82;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2043[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.74.240.82:6883, 168.127.113.129:2511}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6883: (50%)&lt;BR/&gt; 2511: (50%)&gt;];
}
487--6916[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2511" src_ip="208.74.240.82" src_port="6883"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2044{
style=filled;
color=gray75;
2756[label="168.127.68.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6918[label="168.127.68.83;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2044[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.68.83:3922, 213.101.192.216:1863}[50%]&lt;BR/&gt;{168.127.68.83:4615, 120.139.220.244:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4615: (25%)&lt;BR/&gt; 3922: (25%)&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
2756--6918[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="120.139.220.244" dst_port="80" src_ip="168.127.68.83" src_port="4615"/>
      <filter dst_ip="213.101.192.216" dst_port="1863" src_ip="168.127.68.83" src_port="3922"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2045{
style=filled;
color=gray75;
2758[label="197.4.75.83;240pkt 240fpkt", shape=pentagon, color=darkviolet];
6919[label="197.4.75.83;240pkt 240fpkt", shape=invtriangle, color=brown];
9713[label="197.4.75.83;240pkt 240fpkt", shape=invhouse, color=bisque];
stat2045[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.4.75.83:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2758--6919[label="1;240pkt 240fpkt"];
2758--9713[label="1;240pkt 240fpkt"];
6919--9713[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.4.75.83" src_port="1026"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083733303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2046{
style=filled;
color=gray75;
2759[label="40.207.89.83;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6920[label="40.207.89.83;38pkt 38fpkt", shape=invtriangle, color=brown];
9714[label="40.207.89.83;38pkt 38fpkt", shape=invhouse, color=bisque];
stat2046[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.207.89.83:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60891: (1.31579%)&lt;BR/&gt; 60785: (1.31579%)&lt;BR/&gt; 60784: (1.31579%)&lt;BR/&gt; 60783: (1.31579%)&gt;];
}
2759--6920[label="1;38pkt 38fpkt"];
2759--9714[label="1;38pkt 38fpkt"];
6920--9714[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="40.207.89.83" src_port="80"/>
    </slice>
    <from sec="1083734037" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.153.161.83"/>
    </slice>
    <from sec="1083733578" usec="0"/>
    <to sec="1083733712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2048{
style=filled;
color=gray75;
2770[label="201.89.202.83;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6926[label="201.89.202.83;41pkt 41fpkt", shape=invtriangle, color=brown];
9720[label="201.89.202.83;41pkt 41fpkt", shape=invhouse, color=bisque];
stat2048[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.89.202.83:80, 168.127.18.93:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49485: (1.21951%)&lt;BR/&gt; 49482: (1.21951%)&lt;BR/&gt; 49481: (1.21951%)&lt;BR/&gt; 49479: (1.21951%)&gt;];
}
2770--6926[label="1;41pkt 41fpkt"];
2770--9720[label="1;41pkt 41fpkt"];
6926--9720[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.18.93" src_ip="201.89.202.83" src_port="80"/>
    </slice>
    <from sec="1083733352" usec="0"/>
    <to sec="1083733947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2049{
style=filled;
color=gray75;
2772[label="173.138.227.83;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6928[label="173.138.227.83;11pkt 11fpkt", shape=invtriangle, color=brown];
9722[label="173.138.227.83;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2049[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.227.83:25, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.7143%)&lt;BR/&gt; 48893: (4.28571%)&lt;BR/&gt; 46506: (4.28571%)&lt;BR/&gt; 29840: (4.28571%)&lt;BR/&gt; 23964: (4.28571%)&gt;];
}
2772--6928[label="1;11pkt 11fpkt"];
2772--9722[label="1;12pkt 12fpkt"];
6928--9722[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.227.83" src_port="25"/>
    </slice>
    <from sec="1083733246" usec="0"/>
    <to sec="1083734023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.2.13.84"/>
    </slice>
    <from sec="1083733916" usec="0"/>
    <to sec="1083734012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.155.22.84"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.181.96.84"/>
    </slice>
    <from sec="1083733671" usec="0"/>
    <to sec="1083733797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.232.111.84"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2054{
style=filled;
color=gray75;
2784[label="209.18.125.84;85pkt 85fpkt", shape=pentagon, color=darkviolet];
6939[label="209.18.125.84;85pkt 85fpkt", shape=invtriangle, color=brown];
stat2054[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.125.84:7778, *:*}[72.9412%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7778: (36.4706%)&lt;BR/&gt; 0: (14.1176%)&lt;BR/&gt; 28902: (3.52941%)&lt;BR/&gt; 7787: (1.76471%)&lt;BR/&gt; 27900: (1.17647%)&gt;];
}
2784--6939[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter src_ip="209.18.125.84" src_port="7778"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.29.150.84"/>
    </slice>
    <from sec="1083733954" usec="0"/>
    <to sec="1083734033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.32.174.84"/>
    </slice>
    <from sec="1083733397" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2057{
style=filled;
color=gray75;
2792[label="155.148.174.84;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6945[label="155.148.174.84;29pkt 29fpkt", shape=invtriangle, color=brown];
9733[label="155.148.174.84;29pkt 29fpkt", shape=invhouse, color=bisque];
stat2057[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.174.84:*, 44.248.165.35:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1179: (1.70455%)&lt;BR/&gt; 1178: (1.70455%)&lt;BR/&gt; 1177: (1.70455%)&lt;BR/&gt; 1176: (1.70455%)&gt;];
}
2792--6945[label="1;29pkt 29fpkt"];
2792--9733[label="1;29pkt 29fpkt"];
6945--9733[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="44.248.165.35" dst_port="80" src_ip="155.148.174.84"/>
    </slice>
    <from sec="1083733312" usec="0"/>
    <to sec="1083733955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.139.178.84"/>
    </slice>
    <from sec="1083733729" usec="0"/>
    <to sec="1083733838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.198.84"/>
    </slice>
    <from sec="1083733721" usec="0"/>
    <to sec="1083733771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.192.233.84"/>
    </slice>
    <from sec="1083733826" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.19.2.85"/>
    </slice>
    <from sec="1083733866" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2062{
style=filled;
color=gray75;
2803[label="213.101.36.85;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6954[label="213.101.36.85;36pkt 36fpkt", shape=invtriangle, color=brown];
9738[label="213.101.36.85;35pkt 35fpkt", shape=invhouse, color=bisque];
stat2062[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.36.85:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63467: (1.40187%)&lt;BR/&gt; 62151: (1.40187%)&lt;BR/&gt; 44628: (1.40187%)&lt;BR/&gt; 27893: (1.40187%)&gt;];
}
2803--6954[label="1;36pkt 36fpkt"];
2803--9738[label="1;35pkt 35fpkt"];
6954--9738[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="213.101.36.85" src_port="80"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.151.66.85"/>
    </slice>
    <from sec="1083733626" usec="0"/>
    <to sec="1083733703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2064{
style=filled;
color=gray75;
2805[label="93.7.81.85;240pkt 240fpkt", shape=pentagon, color=darkviolet];
6956[label="93.7.81.85;239pkt 239fpkt", shape=invtriangle, color=brown];
9740[label="93.7.81.85;240pkt 240fpkt", shape=invhouse, color=bisque];
stat2064[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.7.81.85:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2805--6956[label="1;239pkt 239fpkt"];
2805--9740[label="1;240pkt 240fpkt"];
6956--9740[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="93.7.81.85" src_port="1027"/>
    </slice>
    <from sec="1083734011" usec="0"/>
    <to sec="1083734030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2065{
style=filled;
color=gray75;
2806[label="208.87.85.85;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6957[label="208.87.85.85;27pkt 27fpkt", shape=invtriangle, color=brown];
9741[label="208.87.85.85;26pkt 26fpkt", shape=invhouse, color=bisque];
stat2065[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.87.85.85:80, 209.29.136.211:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61235: (1.89873%)&lt;BR/&gt; 61234: (1.89873%)&lt;BR/&gt; 61224: (1.89873%)&lt;BR/&gt; 61223: (1.89873%)&gt;];
}
2806--6957[label="1;26pkt 26fpkt"];
2806--9741[label="1;26pkt 26fpkt"];
6957--9741[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.211" src_ip="208.87.85.85" src_port="80"/>
    </slice>
    <from sec="1083733610" usec="0"/>
    <to sec="1083733759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2066{
style=filled;
color=gray75;
2809[label="168.127.115.85;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6960[label="168.127.115.85;44pkt 44fpkt", shape=invtriangle, color=brown];
9743[label="168.127.115.85;44pkt 44fpkt", shape=invhouse, color=bisque];
stat2066[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.115.85:*, *:80}[77.2727%]&lt;BR/&gt;{168.127.115.85:*, 203.127.107.65:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.6364%)&lt;BR/&gt; 21: (9.09091%)&lt;BR/&gt; 50723: (1.13636%)&lt;BR/&gt; 50722: (1.13636%)&lt;BR/&gt; 3809: (1.13636%)&gt;];
}
2809--6960[label="1;44pkt 44fpkt"];
2809--9743[label="1;44pkt 44fpkt"];
6960--9743[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="203.127.107.65" src_ip="168.127.115.85"/>
      <filter dst_port="80" src_ip="168.127.115.85"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.207.134.85"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2068{
style=filled;
color=gray75;
2816[label="46.250.27.86;57pkt 57fpkt", shape=pentagon, color=darkviolet];
6963[label="46.250.27.86;56pkt 56fpkt", shape=invtriangle, color=brown];
stat2068[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.250.27.86:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4552: (1.76991%)&lt;BR/&gt; 1218: (1.76991%)&lt;BR/&gt; 4769: (0.884956%)&lt;BR/&gt; 4762: (0.884956%)&gt;];
}
2816--6963[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="46.250.27.86"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.84.37.86"/>
    </slice>
    <from sec="1083733495" usec="0"/>
    <to sec="1083733776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.107.53.86"/>
    </slice>
    <from sec="1083733502" usec="0"/>
    <to sec="1083733660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2071{
style=filled;
color=gray75;
2822[label="41.166.72.86;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6966[label="41.166.72.86;5pkt 5fpkt", shape=invtriangle, color=brown];
9747[label="41.166.72.86;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2071[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.166.72.86:1265, 155.148.245.22:445}[20%]&lt;BR/&gt;{41.166.72.86:0, 141.85.73.186:0}[20%]&lt;BR/&gt;{41.166.72.86:2618, 173.138.11.220:445}[20%]&lt;BR/&gt;{41.166.72.86:1750, 136.151.235.67:80}[20%]&lt;BR/&gt;{41.166.72.86:2910, 136.151.235.67:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (21.4286%)&lt;BR/&gt; 0: (21.4286%)&lt;BR/&gt; 80: (17.8571%)&lt;BR/&gt; 2910: (10.7143%)&lt;BR/&gt; 2618: (10.7143%)&gt;];
}
2822--6966[label="1;5pkt 5fpkt"];
2822--9747[label="1;4pkt 4fpkt"];
6966--9747[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.166.72.86" src_port="2910"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.166.72.86" src_port="1750"/>
      <filter dst_ip="173.138.11.220" dst_port="445" src_ip="41.166.72.86" src_port="2618"/>
      <filter dst_ip="141.85.73.186" src_ip="41.166.72.86"/>
      <filter dst_ip="155.148.245.22" dst_port="445" src_ip="41.166.72.86" src_port="1265"/>
    </slice>
    <from sec="1083733457" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.74.86"/>
    </slice>
    <from sec="1083733537" usec="0"/>
    <to sec="1083733619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2073{
style=filled;
color=gray75;
2824[label="93.185.83.86;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6968[label="93.185.83.86;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2073[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.185.83.86:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48407: (8.33333%)&lt;BR/&gt; 46379: (8.33333%)&lt;BR/&gt; 38439: (8.33333%)&lt;BR/&gt; 33896: (8.33333%)&gt;];
}
2824--6968[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="93.185.83.86"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083733976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.199.85.86"/>
    </slice>
    <from sec="1083733373" usec="0"/>
    <to sec="1083733518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.35.97.86"/>
    </slice>
    <from sec="1083733453" usec="0"/>
    <to sec="1083733687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.14.182.86"/>
    </slice>
    <from sec="1083733664" usec="0"/>
    <to sec="1083733728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2077{
style=filled;
color=gray75;
2835[label="155.148.198.86;29pkt 29fpkt", shape=pentagon, color=darkviolet];
6975[label="155.148.198.86;28pkt 28fpkt", shape=invtriangle, color=brown];
stat2077[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.198.86:*, 44.212.5.51:80}[51.7241%]&lt;BR/&gt;{155.148.198.86:*, 44.212.53.108:80}[48.2759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3273: (1.75439%)&lt;BR/&gt; 3271: (1.75439%)&lt;BR/&gt; 3269: (1.75439%)&lt;BR/&gt; 3267: (1.75439%)&gt;];
}
2835--6975[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="44.212.5.51" dst_port="80" src_ip="155.148.198.86"/>
      <filter dst_ip="44.212.53.108" dst_port="80" src_ip="155.148.198.86"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.1.226.86"/>
    </slice>
    <from sec="1083733915" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.14.32.87"/>
    </slice>
    <from sec="1083733886" usec="0"/>
    <to sec="1083733998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.17.50.87"/>
    </slice>
    <from sec="1083733868" usec="0"/>
    <to sec="1083734038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.1.57.87"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083733334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2082{
style=filled;
color=gray75;
2851[label="213.101.101.87;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6986[label="213.101.101.87;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2082[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.101.87:80, 209.29.138.126:2339}[50%]&lt;BR/&gt;{213.101.101.87:80, 209.29.138.127:3278}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3278: (25%)&lt;BR/&gt; 2339: (25%)&gt;];
}
2851--6986[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" dst_port="3278" src_ip="213.101.101.87" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="2339" src_ip="213.101.101.87" src_port="80"/>
    </slice>
    <from sec="1083733255" usec="0"/>
    <to sec="1083733399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.20.123.87"/>
    </slice>
    <from sec="1083733328" usec="0"/>
    <to sec="1083733551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.41.155.87"/>
    </slice>
    <from sec="1083733973" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.140.156.87"/>
    </slice>
    <from sec="1083733841" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2086{
style=filled;
color=gray75;
2862[label="196.6.205.87;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6994[label="196.6.205.87;3pkt 3fpkt", shape=invtriangle, color=brown];
9766[label="196.6.205.87;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2086[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.6.205.87:58706, 168.127.160.61:3127}[33.3333%]&lt;BR/&gt;{196.6.205.87:59805, 155.211.23.176:80}[33.3333%]&lt;BR/&gt;{196.6.205.87:44782, 155.211.158.201:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 59805: (16.6667%)&lt;BR/&gt; 58706: (16.6667%)&lt;BR/&gt; 44782: (16.6667%)&lt;BR/&gt; 3127: (16.6667%)&gt;];
}
2862--6994[label="1;3pkt 3fpkt"];
2862--9766[label="1;3pkt 3fpkt"];
6994--9766[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.158.201" dst_port="80" src_ip="196.6.205.87" src_port="44782"/>
      <filter dst_ip="155.211.23.176" dst_port="80" src_ip="196.6.205.87" src_port="59805"/>
      <filter dst_ip="168.127.160.61" dst_port="3127" src_ip="196.6.205.87" src_port="58706"/>
    </slice>
    <from sec="1083733406" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.243.16.88"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.73.88"/>
    </slice>
    <from sec="1083733433" usec="0"/>
    <to sec="1083733656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.95.132.88"/>
    </slice>
    <from sec="1083733772" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2090{
style=filled;
color=gray75;
2876[label="168.127.137.88;149pkt 149fpkt", shape=pentagon, color=darkviolet];
7003[label="168.127.137.88;149pkt 149fpkt", shape=invtriangle, color=brown];
stat2090[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.137.88:4598, *:53}[85.2349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.9664%)&lt;BR/&gt; 4598: (42.6174%)&lt;BR/&gt; 0: (10.0671%)&lt;BR/&gt; 4918: (0.33557%)&lt;BR/&gt; 1934: (0.33557%)&gt;];
}
2876--7003[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="168.127.137.88" src_port="4598"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2091{
style=filled;
color=gray75;
2878[label="193.188.166.88;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7005[label="193.188.166.88;5pkt 5fpkt", shape=invtriangle, color=brown];
9773[label="193.188.166.88;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2091[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.188.166.88:2457, 219.197.109.92:2745}[20%]&lt;BR/&gt;{193.188.166.88:2459, 219.197.109.92:1025}[20%]&lt;BR/&gt;{193.188.166.88:2461, 219.197.109.92:3127}[20%]&lt;BR/&gt;{193.188.166.88:2462, 219.197.109.92:6129}[20%]&lt;BR/&gt;{193.188.166.88:2464, 219.197.109.92:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (10%)&lt;BR/&gt; 3127: (10%)&lt;BR/&gt; 2745: (10%)&lt;BR/&gt; 2464: (10%)&lt;BR/&gt; 2462: (10%)&gt;];
}
2878--7005[label="1;5pkt 5fpkt"];
2878--9773[label="1;5pkt 5fpkt"];
7005--9773[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="219.197.109.92" dst_port="80" src_ip="193.188.166.88" src_port="2464"/>
      <filter dst_ip="219.197.109.92" dst_port="6129" src_ip="193.188.166.88" src_port="2462"/>
      <filter dst_ip="219.197.109.92" dst_port="3127" src_ip="193.188.166.88" src_port="2461"/>
      <filter dst_ip="219.197.109.92" dst_port="1025" src_ip="193.188.166.88" src_port="2459"/>
      <filter dst_ip="219.197.109.92" dst_port="2745" src_ip="193.188.166.88" src_port="2457"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083733955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="159.70.169.88"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.84.175.88"/>
    </slice>
    <from sec="1083734014" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,053,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2094{
style=filled;
color=gray75;
2881[label="168.76.180.88;38pkt 38fpkt", shape=pentagon, color=darkviolet];
7008[label="168.76.180.88;37pkt 37fpkt", shape=invtriangle, color=brown];
9775[label="168.76.180.88;37pkt 37fpkt", shape=invhouse, color=bisque];
stat2094[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.180.88:*, *:80}[26.3158%]&lt;BR/&gt;{168.76.180.88:*, *:2745}[26.3158%]&lt;BR/&gt;{168.76.180.88:*, *:1433}[23.6842%]&lt;BR/&gt;{168.76.180.88:*, *:6129}[23.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (13.3929%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 6129: (12.0536%)&lt;BR/&gt; 1433: (12.0536%)&lt;BR/&gt; 3717: (1.33929%)&gt;];
}
2881--7008[label="1;37pkt 37fpkt"];
2881--9775[label="1;37pkt 37fpkt"];
7008--9775[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="168.76.180.88"/>
      <filter dst_port="80" src_ip="168.76.180.88"/>
      <filter dst_port="6129" src_ip="168.76.180.88"/>
      <filter dst_port="1433" src_ip="168.76.180.88"/>
    </slice>
    <from sec="1083733738" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2095{
style=filled;
color=gray75;
2882[label="44.148.198.88;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7009[label="44.148.198.88;2pkt 2fpkt", shape=invtriangle, color=brown];
9776[label="44.148.198.88;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2095[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.148.198.88:80, 209.29.138.10:44599}[33.3333%]&lt;BR/&gt;{44.148.198.88:80, 209.29.138.10:44728}[33.3333%]&lt;BR/&gt;{44.148.198.88:80, 209.29.138.10:44780}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44780: (21.4286%)&lt;BR/&gt; 44728: (21.4286%)&lt;BR/&gt; 44599: (7.14286%)&gt;];
}
2882--7009[label="1;2pkt 2fpkt"];
2882--9776[label="1;2pkt 2fpkt"];
7009--9776[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="44780" src_ip="44.148.198.88" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="44728" src_ip="44.148.198.88" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="44599" src_ip="44.148.198.88" src_port="80"/>
    </slice>
    <from sec="1083733440" usec="0"/>
    <to sec="1083733540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.45.212.88"/>
    </slice>
    <from sec="1083733428" usec="0"/>
    <to sec="1083733581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2097{
style=filled;
color=gray75;
2885[label="141.22.234.88;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7011[label="141.22.234.88;18pkt 18fpkt", shape=invtriangle, color=brown];
9778[label="141.22.234.88;19pkt 19fpkt", shape=invhouse, color=bisque];
stat2097[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.234.88:*, 201.221.202.124:1080}[78.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (40.1786%)&lt;BR/&gt; 1719: (5.35714%)&lt;BR/&gt; 7410: (2.67857%)&lt;BR/&gt; 3647: (2.67857%)&lt;BR/&gt; 3646: (2.67857%)&gt;];
}
2885--7011[label="1;18pkt 18fpkt"];
2885--9778[label="1;19pkt 19fpkt"];
7011--9778[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="201.221.202.124" dst_port="1080" src_ip="141.22.234.88"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.169.66.89"/>
    </slice>
    <from sec="1083734032" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.82.186.89"/>
    </slice>
    <from sec="1083733967" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.89.193.89"/>
    </slice>
    <from sec="1083733398" usec="0"/>
    <to sec="1083733454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.51.225.89"/>
    </slice>
    <from sec="1083733246" usec="0"/>
    <to sec="1083733385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2102{
style=filled;
color=gray75;
2904[label="142.45.230.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7022[label="142.45.230.89;2pkt 2fpkt", shape=invtriangle, color=brown];
9784[label="142.45.230.89;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2102[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.45.230.89:6881, 208.96.50.84:57821}[50%]&lt;BR/&gt;{142.45.230.89:6881, 208.96.50.84:58598}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 58598: (25%)&lt;BR/&gt; 57821: (25%)&gt;];
}
2904--7022[label="1;2pkt 2fpkt"];
2904--9784[label="1;2pkt 2fpkt"];
7022--9784[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58598" src_ip="142.45.230.89" src_port="6881"/>
      <filter dst_ip="208.96.50.84" dst_port="57821" src_ip="142.45.230.89" src_port="6881"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2103{
style=filled;
color=gray75;
2906[label="109.214.236.89;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7024[label="109.214.236.89;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2103[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.214.236.89:*, *:445}[54.5455%]&lt;BR/&gt;{109.214.236.89:0, *:0}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.2727%)&lt;BR/&gt; 0: (27.2727%)&lt;BR/&gt; 80: (9.09091%)&lt;BR/&gt; 4128: (4.54545%)&lt;BR/&gt; 3944: (4.54545%)&gt;];
}
2906--7024[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.214.236.89"/>
      <filter src_ip="109.214.236.89"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2104{
style=filled;
color=gray75;
2909[label="194.69.78.90;245pkt 245fpkt", shape=pentagon, color=darkviolet];
7026[label="194.69.78.90;245pkt 245fpkt", shape=invtriangle, color=brown];
9787[label="194.69.78.90;244pkt 244fpkt", shape=invhouse, color=bisque];
stat2104[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.69.78.90:10007, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10007: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2909--7026[label="1;245pkt 245fpkt"];
2909--9787[label="1;244pkt 244fpkt"];
7026--9787[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.69.78.90" src_port="10007"/>
    </slice>
    <from sec="1083733993" usec="0"/>
    <to sec="1083734006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.246.143.90"/>
    </slice>
    <from sec="1083733709" usec="0"/>
    <to sec="1083733841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.120.157.90"/>
    </slice>
    <from sec="1083733938" usec="0"/>
    <to sec="1083734030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.218.168.90"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2108{
style=filled;
color=gray75;
2919[label="209.217.200.90;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7034[label="209.217.200.90;18pkt 18fpkt", shape=invtriangle, color=brown];
stat2108[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.217.200.90:80, 209.29.138.126:*}[55.5556%]&lt;BR/&gt;{209.217.200.90:80, 209.29.138.127:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4944: (2.77778%)&lt;BR/&gt; 4917: (2.77778%)&lt;BR/&gt; 4901: (2.77778%)&lt;BR/&gt; 4888: (2.77778%)&gt;];
}
2919--7034[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="209.217.200.90" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="209.217.200.90" src_port="80"/>
    </slice>
    <from sec="1083733275" usec="0"/>
    <to sec="1083733970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.50.220.90"/>
    </slice>
    <from sec="1083733508" usec="0"/>
    <to sec="1083733650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2110{
style=filled;
color=gray75;
2922[label="173.138.231.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7038[label="173.138.231.90;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2110[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.231.90:0, 136.128.164.145:0}[50%]&lt;BR/&gt;{173.138.231.90:3028, 198.222.100.213:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 5050: (25%)&lt;BR/&gt; 3028: (25%)&gt;];
}
2922--7038[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.213" dst_port="5050" src_ip="173.138.231.90" src_port="3028"/>
      <filter dst_ip="136.128.164.145" src_ip="173.138.231.90"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2111{
style=filled;
color=gray75;
2923[label="45.213.245.90;243pkt 243fpkt", shape=pentagon, color=darkviolet];
7039[label="45.213.245.90;243pkt 243fpkt", shape=invtriangle, color=brown];
stat2111[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.213.245.90:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4859: (0.205761%)&lt;BR/&gt; 4858: (0.205761%)&lt;BR/&gt; 4857: (0.205761%)&lt;BR/&gt; 4856: (0.205761%)&gt;];
}
2923--7039[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="45.213.245.90"/>
    </slice>
    <from sec="1083733386" usec="0"/>
    <to sec="1083733409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2112{
style=filled;
color=gray75;
2927[label="208.96.52.91;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7041[label="208.96.52.91;23pkt 23fpkt", shape=invtriangle, color=brown];
9796[label="208.96.52.91;23pkt 23fpkt", shape=invhouse, color=bisque];
stat2112[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.52.91:4430, *:*}[69.5652%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4430: (34.7826%)&lt;BR/&gt; 774: (4.34783%)&lt;BR/&gt; 62710: (2.17391%)&lt;BR/&gt; 50316: (2.17391%)&lt;BR/&gt; 24264: (2.17391%)&gt;];
}
2927--7041[label="1;23pkt 23fpkt"];
2927--9796[label="1;23pkt 23fpkt"];
7041--9796[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.52.91" src_port="4430"/>
    </slice>
    <from sec="1083733250" usec="0"/>
    <to sec="1083734064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2113{
style=filled;
color=gray75;
2930[label="155.148.77.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7043[label="155.148.77.91;1pkt 1fpkt", shape=invtriangle, color=brown];
9798[label="155.148.77.91;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2113[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.77.91:49751, 198.54.135.128:80}[50%]&lt;BR/&gt;{155.148.77.91:49686, 215.47.20.218:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49751: (37.5%)&lt;BR/&gt; 49686: (12.5%)&gt;];
}
2930--7043[label="1;1pkt 1fpkt"];
2930--9798[label="1;1pkt 1fpkt"];
7043--9798[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.47.20.218" dst_port="80" src_ip="155.148.77.91" src_port="49686"/>
      <filter dst_ip="198.54.135.128" dst_port="80" src_ip="155.148.77.91" src_port="49751"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2114{
style=filled;
color=gray75;
2932[label="198.198.95.91;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7044[label="198.198.95.91;7pkt 7fpkt", shape=invtriangle, color=brown];
9799[label="198.198.95.91;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2114[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.95.91:80, 209.29.138.126:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4294: (7.5%)&lt;BR/&gt; 3464: (7.5%)&lt;BR/&gt; 2559: (7.5%)&lt;BR/&gt; 2415: (7.5%)&gt;];
}
2932--7044[label="1;7pkt 7fpkt"];
2932--9799[label="1;6pkt 6fpkt"];
7044--9799[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.198.95.91" src_port="80"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083733750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.161.91"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.25.189.91"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083733795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.137.228.91"/>
    </slice>
    <from sec="1083733298" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.238.57.92"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.213.64.92"/>
    </slice>
    <from sec="1083733811" usec="0"/>
    <to sec="1083733955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.47.161.92"/>
    </slice>
    <from sec="1083733390" usec="0"/>
    <to sec="1083733580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2121{
style=filled;
color=gray75;
2957[label="46.202.213.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7065[label="46.202.213.92;2pkt 2fpkt", shape=invtriangle, color=brown];
9810[label="46.202.213.92;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2121[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.202.213.92:80, 208.96.52.21:48045}[50%]&lt;BR/&gt;{46.202.213.92:80, 208.96.52.21:48047}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48047: (25%)&lt;BR/&gt; 48045: (25%)&gt;];
}
2957--7065[label="1;2pkt 2fpkt"];
2957--9810[label="1;2pkt 2fpkt"];
7065--9810[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.52.21" dst_port="48047" src_ip="46.202.213.92" src_port="80"/>
      <filter dst_ip="208.96.52.21" dst_port="48045" src_ip="46.202.213.92" src_port="80"/>
    </slice>
    <from sec="1083733682" usec="0"/>
    <to sec="1083733869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.7.230.92"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2123{
style=filled;
color=gray75;
2962[label="198.198.18.93;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7068[label="198.198.18.93;10pkt 10fpkt", shape=invtriangle, color=brown];
9813[label="198.198.18.93;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2123[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.18.93:80, 209.29.138.127:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5000: (4.83871%)&lt;BR/&gt; 4272: (4.83871%)&lt;BR/&gt; 4198: (4.83871%)&lt;BR/&gt; 4197: (4.83871%)&gt;];
}
2962--7068[label="1;10pkt 10fpkt"];
2962--9813[label="1;10pkt 10fpkt"];
7068--9813[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="198.198.18.93" src_port="80"/>
    </slice>
    <from sec="1083733329" usec="0"/>
    <to sec="1083733989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.142.52.93"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083733314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.188.52.93"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2126{
style=filled;
color=gray75;
2972[label="210.98.132.93;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7076[label="210.98.132.93;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2126[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.98.132.93:*, 136.151.159.91:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60538: (4.54545%)&lt;BR/&gt; 59605: (4.54545%)&lt;BR/&gt; 59232: (4.54545%)&lt;BR/&gt; 58481: (4.54545%)&gt;];
}
2972--7076[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.159.91" dst_port="80" src_ip="210.98.132.93"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.176.171.93"/>
    </slice>
    <from sec="1083733762" usec="0"/>
    <to sec="1083733860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2128{
style=filled;
color=gray75;
2977[label="93.217.204.93;130pkt 130fpkt", shape=pentagon, color=darkviolet];
7080[label="93.217.204.93;130pkt 130fpkt", shape=invtriangle, color=brown];
9819[label="93.217.204.93;129pkt 129fpkt", shape=invhouse, color=bisque];
stat2128[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.217.204.93:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61391: (0.385604%)&lt;BR/&gt; 58458: (0.385604%)&lt;BR/&gt; 57137: (0.385604%)&lt;BR/&gt; 56548: (0.385604%)&gt;];
}
2977--7080[label="1;130pkt 130fpkt"];
2977--9819[label="1;129pkt 129fpkt"];
7080--9819[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter src_ip="93.217.204.93" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2129{
style=filled;
color=gray75;
66[label="209.29.136.89;s;26433pkt 26433fpkt", shape=diamond, color=yellow];
107[label="40.1.13.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
158[label="109.164.42.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
162[label="109.51.8.234;d;1pkt 1fpkt", shape=diamond, color=yellow];
173[label="217.24.192.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
197[label="215.18.55.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
243[label="109.0.8.115;d;2pkt 2fpkt", shape=diamond, color=yellow];
247[label="93.234.94.243;d;69pkt 69fpkt", shape=diamond, color=yellow];
329[label="109.115.215.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
352[label="41.58.22.47;d;2pkt 2fpkt", shape=diamond, color=yellow];
389[label="54.7.230.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
516[label="46.246.191.187;d;15pkt 15fpkt", shape=diamond, color=yellow];
563[label="136.150.40.207;s;113pkt 113fpkt", shape=diamond, color=yellow];
581[label="173.138.162.40;s;28pkt 28fpkt", shape=diamond, color=yellow];
582[label="46.71.197.42;d;11pkt 11fpkt", shape=diamond, color=yellow];
587[label="173.138.170.250;s;50pkt 50fpkt", shape=diamond, color=yellow];
597[label="198.222.100.208;d;11pkt 11fpkt", shape=diamond, color=yellow];
660[label="93.244.222.250;d;124pkt 124fpkt", shape=diamond, color=yellow];
692[label="109.173.86.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
694[label="210.107.154.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
728[label="45.143.70.65;d;2pkt 2fpkt", shape=diamond, color=yellow];
731[label="204.124.58.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
738[label="220.167.134.37;d;39pkt 39fpkt", shape=diamond, color=yellow];
776[label="94.230.22.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
829[label="205.51.216.192;d;2pkt 2fpkt", shape=diamond, color=yellow];
1007[label="173.138.149.0;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1243[label="173.138.129.10;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1903[label="173.138.162.40;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2048[label="173.138.216.47;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2894[label="209.29.136.89;28722pkt 28722fpkt", shape=pentagon, color=darkviolet];
4089[label="173.138.145.155;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4966[label="136.150.40.207;117pkt 117fpkt", shape=pentagon, color=darkviolet];
5699[label="173.138.149.0;18pkt 18fpkt", shape=invtriangle, color=brown];
6324[label="173.138.162.40;30pkt 30fpkt", shape=invtriangle, color=brown];
7015[label="209.29.136.89;28722pkt 28722fpkt", shape=invtriangle, color=brown];
7081[label="173.138.209.93;1pkt 1fpkt", shape=invtriangle, color=brown];
8467[label="136.150.40.207;117pkt 117fpkt", shape=invtriangle, color=brown];
8983[label="173.138.149.0;18pkt 18fpkt", shape=invhouse, color=bisque];
9379[label="173.138.162.40;29pkt 29fpkt", shape=invhouse, color=bisque];
9781[label="209.29.136.89;28721pkt 28721fpkt", shape=invhouse, color=bisque];
10669[label="136.150.40.207;116pkt 116fpkt", shape=invhouse, color=bisque];
stat2129[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.136.89:*, *:*}[99.1166%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16072: (3.38556%)&lt;BR/&gt; 80: (1.35211%)&lt;BR/&gt; 15781: (1.29974%)&lt;BR/&gt; 2500: (0.886444%)&lt;BR/&gt; 6348: (0.882482%)&gt;];
}
66--87[label="0.0151515;1pkt 1fpkt"];
66--162[label="1;1pkt 1fpkt"];
66--173[label="1;1pkt 1fpkt"];
66--196[label="0.0152672;4pkt 4fpkt"];
66--197[label="1;1pkt 1fpkt"];
66--205[label="0.0118694;4pkt 4fpkt"];
66--243[label="1;2pkt 2fpkt"];
66--247[label="1;69pkt 69fpkt"];
66--352[label="1;2pkt 2fpkt"];
66--389[label="1;1pkt 1fpkt"];
66--499[label="0.0340909;3pkt 3fpkt"];
66--516[label="1;15pkt 15fpkt"];
66--597[label="0.0909091;1pkt 1fpkt"];
66--660[label="1;124pkt 124fpkt"];
66--694[label="1;1pkt 1fpkt"];
66--708[label="0.0185185;2pkt 2fpkt"];
66--728[label="1;2pkt 2fpkt"];
66--738[label="1;39pkt 39fpkt"];
66--765[label="0.00411523;3pkt 3fpkt"];
66--771[label="0.00324675;2pkt 2fpkt"];
66--785[label="0.0142857;1pkt 1fpkt"];
66--823[label="0.010989;1pkt 1fpkt"];
66--829[label="1;2pkt 2fpkt"];
66--979[label="0.00207469;1pkt 1fpkt"];
66--982[label="0.00174025;46pkt 46fpkt"];
66--2894[label="1;26433pkt 26433fpkt"];
66--7015[label="1;26433pkt 26433fpkt"];
66--9781[label="0.999962;26432pkt 26432fpkt"];
107--563[label="1;1pkt 1fpkt"];
107--4966[label="1;1pkt 1fpkt"];
107--8467[label="1;1pkt 1fpkt"];
107--10669[label="1;1pkt 1fpkt"];
158--563[label="1;1pkt 1fpkt"];
158--4966[label="1;1pkt 1fpkt"];
158--8467[label="1;1pkt 1fpkt"];
158--10669[label="1;1pkt 1fpkt"];
162--2894[label="1;1pkt 1fpkt"];
162--7015[label="1;1pkt 1fpkt"];
162--9781[label="1;1pkt 1fpkt"];
173--2894[label="1;1pkt 1fpkt"];
173--7015[label="1;1pkt 1fpkt"];
173--9781[label="1;1pkt 1fpkt"];
197--2894[label="1;1pkt 1fpkt"];
197--7015[label="1;1pkt 1fpkt"];
197--9781[label="1;1pkt 1fpkt"];
243--2894[label="1;2pkt 2fpkt"];
243--7015[label="1;2pkt 2fpkt"];
243--9781[label="1;2pkt 2fpkt"];
247--2894[label="1;69pkt 69fpkt"];
247--7015[label="1;69pkt 69fpkt"];
247--9781[label="1;69pkt 69fpkt"];
329--563[label="1;1pkt 1fpkt"];
329--4966[label="1;1pkt 1fpkt"];
329--8467[label="1;1pkt 1fpkt"];
329--10669[label="1;1pkt 1fpkt"];
352--2894[label="1;2pkt 2fpkt"];
352--7015[label="1;2pkt 2fpkt"];
352--9781[label="1;2pkt 2fpkt"];
389--2894[label="1;1pkt 1fpkt"];
389--7015[label="1;1pkt 1fpkt"];
389--9781[label="1;1pkt 1fpkt"];
516--2894[label="1;15pkt 15fpkt"];
516--7015[label="1;15pkt 15fpkt"];
516--9781[label="1;15pkt 15fpkt"];
563--597[label="0.0909091;1pkt 1fpkt"];
563--692[label="1;1pkt 1fpkt"];
563--731[label="1;1pkt 1fpkt"];
563--776[label="1;1pkt 1fpkt"];
563--4966[label="1;113pkt 113fpkt"];
563--8467[label="1;113pkt 113fpkt"];
563--10669[label="0.99115;112pkt 112fpkt"];
581--582[label="0.181818;2pkt 2fpkt"];
581--1903[label="1;28pkt 28fpkt"];
581--6324[label="1;28pkt 28fpkt"];
581--9379[label="0.964286;27pkt 27fpkt"];
582--587[label="0.0909091;1pkt 1fpkt"];
582--1007[label="0.0909091;1pkt 1fpkt"];
582--1243[label="0.0909091;1pkt 1fpkt"];
582--1903[label="0.181818;2pkt 2fpkt"];
582--2048[label="0.25;1pkt 1fpkt"];
582--3216[label="0.181818;2pkt 2fpkt"];
582--5699[label="0.0909091;1pkt 1fpkt"];
582--6324[label="0.181818;2pkt 2fpkt"];
582--8983[label="0.0909091;1pkt 1fpkt"];
582--9379[label="0.0909091;1pkt 1fpkt"];
597--1243[label="0.0909091;1pkt 1fpkt"];
597--2894[label="0.0909091;1pkt 1fpkt"];
597--4089[label="0.125;1pkt 1fpkt"];
597--4966[label="0.0909091;1pkt 1fpkt"];
597--7015[label="0.0909091;1pkt 1fpkt"];
597--7081[label="1;1pkt 1fpkt"];
597--8467[label="0.0909091;1pkt 1fpkt"];
597--9781[label="0.0909091;1pkt 1fpkt"];
597--10669[label="0.0909091;1pkt 1fpkt"];
660--2894[label="1;124pkt 124fpkt"];
660--7015[label="1;124pkt 124fpkt"];
660--9781[label="1;124pkt 124fpkt"];
692--4966[label="1;1pkt 1fpkt"];
692--8467[label="1;1pkt 1fpkt"];
692--10669[label="1;1pkt 1fpkt"];
694--2894[label="1;1pkt 1fpkt"];
694--7015[label="1;1pkt 1fpkt"];
694--9781[label="1;1pkt 1fpkt"];
728--2894[label="1;2pkt 2fpkt"];
728--7015[label="1;2pkt 2fpkt"];
728--9781[label="1;2pkt 2fpkt"];
731--4966[label="1;1pkt 1fpkt"];
731--8467[label="1;1pkt 1fpkt"];
731--10669[label="1;1pkt 1fpkt"];
738--982[label="0.0512821;2pkt 2fpkt"];
738--2894[label="1;39pkt 39fpkt"];
738--7015[label="1;39pkt 39fpkt"];
738--9781[label="1;39pkt 39fpkt"];
776--4966[label="1;1pkt 1fpkt"];
776--8467[label="1;1pkt 1fpkt"];
776--10669[label="1;1pkt 1fpkt"];
829--2894[label="1;2pkt 2fpkt"];
829--7015[label="1;2pkt 2fpkt"];
829--9781[label="1;2pkt 2fpkt"];
1007--5699[label="1;18pkt 18fpkt"];
1007--8983[label="1;18pkt 18fpkt"];
1903--6324[label="1;30pkt 30fpkt"];
1903--9379[label="1;29pkt 29fpkt"];
2894--7015[label="1;28722pkt 28722fpkt"];
2894--9781[label="1;28721pkt 28721fpkt"];
4966--8467[label="1;117pkt 117fpkt"];
4966--10669[label="1;116pkt 116fpkt"];
5699--8983[label="1;18pkt 18fpkt"];
6324--9379[label="1;29pkt 29fpkt"];
7015--9781[label="1;28721pkt 28721fpkt"];
8467--10669[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.136.89"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2130{
style=filled;
color=gray75;
2981[label="46.162.9.94;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7084[label="46.162.9.94;12pkt 12fpkt", shape=invtriangle, color=brown];
9823[label="46.162.9.94;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2130[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.162.9.94:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44469: (4.16667%)&lt;BR/&gt; 44398: (4.16667%)&lt;BR/&gt; 44296: (4.16667%)&lt;BR/&gt; 44166: (4.16667%)&gt;];
}
2981--7084[label="1;12pkt 12fpkt"];
2981--9823[label="1;12pkt 12fpkt"];
7084--9823[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="46.162.9.94" src_port="80"/>
    </slice>
    <from sec="1083733343" usec="0"/>
    <to sec="1083733488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.151.48.94"/>
    </slice>
    <from sec="1083733618" usec="0"/>
    <to sec="1083733677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2132{
style=filled;
color=gray75;
2987[label="47.106.74.94;75pkt 75fpkt", shape=pentagon, color=darkviolet];
7087[label="47.106.74.94;75pkt 75fpkt", shape=invtriangle, color=brown];
stat2132[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.106.74.94:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4402: (1.33333%)&lt;BR/&gt; 4982: (0.666667%)&lt;BR/&gt; 4969: (0.666667%)&lt;BR/&gt; 4924: (0.666667%)&gt;];
}
2987--7087[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="47.106.74.94"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.82.153.94"/>
    </slice>
    <from sec="1083733796" usec="0"/>
    <to sec="1083733859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2134{
style=filled;
color=gray75;
2993[label="215.107.213.94;90pkt 90fpkt", shape=pentagon, color=darkviolet];
7092[label="215.107.213.94;90pkt 90fpkt", shape=invtriangle, color=brown];
stat2134[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.107.213.94:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60515: (0.555556%)&lt;BR/&gt; 60466: (0.555556%)&lt;BR/&gt; 60465: (0.555556%)&lt;BR/&gt; 60464: (0.555556%)&gt;];
}
2993--7092[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="215.107.213.94" src_port="80"/>
    </slice>
    <from sec="1083733865" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.123.52.95"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083733249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2136{
style=filled;
color=gray75;
2998[label="198.202.61.95;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7095[label="198.202.61.95;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2136[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.202.61.95:80, 155.148.136.131:2592}[25%]&lt;BR/&gt;{198.202.61.95:80, 155.148.136.131:2603}[25%]&lt;BR/&gt;{198.202.61.95:80, 155.148.136.131:2606}[25%]&lt;BR/&gt;{198.202.61.95:80, 155.148.136.131:2608}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2608: (12.5%)&lt;BR/&gt; 2606: (12.5%)&lt;BR/&gt; 2603: (12.5%)&lt;BR/&gt; 2592: (12.5%)&gt;];
}
2998--7095[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.136.131" dst_port="2608" src_ip="198.202.61.95" src_port="80"/>
      <filter dst_ip="155.148.136.131" dst_port="2606" src_ip="198.202.61.95" src_port="80"/>
      <filter dst_ip="155.148.136.131" dst_port="2603" src_ip="198.202.61.95" src_port="80"/>
      <filter dst_ip="155.148.136.131" dst_port="2592" src_ip="198.202.61.95" src_port="80"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.40.69.95"/>
    </slice>
    <from sec="1083733436" usec="0"/>
    <to sec="1083733499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.64.69.95"/>
    </slice>
    <from sec="1083733755" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2139{
style=filled;
color=gray75;
3004[label="54.212.96.95;112pkt 112fpkt", shape=pentagon, color=darkviolet];
7100[label="54.212.96.95;112pkt 112fpkt", shape=invtriangle, color=brown];
stat2139[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.212.96.95:*, *:1080}[33.9286%]&lt;BR/&gt;{54.212.96.95:*, *:3127}[33.0357%]&lt;BR/&gt;{54.212.96.95:*, *:3128}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (16.9643%)&lt;BR/&gt; 3128: (16.5179%)&lt;BR/&gt; 3127: (16.5179%)&lt;BR/&gt; 3169: (0.892857%)&lt;BR/&gt; 1405: (0.892857%)&gt;];
}
3004--7100[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="54.212.96.95"/>
      <filter dst_port="3128" src_ip="54.212.96.95"/>
      <filter dst_port="3127" src_ip="54.212.96.95"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2140{
style=filled;
color=gray75;
3005[label="196.20.102.95;185pkt 185fpkt", shape=pentagon, color=darkviolet];
7101[label="196.20.102.95;185pkt 185fpkt", shape=invtriangle, color=brown];
stat2140[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.20.102.95:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3005--7101[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.20.102.95" src_port="1026"/>
    </slice>
    <from sec="1083733968" usec="0"/>
    <to sec="1083733998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2141{
style=filled;
color=gray75;
3007[label="93.32.129.95;209pkt 209fpkt", shape=pentagon, color=darkviolet];
7102[label="93.32.129.95;208pkt 208fpkt", shape=invtriangle, color=brown];
9833[label="93.32.129.95;208pkt 208fpkt", shape=invhouse, color=bisque];
stat2141[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.32.129.95:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3007--7102[label="1;208pkt 208fpkt"];
3007--9833[label="1;208pkt 208fpkt"];
7102--9833[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="93.32.129.95" src_port="1029"/>
    </slice>
    <from sec="1083733278" usec="0"/>
    <to sec="1083733312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2142{
style=filled;
color=gray75;
3012[label="208.119.184.95;118pkt 118fpkt", shape=pentagon, color=darkviolet];
7105[label="208.119.184.95;117pkt 117fpkt", shape=invtriangle, color=brown];
stat2142[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.119.184.95:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3012--7105[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.119.184.95" src_port="1037"/>
    </slice>
    <from sec="1083733700" usec="0"/>
    <to sec="1083733741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2143{
style=filled;
color=gray75;
3016[label="155.16.200.95;77pkt 77fpkt", shape=pentagon, color=darkviolet];
7108[label="155.16.200.95;76pkt 76fpkt", shape=invtriangle, color=brown];
9835[label="155.16.200.95;77pkt 77fpkt", shape=invhouse, color=bisque];
stat2143[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.16.200.95:*, *:445}[32.4675%]&lt;BR/&gt;{155.16.200.95:*, *:139}[24.6753%]&lt;BR/&gt;{155.16.200.95:*, *:135}[22.0779%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (16.3043%)&lt;BR/&gt; 139: (12.3913%)&lt;BR/&gt; 135: (10.8696%)&lt;BR/&gt; 1433: (5.21739%)&lt;BR/&gt; 80: (5.21739%)&gt;];
}
3016--7108[label="1;76pkt 76fpkt"];
3016--9835[label="1;77pkt 77fpkt"];
7108--9835[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="155.16.200.95"/>
      <filter dst_port="139" src_ip="155.16.200.95"/>
      <filter dst_port="135" src_ip="155.16.200.95"/>
    </slice>
    <from sec="1083733264" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2144{
style=filled;
color=gray75;
3023[label="192.228.54.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7113[label="192.228.54.96;2pkt 2fpkt", shape=invtriangle, color=brown];
9836[label="192.228.54.96;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2144[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.228.54.96:15062, 155.148.8.202:3802}[33.3333%]&lt;BR/&gt;{192.228.54.96:15062, 155.148.8.202:3872}[33.3333%]&lt;BR/&gt;{192.228.54.96:15062, 155.148.8.202:3879}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15062: (50%)&lt;BR/&gt; 3879: (21.4286%)&lt;BR/&gt; 3872: (21.4286%)&lt;BR/&gt; 3802: (7.14286%)&gt;];
}
3023--7113[label="1;2pkt 2fpkt"];
3023--9836[label="1;2pkt 2fpkt"];
7113--9836[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.8.202" dst_port="3879" src_ip="192.228.54.96" src_port="15062"/>
      <filter dst_ip="155.148.8.202" dst_port="3872" src_ip="192.228.54.96" src_port="15062"/>
      <filter dst_ip="155.148.8.202" dst_port="3802" src_ip="192.228.54.96" src_port="15062"/>
    </slice>
    <from sec="1083733797" usec="0"/>
    <to sec="1083734000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.0.56.96"/>
    </slice>
    <from sec="1083733923" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2146{
style=filled;
color=gray75;
3026[label="199.144.81.96;112pkt 112fpkt", shape=pentagon, color=darkviolet];
7116[label="199.144.81.96;112pkt 112fpkt", shape=invtriangle, color=brown];
9837[label="199.144.81.96;112pkt 112fpkt", shape=invhouse, color=bisque];
stat2146[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.144.81.96:*, *:3127}[33.9286%]&lt;BR/&gt;{199.144.81.96:*, *:1080}[33.0357%]&lt;BR/&gt;{199.144.81.96:*, *:3128}[33.0357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.9643%)&lt;BR/&gt; 3127: (16.9643%)&lt;BR/&gt; 1080: (16.5179%)&lt;BR/&gt; 3667: (1.78571%)&lt;BR/&gt; 3514: (1.33929%)&gt;];
}
3026--7116[label="1;112pkt 112fpkt"];
3026--9837[label="1;112pkt 112fpkt"];
7116--9837[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="199.144.81.96"/>
      <filter dst_port="3128" src_ip="199.144.81.96"/>
      <filter dst_port="1080" src_ip="199.144.81.96"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2147{
style=filled;
color=gray75;
3030[label="209.29.136.96;39pkt 39fpkt", shape=pentagon, color=darkviolet];
7117[label="209.29.136.96;39pkt 39fpkt", shape=invtriangle, color=brown];
stat2147[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.136.96:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3030--7117[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.136.96"/>
    </slice>
    <from sec="1083733244" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2148{
style=filled;
color=gray75;
3031[label="40.119.136.96;84pkt 84fpkt", shape=pentagon, color=darkviolet];
7118[label="40.119.136.96;84pkt 84fpkt", shape=invtriangle, color=brown];
stat2148[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.119.136.96:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4995: (0.595238%)&lt;BR/&gt; 4949: (0.595238%)&lt;BR/&gt; 4948: (0.595238%)&lt;BR/&gt; 4906: (0.595238%)&gt;];
}
3031--7118[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="40.119.136.96"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.19.186.96"/>
    </slice>
    <from sec="1083733471" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.244.195.96"/>
    </slice>
    <from sec="1083733799" usec="0"/>
    <to sec="1083733896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.7.210.96"/>
    </slice>
    <from sec="1083733698" usec="0"/>
    <to sec="1083733850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2152{
style=filled;
color=gray75;
3049[label="46.134.90.97;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7126[label="46.134.90.97;7pkt 7fpkt", shape=invtriangle, color=brown];
9842[label="46.134.90.97;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2152[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.134.90.97:80, 209.29.138.10:*}[62.5%]&lt;BR/&gt;{46.134.90.97:80, 209.29.138.127:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55112: (6.81818%)&lt;BR/&gt; 54498: (6.81818%)&lt;BR/&gt; 44022: (6.81818%)&lt;BR/&gt; 42483: (6.81818%)&gt;];
}
3049--7126[label="1;7pkt 7fpkt"];
3049--9842[label="1;7pkt 7fpkt"];
7126--9842[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="46.134.90.97" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.134.90.97" src_port="80"/>
    </slice>
    <from sec="1083733269" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.221.95.97"/>
    </slice>
    <from sec="1083733455" usec="0"/>
    <to sec="1083733602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.134.99.97"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083733755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.19.107.97"/>
    </slice>
    <from sec="1083733698" usec="0"/>
    <to sec="1083733984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.20.138.97"/>
    </slice>
    <from sec="1083733933" usec="0"/>
    <to sec="1083734017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2157{
style=filled;
color=gray75;
3058[label="209.29.165.97;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7134[label="209.29.165.97;37pkt 37fpkt", shape=invtriangle, color=brown];
stat2157[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.165.97:*, *:25}[67.5676%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.8919%)&lt;BR/&gt; 113: (8.10811%)&lt;BR/&gt; 62272: (1.35135%)&lt;BR/&gt; 62271: (1.35135%)&lt;BR/&gt; 62270: (1.35135%)&gt;];
}
3058--7134[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="209.29.165.97"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2158{
style=filled;
color=gray75;
746[label="201.32.186.97;s;17pkt 17fpkt", shape=diamond, color=yellow];
3061[label="201.32.186.97;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7135[label="201.32.186.97;19pkt 19fpkt", shape=invtriangle, color=brown];
9848[label="201.32.186.97;19pkt 19fpkt", shape=invhouse, color=bisque];
stat2158[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.32.186.97:80, 155.148.137.32:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4397: (2.7027%)&lt;BR/&gt; 4391: (2.7027%)&lt;BR/&gt; 4380: (2.7027%)&lt;BR/&gt; 4356: (2.7027%)&gt;];
}
746--3061[label="0.941176;16pkt 16fpkt"];
746--7135[label="0.941176;16pkt 16fpkt"];
746--9848[label="0.941176;16pkt 16fpkt"];
3061--7135[label="1;19pkt 19fpkt"];
3061--9848[label="1;19pkt 19fpkt"];
7135--9848[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.137.32" src_ip="201.32.186.97" src_port="80"/>
    </slice>
    <from sec="1083733561" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2159{
style=filled;
color=gray75;
3068[label="44.52.39.98;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7139[label="44.52.39.98;19pkt 19fpkt", shape=invtriangle, color=brown];
9851[label="44.52.39.98;19pkt 19fpkt", shape=invhouse, color=bisque];
stat2159[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.52.39.98:80, 209.29.138.10:*}[52.6316%]&lt;BR/&gt;{44.52.39.98:80, 209.29.138.126:*}[26.3158%]&lt;BR/&gt;{44.52.39.98:80, 209.29.138.127:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60501: (2.63158%)&lt;BR/&gt; 60455: (2.63158%)&lt;BR/&gt; 60442: (2.63158%)&lt;BR/&gt; 60402: (2.63158%)&gt;];
}
3068--7139[label="1;19pkt 19fpkt"];
3068--9851[label="1;19pkt 19fpkt"];
7139--9851[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="44.52.39.98" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="44.52.39.98" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="44.52.39.98" src_port="80"/>
    </slice>
    <from sec="1083733388" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.121.67.98"/>
    </slice>
    <from sec="1083733373" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.156.77.98"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083733715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2162{
style=filled;
color=gray75;
3072[label="201.144.101.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7142[label="201.144.101.98;1pkt 1fpkt", shape=invtriangle, color=brown];
9853[label="201.144.101.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2162[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.144.101.98:2927, 136.151.235.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2927: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3072--7142[label="1;1pkt 1fpkt"];
3072--9853[label="1;1pkt 1fpkt"];
7142--9853[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.144.101.98" src_port="2927"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.220.145.98"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083733481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2164{
style=filled;
color=gray75;
3077[label="193.114.146.98;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7146[label="193.114.146.98;3pkt 3fpkt", shape=invtriangle, color=brown];
9856[label="193.114.146.98;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2164[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.146.98:24858, 136.151.77.66:445}[33.3333%]&lt;BR/&gt;{193.114.146.98:39156, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{193.114.146.98:19506, 155.148.135.153:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 39156: (16.6667%)&lt;BR/&gt; 24858: (16.6667%)&lt;BR/&gt; 19506: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
3077--7146[label="1;3pkt 3fpkt"];
3077--9856[label="1;3pkt 3fpkt"];
7146--9856[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.135.153" dst_port="445" src_ip="193.114.146.98" src_port="19506"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="193.114.146.98" src_port="39156"/>
      <filter dst_ip="136.151.77.66" dst_port="445" src_ip="193.114.146.98" src_port="24858"/>
    </slice>
    <from sec="1083733250" usec="0"/>
    <to sec="1083733601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2165{
style=filled;
color=gray75;
3078[label="193.112.164.98;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7148[label="193.112.164.98;2pkt 2fpkt", shape=invtriangle, color=brown];
9858[label="193.112.164.98;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2165[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.112.164.98:1156, 173.138.160.123:445}[50%]&lt;BR/&gt;{193.112.164.98:3794, 155.211.177.252:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3794: (25%)&lt;BR/&gt; 1156: (25%)&gt;];
}
3078--7148[label="1;2pkt 2fpkt"];
3078--9858[label="1;2pkt 2fpkt"];
7148--9858[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.177.252" dst_port="445" src_ip="193.112.164.98" src_port="3794"/>
      <filter dst_ip="173.138.160.123" dst_port="445" src_ip="193.112.164.98" src_port="1156"/>
    </slice>
    <from sec="1083733706" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.1.183.98"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.193.44.99"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2168{
style=filled;
color=gray75;
3090[label="46.134.90.99;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7157[label="46.134.90.99;13pkt 13fpkt", shape=invtriangle, color=brown];
9864[label="46.134.90.99;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2168[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.134.90.99:80, 209.29.138.126:*}[38.4615%]&lt;BR/&gt;{46.134.90.99:80, 209.29.138.127:*}[38.4615%]&lt;BR/&gt;{46.134.90.99:80, 209.29.138.10:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57764: (3.94737%)&lt;BR/&gt; 50138: (3.94737%)&lt;BR/&gt; 43184: (3.94737%)&lt;BR/&gt; 4399: (3.94737%)&gt;];
}
3090--7157[label="1;13pkt 13fpkt"];
3090--9864[label="1;12pkt 12fpkt"];
7157--9864[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.134.90.99" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.134.90.99" src_port="80"/>
      <filter dst_ip="209.29.138.10" src_ip="46.134.90.99" src_port="80"/>
    </slice>
    <from sec="1083733301" usec="0"/>
    <to sec="1083733916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2169{
style=filled;
color=gray75;
3098[label="94.68.194.99;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7163[label="94.68.194.99;53pkt 53fpkt", shape=invtriangle, color=brown];
stat2169[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.68.194.99:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60033: (0.943396%)&lt;BR/&gt; 59955: (0.943396%)&lt;BR/&gt; 58636: (0.943396%)&lt;BR/&gt; 58549: (0.943396%)&gt;];
}
3098--7163[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="94.68.194.99" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.253.5.100"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2171{
style=filled;
color=gray75;
3103[label="219.222.14.100;80pkt 80fpkt", shape=pentagon, color=darkviolet];
7167[label="219.222.14.100;80pkt 80fpkt", shape=invtriangle, color=brown];
9870[label="219.222.14.100;79pkt 79fpkt", shape=invhouse, color=bisque];
stat2171[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.222.14.100:*, 196.28.90.156:*}[37.5%]&lt;BR/&gt;{219.222.14.100:139, 132.44.111.128:*}[30%]&lt;BR/&gt;{219.222.14.100:445, 132.44.111.128:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (24.8954%)&lt;BR/&gt; 139: (23.8494%)&lt;BR/&gt; 4831: (1.25523%)&lt;BR/&gt; 2169: (1.25523%)&lt;BR/&gt; 1551: (1.25523%)&gt;];
}
3103--7167[label="1;80pkt 80fpkt"];
3103--9870[label="1;79pkt 79fpkt"];
7167--9870[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="196.28.90.156" src_ip="219.222.14.100"/>
      <filter dst_ip="132.44.111.128" src_ip="219.222.14.100" src_port="445"/>
      <filter dst_ip="132.44.111.128" src_ip="219.222.14.100" src_port="139"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2172{
style=filled;
color=gray75;
3104[label="210.149.22.100;113pkt 113fpkt", shape=pentagon, color=darkviolet];
7168[label="210.149.22.100;112pkt 112fpkt", shape=invtriangle, color=brown];
stat2172[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.149.22.100:*, *:1080}[33.6283%]&lt;BR/&gt;{210.149.22.100:*, *:3127}[33.6283%]&lt;BR/&gt;{210.149.22.100:*, *:3128}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (16.8889%)&lt;BR/&gt; 3127: (16.6667%)&lt;BR/&gt; 3128: (16.4444%)&lt;BR/&gt; 3544: (0.888889%)&lt;BR/&gt; 1787: (0.888889%)&gt;];
}
3104--7168[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="210.149.22.100"/>
      <filter dst_port="1080" src_ip="210.149.22.100"/>
      <filter dst_port="3128" src_ip="210.149.22.100"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2173{
style=filled;
color=gray75;
744[label="217.9.84.100;s;20pkt 20fpkt", shape=diamond, color=yellow];
3106[label="217.9.84.100;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7169[label="217.9.84.100;23pkt 23fpkt", shape=invtriangle, color=brown];
9871[label="217.9.84.100;23pkt 23fpkt", shape=invhouse, color=bisque];
stat2173[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.9.84.100:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55961: (2.24719%)&lt;BR/&gt; 55611: (2.24719%)&lt;BR/&gt; 54990: (2.24719%)&lt;BR/&gt; 53097: (2.24719%)&gt;];
}
744--3106[label="0.95;19pkt 19fpkt"];
744--7169[label="0.95;19pkt 19fpkt"];
744--9871[label="0.95;19pkt 19fpkt"];
3106--7169[label="1;23pkt 23fpkt"];
3106--9871[label="1;23pkt 23fpkt"];
7169--9871[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="217.9.84.100" src_port="80"/>
    </slice>
    <from sec="1083733435" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2174{
style=filled;
color=gray75;
3108[label="46.134.90.100;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7170[label="46.134.90.100;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2174[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.134.90.100:80, 209.29.138.126:*}[53.8462%]&lt;BR/&gt;{46.134.90.100:80, 209.29.138.10:*}[23.0769%]&lt;BR/&gt;{46.134.90.100:80, 209.29.138.127:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60313: (4%)&lt;BR/&gt; 54733: (4%)&lt;BR/&gt; 43886: (4%)&lt;BR/&gt; 4518: (4%)&gt;];
}
3108--7170[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.134.90.100" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.134.90.100" src_port="80"/>
      <filter dst_ip="209.29.138.10" src_ip="46.134.90.100" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2175{
style=filled;
color=gray75;
3109[label="198.198.95.100;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7171[label="198.198.95.100;10pkt 10fpkt", shape=invtriangle, color=brown];
stat2175[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.95.100:80, 209.29.138.126:*}[50%]&lt;BR/&gt;{198.198.95.100:80, 209.29.138.127:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4852: (5%)&lt;BR/&gt; 4694: (5%)&lt;BR/&gt; 4110: (5%)&lt;BR/&gt; 3590: (5%)&gt;];
}
3109--7171[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="198.198.95.100" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="198.198.95.100" src_port="80"/>
    </slice>
    <from sec="1083733315" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2176{
style=filled;
color=gray75;
3110[label="109.198.114.100;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7172[label="109.198.114.100;2pkt 2fpkt", shape=invtriangle, color=brown];
9872[label="109.198.114.100;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2176[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.198.114.100:2701, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{109.198.114.100:3881, 141.135.184.73:445}[33.3333%]&lt;BR/&gt;{109.198.114.100:4740, 141.132.195.132:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 4740: (21.4286%)&lt;BR/&gt; 3881: (21.4286%)&lt;BR/&gt; 2701: (7.14286%)&lt;BR/&gt; 80: (7.14286%)&gt;];
}
3110--7172[label="1;2pkt 2fpkt"];
3110--9872[label="1;2pkt 2fpkt"];
7172--9872[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.132.195.132" dst_port="445" src_ip="109.198.114.100" src_port="4740"/>
      <filter dst_ip="141.135.184.73" dst_port="445" src_ip="109.198.114.100" src_port="3881"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.198.114.100" src_port="2701"/>
    </slice>
    <from sec="1083733352" usec="0"/>
    <to sec="1083733629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.23.166.100"/>
    </slice>
    <from sec="1083733718" usec="0"/>
    <to sec="1083733828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.98.174.100"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2179{
style=filled;
color=gray75;
3117[label="201.16.8.101;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7176[label="201.16.8.101;11pkt 11fpkt", shape=invtriangle, color=brown];
9873[label="201.16.8.101;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2179[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.16.8.101:8080, 155.148.137.32:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (45.3125%)&lt;BR/&gt; 10770: (4.6875%)&lt;BR/&gt; 4389: (4.6875%)&lt;BR/&gt; 4366: (4.6875%)&lt;BR/&gt; 4342: (4.6875%)&gt;];
}
3117--7176[label="1;11pkt 11fpkt"];
3117--9873[label="1;10pkt 10fpkt"];
7176--9873[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.137.32" src_ip="201.16.8.101" src_port="8080"/>
    </slice>
    <from sec="1083733569" usec="0"/>
    <to sec="1083734037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.151.14.101"/>
    </slice>
    <from sec="1083733272" usec="0"/>
    <to sec="1083733368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.127.31.101"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.99.32.101"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,020,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_2183{
style=filled;
color=gray75;
856[label="209.29.137.101;s;3pkt 3fpkt", shape=diamond, color=yellow];
7184[label="209.29.137.101;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2183[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.137.101:0, 209.69.8.1:0}[25%]&lt;BR/&gt;{209.29.137.101:0, 196.106.48.182:0}[25%]&lt;BR/&gt;{209.29.137.101:3128, 199.25.41.233:1122}[25%]&lt;BR/&gt;{209.29.137.101:3128, 199.25.41.233:4852}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (42.8571%)&lt;BR/&gt; 3128: (28.5714%)&lt;BR/&gt; 4852: (14.2857%)&lt;BR/&gt; 1122: (14.2857%)&gt;];
}
856--7184[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.25.41.233" dst_port="4852" src_ip="209.29.137.101" src_port="3128"/>
      <filter dst_ip="199.25.41.233" dst_port="1122" src_ip="209.29.137.101" src_port="3128"/>
      <filter dst_ip="196.106.48.182" src_ip="209.29.137.101"/>
      <filter dst_ip="209.69.8.1" src_ip="209.29.137.101"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2184{
style=filled;
color=gray75;
3129[label="202.207.182.101;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7185[label="202.207.182.101;19pkt 19fpkt", shape=invtriangle, color=brown];
9877[label="202.207.182.101;19pkt 19fpkt", shape=invhouse, color=bisque];
stat2184[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.207.182.101:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42677: (2.63158%)&lt;BR/&gt; 42633: (2.63158%)&lt;BR/&gt; 42599: (2.63158%)&lt;BR/&gt; 42570: (2.63158%)&gt;];
}
3129--7185[label="1;19pkt 19fpkt"];
3129--9877[label="1;19pkt 19fpkt"];
7185--9877[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="202.207.182.101" src_port="80"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083733362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.11.211.101"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083733303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.179.2.102"/>
    </slice>
    <from sec="1083733862" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.148.6.102"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2188{
style=filled;
color=gray75;
3132[label="109.8.31.102;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7189[label="109.8.31.102;5pkt 5fpkt", shape=invtriangle, color=brown];
9880[label="109.8.31.102;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2188[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.8.31.102:3791, 209.29.136.89:16072}[20%]&lt;BR/&gt;{109.8.31.102:4003, 209.29.136.89:16072}[20%]&lt;BR/&gt;{109.8.31.102:45504, 209.29.136.89:2053}[20%]&lt;BR/&gt;{109.8.31.102:45504, 209.29.136.89:3176}[20%]&lt;BR/&gt;{109.8.31.102:45504, 209.29.136.89:4857}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45504: (26.9231%)&lt;BR/&gt; 16072: (23.0769%)&lt;BR/&gt; 4857: (11.5385%)&lt;BR/&gt; 4003: (11.5385%)&lt;BR/&gt; 3791: (11.5385%)&gt;];
}
3132--7189[label="1;4pkt 4fpkt"];
3132--9880[label="1;4pkt 4fpkt"];
7189--9880[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="4857" src_ip="109.8.31.102" src_port="45504"/>
      <filter dst_ip="209.29.136.89" dst_port="3176" src_ip="109.8.31.102" src_port="45504"/>
      <filter dst_ip="209.29.136.89" dst_port="2053" src_ip="109.8.31.102" src_port="45504"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="109.8.31.102" src_port="4003"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="109.8.31.102" src_port="3791"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2189{
style=filled;
color=gray75;
3136[label="204.181.74.102;49pkt 49fpkt", shape=pentagon, color=darkviolet];
7192[label="204.181.74.102;50pkt 50fpkt", shape=invtriangle, color=brown];
stat2189[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.181.74.102:80, 209.29.138.126:*}[64%]&lt;BR/&gt;{204.181.74.102:80, 209.29.138.127:*}[36%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4958: (1.0101%)&lt;BR/&gt; 4887: (1.0101%)&lt;BR/&gt; 4839: (1.0101%)&lt;BR/&gt; 4741: (1.0101%)&gt;];
}
3136--7192[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="204.181.74.102" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="204.181.74.102" src_port="80"/>
    </slice>
    <from sec="1083733629" usec="0"/>
    <to sec="1083733877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2190{
style=filled;
color=gray75;
3138[label="199.115.122.102;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7195[label="199.115.122.102;14pkt 14fpkt", shape=invtriangle, color=brown];
9882[label="199.115.122.102;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2190[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.115.122.102:*, 141.22.86.218:25}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 48615: (3.57143%)&lt;BR/&gt; 44784: (3.57143%)&lt;BR/&gt; 41326: (3.57143%)&lt;BR/&gt; 40017: (3.57143%)&gt;];
}
3138--7195[label="1;14pkt 14fpkt"];
3138--9882[label="1;14pkt 14fpkt"];
7195--9882[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.218" dst_port="25" src_ip="199.115.122.102"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2191{
style=filled;
color=gray75;
3139[label="209.137.137.102;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7196[label="209.137.137.102;2pkt 2fpkt", shape=invtriangle, color=brown];
9883[label="209.137.137.102;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2191[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.137.137.102:25, 168.127.136.17:53102}[33.3333%]&lt;BR/&gt;{209.137.137.102:25, 136.151.4.41:54362}[33.3333%]&lt;BR/&gt;{209.137.137.102:25, 155.148.180.213:59045}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 54362: (18.75%)&lt;BR/&gt; 53102: (18.75%)&lt;BR/&gt; 59045: (12.5%)&gt;];
}
3139--7196[label="1;2pkt 2fpkt"];
3139--9883[label="1;3pkt 3fpkt"];
7196--9883[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.180.213" dst_port="59045" src_ip="209.137.137.102" src_port="25"/>
      <filter dst_ip="136.151.4.41" dst_port="54362" src_ip="209.137.137.102" src_port="25"/>
      <filter dst_ip="168.127.136.17" dst_port="53102" src_ip="209.137.137.102" src_port="25"/>
    </slice>
    <from sec="1083733720" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2192{
style=filled;
color=gray75;
3140[label="168.76.154.102;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7197[label="168.76.154.102;14pkt 14fpkt", shape=invtriangle, color=brown];
9884[label="168.76.154.102;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2192[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.154.102:*, *:80}[35.7143%]&lt;BR/&gt;{168.76.154.102:*, 168.127.152.33:*}[28.5714%]&lt;BR/&gt;{168.76.154.102:*, 168.16.103.110:*}[28.5714%]&lt;BR/&gt;{168.76.154.102:*, 168.16.102.187:*}[28.5714%]&lt;BR/&gt;{168.76.154.102:*, *:1433}[21.4286%]&lt;BR/&gt;{168.76.154.102:*, *:2745}[21.4286%]&lt;BR/&gt;{168.76.154.102:*, *:6129}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (17.0732%)&lt;BR/&gt; 6129: (10.9756%)&lt;BR/&gt; 2745: (10.9756%)&lt;BR/&gt; 1433: (10.9756%)&lt;BR/&gt; 3960: (3.65854%)&gt;];
}
3140--7197[label="1;14pkt 14fpkt"];
3140--9884[label="1;13pkt 13fpkt"];
7197--9884[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="168.16.102.187" src_ip="168.76.154.102"/>
      <filter dst_ip="168.16.103.110" src_ip="168.76.154.102"/>
      <filter dst_ip="168.127.152.33" src_ip="168.76.154.102"/>
      <filter dst_port="80" src_ip="168.76.154.102"/>
      <filter dst_port="6129" src_ip="168.76.154.102"/>
      <filter dst_port="2745" src_ip="168.76.154.102"/>
      <filter dst_port="1433" src_ip="168.76.154.102"/>
    </slice>
    <from sec="1083734007" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.160.102"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2194{
style=filled;
color=gray75;
3144[label="173.138.211.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7200[label="173.138.211.102;1pkt 1fpkt", shape=invtriangle, color=brown];
9887[label="173.138.211.102;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2194[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.211.102:3562, 210.31.39.93:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3562: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3144--7200[label="1;1pkt 1fpkt"];
3144--9887[label="1;1pkt 1fpkt"];
7200--9887[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.31.39.93" dst_port="25" src_ip="173.138.211.102" src_port="3562"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2195{
style=filled;
color=gray75;
3147[label="40.170.255.102;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7202[label="40.170.255.102;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2195[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.170.255.102:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3147--7202[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="40.170.255.102"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.34.16.103"/>
    </slice>
    <from sec="1083733848" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2197{
style=filled;
color=gray75;
3151[label="200.166.50.103;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7204[label="200.166.50.103;3pkt 3fpkt", shape=invtriangle, color=brown];
9888[label="200.166.50.103;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2197[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.166.50.103:1436, 141.135.241.177:445}[33.3333%]&lt;BR/&gt;{200.166.50.103:3075, 141.211.172.185:445}[33.3333%]&lt;BR/&gt;{200.166.50.103:2782, 141.211.17.233:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3075: (16.6667%)&lt;BR/&gt; 2782: (16.6667%)&lt;BR/&gt; 1436: (16.6667%)&gt;];
}
3151--7204[label="1;3pkt 3fpkt"];
3151--9888[label="1;3pkt 3fpkt"];
7204--9888[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.211.17.233" dst_port="445" src_ip="200.166.50.103" src_port="2782"/>
      <filter dst_ip="141.211.172.185" dst_port="445" src_ip="200.166.50.103" src_port="3075"/>
      <filter dst_ip="141.135.241.177" dst_port="445" src_ip="200.166.50.103" src_port="1436"/>
    </slice>
    <from sec="1083733535" usec="0"/>
    <to sec="1083734004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2198{
style=filled;
color=gray75;
3154[label="46.134.90.103;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7206[label="46.134.90.103;16pkt 16fpkt", shape=invtriangle, color=brown];
9890[label="46.134.90.103;16pkt 16fpkt", shape=invhouse, color=bisque];
stat2198[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.134.90.103:80, 209.29.138.10:*}[37.5%]&lt;BR/&gt;{46.134.90.103:80, 209.29.138.126:*}[37.5%]&lt;BR/&gt;{46.134.90.103:80, 209.29.138.127:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60167: (3.125%)&lt;BR/&gt; 53833: (3.125%)&lt;BR/&gt; 53746: (3.125%)&lt;BR/&gt; 43324: (3.125%)&gt;];
}
3154--7206[label="1;16pkt 16fpkt"];
3154--9890[label="1;16pkt 16fpkt"];
7206--9890[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.134.90.103" src_port="80"/>
      <filter dst_ip="209.29.138.10" src_ip="46.134.90.103" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.134.90.103" src_port="80"/>
    </slice>
    <from sec="1083733311" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2199{
style=filled;
color=gray75;
3157[label="209.29.138.103;78pkt 78fpkt", shape=pentagon, color=darkviolet];
7209[label="209.29.138.103;77pkt 77fpkt", shape=invtriangle, color=brown];
9891[label="209.29.138.103;77pkt 77fpkt", shape=invhouse, color=bisque];
stat2199[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.138.103:*, *:6667}[47.4359%]&lt;BR/&gt;{209.29.138.103:113, *:*}[39.7436%]&lt;BR/&gt;{209.29.138.103:*, 203.107.61.8:*}[23.0769%]&lt;BR/&gt;{209.29.138.103:*, 220.77.106.167:*}[23.0769%]&lt;BR/&gt;{209.29.138.103:*, 217.33.24.177:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (23.4914%)&lt;BR/&gt; 113: (20.0431%)&lt;BR/&gt; 6666: (5.17241%)&lt;BR/&gt; 0: (2.58621%)&lt;BR/&gt; 59537: (0.646552%)&gt;];
}
3157--7209[label="1;77pkt 77fpkt"];
3157--9891[label="1;77pkt 77fpkt"];
7209--9891[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="217.33.24.177" src_ip="209.29.138.103"/>
      <filter dst_ip="220.77.106.167" src_ip="209.29.138.103"/>
      <filter dst_ip="203.107.61.8" src_ip="209.29.138.103"/>
      <filter src_ip="209.29.138.103" src_port="113"/>
      <filter dst_port="6667" src_ip="209.29.138.103"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2200{
style=filled;
color=gray75;
3159[label="168.76.154.103;45pkt 45fpkt", shape=pentagon, color=darkviolet];
7211[label="168.76.154.103;46pkt 46fpkt", shape=invtriangle, color=brown];
stat2200[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.154.103:*, 136.151.235.67:80}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.3297%)&lt;BR/&gt; 6129: (9.89011%)&lt;BR/&gt; 2745: (9.89011%)&lt;BR/&gt; 1433: (9.89011%)&lt;BR/&gt; 4748: (1.0989%)&gt;];
}
3159--7211[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="168.76.154.103"/>
    </slice>
    <from sec="1083733381" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.235.212.103"/>
    </slice>
    <from sec="1083733331" usec="0"/>
    <to sec="1083733513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2202{
style=filled;
color=gray75;
3175[label="46.134.90.104;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7220[label="46.134.90.104;17pkt 17fpkt", shape=invtriangle, color=brown];
stat2202[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.134.90.104:80, 209.29.138.126:*}[47.0588%]&lt;BR/&gt;{46.134.90.104:80, 209.29.138.10:*}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60810: (2.94118%)&lt;BR/&gt; 48958: (2.94118%)&lt;BR/&gt; 46960: (2.94118%)&lt;BR/&gt; 45863: (2.94118%)&gt;];
}
3175--7220[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.134.90.104" src_port="80"/>
      <filter dst_ip="209.29.138.10" src_ip="46.134.90.104" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2203{
style=filled;
color=gray75;
3176[label="205.8.93.104;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7221[label="205.8.93.104;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2203[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.8.93.104:80, 209.29.138.127:3114}[33.3333%]&lt;BR/&gt;{205.8.93.104:80, 209.29.138.126:2522}[33.3333%]&lt;BR/&gt;{205.8.93.104:80, 209.29.138.126:2853}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3114: (20%)&lt;BR/&gt; 2853: (20%)&lt;BR/&gt; 2522: (10%)&gt;];
}
3176--7221[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" dst_port="2853" src_ip="205.8.93.104" src_port="80"/>
      <filter dst_ip="209.29.138.126" dst_port="2522" src_ip="205.8.93.104" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="3114" src_ip="205.8.93.104" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2204{
style=filled;
color=gray75;
3178[label="199.115.122.104;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7222[label="199.115.122.104;9pkt 9fpkt", shape=invtriangle, color=brown];
9898[label="199.115.122.104;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2204[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.115.122.104:*, 141.22.86.218:25}[44.4444%]&lt;BR/&gt;{199.115.122.104:*, 141.22.210.9:25}[22.2222%]&lt;BR/&gt;{199.115.122.104:*, 136.151.193.154:25}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 48910: (5.76923%)&lt;BR/&gt; 46087: (5.76923%)&lt;BR/&gt; 35579: (5.76923%)&lt;BR/&gt; 33024: (5.76923%)&gt;];
}
3178--7222[label="1;9pkt 9fpkt"];
3178--9898[label="1;8pkt 8fpkt"];
7222--9898[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.218" dst_port="25" src_ip="199.115.122.104"/>
      <filter dst_ip="136.151.193.154" dst_port="25" src_ip="199.115.122.104"/>
      <filter dst_ip="141.22.210.9" dst_port="25" src_ip="199.115.122.104"/>
    </slice>
    <from sec="1083733325" usec="0"/>
    <to sec="1083733783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.222.139.104"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083734010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2206{
style=filled;
color=gray75;
3187[label="109.198.229.104;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7230[label="109.198.229.104;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2206[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.198.229.104:*, *:445}[66.6667%]&lt;BR/&gt;{109.198.229.104:*, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 4898: (8.33333%)&lt;BR/&gt; 4635: (8.33333%)&lt;BR/&gt; 4546: (8.33333%)&gt;];
}
3187--7230[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.198.229.104"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.198.229.104"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.232.246.104"/>
    </slice>
    <from sec="1083733390" usec="0"/>
    <to sec="1083733764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.181.16.105"/>
    </slice>
    <from sec="1083733739" usec="0"/>
    <to sec="1083733975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.31.52.105"/>
    </slice>
    <from sec="1083733537" usec="0"/>
    <to sec="1083733711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2210{
style=filled;
color=gray75;
3196[label="44.212.53.105;34pkt 34fpkt", shape=pentagon, color=darkviolet];
7235[label="44.212.53.105;33pkt 33fpkt", shape=invtriangle, color=brown];
9906[label="44.212.53.105;33pkt 33fpkt", shape=invhouse, color=bisque];
stat2210[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.53.105:80, 136.151.205.174:*}[85.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4878: (1.5%)&lt;BR/&gt; 4854: (1.5%)&lt;BR/&gt; 4846: (1.5%)&lt;BR/&gt; 4843: (1.5%)&gt;];
}
3196--7235[label="1;33pkt 33fpkt"];
3196--9906[label="1;33pkt 33fpkt"];
7235--9906[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.205.174" src_ip="44.212.53.105" src_port="80"/>
    </slice>
    <from sec="1083733403" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.209.19.106"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2212{
style=filled;
color=gray75;
3208[label="213.101.36.106;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7242[label="213.101.36.106;11pkt 11fpkt", shape=invtriangle, color=brown];
9910[label="213.101.36.106;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2212[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.36.106:80, *:*}[50%]&lt;BR/&gt;{213.101.36.106:443, *:*}[50%]&lt;BR/&gt;{213.101.36.106:*, 209.29.136.89:*}[33.3333%]&lt;BR/&gt;{213.101.36.106:*, 136.151.200.157:*}[33.3333%]&lt;BR/&gt;{213.101.36.106:*, 168.127.210.22:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.7143%)&lt;BR/&gt; 443: (24.2857%)&lt;BR/&gt; 2087: (4.28571%)&lt;BR/&gt; 2083: (4.28571%)&lt;BR/&gt; 2082: (4.28571%)&gt;];
}
3208--7242[label="1;11pkt 11fpkt"];
3208--9910[label="1;12pkt 12fpkt"];
7242--9910[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.200.157" src_ip="213.101.36.106"/>
      <filter dst_ip="209.29.136.89" src_ip="213.101.36.106"/>
      <filter dst_ip="168.127.210.22" src_ip="213.101.36.106"/>
      <filter src_ip="213.101.36.106" src_port="443"/>
      <filter src_ip="213.101.36.106" src_port="80"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2213{
style=filled;
color=gray75;
3214[label="196.2.120.106;245pkt 245fpkt", shape=pentagon, color=darkviolet];
7244[label="196.2.120.106;245pkt 245fpkt", shape=invtriangle, color=brown];
9912[label="196.2.120.106;245pkt 245fpkt", shape=invhouse, color=bisque];
stat2213[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.2.120.106:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3214--7244[label="1;245pkt 245fpkt"];
3214--9912[label="1;245pkt 245fpkt"];
7244--9912[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.2.120.106" src_port="1025"/>
    </slice>
    <from sec="1083733625" usec="0"/>
    <to sec="1083733640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2214{
style=filled;
color=gray75;
3215[label="199.115.122.106;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7245[label="199.115.122.106;13pkt 13fpkt", shape=invtriangle, color=brown];
9913[label="199.115.122.106;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2214[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.115.122.106:*, 141.22.86.218:25}[42.8571%]&lt;BR/&gt;{199.115.122.106:*, 136.151.229.152:25}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 48738: (3.65854%)&lt;BR/&gt; 46856: (3.65854%)&lt;BR/&gt; 46132: (3.65854%)&lt;BR/&gt; 46082: (3.65854%)&gt;];
}
3215--7245[label="1;13pkt 13fpkt"];
3215--9913[label="1;14pkt 14fpkt"];
7245--9913[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.218" dst_port="25" src_ip="199.115.122.106"/>
      <filter dst_ip="136.151.229.152" dst_port="25" src_ip="199.115.122.106"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2215{
style=filled;
color=gray75;
3217[label="209.29.158.106;210pkt 210fpkt", shape=pentagon, color=darkviolet];
7246[label="209.29.158.106;209pkt 209fpkt", shape=invtriangle, color=brown];
9914[label="209.29.158.106;209pkt 209fpkt", shape=invhouse, color=bisque];
stat2215[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.158.106:0, *:0}[98.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.5669%)&lt;BR/&gt; 445: (0.716561%)&lt;BR/&gt; 39932: (0.238854%)&lt;BR/&gt; 38168: (0.238854%)&lt;BR/&gt; 4238: (0.238854%)&gt;];
}
3217--7246[label="1;209pkt 209fpkt"];
3217--9914[label="1;209pkt 209fpkt"];
7246--9914[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.158.106"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2216{
style=filled;
color=gray75;
3219[label="46.71.192.106;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7247[label="46.71.192.106;11pkt 11fpkt", shape=invtriangle, color=brown];
9915[label="46.71.192.106;11pkt 11fpkt", shape=invhouse, color=bisque];
stat2216[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.192.106:80, 209.29.138.127:*}[54.5455%]&lt;BR/&gt;{46.71.192.106:80, 209.29.138.126:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2941: (4.54545%)&lt;BR/&gt; 2863: (4.54545%)&lt;BR/&gt; 2602: (4.54545%)&lt;BR/&gt; 2581: (4.54545%)&gt;];
}
3219--7247[label="1;11pkt 11fpkt"];
3219--9915[label="1;11pkt 11fpkt"];
7247--9915[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.71.192.106" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.71.192.106" src_port="80"/>
    </slice>
    <from sec="1083733940" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2217{
style=filled;
color=gray75;
3227[label="41.70.58.107;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7251[label="41.70.58.107;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2217[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.70.58.107:4084, 141.135.15.14:445}[33.3333%]&lt;BR/&gt;{41.70.58.107:4443, 141.132.5.90:445}[33.3333%]&lt;BR/&gt;{41.70.58.107:2410, 141.22.109.250:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4443: (16.6667%)&lt;BR/&gt; 4084: (16.6667%)&lt;BR/&gt; 2410: (16.6667%)&gt;];
}
3227--7251[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.109.250" dst_port="445" src_ip="41.70.58.107" src_port="2410"/>
      <filter dst_ip="141.132.5.90" dst_port="445" src_ip="41.70.58.107" src_port="4443"/>
      <filter dst_ip="141.135.15.14" dst_port="445" src_ip="41.70.58.107" src_port="4084"/>
    </slice>
    <from sec="1083733549" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.4.75.107"/>
    </slice>
    <from sec="1083733749" usec="0"/>
    <to sec="1083733804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2219{
style=filled;
color=gray75;
3230[label="136.151.106.107;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7254[label="136.151.106.107;13pkt 13fpkt", shape=invtriangle, color=brown];
9920[label="136.151.106.107;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2219[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.106.107:*, *:80}[53.8462%]&lt;BR/&gt;{136.151.106.107:*, *:1863}[23.0769%]&lt;BR/&gt;{136.151.106.107:*, 213.101.59.76:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.9231%)&lt;BR/&gt; 1863: (11.5385%)&lt;BR/&gt; 64292: (3.84615%)&lt;BR/&gt; 62322: (3.84615%)&lt;BR/&gt; 62321: (3.84615%)&gt;];
}
3230--7254[label="1;13pkt 13fpkt"];
3230--9920[label="1;13pkt 13fpkt"];
7254--9920[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.59.76" src_ip="136.151.106.107"/>
      <filter dst_port="80" src_ip="136.151.106.107"/>
      <filter dst_port="1863" src_ip="136.151.106.107"/>
    </slice>
    <from sec="1083733301" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.129.107"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.195.236.107"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2222{
style=filled;
color=gray75;
3239[label="168.127.22.108;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7260[label="168.127.22.108;5pkt 5fpkt", shape=invtriangle, color=brown];
9924[label="168.127.22.108;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2222[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.22.108:1046, 213.101.36.12:80}[20%]&lt;BR/&gt;{168.127.22.108:1043, 213.101.36.80:80}[20%]&lt;BR/&gt;{168.127.22.108:1044, 213.101.59.76:80}[20%]&lt;BR/&gt;{168.127.22.108:1045, 213.101.59.76:80}[20%]&lt;BR/&gt;{168.127.22.108:1048, 213.101.59.76:443}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 1048: (10%)&lt;BR/&gt; 1046: (10%)&lt;BR/&gt; 1045: (10%)&lt;BR/&gt; 1044: (10%)&gt;];
}
3239--7260[label="1;5pkt 5fpkt"];
3239--9924[label="1;5pkt 5fpkt"];
7260--9924[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.59.76" dst_port="443" src_ip="168.127.22.108" src_port="1048"/>
      <filter dst_ip="213.101.59.76" dst_port="80" src_ip="168.127.22.108" src_port="1045"/>
      <filter dst_ip="213.101.59.76" dst_port="80" src_ip="168.127.22.108" src_port="1044"/>
      <filter dst_ip="213.101.36.80" dst_port="80" src_ip="168.127.22.108" src_port="1043"/>
      <filter dst_ip="213.101.36.12" dst_port="80" src_ip="168.127.22.108" src_port="1046"/>
    </slice>
    <from sec="1083733820" usec="0"/>
    <to sec="1083733902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2223{
style=filled;
color=gray75;
3241[label="93.211.40.108;68pkt 68fpkt", shape=pentagon, color=darkviolet];
7262[label="93.211.40.108;68pkt 68fpkt", shape=invtriangle, color=brown];
stat2223[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.211.40.108:*, *:2745}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (10.2941%)&lt;BR/&gt; 1025: (8.82353%)&lt;BR/&gt; 445: (8.82353%)&lt;BR/&gt; 3127: (6.61765%)&lt;BR/&gt; 6129: (5.88235%)&gt;];
}
3241--7262[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="93.211.40.108"/>
    </slice>
    <from sec="1083733279" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.219.99.108"/>
    </slice>
    <from sec="1083733717" usec="0"/>
    <to sec="1083733828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.158.104.108"/>
    </slice>
    <from sec="1083733591" usec="0"/>
    <to sec="1083733691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2226{
style=filled;
color=gray75;
3246[label="199.115.122.108;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7266[label="199.115.122.108;8pkt 8fpkt", shape=invtriangle, color=brown];
9928[label="199.115.122.108;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2226[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.115.122.108:*, 141.22.86.218:25}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 47035: (6.25%)&lt;BR/&gt; 41743: (6.25%)&lt;BR/&gt; 40092: (6.25%)&lt;BR/&gt; 33408: (6.25%)&gt;];
}
3246--7266[label="1;8pkt 8fpkt"];
3246--9928[label="1;8pkt 8fpkt"];
7266--9928[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.218" dst_port="25" src_ip="199.115.122.108"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083733968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.124.133.108"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.86.24.109"/>
    </slice>
    <from sec="1083733381" usec="0"/>
    <to sec="1083733570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2229{
style=filled;
color=gray75;
3257[label="136.7.46.109;113pkt 113fpkt", shape=pentagon, color=darkviolet];
7272[label="136.7.46.109;112pkt 112fpkt", shape=invtriangle, color=brown];
stat2229[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.7.46.109:*, *:3127}[33.6283%]&lt;BR/&gt;{136.7.46.109:*, *:3128}[33.6283%]&lt;BR/&gt;{136.7.46.109:*, *:1080}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.8889%)&lt;BR/&gt; 3127: (16.6667%)&lt;BR/&gt; 1080: (16.4444%)&lt;BR/&gt; 3485: (1.33333%)&lt;BR/&gt; 3222: (1.33333%)&gt;];
}
3257--7272[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="136.7.46.109"/>
      <filter dst_port="3127" src_ip="136.7.46.109"/>
      <filter dst_port="1080" src_ip="136.7.46.109"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2230{
style=filled;
color=gray75;
3258[label="141.22.66.109;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7273[label="141.22.66.109;17pkt 17fpkt", shape=invtriangle, color=brown];
stat2230[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.66.109:80, 45.108.82.184:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59201: (2.94118%)&lt;BR/&gt; 53508: (2.94118%)&lt;BR/&gt; 47425: (2.94118%)&lt;BR/&gt; 46327: (2.94118%)&gt;];
}
3258--7273[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="141.22.66.109" src_port="80"/>
    </slice>
    <from sec="1083733274" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.68.68.109"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.12.83.109"/>
    </slice>
    <from sec="1083733809" usec="0"/>
    <to sec="1083734051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2233{
style=filled;
color=gray75;
3265[label="46.29.133.109;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7277[label="46.29.133.109;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2233[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.29.133.109:5204, 136.151.235.67:80}[25%]&lt;BR/&gt;{46.29.133.109:3122, 141.22.66.133:445}[25%]&lt;BR/&gt;{46.29.133.109:3148, 141.85.99.41:445}[25%]&lt;BR/&gt;{46.29.133.109:3783, 141.85.99.41:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 3783: (14.2857%)&lt;BR/&gt; 3148: (14.2857%)&lt;BR/&gt; 3122: (14.2857%)&lt;BR/&gt; 5204: (7.14286%)&gt;];
}
3265--7277[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.99.41" dst_port="445" src_ip="46.29.133.109" src_port="3783"/>
      <filter dst_ip="141.85.99.41" dst_port="445" src_ip="46.29.133.109" src_port="3148"/>
      <filter dst_ip="141.22.66.133" dst_port="445" src_ip="46.29.133.109" src_port="3122"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="46.29.133.109" src_port="5204"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083733639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2234{
style=filled;
color=gray75;
3267[label="202.44.184.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7278[label="202.44.184.109;1pkt 1fpkt", shape=invtriangle, color=brown];
9934[label="202.44.184.109;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2234[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.44.184.109:23347, 209.29.136.89:3690}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23347: (50%)&lt;BR/&gt; 3690: (50%)&gt;];
}
3267--7278[label="1;1pkt 1fpkt"];
3267--9934[label="1;1pkt 1fpkt"];
7278--9934[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3690" src_ip="202.44.184.109" src_port="23347"/>
    </slice>
    <from sec="1083733384" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.165.199.109"/>
    </slice>
    <from sec="1083733637" usec="0"/>
    <to sec="1083733800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2236{
style=filled;
color=gray75;
3271[label="168.76.225.109;131pkt 131fpkt", shape=pentagon, color=darkviolet];
7281[label="168.76.225.109;130pkt 130fpkt", shape=invtriangle, color=brown];
9935[label="168.76.225.109;130pkt 130fpkt", shape=invhouse, color=bisque];
stat2236[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.225.109:*, *:80}[25.1908%]&lt;BR/&gt;{168.76.225.109:*, *:2745}[25.1908%]&lt;BR/&gt;{168.76.225.109:*, *:6129}[25.1908%]&lt;BR/&gt;{168.76.225.109:*, *:1433}[24.4275%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (12.6598%)&lt;BR/&gt; 80: (12.6598%)&lt;BR/&gt; 2745: (12.4041%)&lt;BR/&gt; 1433: (12.2762%)&lt;BR/&gt; 2631: (0.767263%)&gt;];
}
3271--7281[label="1;130pkt 130fpkt"];
3271--9935[label="1;130pkt 130fpkt"];
7281--9935[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="168.76.225.109"/>
      <filter dst_port="2745" src_ip="168.76.225.109"/>
      <filter dst_port="80" src_ip="168.76.225.109"/>
      <filter dst_port="1433" src_ip="168.76.225.109"/>
    </slice>
    <from sec="1083733244" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.89.238.109"/>
    </slice>
    <from sec="1083733503" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2238{
style=filled;
color=gray75;
3282[label="199.115.122.110;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7287[label="199.115.122.110;14pkt 14fpkt", shape=invtriangle, color=brown];
9940[label="199.115.122.110;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2238[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.115.122.110:*, 141.22.86.218:25}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44931: (3.65854%)&lt;BR/&gt; 44740: (3.65854%)&lt;BR/&gt; 42773: (3.65854%)&lt;BR/&gt; 37289: (3.65854%)&gt;];
}
3282--7287[label="1;14pkt 14fpkt"];
3282--9940[label="1;13pkt 13fpkt"];
7287--9940[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.218" dst_port="25" src_ip="199.115.122.110"/>
    </slice>
    <from sec="1083733244" usec="0"/>
    <to sec="1083734006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2239{
style=filled;
color=gray75;
3286[label="203.25.180.110;101pkt 101fpkt", shape=pentagon, color=darkviolet];
7289[label="203.25.180.110;101pkt 101fpkt", shape=invtriangle, color=brown];
9941[label="203.25.180.110;100pkt 100fpkt", shape=invhouse, color=bisque];
stat2239[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.25.180.110:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4875: (0.993377%)&lt;BR/&gt; 4717: (0.993377%)&lt;BR/&gt; 4022: (0.993377%)&lt;BR/&gt; 3339: (0.993377%)&gt;];
}
3286--7289[label="1;101pkt 101fpkt"];
3286--9941[label="1;100pkt 100fpkt"];
7289--9941[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="203.25.180.110"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.221.193.110"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2241{
style=filled;
color=gray75;
592[label="198.84.12.111;s;257pkt 257fpkt", shape=diamond, color=yellow];
3288[label="198.84.12.111;416pkt 416fpkt", shape=pentagon, color=darkviolet];
7291[label="198.84.12.111;416pkt 416fpkt", shape=invtriangle, color=brown];
stat2241[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.84.12.111:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
592--3288[label="0.996109;256pkt 256fpkt"];
592--7291[label="0.996109;256pkt 256fpkt"];
3288--7291[label="1;416pkt 416fpkt"];
</description>
    <slice>
      <filter src_ip="198.84.12.111"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.89.26.111"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083734054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2243{
style=filled;
color=gray75;
3290[label="155.16.35.111;156pkt 156fpkt", shape=pentagon, color=darkviolet];
7293[label="155.16.35.111;155pkt 155fpkt", shape=invtriangle, color=brown];
9944[label="155.16.35.111;156pkt 156fpkt", shape=invhouse, color=bisque];
stat2243[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.16.35.111:*, *:445}[33.9744%]&lt;BR/&gt;{155.16.35.111:*, *:135}[22.4359%]&lt;BR/&gt;{155.16.35.111:*, *:139}[21.7949%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (16.9165%)&lt;BR/&gt; 135: (11.242%)&lt;BR/&gt; 139: (10.9208%)&lt;BR/&gt; 1433: (5.46039%)&lt;BR/&gt; 80: (5.46039%)&gt;];
}
3290--7293[label="1;155pkt 155fpkt"];
3290--9944[label="1;156pkt 156fpkt"];
7293--9944[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="155.16.35.111"/>
      <filter dst_port="135" src_ip="155.16.35.111"/>
      <filter dst_port="139" src_ip="155.16.35.111"/>
    </slice>
    <from sec="1083733236" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.209.39.111"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2245{
style=filled;
color=gray75;
3294[label="208.96.52.111;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7296[label="208.96.52.111;53pkt 53fpkt", shape=invtriangle, color=brown];
9947[label="208.96.52.111;53pkt 53fpkt", shape=invhouse, color=bisque];
stat2245[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.52.111:80, 209.141.140.58:*}[98.1132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60565: (0.943396%)&lt;BR/&gt; 60564: (0.943396%)&lt;BR/&gt; 59785: (0.943396%)&lt;BR/&gt; 59784: (0.943396%)&gt;];
}
3294--7296[label="1;53pkt 53fpkt"];
3294--9947[label="1;53pkt 53fpkt"];
7296--9947[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="209.141.140.58" src_ip="208.96.52.111" src_port="80"/>
    </slice>
    <from sec="1083733874" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2246{
style=filled;
color=gray75;
3297[label="93.95.105.111;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7298[label="93.95.105.111;6pkt 6fpkt", shape=invtriangle, color=brown];
9949[label="93.95.105.111;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2246[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.95.105.111:80, 168.127.96.145:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4908: (8.33333%)&lt;BR/&gt; 4836: (8.33333%)&lt;BR/&gt; 4383: (8.33333%)&lt;BR/&gt; 3476: (8.33333%)&gt;];
}
3297--7298[label="1;6pkt 6fpkt"];
3297--9949[label="1;6pkt 6fpkt"];
7298--9949[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.96.145" src_ip="93.95.105.111" src_port="80"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083733541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2247{
style=filled;
color=gray75;
3299[label="95.109.129.111;78pkt 78fpkt", shape=pentagon, color=darkviolet];
7299[label="95.109.129.111;77pkt 77fpkt", shape=invtriangle, color=brown];
stat2247[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.109.129.111:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4924: (0.645161%)&lt;BR/&gt; 4886: (0.645161%)&lt;BR/&gt; 4846: (0.645161%)&lt;BR/&gt; 4721: (0.645161%)&gt;];
}
3299--7299[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="95.109.129.111"/>
    </slice>
    <from sec="1083733403" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2248{
style=filled;
color=gray75;
3300[label="46.154.140.111;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7300[label="46.154.140.111;9pkt 9fpkt", shape=invtriangle, color=brown];
9950[label="46.154.140.111;9pkt 9fpkt", shape=invhouse, color=bisque];
stat2248[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.154.140.111:80, 209.29.138.126:*}[40%]&lt;BR/&gt;{46.154.140.111:80, 209.29.138.127:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2143%)&lt;BR/&gt; 4981: (5.35714%)&lt;BR/&gt; 4305: (5.35714%)&lt;BR/&gt; 4303: (5.35714%)&lt;BR/&gt; 4233: (5.35714%)&gt;];
}
3300--7300[label="1;9pkt 9fpkt"];
3300--9950[label="1;9pkt 9fpkt"];
7300--9950[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.154.140.111" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.154.140.111" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.161.111"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.42.193.111"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083733503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.117.210.111"/>
    </slice>
    <from sec="1083733538" usec="0"/>
    <to sec="1083733742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2252{
style=filled;
color=gray75;
3316[label="213.237.170.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7311[label="213.237.170.112;2pkt 2fpkt", shape=invtriangle, color=brown];
9956[label="213.237.170.112;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2252[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.237.170.112:80, 209.29.138.127:1663}[50%]&lt;BR/&gt;{213.237.170.112:80, 209.29.138.127:4008}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4008: (25%)&lt;BR/&gt; 1663: (25%)&gt;];
}
3316--7311[label="1;2pkt 2fpkt"];
3316--9956[label="1;2pkt 2fpkt"];
7311--9956[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" dst_port="4008" src_ip="213.237.170.112" src_port="80"/>
      <filter dst_ip="209.29.138.127" dst_port="1663" src_ip="213.237.170.112" src_port="80"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.197.205.112"/>
    </slice>
    <from sec="1083733350" usec="0"/>
    <to sec="1083733533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2254{
style=filled;
color=gray75;
3321[label="53.164.234.112;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7315[label="53.164.234.112;7pkt 7fpkt", shape=invtriangle, color=brown];
9959[label="53.164.234.112;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2254[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.164.234.112:29353, 209.29.136.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29353: (50%)&lt;BR/&gt; 4850: (7.14286%)&lt;BR/&gt; 4724: (7.14286%)&lt;BR/&gt; 4216: (7.14286%)&lt;BR/&gt; 2946: (7.14286%)&gt;];
}
3321--7315[label="1;7pkt 7fpkt"];
3321--9959[label="1;7pkt 7fpkt"];
7315--9959[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="53.164.234.112" src_port="29353"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2255{
style=filled;
color=gray75;
3322[label="109.1.237.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7316[label="109.1.237.112;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2255[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.1.237.112:6882, 208.96.50.84:58533}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58533: (50%)&lt;BR/&gt; 6882: (50%)&gt;];
}
3322--7316[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58533" src_ip="109.1.237.112" src_port="6882"/>
    </slice>
    <from sec="1083733523" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2256{
style=filled;
color=gray75;
3323[label="109.197.238.112;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7317[label="109.197.238.112;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2256[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.197.238.112:*, *:445}[71.4286%]&lt;BR/&gt;{109.197.238.112:*, 136.151.235.67:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (35.7143%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 4675: (7.14286%)&lt;BR/&gt; 4373: (7.14286%)&lt;BR/&gt; 2369: (7.14286%)&gt;];
}
3323--7317[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.197.238.112"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.197.238.112"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.42.240.112"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2258{
style=filled;
color=gray75;
3328[label="196.34.37.113;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7321[label="196.34.37.113;5pkt 5fpkt", shape=invtriangle, color=brown];
9963[label="196.34.37.113;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2258[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.34.37.113:63484, 219.223.192.192:2745}[20%]&lt;BR/&gt;{196.34.37.113:63486, 219.223.192.192:1025}[20%]&lt;BR/&gt;{196.34.37.113:63487, 219.223.192.192:3127}[20%]&lt;BR/&gt;{196.34.37.113:63493, 219.223.192.192:6129}[20%]&lt;BR/&gt;{196.34.37.113:63494, 219.223.192.192:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63494: (10%)&lt;BR/&gt; 63493: (10%)&lt;BR/&gt; 63487: (10%)&lt;BR/&gt; 63486: (10%)&lt;BR/&gt; 63484: (10%)&gt;];
}
3328--7321[label="1;5pkt 5fpkt"];
3328--9963[label="1;5pkt 5fpkt"];
7321--9963[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.192.192" dst_port="80" src_ip="196.34.37.113" src_port="63494"/>
      <filter dst_ip="219.223.192.192" dst_port="6129" src_ip="196.34.37.113" src_port="63493"/>
      <filter dst_ip="219.223.192.192" dst_port="3127" src_ip="196.34.37.113" src_port="63487"/>
      <filter dst_ip="219.223.192.192" dst_port="1025" src_ip="196.34.37.113" src_port="63486"/>
      <filter dst_ip="219.223.192.192" dst_port="2745" src_ip="196.34.37.113" src_port="63484"/>
    </slice>
    <from sec="1083733272" usec="0"/>
    <to sec="1083733598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2259{
style=filled;
color=gray75;
3331[label="200.109.76.113;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7323[label="200.109.76.113;1pkt 1fpkt", shape=invtriangle, color=brown];
9965[label="200.109.76.113;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2259[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.109.76.113:1394, 136.151.235.67:80}[50%]&lt;BR/&gt;{200.109.76.113:3137, 155.211.213.87:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3137: (30%)&lt;BR/&gt; 445: (30%)&lt;BR/&gt; 1394: (20%)&lt;BR/&gt; 80: (20%)&gt;];
}
3331--7323[label="1;1pkt 1fpkt"];
3331--9965[label="1;2pkt 2fpkt"];
7323--9965[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.213.87" dst_port="445" src_ip="200.109.76.113" src_port="3137"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="200.109.76.113" src_port="1394"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083733543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2260{
style=filled;
color=gray75;
515[label="136.150.93.113;s;70pkt 70fpkt", shape=diamond, color=yellow];
3334[label="136.150.93.113;77pkt 77fpkt", shape=pentagon, color=darkviolet];
7325[label="136.150.93.113;76pkt 76fpkt", shape=invtriangle, color=brown];
9966[label="136.150.93.113;77pkt 77fpkt", shape=invhouse, color=bisque];
stat2260[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.93.113:*, 44.212.42.47:80}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8333%)&lt;BR/&gt; 1863: (2.5%)&lt;BR/&gt; 34993: (0.666667%)&lt;BR/&gt; 34992: (0.666667%)&lt;BR/&gt; 34991: (0.666667%)&gt;];
}
515--982[label="0.0428571;3pkt 3fpkt"];
515--3334[label="1;70pkt 70fpkt"];
515--7325[label="0.985714;69pkt 69fpkt"];
515--9966[label="1;70pkt 70fpkt"];
3334--7325[label="1;76pkt 76fpkt"];
3334--9966[label="1;77pkt 77fpkt"];
7325--9966[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="44.212.42.47" dst_port="80" src_ip="136.150.93.113"/>
    </slice>
    <from sec="1083733223" usec="0"/>
    <to sec="1083734060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2261{
style=filled;
color=gray75;
3338[label="208.169.156.113;114pkt 114fpkt", shape=pentagon, color=darkviolet];
7328[label="208.169.156.113;114pkt 114fpkt", shape=invtriangle, color=brown];
9968[label="208.169.156.113;114pkt 114fpkt", shape=invhouse, color=bisque];
stat2261[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.169.156.113:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3338--7328[label="1;114pkt 114fpkt"];
3338--9968[label="1;114pkt 114fpkt"];
7328--9968[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.169.156.113" src_port="1027"/>
    </slice>
    <from sec="1083733589" usec="0"/>
    <to sec="1083733609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.108.160.113"/>
    </slice>
    <from sec="1083733418" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.225.170.113"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.147.186.113"/>
    </slice>
    <from sec="1083733345" usec="0"/>
    <to sec="1083734057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.240.87.114"/>
    </slice>
    <from sec="1083733526" usec="0"/>
    <to sec="1083733629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.205.100.114"/>
    </slice>
    <from sec="1083733631" usec="0"/>
    <to sec="1083733718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2267{
style=filled;
color=gray75;
3358[label="46.111.185.114;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7344[label="46.111.185.114;20pkt 20fpkt", shape=invtriangle, color=brown];
9977[label="46.111.185.114;20pkt 20fpkt", shape=invhouse, color=bisque];
stat2267[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.111.185.114:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49085: (2.5%)&lt;BR/&gt; 48880: (2.5%)&lt;BR/&gt; 48623: (2.5%)&lt;BR/&gt; 48605: (2.5%)&gt;];
}
3358--7344[label="1;20pkt 20fpkt"];
3358--9977[label="1;20pkt 20fpkt"];
7344--9977[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="46.111.185.114" src_port="80"/>
    </slice>
    <from sec="1083733563" usec="0"/>
    <to sec="1083733636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.5.1.115"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083733907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2269{
style=filled;
color=gray75;
3365[label="208.96.48.115;206pkt 206fpkt", shape=pentagon, color=darkviolet];
7350[label="208.96.48.115;206pkt 206fpkt", shape=invtriangle, color=brown];
stat2269[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.48.115:0, *:0}[98.0583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0583%)&lt;BR/&gt; 6129: (0.242718%)&lt;BR/&gt; 4855: (0.242718%)&lt;BR/&gt; 4853: (0.242718%)&lt;BR/&gt; 4850: (0.242718%)&gt;];
}
3365--7350[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.48.115"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.71.60.115"/>
    </slice>
    <from sec="1083733309" usec="0"/>
    <to sec="1083733398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.126.72.115"/>
    </slice>
    <from sec="1083733764" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2272{
style=filled;
color=gray75;
3370[label="193.120.108.115;153pkt 153fpkt", shape=pentagon, color=darkviolet];
7354[label="193.120.108.115;152pkt 152fpkt", shape=invtriangle, color=brown];
9986[label="193.120.108.115;153pkt 153fpkt", shape=invhouse, color=bisque];
stat2272[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.120.108.115:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3370--7354[label="1;152pkt 152fpkt"];
3370--9986[label="1;153pkt 153fpkt"];
7354--9986[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.120.108.115" src_port="1032"/>
    </slice>
    <from sec="1083733871" usec="0"/>
    <to sec="1083733889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2273{
style=filled;
color=gray75;
3373[label="93.194.152.115;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7357[label="93.194.152.115;13pkt 13fpkt", shape=invtriangle, color=brown];
9988[label="93.194.152.115;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2273[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.194.152.115:80, 136.151.2.211:*}[64.2857%]&lt;BR/&gt;{93.194.152.115:80, 155.148.136.25:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24936: (3.75%)&lt;BR/&gt; 24738: (3.75%)&lt;BR/&gt; 24687: (3.75%)&lt;BR/&gt; 24507: (3.75%)&gt;];
}
3373--7357[label="1;13pkt 13fpkt"];
3373--9988[label="1;13pkt 13fpkt"];
7357--9988[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.2.211" src_ip="93.194.152.115" src_port="80"/>
      <filter dst_ip="155.148.136.25" src_ip="93.194.152.115" src_port="80"/>
    </slice>
    <from sec="1083733472" usec="0"/>
    <to sec="1083734052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2274{
style=filled;
color=gray75;
3380[label="93.161.21.116;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7361[label="93.161.21.116;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2274[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.161.21.116:2187, 155.211.225.230:3127}[50%]&lt;BR/&gt;{93.161.21.116:2793, 155.211.225.231:3127}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2793: (25%)&lt;BR/&gt; 2187: (25%)&gt;];
}
3380--7361[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.225.231" dst_port="3127" src_ip="93.161.21.116" src_port="2793"/>
      <filter dst_ip="155.211.225.230" dst_port="3127" src_ip="93.161.21.116" src_port="2187"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="165.206.37.116"/>
    </slice>
    <from sec="1083733464" usec="0"/>
    <to sec="1083733598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2276{
style=filled;
color=gray75;
3386[label="141.22.86.116;24pkt 24fpkt", shape=pentagon, color=darkviolet];
7364[label="141.22.86.116;24pkt 24fpkt", shape=invtriangle, color=brown];
stat2276[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.86.116:*, 46.58.105.171:2703}[50%]&lt;BR/&gt;{141.22.86.116:*, 46.58.105.155:2703}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (50%)&lt;BR/&gt; 54170: (2.08333%)&lt;BR/&gt; 54169: (2.08333%)&lt;BR/&gt; 54168: (2.08333%)&lt;BR/&gt; 54167: (2.08333%)&gt;];
}
3386--7364[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="46.58.105.171" dst_port="2703" src_ip="141.22.86.116"/>
      <filter dst_ip="46.58.105.155" dst_port="2703" src_ip="141.22.86.116"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2277{
style=filled;
color=gray75;
806[label="95.98.110.116;s;66pkt 66fpkt", shape=diamond, color=yellow];
3390[label="95.98.110.116;66pkt 66fpkt", shape=pentagon, color=darkviolet];
7367[label="95.98.110.116;65pkt 65fpkt", shape=invtriangle, color=brown];
9993[label="95.98.110.116;66pkt 66fpkt", shape=invhouse, color=bisque];
stat2277[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.98.110.116:80, 209.29.138.127:*}[70.1493%]&lt;BR/&gt;{95.98.110.116:80, 209.29.138.126:*}[28.3582%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8099%)&lt;BR/&gt; 2396: (1.52091%)&lt;BR/&gt; 4783: (0.760456%)&lt;BR/&gt; 4712: (0.760456%)&lt;BR/&gt; 4709: (0.760456%)&gt;];
}
806--3390[label="0.984848;65pkt 65fpkt"];
806--7367[label="0.984615;64pkt 64fpkt"];
806--9993[label="0.984848;65pkt 65fpkt"];
3390--7367[label="1;65pkt 65fpkt"];
3390--9993[label="1;66pkt 66fpkt"];
7367--9993[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="95.98.110.116" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="95.98.110.116" src_port="80"/>
    </slice>
    <from sec="1083733594" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.30.116.116"/>
    </slice>
    <from sec="1083733341" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.176.118.116"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.10.240.116"/>
    </slice>
    <from sec="1083733314" usec="0"/>
    <to sec="1083733393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2281{
style=filled;
color=gray75;
3400[label="136.151.248.116;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7373[label="136.151.248.116;20pkt 20fpkt", shape=invtriangle, color=brown];
stat2281[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.248.116:80, 45.108.82.184:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60720: (2.43902%)&lt;BR/&gt; 58615: (2.43902%)&lt;BR/&gt; 56884: (2.43902%)&lt;BR/&gt; 55201: (2.43902%)&gt;];
}
3400--7373[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="136.151.248.116" src_port="80"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2282{
style=filled;
color=gray75;
3401[label="45.179.12.117;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7374[label="45.179.12.117;1pkt 1fpkt", shape=invtriangle, color=brown];
9997[label="45.179.12.117;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2282[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.179.12.117:25, 173.138.131.58:4441}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4441: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3401--7374[label="1;1pkt 1fpkt"];
3401--9997[label="1;1pkt 1fpkt"];
7374--9997[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.131.58" dst_port="4441" src_ip="45.179.12.117" src_port="25"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2283{
style=filled;
color=gray75;
3404[label="46.66.75.117;100pkt 100fpkt", shape=pentagon, color=darkviolet];
7376[label="46.66.75.117;99pkt 99fpkt", shape=invtriangle, color=brown];
stat2283[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.66.75.117:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3720: (1.00503%)&lt;BR/&gt; 1948: (1.00503%)&lt;BR/&gt; 4995: (0.502513%)&lt;BR/&gt; 4921: (0.502513%)&gt;];
}
3404--7376[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="46.66.75.117"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.164.96.117"/>
    </slice>
    <from sec="1083733777" usec="0"/>
    <to sec="1083733831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2285{
style=filled;
color=gray75;
3408[label="47.109.111.117;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7380[label="47.109.111.117;15pkt 15fpkt", shape=invtriangle, color=brown];
10001[label="47.109.111.117;16pkt 16fpkt", shape=invhouse, color=bisque];
stat2285[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.109.111.117:*, *:135}[37.5%]&lt;BR/&gt;{47.109.111.117:*, *:1025}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (19.1489%)&lt;BR/&gt; 135: (19.1489%)&lt;BR/&gt; 2745: (9.57447%)&lt;BR/&gt; 4155: (3.19149%)&lt;BR/&gt; 4152: (3.19149%)&gt;];
}
3408--7380[label="1;15pkt 15fpkt"];
3408--10001[label="1;16pkt 16fpkt"];
7380--10001[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="47.109.111.117"/>
      <filter dst_port="135" src_ip="47.109.111.117"/>
    </slice>
    <from sec="1083733425" usec="0"/>
    <to sec="1083734011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2286{
style=filled;
color=gray75;
3410[label="41.21.149.117;147pkt 147fpkt", shape=pentagon, color=darkviolet];
7382[label="41.21.149.117;147pkt 147fpkt", shape=invtriangle, color=brown];
stat2286[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.21.149.117:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3410--7382[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="41.21.149.117" src_port="1029"/>
    </slice>
    <from sec="1083733269" usec="0"/>
    <to sec="1083733296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2287{
style=filled;
color=gray75;
3411[label="209.29.157.117;87pkt 87fpkt", shape=pentagon, color=darkviolet];
7383[label="209.29.157.117;86pkt 86fpkt", shape=invtriangle, color=brown];
stat2287[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.157.117:0, *:0}[97.7011%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.6879%)&lt;BR/&gt; 3554: (0.578035%)&lt;BR/&gt; 1870: (0.578035%)&lt;BR/&gt; 445: (0.578035%)&lt;BR/&gt; 135: (0.578035%)&gt;];
}
3411--7383[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.157.117"/>
    </slice>
    <from sec="1083733423" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.240.199.117"/>
    </slice>
    <from sec="1083733354" usec="0"/>
    <to sec="1083733621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.71.203.117"/>
    </slice>
    <from sec="1083733294" usec="0"/>
    <to sec="1083733393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.161.118"/>
    </slice>
    <from sec="1083733275" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.97.164.118"/>
    </slice>
    <from sec="1083733745" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2292{
style=filled;
color=gray75;
3424[label="93.12.185.118;90pkt 90fpkt", shape=pentagon, color=darkviolet];
7392[label="93.12.185.118;89pkt 89fpkt", shape=invtriangle, color=brown];
stat2292[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.12.185.118:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4997: (0.558659%)&lt;BR/&gt; 4984: (0.558659%)&lt;BR/&gt; 4972: (0.558659%)&lt;BR/&gt; 4958: (0.558659%)&gt;];
}
3424--7392[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="93.12.185.118"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2293{
style=filled;
color=gray75;
3426[label="173.138.211.118;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7394[label="173.138.211.118;17pkt 17fpkt", shape=invtriangle, color=brown];
10007[label="173.138.211.118;17pkt 17fpkt", shape=invhouse, color=bisque];
stat2293[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.211.118:25, 209.68.141.24:*}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44793: (2.94118%)&lt;BR/&gt; 44135: (2.94118%)&lt;BR/&gt; 40842: (2.94118%)&lt;BR/&gt; 39405: (2.94118%)&gt;];
}
3426--7394[label="1;17pkt 17fpkt"];
3426--10007[label="1;17pkt 17fpkt"];
7394--10007[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.68.141.24" src_ip="173.138.211.118" src_port="25"/>
    </slice>
    <from sec="1083733301" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.196.1.119"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083733283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.157.24.119"/>
    </slice>
    <from sec="1083733870" usec="0"/>
    <to sec="1083734060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.72.142.119"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2297{
style=filled;
color=gray75;
3440[label="198.171.24.120;35pkt 35fpkt", shape=pentagon, color=darkviolet];
7403[label="198.171.24.120;34pkt 34fpkt", shape=invtriangle, color=brown];
10012[label="198.171.24.120;34pkt 34fpkt", shape=invhouse, color=bisque];
stat2297[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.171.24.120:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52183: (1.45631%)&lt;BR/&gt; 52182: (1.45631%)&lt;BR/&gt; 52172: (1.45631%)&lt;BR/&gt; 52171: (1.45631%)&gt;];
}
3440--7403[label="1;34pkt 34fpkt"];
3440--10012[label="1;34pkt 34fpkt"];
7403--10012[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="198.171.24.120" src_port="80"/>
    </slice>
    <from sec="1083733665" usec="0"/>
    <to sec="1083733727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.19.48.120"/>
    </slice>
    <from sec="1083733580" usec="0"/>
    <to sec="1083733806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2299{
style=filled;
color=gray75;
3446[label="198.220.59.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7408[label="198.220.59.120;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2299[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.220.59.120:6668, 209.29.136.89:2432}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6668: (50%)&lt;BR/&gt; 2432: (50%)&gt;];
}
3446--7408[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="2432" src_ip="198.220.59.120" src_port="6668"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,011,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.29.138.120"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.26.179.120"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083733275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2302{
style=filled;
color=gray75;
3459[label="44.108.17.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7418[label="44.108.17.121;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2302[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.108.17.121:32825, 136.151.47.226:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32825: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3459--7418[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.47.226" dst_port="80" src_ip="44.108.17.121" src_port="32825"/>
    </slice>
    <from sec="1083733748" usec="0"/>
    <to sec="1083733777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2303{
style=filled;
color=gray75;
3462[label="218.253.48.121;239pkt 239fpkt", shape=pentagon, color=darkviolet];
7421[label="218.253.48.121;239pkt 239fpkt", shape=invtriangle, color=brown];
10022[label="218.253.48.121;238pkt 238fpkt", shape=invhouse, color=bisque];
stat2303[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.253.48.121:65055, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65055: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3462--7421[label="1;239pkt 239fpkt"];
3462--10022[label="1;238pkt 238fpkt"];
7421--10022[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.253.48.121" src_port="65055"/>
    </slice>
    <from sec="1083733459" usec="0"/>
    <to sec="1083733473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.165.49.121"/>
    </slice>
    <from sec="1083733327" usec="0"/>
    <to sec="1083733477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2305{
style=filled;
color=gray75;
3466[label="173.138.151.121;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7425[label="173.138.151.121;1pkt 1fpkt", shape=invtriangle, color=brown];
10025[label="173.138.151.121;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2305[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.151.121:3487, 216.160.47.147:6661}[50%]&lt;BR/&gt;{173.138.151.121:3279, 198.222.100.202:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6661: (37.5%)&lt;BR/&gt; 3487: (37.5%)&lt;BR/&gt; 5050: (12.5%)&lt;BR/&gt; 3279: (12.5%)&gt;];
}
3466--7425[label="1;1pkt 1fpkt"];
3466--10025[label="1;1pkt 1fpkt"];
7425--10025[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.202" dst_port="5050" src_ip="173.138.151.121" src_port="3279"/>
      <filter dst_ip="216.160.47.147" dst_port="6661" src_ip="173.138.151.121" src_port="3487"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2306{
style=filled;
color=gray75;
3467[label="173.138.163.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7426[label="173.138.163.121;1pkt 1fpkt", shape=invtriangle, color=brown];
10026[label="173.138.163.121;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2306[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.163.121:1037, 198.222.100.235:5050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
3467--7426[label="1;1pkt 1fpkt"];
3467--10026[label="1;1pkt 1fpkt"];
7426--10026[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.235" dst_port="5050" src_ip="173.138.163.121" src_port="1037"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.214.177.121"/>
    </slice>
    <from sec="1083733246" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2308{
style=filled;
color=gray75;
3470[label="109.74.206.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7429[label="109.74.206.121;1pkt 1fpkt", shape=invtriangle, color=brown];
10028[label="109.74.206.121;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2308[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.74.206.121:4692, 141.22.224.182:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4692: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
3470--7429[label="1;1pkt 1fpkt"];
3470--10028[label="1;1pkt 1fpkt"];
7429--10028[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.224.182" dst_port="445" src_ip="109.74.206.121" src_port="4692"/>
    </slice>
    <from sec="1083733337" usec="0"/>
    <to sec="1083733915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.32.21.122"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083733634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.163.66.122"/>
    </slice>
    <from sec="1083733681" usec="0"/>
    <to sec="1083734013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.161.86.122"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2313{
style=filled;
color=gray75;
3480[label="141.22.88.122;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7439[label="141.22.88.122;30pkt 30fpkt", shape=invtriangle, color=brown];
stat2313[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.88.122:*, 199.14.39.96:80}[43.3333%]&lt;BR/&gt;{141.22.88.122:*, 46.202.23.22:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46008: (1.66667%)&lt;BR/&gt; 46007: (1.66667%)&lt;BR/&gt; 46006: (1.66667%)&lt;BR/&gt; 46005: (1.66667%)&gt;];
}
3480--7439[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="199.14.39.96" dst_port="80" src_ip="141.22.88.122"/>
      <filter dst_ip="46.202.23.22" dst_port="80" src_ip="141.22.88.122"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2314{
style=filled;
color=gray75;
3481[label="196.114.88.122;246pkt 246fpkt", shape=pentagon, color=darkviolet];
7440[label="196.114.88.122;245pkt 245fpkt", shape=invtriangle, color=brown];
10037[label="196.114.88.122;246pkt 246fpkt", shape=invhouse, color=bisque];
stat2314[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.114.88.122:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3481--7440[label="1;245pkt 245fpkt"];
3481--10037[label="1;246pkt 246fpkt"];
7440--10037[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.114.88.122" src_port="1031"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083733233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2315{
style=filled;
color=gray75;
3491[label="209.131.218.122;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7447[label="209.131.218.122;13pkt 13fpkt", shape=invtriangle, color=brown];
10043[label="209.131.218.122;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2315[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.131.218.122:*, 136.151.235.67:80}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57969: (3.84615%)&lt;BR/&gt; 45777: (3.84615%)&lt;BR/&gt; 41832: (3.84615%)&lt;BR/&gt; 35927: (3.84615%)&gt;];
}
3491--7447[label="1;13pkt 13fpkt"];
3491--10043[label="1;13pkt 13fpkt"];
7447--10043[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="209.131.218.122"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2316{
style=filled;
color=gray75;
3493[label="136.150.25.123;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7449[label="136.150.25.123;23pkt 23fpkt", shape=invtriangle, color=brown];
stat2316[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.25.123:*, 213.101.107.7:80}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6522%)&lt;BR/&gt; 443: (4.34783%)&lt;BR/&gt; 5865: (2.17391%)&lt;BR/&gt; 5864: (2.17391%)&lt;BR/&gt; 5863: (2.17391%)&gt;];
}
3493--7449[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.107.7" dst_port="80" src_ip="136.150.25.123"/>
    </slice>
    <from sec="1083733271" usec="0"/>
    <to sec="1083733893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2317{
style=filled;
color=gray75;
3494[label="210.209.55.123;206pkt 206fpkt", shape=pentagon, color=darkviolet];
7450[label="210.209.55.123;206pkt 206fpkt", shape=invtriangle, color=brown];
10045[label="210.209.55.123;205pkt 205fpkt", shape=invhouse, color=bisque];
stat2317[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.209.55.123:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61434: (0.243112%)&lt;BR/&gt; 61427: (0.243112%)&lt;BR/&gt; 61417: (0.243112%)&lt;BR/&gt; 61412: (0.243112%)&gt;];
}
3494--7450[label="1;206pkt 206fpkt"];
3494--10045[label="1;205pkt 205fpkt"];
7450--10045[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.209.55.123"/>
    </slice>
    <from sec="1083733969" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.164.70.123"/>
    </slice>
    <from sec="1083733793" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2319{
style=filled;
color=gray75;
3499[label="209.18.125.123;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7453[label="209.18.125.123;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2319[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.125.123:*, 192.220.218.93:6082}[28.5714%]&lt;BR/&gt;{209.18.125.123:*, 95.103.234.143:9501}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9501: (15.3846%)&lt;BR/&gt; 6082: (11.5385%)&lt;BR/&gt; 61277: (7.69231%)&lt;BR/&gt; 61161: (7.69231%)&lt;BR/&gt; 61138: (7.69231%)&gt;];
}
3499--7453[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="95.103.234.143" dst_port="9501" src_ip="209.18.125.123"/>
      <filter dst_ip="192.220.218.93" dst_port="6082" src_ip="209.18.125.123"/>
    </slice>
    <from sec="1083733514" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.139.155.123"/>
    </slice>
    <from sec="1083733535" usec="0"/>
    <to sec="1083733660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2321{
style=filled;
color=gray75;
3502[label="213.152.178.123;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7456[label="213.152.178.123;2pkt 2fpkt", shape=invtriangle, color=brown];
10049[label="213.152.178.123;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2321[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.152.178.123:1642, 141.132.22.8:445}[33.3333%]&lt;BR/&gt;{213.152.178.123:1758, 141.132.139.17:445}[33.3333%]&lt;BR/&gt;{213.152.178.123:2349, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 1758: (18.75%)&lt;BR/&gt; 1642: (18.75%)&lt;BR/&gt; 2349: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
3502--7456[label="1;2pkt 2fpkt"];
3502--10049[label="1;3pkt 3fpkt"];
7456--10049[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="213.152.178.123" src_port="2349"/>
      <filter dst_ip="141.132.139.17" dst_port="445" src_ip="213.152.178.123" src_port="1758"/>
      <filter dst_ip="141.132.22.8" dst_port="445" src_ip="213.152.178.123" src_port="1642"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083733685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.17.193.123"/>
    </slice>
    <from sec="1083733975" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2323{
style=filled;
color=gray75;
3510[label="55.180.55.124;243pkt 243fpkt", shape=pentagon, color=darkviolet];
7461[label="55.180.55.124;242pkt 242fpkt", shape=invtriangle, color=brown];
stat2323[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.180.55.124:1027, *:137}[99.5885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (49.7938%)&lt;BR/&gt; 137: (49.7938%)&lt;BR/&gt; 2909: (0.206186%)&lt;BR/&gt; 80: (0.206186%)&gt;];
}
3510--7461[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="55.180.55.124" src_port="1027"/>
    </slice>
    <from sec="1083733750" usec="0"/>
    <to sec="1083733884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2324{
style=filled;
color=gray75;
3515[label="173.138.128.124;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7464[label="173.138.128.124;17pkt 17fpkt", shape=invtriangle, color=brown];
stat2324[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.128.124:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 45033: (2.94118%)&lt;BR/&gt; 36203: (2.94118%)&lt;BR/&gt; 29295: (2.94118%)&lt;BR/&gt; 27212: (2.94118%)&gt;];
}
3515--7464[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.128.124" src_port="25"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.38.217.124"/>
    </slice>
    <from sec="1083733396" usec="0"/>
    <to sec="1083733678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2326{
style=filled;
color=gray75;
3521[label="45.236.0.125;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7467[label="45.236.0.125;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2326[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.236.0.125:4412, 173.138.170.242:113}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4412: (50%)&lt;BR/&gt; 113: (50%)&gt;];
}
3521--7467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.170.242" dst_port="113" src_ip="45.236.0.125" src_port="4412"/>
    </slice>
    <from sec="1083733259" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2327{
style=filled;
color=gray75;
3528[label="41.70.48.125;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7470[label="41.70.48.125;1pkt 1fpkt", shape=invtriangle, color=brown];
10056[label="41.70.48.125;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2327[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.70.48.125:3220, 155.211.156.248:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3220: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
3528--7470[label="1;1pkt 1fpkt"];
3528--10056[label="1;1pkt 1fpkt"];
7470--10056[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.156.248" dst_port="445" src_ip="41.70.48.125" src_port="3220"/>
    </slice>
    <from sec="1083733805" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2328{
style=filled;
color=gray75;
3534[label="213.101.193.125;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7471[label="213.101.193.125;2pkt 2fpkt", shape=invtriangle, color=brown];
10057[label="213.101.193.125;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2328[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.193.125:1863, 155.148.161.33:4840}[33.3333%]&lt;BR/&gt;{213.101.193.125:1863, 209.29.136.89:1029}[33.3333%]&lt;BR/&gt;{213.101.193.125:1863, 173.138.233.182:1077}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4840: (21.4286%)&lt;BR/&gt; 1029: (21.4286%)&lt;BR/&gt; 1077: (7.14286%)&gt;];
}
3534--7471[label="1;2pkt 2fpkt"];
3534--10057[label="1;2pkt 2fpkt"];
7471--10057[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.233.182" dst_port="1077" src_ip="213.101.193.125" src_port="1863"/>
      <filter dst_ip="209.29.136.89" dst_port="1029" src_ip="213.101.193.125" src_port="1863"/>
      <filter dst_ip="155.148.161.33" dst_port="4840" src_ip="213.101.193.125" src_port="1863"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2329{
style=filled;
color=gray75;
3535[label="40.221.196.125;364pkt 364fpkt", shape=pentagon, color=darkviolet];
7472[label="40.221.196.125;364pkt 364fpkt", shape=invtriangle, color=brown];
10058[label="40.221.196.125;363pkt 363fpkt", shape=invhouse, color=bisque];
stat2329[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.221.196.125:25432, *:137}[67.8571%]&lt;BR/&gt;{40.221.196.125:26568, *:137}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 25432: (33.9138%)&lt;BR/&gt; 26568: (16.0862%)&gt;];
}
3535--7472[label="1;364pkt 364fpkt"];
3535--10058[label="1;363pkt 363fpkt"];
7472--10058[label="1;363pkt 363fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="40.221.196.125" src_port="25432"/>
      <filter dst_port="137" src_ip="40.221.196.125" src_port="26568"/>
    </slice>
    <from sec="1083733455" usec="0"/>
    <to sec="1083733990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2330{
style=filled;
color=gray75;
3536[label="198.249.197.125;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7473[label="198.249.197.125;8pkt 8fpkt", shape=invtriangle, color=brown];
stat2330[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.249.197.125:*, *:445}[75%]&lt;BR/&gt;{198.249.197.125:*, 136.151.235.67:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 3645: (6.25%)&lt;BR/&gt; 3456: (6.25%)&lt;BR/&gt; 3256: (6.25%)&gt;];
}
3536--7473[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="198.249.197.125"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="198.249.197.125"/>
    </slice>
    <from sec="1083733303" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.53.91.126"/>
    </slice>
    <from sec="1083733844" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2333{
style=filled;
color=gray75;
3550[label="53.163.171.126;225pkt 225fpkt", shape=pentagon, color=darkviolet];
7483[label="53.163.171.126;224pkt 224fpkt", shape=invtriangle, color=brown];
10064[label="53.163.171.126;224pkt 224fpkt", shape=invhouse, color=bisque];
stat2333[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.163.171.126:*, *:3128}[33.7778%]&lt;BR/&gt;{53.163.171.126:*, *:1080}[33.3333%]&lt;BR/&gt;{53.163.171.126:*, *:3127}[32.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.9391%)&lt;BR/&gt; 1080: (16.7162%)&lt;BR/&gt; 3127: (16.3447%)&lt;BR/&gt; 4667: (0.445765%)&lt;BR/&gt; 4626: (0.445765%)&gt;];
}
3550--7483[label="1;224pkt 224fpkt"];
3550--10064[label="1;224pkt 224fpkt"];
7483--10064[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="53.163.171.126"/>
      <filter dst_port="1080" src_ip="53.163.171.126"/>
      <filter dst_port="3127" src_ip="53.163.171.126"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2334{
style=filled;
color=gray75;
3557[label="52.38.250.126;246pkt 246fpkt", shape=pentagon, color=darkviolet];
7490[label="52.38.250.126;246pkt 246fpkt", shape=invtriangle, color=brown];
10068[label="52.38.250.126;246pkt 246fpkt", shape=invhouse, color=bisque];
stat2334[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.38.250.126:19104, *:137}[39.8374%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 19104: (19.9187%)&lt;BR/&gt; 19093: (8.33333%)&lt;BR/&gt; 19097: (8.13008%)&lt;BR/&gt; 19096: (5.69106%)&gt;];
}
3557--7490[label="1;246pkt 246fpkt"];
3557--10068[label="1;246pkt 246fpkt"];
7490--10068[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="52.38.250.126" src_port="19104"/>
    </slice>
    <from sec="1083733583" usec="0"/>
    <to sec="1083733598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2335{
style=filled;
color=gray75;
3560[label="109.197.48.127;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7491[label="109.197.48.127;7pkt 7fpkt", shape=invtriangle, color=brown];
10069[label="109.197.48.127;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2335[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.197.48.127:0, *:0}[57.1429%]&lt;BR/&gt;{109.197.48.127:*, *:445}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (57.1429%)&lt;BR/&gt; 445: (14.2857%)&lt;BR/&gt; 4207: (7.14286%)&lt;BR/&gt; 2293: (7.14286%)&lt;BR/&gt; 1911: (7.14286%)&gt;];
}
3560--7491[label="1;7pkt 7fpkt"];
3560--10069[label="1;7pkt 7fpkt"];
7491--10069[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.197.48.127"/>
      <filter src_ip="109.197.48.127"/>
    </slice>
    <from sec="1083733273" usec="0"/>
    <to sec="1083734037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2336{
style=filled;
color=gray75;
3563[label="209.130.181.127;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7492[label="209.130.181.127;9pkt 9fpkt", shape=invtriangle, color=brown];
10070[label="209.130.181.127;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2336[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.130.181.127:*, *:445}[77.7778%]&lt;BR/&gt;{209.130.181.127:*, 136.151.235.67:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (38.4615%)&lt;BR/&gt; 80: (11.5385%)&lt;BR/&gt; 3801: (5.76923%)&lt;BR/&gt; 3200: (5.76923%)&lt;BR/&gt; 2970: (5.76923%)&gt;];
}
3563--7492[label="1;9pkt 9fpkt"];
3563--10070[label="1;8pkt 8fpkt"];
7492--10070[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="209.130.181.127"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="209.130.181.127"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083734055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2337{
style=filled;
color=gray75;
3566[label="136.151.232.127;130pkt 130fpkt", shape=pentagon, color=darkviolet];
7494[label="136.151.232.127;129pkt 129fpkt", shape=invtriangle, color=brown];
stat2337[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.232.127:80, 201.244.159.5:*}[28.4615%]&lt;BR/&gt;{136.151.232.127:80, 109.173.224.196:*}[24.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48044: (0.3861%)&lt;BR/&gt; 41371: (0.3861%)&lt;BR/&gt; 40964: (0.3861%)&lt;BR/&gt; 40961: (0.3861%)&gt;];
}
3566--7494[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_ip="201.244.159.5" src_ip="136.151.232.127" src_port="80"/>
      <filter dst_ip="109.173.224.196" src_ip="136.151.232.127" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2338{
style=filled;
color=gray75;
3573[label="196.34.43.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7499[label="196.34.43.128;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2338[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.34.43.128:30782, 141.85.140.227:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30782: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3573--7499[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.140.227" dst_port="80" src_ip="196.34.43.128" src_port="30782"/>
    </slice>
    <from sec="1083733668" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2339{
style=filled;
color=gray75;
3574[label="40.153.65.128;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7500[label="40.153.65.128;4pkt 4fpkt", shape=invtriangle, color=brown];
10075[label="40.153.65.128;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2339[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.153.65.128:3265, 136.151.235.67:80}[20%]&lt;BR/&gt;{40.153.65.128:4549, 141.22.66.104:445}[20%]&lt;BR/&gt;{40.153.65.128:1325, 141.85.140.118:445}[20%]&lt;BR/&gt;{40.153.65.128:4177, 141.145.213.156:445}[20%]&lt;BR/&gt;{40.153.65.128:3879, 141.145.44.212:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 4549: (10.7143%)&lt;BR/&gt; 4177: (10.7143%)&lt;BR/&gt; 3879: (10.7143%)&lt;BR/&gt; 1325: (10.7143%)&gt;];
}
3574--7500[label="1;4pkt 4fpkt"];
3574--10075[label="1;5pkt 5fpkt"];
7500--10075[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.145.44.212" dst_port="445" src_ip="40.153.65.128" src_port="3879"/>
      <filter dst_ip="141.145.213.156" dst_port="445" src_ip="40.153.65.128" src_port="4177"/>
      <filter dst_ip="141.85.140.118" dst_port="445" src_ip="40.153.65.128" src_port="1325"/>
      <filter dst_ip="141.22.66.104" dst_port="445" src_ip="40.153.65.128" src_port="4549"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="40.153.65.128" src_port="3265"/>
    </slice>
    <from sec="1083733346" usec="0"/>
    <to sec="1083734072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2340{
style=filled;
color=gray75;
3581[label="136.151.209.128;108pkt 108fpkt", shape=pentagon, color=darkviolet];
7505[label="136.151.209.128;107pkt 107fpkt", shape=invtriangle, color=brown];
stat2340[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.209.128:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3581--7505[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.209.128"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2341{
style=filled;
color=gray75;
3582[label="136.151.228.128;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7506[label="136.151.228.128;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2341[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.228.128:80, 109.223.48.185:4114}[25%]&lt;BR/&gt;{136.151.228.128:80, 109.223.48.185:4116}[25%]&lt;BR/&gt;{136.151.228.128:80, 109.223.48.185:4118}[25%]&lt;BR/&gt;{136.151.228.128:80, 109.223.48.185:4120}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4120: (12.5%)&lt;BR/&gt; 4118: (12.5%)&lt;BR/&gt; 4116: (12.5%)&lt;BR/&gt; 4114: (12.5%)&gt;];
}
3582--7506[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="109.223.48.185" dst_port="4120" src_ip="136.151.228.128" src_port="80"/>
      <filter dst_ip="109.223.48.185" dst_port="4118" src_ip="136.151.228.128" src_port="80"/>
      <filter dst_ip="109.223.48.185" dst_port="4116" src_ip="136.151.228.128" src_port="80"/>
      <filter dst_ip="109.223.48.185" dst_port="4114" src_ip="136.151.228.128" src_port="80"/>
    </slice>
    <from sec="1083733569" usec="0"/>
    <to sec="1083733614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2342{
style=filled;
color=gray75;
3591[label="213.19.88.129;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7512[label="213.19.88.129;5pkt 5fpkt", shape=invtriangle, color=brown];
10082[label="213.19.88.129;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2342[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.19.88.129:80, 209.29.138.126:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2012: (8.82353%)&lt;BR/&gt; 1965: (8.82353%)&lt;BR/&gt; 1550: (8.82353%)&lt;BR/&gt; 1445: (8.82353%)&gt;];
}
3591--7512[label="1;5pkt 5fpkt"];
3591--10082[label="1;6pkt 6fpkt"];
7512--10082[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="213.19.88.129" src_port="80"/>
    </slice>
    <from sec="1083733902" usec="0"/>
    <to sec="1083733977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2343{
style=filled;
color=gray75;
3592[label="93.17.104.129;247pkt 247fpkt", shape=pentagon, color=darkviolet];
7513[label="93.17.104.129;246pkt 246fpkt", shape=invtriangle, color=brown];
stat2343[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.17.104.129:1707, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1707: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3592--7513[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="93.17.104.129" src_port="1707"/>
    </slice>
    <from sec="1083733866" usec="0"/>
    <to sec="1083733883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.50.140.129"/>
    </slice>
    <from sec="1083733697" usec="0"/>
    <to sec="1083733798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.123.228.129"/>
    </slice>
    <from sec="1083733973" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.205.3.130"/>
    </slice>
    <from sec="1083733895" usec="0"/>
    <to sec="1083734044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.130.4.130"/>
    </slice>
    <from sec="1083733883" usec="0"/>
    <to sec="1083733968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2348{
style=filled;
color=gray75;
3608[label="209.139.17.130;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7527[label="209.139.17.130;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2348[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.139.17.130:*, 209.29.167.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (7.14286%)&lt;BR/&gt; 4453: (7.14286%)&lt;BR/&gt; 4452: (7.14286%)&lt;BR/&gt; 4451: (7.14286%)&lt;BR/&gt; 4450: (7.14286%)&gt;];
}
3608--7527[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.167.25" src_ip="209.139.17.130"/>
    </slice>
    <from sec="1083733640" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2349{
style=filled;
color=gray75;
3610[label="202.84.44.130;76pkt 76fpkt", shape=pentagon, color=darkviolet];
7528[label="202.84.44.130;75pkt 75fpkt", shape=invtriangle, color=brown];
10090[label="202.84.44.130;75pkt 75fpkt", shape=invhouse, color=bisque];
stat2349[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.84.44.130:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4879: (0.663717%)&lt;BR/&gt; 4834: (0.663717%)&lt;BR/&gt; 4741: (0.663717%)&lt;BR/&gt; 4698: (0.663717%)&gt;];
}
3610--7528[label="1;75pkt 75fpkt"];
3610--10090[label="1;75pkt 75fpkt"];
7528--10090[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="202.84.44.130"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2350{
style=filled;
color=gray75;
3612[label="93.205.69.130;210pkt 210fpkt", shape=pentagon, color=darkviolet];
7529[label="93.205.69.130;209pkt 209fpkt", shape=invtriangle, color=brown];
10091[label="93.205.69.130;209pkt 209fpkt", shape=invhouse, color=bisque];
stat2350[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.205.69.130:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3612--7529[label="1;209pkt 209fpkt"];
3612--10091[label="1;209pkt 209fpkt"];
7529--10091[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="93.205.69.130" src_port="1029"/>
    </slice>
    <from sec="1083733839" usec="0"/>
    <to sec="1083733853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="94.49.74.130"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2352{
style=filled;
color=gray75;
3613[label="109.220.76.130;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7531[label="109.220.76.130;7pkt 7fpkt", shape=invtriangle, color=brown];
10092[label="109.220.76.130;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2352[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.220.76.130:0, *:0}[42.8571%]&lt;BR/&gt;{109.220.76.130:*, *:445}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (42.8571%)&lt;BR/&gt; 445: (21.4286%)&lt;BR/&gt; 4276: (7.14286%)&lt;BR/&gt; 3667: (7.14286%)&lt;BR/&gt; 2149: (7.14286%)&gt;];
}
3613--7531[label="1;7pkt 7fpkt"];
3613--10092[label="1;7pkt 7fpkt"];
7531--10092[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.220.76.130"/>
      <filter src_ip="109.220.76.130"/>
    </slice>
    <from sec="1083733377" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.197.92.130"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2354{
style=filled;
color=gray75;
3616[label="196.113.94.130;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7535[label="196.113.94.130;17pkt 17fpkt", shape=invtriangle, color=brown];
stat2354[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.113.94.130:*, 219.24.89.20:*}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (8.82353%)&lt;BR/&gt; 3127: (5.88235%)&lt;BR/&gt; 2745: (5.88235%)&lt;BR/&gt; 1433: (5.88235%)&lt;BR/&gt; 1025: (5.88235%)&gt;];
}
3616--7535[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="219.24.89.20" src_ip="196.113.94.130"/>
    </slice>
    <from sec="1083733906" usec="0"/>
    <to sec="1083734027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2355{
style=filled;
color=gray75;
3619[label="155.211.122.130;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7537[label="155.211.122.130;19pkt 19fpkt", shape=invtriangle, color=brown];
10095[label="155.211.122.130;18pkt 18fpkt", shape=invhouse, color=bisque];
stat2355[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.211.122.130:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3619--7537[label="1;19pkt 19fpkt"];
3619--10095[label="1;18pkt 18fpkt"];
7537--10095[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="155.211.122.130"/>
    </slice>
    <from sec="1083733394" usec="0"/>
    <to sec="1083734050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2356{
style=filled;
color=gray75;
3622[label="192.50.171.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7538[label="192.50.171.130;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2356[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.50.171.130:4076, 155.211.208.173:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4076: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
3622--7538[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.208.173" dst_port="445" src_ip="192.50.171.130" src_port="4076"/>
    </slice>
    <from sec="1083733521" usec="0"/>
    <to sec="1083733926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2357{
style=filled;
color=gray75;
265[label="192.201.175.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
828[label="155.148.138.139;d;8pkt 8fpkt", shape=diamond, color=yellow];
3624[label="41.54.181.130;59pkt 59fpkt", shape=pentagon, color=darkviolet];
7121[label="192.201.175.96;1pkt 1fpkt", shape=invtriangle, color=brown];
7540[label="41.54.181.130;59pkt 59fpkt", shape=invtriangle, color=brown];
10097[label="41.54.181.130;59pkt 59fpkt", shape=invhouse, color=bisque];
stat2357[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.54.181.130:*, *:3127}[89.3939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (47.5936%)&lt;BR/&gt; 2693: (1.06952%)&lt;BR/&gt; 0: (1.06952%)&lt;BR/&gt; 7131: (0.802139%)&lt;BR/&gt; 4803: (0.802139%)&gt;];
}
265--828[label="1;1pkt 1fpkt"];
265--7121[label="1;1pkt 1fpkt"];
828--3624[label="0.125;1pkt 1fpkt"];
828--7121[label="1;1pkt 1fpkt"];
828--7540[label="0.125;1pkt 1fpkt"];
828--10097[label="0.125;1pkt 1fpkt"];
3624--7540[label="1;59pkt 59fpkt"];
3624--10097[label="1;59pkt 59fpkt"];
7540--10097[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="41.54.181.130"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2358{
style=filled;
color=gray75;
3625[label="213.101.197.130;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7541[label="213.101.197.130;4pkt 4fpkt", shape=invtriangle, color=brown];
10098[label="213.101.197.130;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2358[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.197.130:1863, 209.18.125.26:4905}[25%]&lt;BR/&gt;{213.101.197.130:1863, 155.148.136.45:4966}[25%]&lt;BR/&gt;{213.101.197.130:1863, 141.22.118.1:3094}[25%]&lt;BR/&gt;{213.101.197.130:1863, 141.22.118.1:3175}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4905: (15%)&lt;BR/&gt; 3175: (15%)&lt;BR/&gt; 3094: (15%)&lt;BR/&gt; 4966: (5%)&gt;];
}
3625--7541[label="1;3pkt 3fpkt"];
3625--10098[label="1;3pkt 3fpkt"];
7541--10098[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.118.1" dst_port="3175" src_ip="213.101.197.130" src_port="1863"/>
      <filter dst_ip="141.22.118.1" dst_port="3094" src_ip="213.101.197.130" src_port="1863"/>
      <filter dst_ip="155.148.136.45" dst_port="4966" src_ip="213.101.197.130" src_port="1863"/>
      <filter dst_ip="209.18.125.26" dst_port="4905" src_ip="213.101.197.130" src_port="1863"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2359{
style=filled;
color=gray75;
3628[label="40.230.213.130;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7543[label="40.230.213.130;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2359[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.230.213.130:27015, 155.148.90.77:1029}[50%]&lt;BR/&gt;{40.230.213.130:27015, 155.148.90.77:27005}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27015: (50%)&lt;BR/&gt; 27005: (25%)&lt;BR/&gt; 1029: (25%)&gt;];
}
3628--7543[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.90.77" dst_port="27005" src_ip="40.230.213.130" src_port="27015"/>
      <filter dst_ip="155.148.90.77" dst_port="1029" src_ip="40.230.213.130" src_port="27015"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083733271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.112.221.130"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2361{
style=filled;
color=gray75;
3632[label="193.114.232.130;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7546[label="193.114.232.130;5pkt 5fpkt", shape=invtriangle, color=brown];
10101[label="193.114.232.130;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2361[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.232.130:*, 208.96.53.137:25}[50%]&lt;BR/&gt;{193.114.232.130:113, 208.96.53.137:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (26.4706%)&lt;BR/&gt; 25: (23.5294%)&lt;BR/&gt; 39417: (8.82353%)&lt;BR/&gt; 39405: (8.82353%)&lt;BR/&gt; 39402: (8.82353%)&gt;];
}
3632--7546[label="1;5pkt 5fpkt"];
3632--10101[label="1;6pkt 6fpkt"];
7546--10101[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.53.137" src_ip="193.114.232.130" src_port="113"/>
      <filter dst_ip="208.96.53.137" dst_port="25" src_ip="193.114.232.130"/>
    </slice>
    <from sec="1083733421" usec="0"/>
    <to sec="1083733947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2362{
style=filled;
color=gray75;
3633[label="168.127.236.130;25pkt 25fpkt", shape=pentagon, color=darkviolet];
7547[label="168.127.236.130;24pkt 24fpkt", shape=invtriangle, color=brown];
10102[label="168.127.236.130;25pkt 25fpkt", shape=invhouse, color=bisque];
stat2362[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.236.130:*, 213.88.187.50:443}[52%]&lt;BR/&gt;{168.127.236.130:*, *:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (28.3784%)&lt;BR/&gt; 80: (19.5946%)&lt;BR/&gt; 123: (4.05405%)&lt;BR/&gt; 3038: (2.02703%)&lt;BR/&gt; 3035: (2.02703%)&gt;];
}
3633--7547[label="1;24pkt 24fpkt"];
3633--10102[label="1;25pkt 25fpkt"];
7547--10102[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.127.236.130"/>
      <filter dst_ip="213.88.187.50" dst_port="443" src_ip="168.127.236.130"/>
    </slice>
    <from sec="1083733528" usec="0"/>
    <to sec="1083733894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2363{
style=filled;
color=gray75;
3639[label="209.18.98.131;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7552[label="209.18.98.131;22pkt 22fpkt", shape=invtriangle, color=brown];
stat2363[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.98.131:*, 201.48.108.216:80}[39.1304%]&lt;BR/&gt;{209.18.98.131:*, 45.130.37.173:80}[26.087%]&lt;BR/&gt;{209.18.98.131:*, 208.6.251.68:80}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3248: (2.22222%)&lt;BR/&gt; 3243: (2.22222%)&lt;BR/&gt; 3238: (2.22222%)&lt;BR/&gt; 3235: (2.22222%)&gt;];
}
3639--7552[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="201.48.108.216" dst_port="80" src_ip="209.18.98.131"/>
      <filter dst_ip="45.130.37.173" dst_port="80" src_ip="209.18.98.131"/>
      <filter dst_ip="208.6.251.68" dst_port="80" src_ip="209.18.98.131"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2364{
style=filled;
color=gray75;
3641[label="205.88.137.131;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7553[label="205.88.137.131;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2364[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.88.137.131:3039, 209.29.136.89:16072}[20%]&lt;BR/&gt;{205.88.137.131:4354, 209.29.136.89:16072}[20%]&lt;BR/&gt;{205.88.137.131:24476, 209.29.136.89:2085}[20%]&lt;BR/&gt;{205.88.137.131:24476, 209.29.136.89:2277}[20%]&lt;BR/&gt;{205.88.137.131:24476, 209.29.136.89:3489}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24476: (27.7778%)&lt;BR/&gt; 16072: (22.2222%)&lt;BR/&gt; 4354: (11.1111%)&lt;BR/&gt; 3489: (11.1111%)&lt;BR/&gt; 3039: (11.1111%)&gt;];
}
3641--7553[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3489" src_ip="205.88.137.131" src_port="24476"/>
      <filter dst_ip="209.29.136.89" dst_port="2277" src_ip="205.88.137.131" src_port="24476"/>
      <filter dst_ip="209.29.136.89" dst_port="2085" src_ip="205.88.137.131" src_port="24476"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="205.88.137.131" src_port="4354"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="205.88.137.131" src_port="3039"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.237.182.131"/>
    </slice>
    <from sec="1083733684" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2366{
style=filled;
color=gray75;
3649[label="137.147.3.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7559[label="137.147.3.132;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2366[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.147.3.132:80, 209.29.138.10:48780}[50%]&lt;BR/&gt;{137.147.3.132:80, 209.29.138.10:48943}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48943: (25%)&lt;BR/&gt; 48780: (25%)&gt;];
}
3649--7559[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="48943" src_ip="137.147.3.132" src_port="80"/>
      <filter dst_ip="209.29.138.10" dst_port="48780" src_ip="137.147.3.132" src_port="80"/>
    </slice>
    <from sec="1083733599" usec="0"/>
    <to sec="1083733700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.107.53.132"/>
    </slice>
    <from sec="1083733926" usec="0"/>
    <to sec="1083734048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2368{
style=filled;
color=gray75;
556[label="141.22.143.51;d;417pkt 417fpkt", shape=diamond, color=yellow];
1157[label="95.0.42.7;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3655[label="198.228.88.132;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5037[label="212.198.69.211;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5805[label="95.0.42.7;17pkt 17fpkt", shape=invtriangle, color=brown];
7564[label="198.228.88.132;17pkt 17fpkt", shape=invtriangle, color=brown];
8516[label="212.198.69.211;16pkt 16fpkt", shape=invtriangle, color=brown];
stat2368[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.22.143.51:*}[54.4365%]&lt;BR/&gt;{*:0, 141.22.143.51:0}[45.3237%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (36.5571%)&lt;BR/&gt; 80: (31.6248%)&lt;BR/&gt; 4950: (0.386847%)&lt;BR/&gt; 3679: (0.386847%)&lt;BR/&gt; 3521: (0.386847%)&gt;];
}
556--1157[label="1;17pkt 17fpkt"];
556--3655[label="1;17pkt 17fpkt"];
556--5037[label="1;16pkt 16fpkt"];
556--5805[label="1;17pkt 17fpkt"];
556--7564[label="1;17pkt 17fpkt"];
556--8516[label="1;16pkt 16fpkt"];
1157--5805[label="1;17pkt 17fpkt"];
3655--7564[label="1;17pkt 17fpkt"];
5037--8516[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.143.51" src_port="80"/>
      <filter dst_ip="141.22.143.51"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2369{
style=filled;
color=gray75;
3656[label="141.22.92.132;88pkt 88fpkt", shape=pentagon, color=darkviolet];
7565[label="141.22.92.132;87pkt 87fpkt", shape=invtriangle, color=brown];
stat2369[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.92.132:*, *:80}[98.8636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4286%)&lt;BR/&gt; 4999: (0.571429%)&lt;BR/&gt; 4993: (0.571429%)&lt;BR/&gt; 4982: (0.571429%)&lt;BR/&gt; 4979: (0.571429%)&gt;];
}
3656--7565[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.22.92.132"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2370{
style=filled;
color=gray75;
3658[label="201.82.165.132;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7566[label="201.82.165.132;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2370[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.82.165.132:*, 219.223.235.135:*}[62.5%]&lt;BR/&gt;{201.82.165.132:*, *:2745}[37.5%]&lt;BR/&gt;{201.82.165.132:*, *:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (20%)&lt;BR/&gt; 1025: (13.3333%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 6129: (6.66667%)&lt;BR/&gt; 3127: (6.66667%)&gt;];
}
3658--7566[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.235.135" src_ip="201.82.165.132"/>
      <filter dst_port="2745" src_ip="201.82.165.132"/>
      <filter dst_port="80" src_ip="201.82.165.132"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.165.192.132"/>
    </slice>
    <from sec="1083733934" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2372{
style=filled;
color=gray75;
3664[label="93.19.234.132;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7572[label="93.19.234.132;5pkt 5fpkt", shape=invtriangle, color=brown];
10118[label="93.19.234.132;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2372[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.19.234.132:1667, 136.151.235.67:80}[20%]&lt;BR/&gt;{93.19.234.132:3971, 168.127.140.79:80}[20%]&lt;BR/&gt;{93.19.234.132:0, 141.145.208.85:0}[20%]&lt;BR/&gt;{93.19.234.132:1344, 141.132.0.129:445}[20%]&lt;BR/&gt;{93.19.234.132:0, 141.85.153.133:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (42.8571%)&lt;BR/&gt; 80: (17.8571%)&lt;BR/&gt; 3971: (10.7143%)&lt;BR/&gt; 1344: (10.7143%)&lt;BR/&gt; 445: (10.7143%)&gt;];
}
3664--7572[label="1;5pkt 5fpkt"];
3664--10118[label="1;4pkt 4fpkt"];
7572--10118[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.153.133" src_ip="93.19.234.132"/>
      <filter dst_ip="141.132.0.129" dst_port="445" src_ip="93.19.234.132" src_port="1344"/>
      <filter dst_ip="141.145.208.85" src_ip="93.19.234.132"/>
      <filter dst_ip="168.127.140.79" dst_port="80" src_ip="93.19.234.132" src_port="3971"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.19.234.132" src_port="1667"/>
    </slice>
    <from sec="1083733838" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.127.246.132"/>
    </slice>
    <from sec="1083733658" usec="0"/>
    <to sec="1083733754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2374{
style=filled;
color=gray75;
3666[label="40.154.0.133;187pkt 187fpkt", shape=pentagon, color=darkviolet];
7574[label="40.154.0.133;186pkt 186fpkt", shape=invtriangle, color=brown];
10119[label="40.154.0.133;186pkt 186fpkt", shape=invhouse, color=bisque];
stat2374[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.154.0.133:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3666--7574[label="1;186pkt 186fpkt"];
3666--10119[label="1;186pkt 186fpkt"];
7574--10119[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="40.154.0.133" src_port="1026"/>
    </slice>
    <from sec="1083733592" usec="0"/>
    <to sec="1083733629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2375{
style=filled;
color=gray75;
3667[label="196.3.6.133;227pkt 227fpkt", shape=pentagon, color=darkviolet];
7575[label="196.3.6.133;226pkt 226fpkt", shape=invtriangle, color=brown];
10120[label="196.3.6.133;227pkt 227fpkt", shape=invhouse, color=bisque];
stat2375[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.3.6.133:1099, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1099: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3667--7575[label="1;226pkt 226fpkt"];
3667--10120[label="1;227pkt 227fpkt"];
7575--10120[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.3.6.133" src_port="1099"/>
    </slice>
    <from sec="1083733771" usec="0"/>
    <to sec="1083733786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2376{
style=filled;
color=gray75;
3669[label="109.218.21.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7576[label="109.218.21.133;2pkt 2fpkt", shape=invtriangle, color=brown];
10121[label="109.218.21.133;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2376[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.218.21.133:3723, 208.96.11.8:445}[50%]&lt;BR/&gt;{109.218.21.133:3208, 141.22.166.208:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3723: (25%)&lt;BR/&gt; 3208: (25%)&gt;];
}
3669--7576[label="1;2pkt 2fpkt"];
3669--10121[label="1;2pkt 2fpkt"];
7576--10121[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.166.208" dst_port="445" src_ip="109.218.21.133" src_port="3208"/>
      <filter dst_ip="208.96.11.8" dst_port="445" src_ip="109.218.21.133" src_port="3723"/>
    </slice>
    <from sec="1083733267" usec="0"/>
    <to sec="1083733507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.96.35.133"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2378{
style=filled;
color=gray75;
3677[label="173.138.145.133;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7583[label="173.138.145.133;4pkt 4fpkt", shape=invtriangle, color=brown];
10125[label="173.138.145.133;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2378[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.145.133:3338, 45.172.173.3:25}[20%]&lt;BR/&gt;{173.138.145.133:3326, 44.64.14.56:25}[20%]&lt;BR/&gt;{173.138.145.133:3349, 198.222.96.106:25}[20%]&lt;BR/&gt;{173.138.145.133:3335, 44.65.117.244:25}[20%]&lt;BR/&gt;{173.138.145.133:3343, 44.65.117.244:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3349: (11.5385%)&lt;BR/&gt; 3343: (11.5385%)&lt;BR/&gt; 3338: (11.5385%)&lt;BR/&gt; 3335: (11.5385%)&gt;];
}
3677--7583[label="1;4pkt 4fpkt"];
3677--10125[label="1;4pkt 4fpkt"];
7583--10125[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="44.65.117.244" dst_port="25" src_ip="173.138.145.133" src_port="3343"/>
      <filter dst_ip="44.65.117.244" dst_port="25" src_ip="173.138.145.133" src_port="3335"/>
      <filter dst_ip="198.222.96.106" dst_port="25" src_ip="173.138.145.133" src_port="3349"/>
      <filter dst_ip="44.64.14.56" dst_port="25" src_ip="173.138.145.133" src_port="3326"/>
      <filter dst_ip="45.172.173.3" dst_port="25" src_ip="173.138.145.133" src_port="3338"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.239.171.133"/>
    </slice>
    <from sec="1083733522" usec="0"/>
    <to sec="1083733807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2380{
style=filled;
color=gray75;
3681[label="173.138.172.133;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7587[label="173.138.172.133;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2380[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.172.133:25, 209.68.141.24:*}[33.3333%]&lt;BR/&gt;{173.138.172.133:*, 46.71.203.92:110}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (32.6087%)&lt;BR/&gt; 110: (13.0435%)&lt;BR/&gt; 65064: (4.34783%)&lt;BR/&gt; 64832: (4.34783%)&lt;BR/&gt; 64561: (4.34783%)&gt;];
}
3681--7587[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="209.68.141.24" src_ip="173.138.172.133" src_port="25"/>
      <filter dst_ip="46.71.203.92" dst_port="110" src_ip="173.138.172.133"/>
    </slice>
    <from sec="1083733295" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2381{
style=filled;
color=gray75;
3691[label="44.213.31.134;44pkt 44fpkt", shape=pentagon, color=darkviolet];
7592[label="44.213.31.134;43pkt 43fpkt", shape=invtriangle, color=brown];
10128[label="44.213.31.134;44pkt 44fpkt", shape=invhouse, color=bisque];
stat2381[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.213.31.134:80, 141.22.86.56:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65104: (1.14504%)&lt;BR/&gt; 64999: (1.14504%)&lt;BR/&gt; 64998: (1.14504%)&lt;BR/&gt; 64997: (1.14504%)&gt;];
}
3691--7592[label="1;43pkt 43fpkt"];
3691--10128[label="1;44pkt 44fpkt"];
7592--10128[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.56" src_ip="44.213.31.134" src_port="80"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083733426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.26.66.134"/>
    </slice>
    <from sec="1083733782" usec="0"/>
    <to sec="1083733898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2383{
style=filled;
color=gray75;
3695[label="198.122.82.134;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7596[label="198.122.82.134;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2383[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.122.82.134:1288, 209.29.136.89:2994}[50%]&lt;BR/&gt;{198.122.82.134:1288, 209.29.136.89:3341}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1288: (50%)&lt;BR/&gt; 3341: (25%)&lt;BR/&gt; 2994: (25%)&gt;];
}
3695--7596[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3341" src_ip="198.122.82.134" src_port="1288"/>
      <filter dst_ip="209.29.136.89" dst_port="2994" src_ip="198.122.82.134" src_port="1288"/>
    </slice>
    <from sec="1083733448" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.212.140.134"/>
    </slice>
    <from sec="1083733465" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2385{
style=filled;
color=gray75;
3702[label="196.136.161.134;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7602[label="196.136.161.134;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2385[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.136.161.134:80, 155.148.182.202:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30924: (7.14286%)&lt;BR/&gt; 30774: (7.14286%)&lt;BR/&gt; 30691: (7.14286%)&lt;BR/&gt; 30665: (7.14286%)&gt;];
}
3702--7602[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" src_ip="196.136.161.134" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2386{
style=filled;
color=gray75;
3703[label="192.47.189.134;100pkt 100fpkt", shape=pentagon, color=darkviolet];
7603[label="192.47.189.134;99pkt 99fpkt", shape=invtriangle, color=brown];
10134[label="192.47.189.134;100pkt 100fpkt", shape=invhouse, color=bisque];
stat2386[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.47.189.134:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 14005: (0.501672%)&lt;BR/&gt; 13844: (0.501672%)&lt;BR/&gt; 13787: (0.501672%)&lt;BR/&gt; 13762: (0.501672%)&gt;];
}
3703--7603[label="1;99pkt 99fpkt"];
3703--10134[label="1;100pkt 100fpkt"];
7603--10134[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="192.47.189.134"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.124.194.134"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083733302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.0.1.135"/>
    </slice>
    <from sec="1083733792" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2389{
style=filled;
color=gray75;
3707[label="208.55.12.135;60pkt 60fpkt", shape=pentagon, color=darkviolet];
7607[label="208.55.12.135;60pkt 60fpkt", shape=invtriangle, color=brown];
10136[label="208.55.12.135;60pkt 60fpkt", shape=invhouse, color=bisque];
stat2389[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.55.12.135:*, *:80}[25%]&lt;BR/&gt;{208.55.12.135:*, *:1025}[25%]&lt;BR/&gt;{208.55.12.135:*, *:2745}[25%]&lt;BR/&gt;{208.55.12.135:*, *:6129}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (12.5%)&lt;BR/&gt; 2745: (12.5%)&lt;BR/&gt; 1025: (12.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 4878: (0.833333%)&gt;];
}
3707--7607[label="1;60pkt 60fpkt"];
3707--10136[label="1;60pkt 60fpkt"];
7607--10136[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="208.55.12.135"/>
      <filter dst_port="2745" src_ip="208.55.12.135"/>
      <filter dst_port="1025" src_ip="208.55.12.135"/>
      <filter dst_port="80" src_ip="208.55.12.135"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2390{
style=filled;
color=gray75;
3709[label="136.150.32.135;94pkt 94fpkt", shape=pentagon, color=darkviolet];
7609[label="136.150.32.135;93pkt 93fpkt", shape=invtriangle, color=brown];
10137[label="136.150.32.135;93pkt 93fpkt", shape=invhouse, color=bisque];
stat2390[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.32.135:53, *:53}[34.0426%]&lt;BR/&gt;{136.150.32.135:0, *:0}[24.4681%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.2857%)&lt;BR/&gt; 0: (24.6429%)&lt;BR/&gt; 32769: (1.07143%)&lt;BR/&gt; 32768: (1.07143%)&lt;BR/&gt; 1028: (1.07143%)&gt;];
}
3709--7609[label="1;93pkt 93fpkt"];
3709--10137[label="1;93pkt 93fpkt"];
7609--10137[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.150.32.135" src_port="53"/>
      <filter src_ip="136.150.32.135"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2391{
style=filled;
color=gray75;
3710[label="213.101.59.135;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7610[label="213.101.59.135;17pkt 17fpkt", shape=invtriangle, color=brown];
stat2391[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.59.135:80, 209.29.138.126:*}[50%]&lt;BR/&gt;{213.101.59.135:80, 209.29.138.127:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61206: (2.85714%)&lt;BR/&gt; 53988: (2.85714%)&lt;BR/&gt; 4803: (2.85714%)&lt;BR/&gt; 4066: (2.85714%)&gt;];
}
3710--7610[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="213.101.59.135" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="213.101.59.135" src_port="80"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.163.135"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2393{
style=filled;
color=gray75;
3724[label="136.151.209.135;47pkt 47fpkt", shape=pentagon, color=darkviolet];
7621[label="136.151.209.135;47pkt 47fpkt", shape=invtriangle, color=brown];
10145[label="136.151.209.135;47pkt 47fpkt", shape=invhouse, color=bisque];
stat2393[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.209.135:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3724--7621[label="1;47pkt 47fpkt"];
3724--10145[label="1;47pkt 47fpkt"];
7621--10145[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.209.135"/>
    </slice>
    <from sec="1083733223" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2394{
style=filled;
color=gray75;
739[label="44.212.42.136;s;53pkt 53fpkt", shape=diamond, color=yellow];
3728[label="44.212.42.136;63pkt 63fpkt", shape=pentagon, color=darkviolet];
7622[label="44.212.42.136;63pkt 63fpkt", shape=invtriangle, color=brown];
stat2394[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.42.136:80, 209.29.138.126:*}[45.3125%]&lt;BR/&gt;{44.212.42.136:80, 209.29.138.127:*}[39.0625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33101: (0.837989%)&lt;BR/&gt; 33075: (0.837989%)&lt;BR/&gt; 33073: (0.837989%)&lt;BR/&gt; 33072: (0.837989%)&gt;];
}
739--3728[label="0.981132;52pkt 52fpkt"];
739--7622[label="0.981132;52pkt 52fpkt"];
3728--7622[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="44.212.42.136" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="44.212.42.136" src_port="80"/>
    </slice>
    <from sec="1083733324" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.2.43.136"/>
    </slice>
    <from sec="1083733955" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.34.92.136"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2397{
style=filled;
color=gray75;
3732[label="44.52.108.136;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7625[label="44.52.108.136;9pkt 9fpkt", shape=invtriangle, color=brown];
10147[label="44.52.108.136;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2397[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.52.108.136:80, 141.22.86.56:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33420: (5.76923%)&lt;BR/&gt; 33405: (5.76923%)&lt;BR/&gt; 33280: (5.76923%)&lt;BR/&gt; 33239: (5.76923%)&gt;];
}
3732--7625[label="1;9pkt 9fpkt"];
3732--10147[label="1;8pkt 8fpkt"];
7625--10147[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.56" src_ip="44.52.108.136" src_port="80"/>
    </slice>
    <from sec="1083733482" usec="0"/>
    <to sec="1083733773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2398{
style=filled;
color=gray75;
3733[label="155.148.141.136;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7626[label="155.148.141.136;6pkt 6fpkt", shape=invtriangle, color=brown];
10148[label="155.148.141.136;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2398[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.141.136:*, 213.101.36.85:80}[28.5714%]&lt;BR/&gt;{155.148.141.136:*, 213.101.36.43:80}[28.5714%]&lt;BR/&gt;{155.148.141.136:*, *:443}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35%)&lt;BR/&gt; 443: (15%)&lt;BR/&gt; 1124: (7.5%)&lt;BR/&gt; 1120: (7.5%)&lt;BR/&gt; 1117: (7.5%)&gt;];
}
3733--7626[label="1;6pkt 6fpkt"];
3733--10148[label="1;7pkt 7fpkt"];
7626--10148[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="155.148.141.136"/>
      <filter dst_ip="213.101.36.43" dst_port="80" src_ip="155.148.141.136"/>
      <filter dst_ip="213.101.36.85" dst_port="80" src_ip="155.148.141.136"/>
    </slice>
    <from sec="1083733782" usec="0"/>
    <to sec="1083733865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2399{
style=filled;
color=gray75;
3734[label="136.151.154.136;31pkt 31fpkt", shape=pentagon, color=darkviolet];
7627[label="136.151.154.136;31pkt 31fpkt", shape=invtriangle, color=brown];
stat2399[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.154.136:25, *:*}[51.6129%]&lt;BR/&gt;{136.151.154.136:*, *:113}[48.3871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.8065%)&lt;BR/&gt; 113: (24.1935%)&lt;BR/&gt; 62331: (1.6129%)&lt;BR/&gt; 55549: (1.6129%)&lt;BR/&gt; 55548: (1.6129%)&gt;];
}
3734--7627[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.154.136" src_port="25"/>
      <filter dst_port="113" src_ip="136.151.154.136"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083734075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.10.207.136"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2401{
style=filled;
color=gray75;
3743[label="44.212.13.137;61pkt 61fpkt", shape=pentagon, color=darkviolet];
7631[label="44.212.13.137;60pkt 60fpkt", shape=invtriangle, color=brown];
10151[label="44.212.13.137;61pkt 61fpkt", shape=invhouse, color=bisque];
stat2401[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.13.137:80, 141.22.98.212:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28250: (0.824176%)&lt;BR/&gt; 28248: (0.824176%)&lt;BR/&gt; 28247: (0.824176%)&lt;BR/&gt; 28243: (0.824176%)&gt;];
}
3743--7631[label="1;60pkt 60fpkt"];
3743--10151[label="1;61pkt 61fpkt"];
7631--10151[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.98.212" src_ip="44.212.13.137" src_port="80"/>
    </slice>
    <from sec="1083733340" usec="0"/>
    <to sec="1083733675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2402{
style=filled;
color=gray75;
3745[label="168.60.24.137;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7633[label="168.60.24.137;17pkt 17fpkt", shape=invtriangle, color=brown];
stat2402[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.60.24.137:*, *:1025}[29.4118%]&lt;BR/&gt;{168.60.24.137:*, *:2745}[29.4118%]&lt;BR/&gt;{168.60.24.137:*, *:80}[23.5294%]&lt;BR/&gt;{168.60.24.137:*, 168.127.135.47:*}[23.5294%]&lt;BR/&gt;{168.60.24.137:*, 168.16.51.89:*}[23.5294%]&lt;BR/&gt;{168.60.24.137:*, 168.127.6.113:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (14.7059%)&lt;BR/&gt; 1025: (14.7059%)&lt;BR/&gt; 80: (11.7647%)&lt;BR/&gt; 6129: (8.82353%)&lt;BR/&gt; 4970: (2.94118%)&gt;];
}
3745--7633[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.6.113" src_ip="168.60.24.137"/>
      <filter dst_ip="168.16.51.89" src_ip="168.60.24.137"/>
      <filter dst_ip="168.127.135.47" src_ip="168.60.24.137"/>
      <filter dst_port="2745" src_ip="168.60.24.137"/>
      <filter dst_port="1025" src_ip="168.60.24.137"/>
      <filter dst_port="80" src_ip="168.60.24.137"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083733706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2403{
style=filled;
color=gray75;
3750[label="208.96.53.137;101pkt 101fpkt", shape=pentagon, color=darkviolet];
7634[label="208.96.53.137;100pkt 100fpkt", shape=invtriangle, color=brown];
10153[label="208.96.53.137;101pkt 101fpkt", shape=invhouse, color=bisque];
stat2403[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.53.137:47505, *:53}[69.3069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.5762%)&lt;BR/&gt; 47505: (34.6026%)&lt;BR/&gt; 25: (5.96026%)&lt;BR/&gt; 113: (2.98013%)&lt;BR/&gt; 80: (1.49007%)&gt;];
}
3750--7634[label="1;100pkt 100fpkt"];
3750--10153[label="1;101pkt 101fpkt"];
7634--10153[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="208.96.53.137" src_port="47505"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2404{
style=filled;
color=gray75;
3751[label="197.8.54.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7635[label="197.8.54.137;1pkt 1fpkt", shape=invtriangle, color=brown];
10154[label="197.8.54.137;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2404[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.8.54.137:4703, 136.151.235.67:80}[50%]&lt;BR/&gt;{197.8.54.137:3469, 168.16.86.137:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3469: (37.5%)&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 4703: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
3751--7635[label="1;1pkt 1fpkt"];
3751--10154[label="1;1pkt 1fpkt"];
7635--10154[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.16.86.137" dst_port="445" src_ip="197.8.54.137" src_port="3469"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="197.8.54.137" src_port="4703"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2405{
style=filled;
color=gray75;
3761[label="46.252.172.137;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7638[label="46.252.172.137;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2405[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.252.172.137:80, 209.29.138.126:*}[54.5455%]&lt;BR/&gt;{46.252.172.137:80, 209.29.138.127:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4941: (4.54545%)&lt;BR/&gt; 4637: (4.54545%)&lt;BR/&gt; 4268: (4.54545%)&lt;BR/&gt; 3924: (4.54545%)&gt;];
}
3761--7638[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.252.172.137" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.252.172.137" src_port="80"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2406{
style=filled;
color=gray75;
3762[label="203.24.214.137;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7639[label="203.24.214.137;1pkt 1fpkt", shape=invtriangle, color=brown];
10156[label="203.24.214.137;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2406[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.24.214.137:2360, 173.138.62.9:445}[50%]&lt;BR/&gt;{203.24.214.137:1691, 136.151.235.67:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2360: (30%)&lt;BR/&gt; 445: (30%)&lt;BR/&gt; 1691: (20%)&lt;BR/&gt; 80: (20%)&gt;];
}
3762--7639[label="1;1pkt 1fpkt"];
3762--10156[label="1;2pkt 2fpkt"];
7639--10156[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="203.24.214.137" src_port="1691"/>
      <filter dst_ip="173.138.62.9" dst_port="445" src_ip="203.24.214.137" src_port="2360"/>
    </slice>
    <from sec="1083733374" usec="0"/>
    <to sec="1083734018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.230.3.138"/>
    </slice>
    <from sec="1083733753" usec="0"/>
    <to sec="1083733953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2408{
style=filled;
color=gray75;
3767[label="198.198.17.138;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7641[label="198.198.17.138;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2408[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.17.138:80, 209.29.138.127:*}[66.6667%]&lt;BR/&gt;{198.198.17.138:80, 209.29.138.126:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3689: (9.09091%)&lt;BR/&gt; 3024: (9.09091%)&lt;BR/&gt; 2777: (9.09091%)&lt;BR/&gt; 2661: (9.09091%)&gt;];
}
3767--7641[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="198.198.17.138" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="198.198.17.138" src_port="80"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083734056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="153.218.80.138"/>
    </slice>
    <from sec="1083733270" usec="0"/>
    <to sec="1083733453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2410{
style=filled;
color=gray75;
3776[label="41.17.146.138;466pkt 466fpkt", shape=pentagon, color=darkviolet];
7645[label="41.17.146.138;466pkt 466fpkt", shape=invtriangle, color=brown];
10158[label="41.17.146.138;466pkt 466fpkt", shape=invhouse, color=bisque];
stat2410[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.17.146.138:1027, *:137}[51.7167%]&lt;BR/&gt;{41.17.146.138:1028, *:137}[48.2833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1027: (25.8584%)&lt;BR/&gt; 1028: (24.1416%)&gt;];
}
3776--7645[label="1;466pkt 466fpkt"];
3776--10158[label="1;466pkt 466fpkt"];
7645--10158[label="1;466pkt 466fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="41.17.146.138" src_port="1027"/>
      <filter dst_port="137" src_ip="41.17.146.138" src_port="1028"/>
    </slice>
    <from sec="1083733927" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.22.154.138"/>
    </slice>
    <from sec="1083733835" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.195.170.138"/>
    </slice>
    <from sec="1083733579" usec="0"/>
    <to sec="1083733680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2413{
style=filled;
color=gray75;
3782[label="93.236.213.138;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7650[label="93.236.213.138;6pkt 6fpkt", shape=invtriangle, color=brown];
10163[label="93.236.213.138;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2413[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.236.213.138:*, 219.100.206.164:*}[71.4286%]&lt;BR/&gt;{93.236.213.138:*, 136.151.235.67:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.4211%)&lt;BR/&gt; 6129: (7.89474%)&lt;BR/&gt; 3127: (7.89474%)&lt;BR/&gt; 2918: (7.89474%)&lt;BR/&gt; 2916: (7.89474%)&gt;];
}
3782--7650[label="1;6pkt 6fpkt"];
3782--10163[label="1;6pkt 6fpkt"];
7650--10163[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="219.100.206.164" src_ip="93.236.213.138"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.236.213.138"/>
    </slice>
    <from sec="1083733406" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2414{
style=filled;
color=gray75;
3783[label="209.130.224.138;39pkt 39fpkt", shape=pentagon, color=darkviolet];
7651[label="209.130.224.138;39pkt 39fpkt", shape=invtriangle, color=brown];
stat2414[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.130.224.138:*, *:2745}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (10.2564%)&lt;BR/&gt; 1025: (8.97436%)&lt;BR/&gt; 6129: (7.69231%)&lt;BR/&gt; 3127: (7.69231%)&lt;BR/&gt; 139: (7.69231%)&gt;];
}
3783--7651[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="209.130.224.138"/>
    </slice>
    <from sec="1083733433" usec="0"/>
    <to sec="1083734030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.30.229.138"/>
    </slice>
    <from sec="1083733238" usec="0"/>
    <to sec="1083733321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.91.0.139"/>
    </slice>
    <from sec="1083733919" usec="0"/>
    <to sec="1083734017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2417{
style=filled;
color=gray75;
3788[label="196.23.36.139;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7655[label="196.23.36.139;9pkt 9fpkt", shape=invtriangle, color=brown];
10166[label="196.23.36.139;9pkt 9fpkt", shape=invhouse, color=bisque];
stat2417[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.23.36.139:*, 219.223.235.223:*}[55.5556%]&lt;BR/&gt;{196.23.36.139:*, 219.24.89.251:*}[44.4444%]&lt;BR/&gt;{196.23.36.139:*, *:1025}[22.2222%]&lt;BR/&gt;{196.23.36.139:*, *:2745}[22.2222%]&lt;BR/&gt;{196.23.36.139:*, *:3127}[22.2222%]&lt;BR/&gt;{196.23.36.139:*, *:6129}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (11.1111%)&lt;BR/&gt; 3127: (11.1111%)&lt;BR/&gt; 2745: (11.1111%)&lt;BR/&gt; 1025: (11.1111%)&lt;BR/&gt; 3776: (5.55556%)&gt;];
}
3788--7655[label="1;9pkt 9fpkt"];
3788--10166[label="1;9pkt 9fpkt"];
7655--10166[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.235.223" src_ip="196.23.36.139"/>
      <filter dst_ip="219.24.89.251" src_ip="196.23.36.139"/>
      <filter dst_port="6129" src_ip="196.23.36.139"/>
      <filter dst_port="3127" src_ip="196.23.36.139"/>
      <filter dst_port="2745" src_ip="196.23.36.139"/>
      <filter dst_port="1025" src_ip="196.23.36.139"/>
    </slice>
    <from sec="1083733508" usec="0"/>
    <to sec="1083733941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2418{
style=filled;
color=gray75;
3791[label="209.18.97.139;136pkt 136fpkt", shape=pentagon, color=darkviolet];
7657[label="209.18.97.139;135pkt 135fpkt", shape=invtriangle, color=brown];
stat2418[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.97.139:1281, *:53}[52.9412%]&lt;BR/&gt;{209.18.97.139:53, *:*}[33.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.203%)&lt;BR/&gt; 1281: (26.3838%)&lt;BR/&gt; 0: (12.5461%)&lt;BR/&gt; 32772: (0.738007%)&lt;BR/&gt; 32770: (0.738007%)&gt;];
}
3791--7657[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter src_ip="209.18.97.139" src_port="53"/>
      <filter dst_port="53" src_ip="209.18.97.139" src_port="1281"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2419{
style=filled;
color=gray75;
3799[label="95.12.145.139;91pkt 91fpkt", shape=pentagon, color=darkviolet];
7661[label="95.12.145.139;91pkt 91fpkt", shape=invtriangle, color=brown];
10169[label="95.12.145.139;91pkt 91fpkt", shape=invhouse, color=bisque];
stat2419[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.12.145.139:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60637: (0.549451%)&lt;BR/&gt; 60435: (0.549451%)&lt;BR/&gt; 60257: (0.549451%)&lt;BR/&gt; 59909: (0.549451%)&gt;];
}
3799--7661[label="1;91pkt 91fpkt"];
3799--10169[label="1;91pkt 91fpkt"];
7661--10169[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="95.12.145.139" src_port="80"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2420{
style=filled;
color=gray75;
3800[label="40.2.148.139;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7662[label="40.2.148.139;8pkt 8fpkt", shape=invtriangle, color=brown];
stat2420[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.2.148.139:*, 219.223.215.249:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (6.25%)&lt;BR/&gt; 3127: (6.25%)&lt;BR/&gt; 2745: (6.25%)&lt;BR/&gt; 2402: (6.25%)&lt;BR/&gt; 2401: (6.25%)&gt;];
}
3800--7662[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.215.249" src_ip="40.2.148.139"/>
    </slice>
    <from sec="1083733789" usec="0"/>
    <to sec="1083734070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.1.189.139"/>
    </slice>
    <from sec="1083733525" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2422{
style=filled;
color=gray75;
3804[label="46.71.206.139;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7665[label="46.71.206.139;14pkt 14fpkt", shape=invtriangle, color=brown];
10171[label="46.71.206.139;15pkt 15fpkt", shape=invhouse, color=bisque];
stat2422[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.206.139:80, 209.29.138.126:*}[53.3333%]&lt;BR/&gt;{46.71.206.139:80, 209.29.165.20:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50024: (3.48837%)&lt;BR/&gt; 37377: (3.48837%)&lt;BR/&gt; 37368: (3.48837%)&lt;BR/&gt; 37325: (3.48837%)&gt;];
}
3804--7665[label="1;14pkt 14fpkt"];
3804--10171[label="1;14pkt 14fpkt"];
7665--10171[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.71.206.139" src_port="80"/>
      <filter dst_ip="209.29.165.20" src_ip="46.71.206.139" src_port="80"/>
    </slice>
    <from sec="1083733236" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.89.220.139"/>
    </slice>
    <from sec="1083733591" usec="0"/>
    <to sec="1083733688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.138.27.140"/>
    </slice>
    <from sec="1083733997" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2425{
style=filled;
color=gray75;
3818[label="46.86.70.140;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7674[label="46.86.70.140;11pkt 11fpkt", shape=invtriangle, color=brown];
10178[label="46.86.70.140;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2425[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.86.70.140:*, 141.22.88.100:80}[36.3636%]&lt;BR/&gt;{46.86.70.140:*, 141.22.86.221:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52995: (4.6875%)&lt;BR/&gt; 47807: (4.6875%)&lt;BR/&gt; 46537: (4.6875%)&lt;BR/&gt; 46532: (4.6875%)&gt;];
}
3818--7674[label="1;11pkt 11fpkt"];
3818--10178[label="1;10pkt 10fpkt"];
7674--10178[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.88.100" dst_port="80" src_ip="46.86.70.140"/>
      <filter dst_ip="141.22.86.221" dst_port="80" src_ip="46.86.70.140"/>
    </slice>
    <from sec="1083733457" usec="0"/>
    <to sec="1083733853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.14.85.140"/>
    </slice>
    <from sec="1083733718" usec="0"/>
    <to sec="1083733846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.34.92.140"/>
    </slice>
    <from sec="1083733306" usec="0"/>
    <to sec="1083734009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.176.102.140"/>
    </slice>
    <from sec="1083733265" usec="0"/>
    <to sec="1083733334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2429{
style=filled;
color=gray75;
882[label="213.101.103.140;s;24pkt 24fpkt", shape=diamond, color=yellow];
3826[label="213.101.103.140;25pkt 25fpkt", shape=pentagon, color=darkviolet];
7682[label="213.101.103.140;25pkt 25fpkt", shape=invtriangle, color=brown];
10184[label="213.101.103.140;25pkt 25fpkt", shape=invhouse, color=bisque];
stat2429[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.103.140:80, 209.29.138.126:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49434: (2.0202%)&lt;BR/&gt; 49433: (2.0202%)&lt;BR/&gt; 49432: (2.0202%)&lt;BR/&gt; 49431: (2.0202%)&gt;];
}
882--3826[label="0.958333;23pkt 23fpkt"];
882--7682[label="0.958333;23pkt 23fpkt"];
882--10184[label="0.958333;23pkt 23fpkt"];
3826--7682[label="1;25pkt 25fpkt"];
3826--10184[label="1;25pkt 25fpkt"];
7682--10184[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="213.101.103.140" src_port="80"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.120.108.140"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.199.108.140"/>
    </slice>
    <from sec="1083733577" usec="0"/>
    <to sec="1083733653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.30.139.140"/>
    </slice>
    <from sec="1083733847" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.151.13.141"/>
    </slice>
    <from sec="1083733509" usec="0"/>
    <to sec="1083733625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,020,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_2434{
style=filled;
color=gray75;
783[label="173.138.44.141;s;223pkt 223fpkt", shape=diamond, color=yellow];
7688[label="173.138.44.141;240pkt 240fpkt", shape=invtriangle, color=brown];
stat2434[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.44.141:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
783--7688[label="0.995516;222pkt 222fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.44.141"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.20.64.141"/>
    </slice>
    <from sec="1083733358" usec="0"/>
    <to sec="1083733596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2436{
style=filled;
color=gray75;
3839[label="174.7.78.141;67pkt 67fpkt", shape=pentagon, color=darkviolet];
7691[label="174.7.78.141;66pkt 66fpkt", shape=invtriangle, color=brown];
10189[label="174.7.78.141;66pkt 66fpkt", shape=invhouse, color=bisque];
stat2436[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.7.78.141:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3847: (1.50754%)&lt;BR/&gt; 3214: (1.50754%)&lt;BR/&gt; 4948: (0.753769%)&lt;BR/&gt; 4915: (0.753769%)&gt;];
}
3839--7691[label="1;66pkt 66fpkt"];
3839--10189[label="1;66pkt 66fpkt"];
7691--10189[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="174.7.78.141"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083734061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2437{
style=filled;
color=gray75;
3841[label="109.194.109.141;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7693[label="109.194.109.141;4pkt 4fpkt", shape=invtriangle, color=brown];
10191[label="109.194.109.141;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2437[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.194.109.141:1083, 136.151.235.67:80}[25%]&lt;BR/&gt;{109.194.109.141:0, 155.211.229.170:0}[25%]&lt;BR/&gt;{109.194.109.141:4850, 141.135.206.184:445}[25%]&lt;BR/&gt;{109.194.109.141:2681, 136.151.162.209:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 4850: (12.5%)&lt;BR/&gt; 2681: (12.5%)&lt;BR/&gt; 1083: (12.5%)&gt;];
}
3841--7693[label="1;4pkt 4fpkt"];
3841--10191[label="1;4pkt 4fpkt"];
7693--10191[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.162.209" dst_port="445" src_ip="109.194.109.141" src_port="2681"/>
      <filter dst_ip="141.135.206.184" dst_port="445" src_ip="109.194.109.141" src_port="4850"/>
      <filter dst_ip="155.211.229.170" src_ip="109.194.109.141"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.194.109.141" src_port="1083"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.23.124.141"/>
    </slice>
    <from sec="1083733730" usec="0"/>
    <to sec="1083733801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2439{
style=filled;
color=gray75;
3846[label="213.101.197.141;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7697[label="213.101.197.141;6pkt 6fpkt", shape=invtriangle, color=brown];
10194[label="213.101.197.141;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2439[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.197.141:1863, 155.148.160.241:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3456: (7.5%)&lt;BR/&gt; 3016: (7.5%)&lt;BR/&gt; 3015: (7.5%)&lt;BR/&gt; 3014: (7.5%)&gt;];
}
3846--7697[label="1;6pkt 6fpkt"];
3846--10194[label="1;7pkt 7fpkt"];
7697--10194[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.160.241" src_ip="213.101.197.141" src_port="1863"/>
    </slice>
    <from sec="1083733635" usec="0"/>
    <to sec="1083733816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.211.231.141"/>
    </slice>
    <from sec="1083733887" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.41.14.142"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2442{
style=filled;
color=gray75;
3852[label="209.78.28.142;39pkt 39fpkt", shape=pentagon, color=darkviolet];
7703[label="209.78.28.142;38pkt 38fpkt", shape=invtriangle, color=brown];
10197[label="209.78.28.142;39pkt 39fpkt", shape=invhouse, color=bisque];
stat2442[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.78.28.142:80, 209.29.138.10:*}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60091: (1.2931%)&lt;BR/&gt; 60089: (1.2931%)&lt;BR/&gt; 59937: (1.2931%)&lt;BR/&gt; 59935: (1.2931%)&gt;];
}
3852--7703[label="1;38pkt 38fpkt"];
3852--10197[label="1;39pkt 39fpkt"];
7703--10197[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="209.78.28.142" src_port="80"/>
    </slice>
    <from sec="1083733223" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2443{
style=filled;
color=gray75;
3854[label="44.212.42.142;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7704[label="44.212.42.142;19pkt 19fpkt", shape=invtriangle, color=brown];
10198[label="44.212.42.142;18pkt 18fpkt", shape=invhouse, color=bisque];
stat2443[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.42.142:80, 209.29.165.20:*}[89.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37464: (2.67857%)&lt;BR/&gt; 37458: (2.67857%)&lt;BR/&gt; 37351: (2.67857%)&lt;BR/&gt; 37350: (2.67857%)&gt;];
}
3854--7704[label="1;19pkt 19fpkt"];
3854--10198[label="1;18pkt 18fpkt"];
7704--10198[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.165.20" src_ip="44.212.42.142" src_port="80"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083734012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.0.52.142"/>
    </slice>
    <from sec="1083733443" usec="0"/>
    <to sec="1083733630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2445{
style=filled;
color=gray75;
3857[label="41.164.66.142;63pkt 63fpkt", shape=pentagon, color=darkviolet];
7706[label="41.164.66.142;63pkt 63fpkt", shape=invtriangle, color=brown];
10200[label="41.164.66.142;62pkt 62fpkt", shape=invhouse, color=bisque];
stat2445[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.164.66.142:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4811: (1.59574%)&lt;BR/&gt; 4931: (0.797872%)&lt;BR/&gt; 4889: (0.797872%)&lt;BR/&gt; 4867: (0.797872%)&gt;];
}
3857--7706[label="1;63pkt 63fpkt"];
3857--10200[label="1;62pkt 62fpkt"];
7706--10200[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="41.164.66.142"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2446{
style=filled;
color=gray75;
3858[label="136.150.69.142;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7707[label="136.150.69.142;27pkt 27fpkt", shape=invtriangle, color=brown];
10201[label="136.150.69.142;27pkt 27fpkt", shape=invhouse, color=bisque];
stat2446[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.69.142:*, *:113}[40.7407%]&lt;BR/&gt;{136.150.69.142:25, 45.216.230.70:*}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (29.6296%)&lt;BR/&gt; 113: (20.3704%)&lt;BR/&gt; 64046: (1.85185%)&lt;BR/&gt; 59894: (1.85185%)&lt;BR/&gt; 50898: (1.85185%)&gt;];
}
3858--7707[label="1;27pkt 27fpkt"];
3858--10201[label="1;27pkt 27fpkt"];
7707--10201[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="113" src_ip="136.150.69.142"/>
      <filter dst_ip="45.216.230.70" src_ip="136.150.69.142" src_port="25"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2447{
style=filled;
color=gray75;
3860[label="94.141.109.142;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7709[label="94.141.109.142;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2447[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.141.109.142:23225, 209.29.136.89:1396}[33.3333%]&lt;BR/&gt;{94.141.109.142:23225, 209.29.136.89:2190}[33.3333%]&lt;BR/&gt;{94.141.109.142:23225, 209.29.136.89:4040}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23225: (50%)&lt;BR/&gt; 4040: (20%)&lt;BR/&gt; 2190: (20%)&lt;BR/&gt; 1396: (10%)&gt;];
}
3860--7709[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="4040" src_ip="94.141.109.142" src_port="23225"/>
      <filter dst_ip="209.29.136.89" dst_port="2190" src_ip="94.141.109.142" src_port="23225"/>
      <filter dst_ip="209.29.136.89" dst_port="1396" src_ip="94.141.109.142" src_port="23225"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.14.157.142"/>
    </slice>
    <from sec="1083733587" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.247.30.143"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2450{
style=filled;
color=gray75;
3875[label="94.152.115.143;237pkt 237fpkt", shape=pentagon, color=darkviolet];
7716[label="94.152.115.143;237pkt 237fpkt", shape=invtriangle, color=brown];
stat2450[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.152.115.143:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3875--7716[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="94.152.115.143" src_port="1029"/>
    </slice>
    <from sec="1083733726" usec="0"/>
    <to sec="1083733754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2451{
style=filled;
color=gray75;
3877[label="44.59.145.143;67pkt 67fpkt", shape=pentagon, color=darkviolet];
7717[label="44.59.145.143;67pkt 67fpkt", shape=invtriangle, color=brown];
10207[label="44.59.145.143;66pkt 66fpkt", shape=invhouse, color=bisque];
stat2451[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.59.145.143:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2813: (1.5%)&lt;BR/&gt; 4838: (0.75%)&lt;BR/&gt; 4680: (0.75%)&lt;BR/&gt; 4507: (0.75%)&gt;];
}
3877--7717[label="1;67pkt 67fpkt"];
3877--10207[label="1;66pkt 66fpkt"];
7717--10207[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="44.59.145.143"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2452{
style=filled;
color=gray75;
3881[label="210.226.177.143;76pkt 76fpkt", shape=pentagon, color=darkviolet];
7720[label="210.226.177.143;75pkt 75fpkt", shape=invtriangle, color=brown];
10209[label="210.226.177.143;76pkt 76fpkt", shape=invhouse, color=bisque];
stat2452[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.177.143:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4936: (0.660793%)&lt;BR/&gt; 4915: (0.660793%)&lt;BR/&gt; 4861: (0.660793%)&lt;BR/&gt; 4618: (0.660793%)&gt;];
}
3881--7720[label="1;75pkt 75fpkt"];
3881--10209[label="1;76pkt 76fpkt"];
7720--10209[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="210.226.177.143"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083733946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.154.186.143"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2454{
style=filled;
color=gray75;
3884[label="46.71.197.143;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7723[label="46.71.197.143;5pkt 5fpkt", shape=invtriangle, color=brown];
10212[label="46.71.197.143;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2454[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.197.143:25, 173.138.211.20:*}[50%]&lt;BR/&gt;{46.71.197.143:25, 173.138.170.50:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 38469: (9.375%)&lt;BR/&gt; 2186: (9.375%)&lt;BR/&gt; 2182: (9.375%)&lt;BR/&gt; 1777: (9.375%)&gt;];
}
3884--7723[label="1;5pkt 5fpkt"];
3884--10212[label="1;5pkt 5fpkt"];
7723--10212[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.211.20" src_ip="46.71.197.143" src_port="25"/>
      <filter dst_ip="173.138.170.50" src_ip="46.71.197.143" src_port="25"/>
    </slice>
    <from sec="1083733426" usec="0"/>
    <to sec="1083734031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2455{
style=filled;
color=gray75;
3888[label="208.96.33.144;66pkt 66fpkt", shape=pentagon, color=darkviolet];
7726[label="208.96.33.144;65pkt 65fpkt", shape=invtriangle, color=brown];
stat2455[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.33.144:38134, *:53}[98.4848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38134: (49.2366%)&lt;BR/&gt; 53: (49.2366%)&lt;BR/&gt; 4486: (0.763359%)&lt;BR/&gt; 135: (0.763359%)&gt;];
}
3888--7726[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="208.96.33.144" src_port="38134"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.140.101.144"/>
    </slice>
    <from sec="1083733275" usec="0"/>
    <to sec="1083733346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.75.149.144"/>
    </slice>
    <from sec="1083733395" usec="0"/>
    <to sec="1083733509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.243.0.145"/>
    </slice>
    <from sec="1083733469" usec="0"/>
    <to sec="1083733629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2459{
style=filled;
color=gray75;
3903[label="201.90.3.145;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7739[label="201.90.3.145;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2459[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.90.3.145:2730, 168.127.218.8:445}[20%]&lt;BR/&gt;{201.90.3.145:2387, 141.211.111.29:445}[20%]&lt;BR/&gt;{201.90.3.145:2247, 136.151.235.67:80}[20%]&lt;BR/&gt;{201.90.3.145:1719, 155.148.175.81:445}[20%]&lt;BR/&gt;{201.90.3.145:3566, 141.211.229.219:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (40%)&lt;BR/&gt; 3566: (10%)&lt;BR/&gt; 2730: (10%)&lt;BR/&gt; 2387: (10%)&lt;BR/&gt; 2247: (10%)&gt;];
}
3903--7739[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.211.229.219" dst_port="445" src_ip="201.90.3.145" src_port="3566"/>
      <filter dst_ip="155.148.175.81" dst_port="445" src_ip="201.90.3.145" src_port="1719"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.90.3.145" src_port="2247"/>
      <filter dst_ip="141.211.111.29" dst_port="445" src_ip="201.90.3.145" src_port="2387"/>
      <filter dst_ip="168.127.218.8" dst_port="445" src_ip="201.90.3.145" src_port="2730"/>
    </slice>
    <from sec="1083733269" usec="0"/>
    <to sec="1083734011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2460{
style=filled;
color=gray75;
3905[label="93.205.26.145;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7741[label="93.205.26.145;8pkt 8fpkt", shape=invtriangle, color=brown];
stat2460[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.205.26.145:*, 219.223.215.253:*}[87.5%]&lt;BR/&gt;{93.205.26.145:*, *:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 60981: (6.25%)&lt;BR/&gt; 51494: (6.25%)&lt;BR/&gt; 51493: (6.25%)&lt;BR/&gt; 51492: (6.25%)&gt;];
}
3905--7741[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.215.253" src_ip="93.205.26.145"/>
      <filter dst_port="80" src_ip="93.205.26.145"/>
    </slice>
    <from sec="1083733797" usec="0"/>
    <to sec="1083734009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2461{
style=filled;
color=gray75;
3906[label="208.96.53.145;48pkt 48fpkt", shape=pentagon, color=darkviolet];
7742[label="208.96.53.145;48pkt 48fpkt", shape=invtriangle, color=brown];
stat2461[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.53.145:65534, *:53}[56.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.3333%)&lt;BR/&gt; 65534: (28.125%)&lt;BR/&gt; 7: (8.33333%)&lt;BR/&gt; 2703: (3.125%)&lt;BR/&gt; 445: (3.125%)&gt;];
}
3906--7742[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="208.96.53.145" src_port="65534"/>
    </slice>
    <from sec="1083733452" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.3.67.146"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.78.84.146"/>
    </slice>
    <from sec="1083733677" usec="0"/>
    <to sec="1083733781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.5.185.146"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.35.199.146"/>
    </slice>
    <from sec="1083733441" usec="0"/>
    <to sec="1083733490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.68.42.147"/>
    </slice>
    <from sec="1083733876" usec="0"/>
    <to sec="1083734053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2467{
style=filled;
color=gray75;
3939[label="209.18.125.147;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7759[label="209.18.125.147;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2467[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.125.147:1047, 213.101.193.2:1863}[50%]&lt;BR/&gt;{209.18.125.147:1387, 213.101.197.128:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1387: (33.3333%)&lt;BR/&gt; 1047: (16.6667%)&gt;];
}
3939--7759[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.197.128" dst_port="1863" src_ip="209.18.125.147" src_port="1387"/>
      <filter dst_ip="213.101.193.2" dst_port="1863" src_ip="209.18.125.147" src_port="1047"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.8.197.147"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083733576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2469{
style=filled;
color=gray75;
3944[label="93.196.234.147;2142pkt 2142fpkt", shape=pentagon, color=darkviolet];
7763[label="93.196.234.147;2142pkt 2142fpkt", shape=invtriangle, color=brown];
10232[label="93.196.234.147;2142pkt 2142fpkt", shape=invhouse, color=bisque];
stat2469[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.196.234.147:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29709: (0.070028%)&lt;BR/&gt; 59925: (0.0466853%)&lt;BR/&gt; 52465: (0.0466853%)&lt;BR/&gt; 49192: (0.0466853%)&gt;];
}
3944--7763[label="1;2142pkt 2142fpkt"];
3944--10232[label="1;2142pkt 2142fpkt"];
7763--10232[label="1;2142pkt 2142fpkt"];
</description>
    <slice>
      <filter src_ip="93.196.234.147" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2470{
style=filled;
color=gray75;
3949[label="134.225.84.148;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7765[label="134.225.84.148;6pkt 6fpkt", shape=invtriangle, color=brown];
10234[label="134.225.84.148;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2470[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.225.84.148:*, *:445}[66.6667%]&lt;BR/&gt;{134.225.84.148:*, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 4897: (8.33333%)&lt;BR/&gt; 4159: (8.33333%)&lt;BR/&gt; 3962: (8.33333%)&gt;];
}
3949--7765[label="1;6pkt 6fpkt"];
3949--10234[label="1;6pkt 6fpkt"];
7765--10234[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="134.225.84.148"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="134.225.84.148"/>
    </slice>
    <from sec="1083733256" usec="0"/>
    <to sec="1083733651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2471{
style=filled;
color=gray75;
3951[label="93.216.105.148;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7767[label="93.216.105.148;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2471[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.216.105.148:1025, 136.151.205.215:53}[25%]&lt;BR/&gt;{93.216.105.148:1025, 141.22.86.219:53}[25%]&lt;BR/&gt;{93.216.105.148:1053, 136.151.235.67:80}[25%]&lt;BR/&gt;{93.216.105.148:1060, 136.151.235.67:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (28.5714%)&lt;BR/&gt; 53: (28.5714%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 1060: (14.2857%)&lt;BR/&gt; 1053: (7.14286%)&gt;];
}
3951--7767[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.216.105.148" src_port="1060"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.216.105.148" src_port="1053"/>
      <filter dst_ip="141.22.86.219" dst_port="53" src_ip="93.216.105.148" src_port="1025"/>
      <filter dst_ip="136.151.205.215" dst_port="53" src_ip="93.216.105.148" src_port="1025"/>
    </slice>
    <from sec="1083734004" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2472{
style=filled;
color=gray75;
3952[label="93.194.140.148;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7768[label="93.194.140.148;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2472[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.194.140.148:80, 155.148.86.90:1866}[20%]&lt;BR/&gt;{93.194.140.148:80, 155.148.86.90:1867}[20%]&lt;BR/&gt;{93.194.140.148:80, 155.148.86.90:1868}[20%]&lt;BR/&gt;{93.194.140.148:80, 155.148.86.90:1869}[20%]&lt;BR/&gt;{93.194.140.148:80, 155.148.86.90:1870}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1870: (11.1111%)&lt;BR/&gt; 1869: (11.1111%)&lt;BR/&gt; 1868: (11.1111%)&lt;BR/&gt; 1867: (11.1111%)&gt;];
}
3952--7768[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.86.90" dst_port="1870" src_ip="93.194.140.148" src_port="80"/>
      <filter dst_ip="155.148.86.90" dst_port="1869" src_ip="93.194.140.148" src_port="80"/>
      <filter dst_ip="155.148.86.90" dst_port="1868" src_ip="93.194.140.148" src_port="80"/>
      <filter dst_ip="155.148.86.90" dst_port="1867" src_ip="93.194.140.148" src_port="80"/>
      <filter dst_ip="155.148.86.90" dst_port="1866" src_ip="93.194.140.148" src_port="80"/>
    </slice>
    <from sec="1083733773" usec="0"/>
    <to sec="1083733915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2473{
style=filled;
color=gray75;
3954[label="41.232.151.148;33pkt 33fpkt", shape=pentagon, color=darkviolet];
7770[label="41.232.151.148;33pkt 33fpkt", shape=invtriangle, color=brown];
10235[label="41.232.151.148;33pkt 33fpkt", shape=invhouse, color=bisque];
stat2473[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.232.151.148:1445, 209.29.136.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1445: (50%)&lt;BR/&gt; 4976: (1.51515%)&lt;BR/&gt; 4901: (1.51515%)&lt;BR/&gt; 4837: (1.51515%)&lt;BR/&gt; 4805: (1.51515%)&gt;];
}
3954--7770[label="1;33pkt 33fpkt"];
3954--10235[label="1;33pkt 33fpkt"];
7770--10235[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="41.232.151.148" src_port="1445"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.69.209.148"/>
    </slice>
    <from sec="1083733405" usec="0"/>
    <to sec="1083733533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.212.46.149"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.96.70.149"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2477{
style=filled;
color=gray75;
3970[label="173.138.129.149;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7782[label="173.138.129.149;3pkt 3fpkt", shape=invtriangle, color=brown];
10244[label="173.138.129.149;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2477[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.129.149:80, 208.23.193.209:3322}[33.3333%]&lt;BR/&gt;{173.138.129.149:80, 208.23.193.209:3323}[33.3333%]&lt;BR/&gt;{173.138.129.149:80, 208.23.193.209:3325}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3325: (16.6667%)&lt;BR/&gt; 3323: (16.6667%)&lt;BR/&gt; 3322: (16.6667%)&gt;];
}
3970--7782[label="1;3pkt 3fpkt"];
3970--10244[label="1;3pkt 3fpkt"];
7782--10244[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.23.193.209" dst_port="3325" src_ip="173.138.129.149" src_port="80"/>
      <filter dst_ip="208.23.193.209" dst_port="3323" src_ip="173.138.129.149" src_port="80"/>
      <filter dst_ip="208.23.193.209" dst_port="3322" src_ip="173.138.129.149" src_port="80"/>
    </slice>
    <from sec="1083733593" usec="0"/>
    <to sec="1083733753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2478{
style=filled;
color=gray75;
670[label="141.135.41.46;s;164pkt 164fpkt", shape=diamond, color=yellow];
759[label="209.29.149.182;s;199pkt 199fpkt", shape=diamond, color=yellow];
833[label="47.72.133.108;d;2pkt 2fpkt", shape=diamond, color=yellow];
951[label="201.55.27.101;d;12pkt 12fpkt", shape=diamond, color=yellow];
3972[label="209.29.151.149;118pkt 118fpkt", shape=pentagon, color=darkviolet];
4580[label="209.29.149.182;211pkt 211fpkt", shape=pentagon, color=darkviolet];
4819[label="209.29.144.197;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6403[label="141.135.41.46;226pkt 226fpkt", shape=invtriangle, color=brown];
7784[label="209.29.151.149;118pkt 118fpkt", shape=invtriangle, color=brown];
8209[label="209.29.149.182;210pkt 210fpkt", shape=invtriangle, color=brown];
8373[label="209.29.144.197;8pkt 8fpkt", shape=invtriangle, color=brown];
10603[label="209.29.144.197;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2478[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.135.41.46:0, *:0}[38.4211%]&lt;BR/&gt;{209.29.149.182:0, *:0}[36.4912%]&lt;BR/&gt;{209.29.151.149:0, *:0}[20.5263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.6352%)&lt;BR/&gt; 1433: (0.66251%)&lt;BR/&gt; 445: (0.428683%)&lt;BR/&gt; 2745: (0.233827%)&lt;BR/&gt; 1025: (0.233827%)&gt;];
}
670--833[label="0.5;1pkt 1fpkt"];
670--6403[label="1;164pkt 164fpkt"];
759--951[label="0.166667;2pkt 2fpkt"];
759--4580[label="1;199pkt 199fpkt"];
759--8209[label="0.994975;198pkt 198fpkt"];
833--3972[label="0.5;1pkt 1fpkt"];
833--6403[label="0.5;1pkt 1fpkt"];
833--7784[label="0.5;1pkt 1fpkt"];
951--3972[label="0.166667;2pkt 2fpkt"];
951--4580[label="0.166667;2pkt 2fpkt"];
951--4819[label="0.125;1pkt 1fpkt"];
951--7784[label="0.166667;2pkt 2fpkt"];
951--8209[label="0.166667;2pkt 2fpkt"];
951--8373[label="0.125;1pkt 1fpkt"];
3972--7784[label="1;118pkt 118fpkt"];
4580--8209[label="1;210pkt 210fpkt"];
4819--8373[label="1;8pkt 8fpkt"];
4819--10603[label="1;7pkt 7fpkt"];
8373--10603[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="141.135.41.46"/>
      <filter src_ip="209.29.149.182"/>
      <filter src_ip="209.29.151.149"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.69.172.149"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.196.10.150"/>
    </slice>
    <from sec="1083733381" usec="0"/>
    <to sec="1083733502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.98.30.150"/>
    </slice>
    <from sec="1083733414" usec="0"/>
    <to sec="1083733482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.9.64.150"/>
    </slice>
    <from sec="1083733909" usec="0"/>
    <to sec="1083733987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.17.68.150"/>
    </slice>
    <from sec="1083733504" usec="0"/>
    <to sec="1083733809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.68.168.150"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083733881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.197.150"/>
    </slice>
    <from sec="1083733295" usec="0"/>
    <to sec="1083733390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.212.62.151"/>
    </slice>
    <from sec="1083733544" usec="0"/>
    <to sec="1083733642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2487{
style=filled;
color=gray75;
4002[label="109.197.67.151;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7802[label="109.197.67.151;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2487[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.197.67.151:*, 219.222.14.68:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (13.0435%)&lt;BR/&gt; 1025: (8.69565%)&lt;BR/&gt; 135: (8.69565%)&lt;BR/&gt; 6129: (4.34783%)&lt;BR/&gt; 3127: (4.34783%)&gt;];
}
4002--7802[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="219.222.14.68" dst_port="445" src_ip="109.197.67.151"/>
    </slice>
    <from sec="1083733812" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2488{
style=filled;
color=gray75;
4006[label="136.151.110.151;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7804[label="136.151.110.151;2pkt 2fpkt", shape=invtriangle, color=brown];
10255[label="136.151.110.151;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2488[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.110.151:3175, 120.139.220.152:80}[33.3333%]&lt;BR/&gt;{136.151.110.151:3174, 120.139.220.227:80}[33.3333%]&lt;BR/&gt;{136.151.110.151:3177, 120.139.220.232:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3177: (21.4286%)&lt;BR/&gt; 3175: (21.4286%)&lt;BR/&gt; 3174: (7.14286%)&gt;];
}
4006--7804[label="1;2pkt 2fpkt"];
4006--10255[label="1;2pkt 2fpkt"];
7804--10255[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="120.139.220.232" dst_port="80" src_ip="136.151.110.151" src_port="3177"/>
      <filter dst_ip="120.139.220.227" dst_port="80" src_ip="136.151.110.151" src_port="3174"/>
      <filter dst_ip="120.139.220.152" dst_port="80" src_ip="136.151.110.151" src_port="3175"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2489{
style=filled;
color=gray75;
4008[label="155.148.138.151;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7806[label="155.148.138.151;5pkt 5fpkt", shape=invtriangle, color=brown];
10257[label="155.148.138.151;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2489[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.138.151:1810, 46.238.86.19:51719}[20%]&lt;BR/&gt;{155.148.138.151:1101, 46.238.86.29:1721}[20%]&lt;BR/&gt;{155.148.138.151:1035, 213.101.192.129:1863}[20%]&lt;BR/&gt;{155.148.138.151:1039, 198.222.100.230:5050}[20%]&lt;BR/&gt;{155.148.138.151:1054, 213.101.197.241:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (15.3846%)&lt;BR/&gt; 51719: (11.5385%)&lt;BR/&gt; 5050: (11.5385%)&lt;BR/&gt; 1810: (11.5385%)&lt;BR/&gt; 1721: (11.5385%)&gt;];
}
4008--7806[label="1;4pkt 4fpkt"];
4008--10257[label="1;4pkt 4fpkt"];
7806--10257[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.197.241" dst_port="1863" src_ip="155.148.138.151" src_port="1054"/>
      <filter dst_ip="198.222.100.230" dst_port="5050" src_ip="155.148.138.151" src_port="1039"/>
      <filter dst_ip="213.101.192.129" dst_port="1863" src_ip="155.148.138.151" src_port="1035"/>
      <filter dst_ip="46.238.86.29" dst_port="1721" src_ip="155.148.138.151" src_port="1101"/>
      <filter dst_ip="46.238.86.19" dst_port="51719" src_ip="155.148.138.151" src_port="1810"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.70.197.151"/>
    </slice>
    <from sec="1083734023" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.212.220.151"/>
    </slice>
    <from sec="1083733392" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2492{
style=filled;
color=gray75;
4019[label="218.135.247.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7815[label="218.135.247.151;1pkt 1fpkt", shape=invtriangle, color=brown];
10265[label="218.135.247.151;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2492[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.135.247.151:4708, 168.16.189.69:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4708: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
4019--7815[label="1;1pkt 1fpkt"];
4019--10265[label="1;1pkt 1fpkt"];
7815--10265[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.16.189.69" dst_port="445" src_ip="218.135.247.151" src_port="4708"/>
    </slice>
    <from sec="1083733388" usec="0"/>
    <to sec="1083733576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2493{
style=filled;
color=gray75;
4021[label="197.183.1.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7817[label="197.183.1.152;1pkt 1fpkt", shape=invtriangle, color=brown];
10267[label="197.183.1.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2493[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.183.1.152:26748, 208.96.50.84:58681}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58681: (50%)&lt;BR/&gt; 26748: (50%)&gt;];
}
4021--7817[label="1;1pkt 1fpkt"];
4021--10267[label="1;1pkt 1fpkt"];
7817--10267[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58681" src_ip="197.183.1.152" src_port="26748"/>
    </slice>
    <from sec="1083733223" usec="0"/>
    <to sec="1083733916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2494{
style=filled;
color=gray75;
4025[label="201.16.37.152;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7819[label="201.16.37.152;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2494[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.16.37.152:80, 168.127.16.223:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30436: (4.54545%)&lt;BR/&gt; 3873: (4.54545%)&lt;BR/&gt; 3869: (4.54545%)&lt;BR/&gt; 3867: (4.54545%)&gt;];
}
4025--7819[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.16.223" src_ip="201.16.37.152" src_port="80"/>
    </slice>
    <from sec="1083733318" usec="0"/>
    <to sec="1083733960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.9.51.152"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.208.73.152"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2497{
style=filled;
color=gray75;
4035[label="173.138.160.152;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7824[label="173.138.160.152;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2497[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.160.152:1086, 198.222.100.255:5050}[50%]&lt;BR/&gt;{173.138.160.152:1096, 198.222.100.255:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1096: (25%)&lt;BR/&gt; 1086: (25%)&gt;];
}
4035--7824[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.255" dst_port="5050" src_ip="173.138.160.152" src_port="1096"/>
      <filter dst_ip="198.222.100.255" dst_port="5050" src_ip="173.138.160.152" src_port="1086"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.76.180.152"/>
    </slice>
    <from sec="1083733491" usec="0"/>
    <to sec="1083733607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2499{
style=filled;
color=gray75;
4046[label="41.160.76.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7832[label="41.160.76.153;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2499[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.160.76.153:4983, 141.85.89.40:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4983: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
4046--7832[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.89.40" dst_port="445" src_ip="41.160.76.153" src_port="4983"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083733507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.88.224.153"/>
    </slice>
    <from sec="1083733824" usec="0"/>
    <to sec="1083734002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.86.8.154"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2502{
style=filled;
color=gray75;
4055[label="201.179.26.154;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7839[label="201.179.26.154;9pkt 9fpkt", shape=invtriangle, color=brown];
10278[label="201.179.26.154;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2502[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.179.26.154:0, *:0}[60%]&lt;BR/&gt;{201.179.26.154:*, 136.151.235.67:80}[20%]&lt;BR/&gt;{201.179.26.154:*, *:445}[20%]&lt;BR/&gt;{201.179.26.154:*, 168.127.249.66:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (62.069%)&lt;BR/&gt; 445: (10.3448%)&lt;BR/&gt; 80: (8.62069%)&lt;BR/&gt; 4016: (5.17241%)&lt;BR/&gt; 2820: (5.17241%)&gt;];
}
4055--7839[label="1;9pkt 9fpkt"];
4055--10278[label="1;10pkt 10fpkt"];
7839--10278[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.249.66" src_ip="201.179.26.154"/>
      <filter dst_port="445" src_ip="201.179.26.154"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.179.26.154"/>
      <filter src_ip="201.179.26.154"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083734059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2503{
style=filled;
color=gray75;
4058[label="53.79.66.154;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7841[label="53.79.66.154;8pkt 8fpkt", shape=invtriangle, color=brown];
10279[label="53.79.66.154;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2503[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.79.66.154:1024, *:53}[50%]&lt;BR/&gt;{53.79.66.154:1032, *:53}[50%]&lt;BR/&gt;{53.79.66.154:*, 209.29.137.50:53}[25%]&lt;BR/&gt;{53.79.66.154:*, 209.29.137.86:53}[25%]&lt;BR/&gt;{53.79.66.154:*, 173.138.129.159:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1032: (25%)&lt;BR/&gt; 1024: (25%)&gt;];
}
4058--7841[label="1;8pkt 8fpkt"];
4058--10279[label="1;8pkt 8fpkt"];
7841--10279[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.129.159" dst_port="53" src_ip="53.79.66.154"/>
      <filter dst_ip="209.29.137.86" dst_port="53" src_ip="53.79.66.154"/>
      <filter dst_ip="209.29.137.50" dst_port="53" src_ip="53.79.66.154"/>
      <filter dst_port="53" src_ip="53.79.66.154" src_port="1032"/>
      <filter dst_port="53" src_ip="53.79.66.154" src_port="1024"/>
    </slice>
    <from sec="1083733591" usec="0"/>
    <to sec="1083733687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.202.68.154"/>
    </slice>
    <from sec="1083733817" usec="0"/>
    <to sec="1083733904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.188.193.154"/>
    </slice>
    <from sec="1083733605" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.26.234.154"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083733554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.52.236.154"/>
    </slice>
    <from sec="1083733284" usec="0"/>
    <to sec="1083733747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.18.55.155"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.91.55.155"/>
    </slice>
    <from sec="1083733393" usec="0"/>
    <to sec="1083733494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.247.101.155"/>
    </slice>
    <from sec="1083733600" usec="0"/>
    <to sec="1083733694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2511{
style=filled;
color=gray75;
4088[label="201.151.144.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7858[label="201.151.144.155;3pkt 3fpkt", shape=invtriangle, color=brown];
10291[label="201.151.144.155;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2511[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.151.144.155:1777, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{201.151.144.155:0, 155.148.98.208:0}[33.3333%]&lt;BR/&gt;{201.151.144.155:1758, 155.148.98.208:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 1777: (16.6667%)&lt;BR/&gt; 1758: (16.6667%)&lt;BR/&gt; 445: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
4088--7858[label="1;3pkt 3fpkt"];
4088--10291[label="1;3pkt 3fpkt"];
7858--10291[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.98.208" dst_port="445" src_ip="201.151.144.155" src_port="1758"/>
      <filter dst_ip="155.148.98.208" src_ip="201.151.144.155"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.151.144.155" src_port="1777"/>
    </slice>
    <from sec="1083733828" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.195.21.156"/>
    </slice>
    <from sec="1083733328" usec="0"/>
    <to sec="1083733504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2513{
style=filled;
color=gray75;
853[label="198.198.43.156;s;17pkt 17fpkt", shape=diamond, color=yellow];
4095[label="198.198.43.156;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7864[label="198.198.43.156;17pkt 17fpkt", shape=invtriangle, color=brown];
10296[label="198.198.43.156;17pkt 17fpkt", shape=invhouse, color=bisque];
stat2513[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.43.156:80, 209.29.138.126:*}[66.6667%]&lt;BR/&gt;{198.198.43.156:80, 209.29.138.127:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4707: (2.94118%)&lt;BR/&gt; 4657: (2.94118%)&lt;BR/&gt; 4505: (2.94118%)&lt;BR/&gt; 4372: (2.94118%)&gt;];
}
853--4095[label="0.941176;16pkt 16fpkt"];
853--7864[label="0.941176;16pkt 16fpkt"];
853--10296[label="0.941176;16pkt 16fpkt"];
4095--7864[label="1;17pkt 17fpkt"];
4095--10296[label="1;17pkt 17fpkt"];
7864--10296[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.198.43.156" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.198.43.156" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2514{
style=filled;
color=gray75;
4097[label="44.189.59.156;156pkt 156fpkt", shape=pentagon, color=darkviolet];
7865[label="44.189.59.156;155pkt 155fpkt", shape=invtriangle, color=brown];
10297[label="44.189.59.156;156pkt 156fpkt", shape=invhouse, color=bisque];
stat2514[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.189.59.156:2011, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2011: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
4097--7865[label="1;155pkt 155fpkt"];
4097--10297[label="1;156pkt 156fpkt"];
7865--10297[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="44.189.59.156" src_port="2011"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.20.137.156"/>
    </slice>
    <from sec="1083733295" usec="0"/>
    <to sec="1083733358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2516{
style=filled;
color=gray75;
4104[label="136.151.154.156;84pkt 84fpkt", shape=pentagon, color=darkviolet];
7869[label="136.151.154.156;83pkt 83fpkt", shape=invtriangle, color=brown];
10299[label="136.151.154.156;84pkt 84fpkt", shape=invhouse, color=bisque];
stat2516[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.154.156:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4104--7869[label="1;83pkt 83fpkt"];
4104--10299[label="1;84pkt 84fpkt"];
7869--10299[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.154.156"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.98.165.156"/>
    </slice>
    <from sec="1083733384" usec="0"/>
    <to sec="1083733500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.29.194.156"/>
    </slice>
    <from sec="1083733489" usec="0"/>
    <to sec="1083733565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2519{
style=filled;
color=gray75;
4108[label="213.101.197.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7873[label="213.101.197.156;1pkt 1fpkt", shape=invtriangle, color=brown];
10303[label="213.101.197.156;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2519[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.197.156:1863, 141.22.234.22:4559}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4559: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
4108--7873[label="1;1pkt 1fpkt"];
4108--10303[label="1;1pkt 1fpkt"];
7873--10303[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.234.22" dst_port="4559" src_ip="213.101.197.156" src_port="1863"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2520{
style=filled;
color=gray75;
4109[label="53.157.207.156;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7874[label="53.157.207.156;6pkt 6fpkt", shape=invtriangle, color=brown];
10304[label="53.157.207.156;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2520[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.157.207.156:*, 155.211.139.98:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59110: (8.82353%)&lt;BR/&gt; 59101: (8.82353%)&lt;BR/&gt; 59088: (8.82353%)&lt;BR/&gt; 59019: (8.82353%)&gt;];
}
4109--7874[label="1;6pkt 6fpkt"];
4109--10304[label="1;5pkt 5fpkt"];
7874--10304[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.139.98" dst_port="80" src_ip="53.157.207.156"/>
    </slice>
    <from sec="1083733360" usec="0"/>
    <to sec="1083733766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.167.237.156"/>
    </slice>
    <from sec="1083733563" usec="0"/>
    <to sec="1083733696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2522{
style=filled;
color=gray75;
4111[label="136.151.239.156;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7876[label="136.151.239.156;13pkt 13fpkt", shape=invtriangle, color=brown];
10305[label="136.151.239.156;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2522[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.239.156:25, *:*}[46.1538%]&lt;BR/&gt;{136.151.239.156:*, 194.11.245.253:25}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 60698: (3.84615%)&lt;BR/&gt; 47952: (3.84615%)&lt;BR/&gt; 45337: (3.84615%)&lt;BR/&gt; 45175: (3.84615%)&gt;];
}
4111--7876[label="1;13pkt 13fpkt"];
4111--10305[label="1;13pkt 13fpkt"];
7876--10305[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.239.156" src_port="25"/>
      <filter dst_ip="194.11.245.253" dst_port="25" src_ip="136.151.239.156"/>
    </slice>
    <from sec="1083733369" usec="0"/>
    <to sec="1083734021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.242.19.157"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.209.20.157"/>
    </slice>
    <from sec="1083733274" usec="0"/>
    <to sec="1083733486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2525{
style=filled;
color=gray75;
4116[label="208.96.33.157;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7880[label="208.96.33.157;14pkt 14fpkt", shape=invtriangle, color=brown];
10309[label="208.96.33.157;15pkt 15fpkt", shape=invhouse, color=bisque];
stat2525[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.33.157:*, 198.186.156.54:21}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (19.3182%)&lt;BR/&gt; 0: (6.81818%)&lt;BR/&gt; 52502: (3.40909%)&lt;BR/&gt; 52501: (3.40909%)&lt;BR/&gt; 52496: (3.40909%)&gt;];
}
4116--7880[label="1;14pkt 14fpkt"];
4116--10309[label="1;15pkt 15fpkt"];
7880--10309[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="198.186.156.54" dst_port="21" src_ip="208.96.33.157"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.200.75.157"/>
    </slice>
    <from sec="1083733796" usec="0"/>
    <to sec="1083733873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.121.77.157"/>
    </slice>
    <from sec="1083733424" usec="0"/>
    <to sec="1083733497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2528{
style=filled;
color=gray75;
4122[label="46.58.106.157;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7885[label="46.58.106.157;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2528[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.58.106.157:80, 168.127.4.50:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49604: (3.7037%)&lt;BR/&gt; 49457: (3.7037%)&lt;BR/&gt; 49456: (3.7037%)&lt;BR/&gt; 49453: (3.7037%)&gt;];
}
4122--7885[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.4.50" src_ip="46.58.106.157" src_port="80"/>
    </slice>
    <from sec="1083733295" usec="0"/>
    <to sec="1083733590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2529{
style=filled;
color=gray75;
4129[label="47.113.216.157;101pkt 101fpkt", shape=pentagon, color=darkviolet];
7888[label="47.113.216.157;101pkt 101fpkt", shape=invtriangle, color=brown];
stat2529[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.113.216.157:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3361: (0.990099%)&lt;BR/&gt; 2572: (0.990099%)&lt;BR/&gt; 1597: (0.990099%)&lt;BR/&gt; 4909: (0.49505%)&gt;];
}
4129--7888[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="47.113.216.157"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2530{
style=filled;
color=gray75;
4130[label="147.226.224.157;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7889[label="147.226.224.157;16pkt 16fpkt", shape=invtriangle, color=brown];
10313[label="147.226.224.157;15pkt 15fpkt", shape=invhouse, color=bisque];
stat2530[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.226.224.157:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60396: (3.19149%)&lt;BR/&gt; 60336: (3.19149%)&lt;BR/&gt; 58681: (3.19149%)&lt;BR/&gt; 58479: (3.19149%)&gt;];
}
4130--7889[label="1;16pkt 16fpkt"];
4130--10313[label="1;15pkt 15fpkt"];
7889--10313[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="147.226.224.157" src_port="80"/>
    </slice>
    <from sec="1083733839" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.110.238.157"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083733542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2532{
style=filled;
color=gray75;
4135[label="173.138.130.158;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7891[label="173.138.130.158;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2532[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.130.158:1080, 200.224.98.213:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (14.2857%)&lt;BR/&gt; 33912: (7.14286%)&lt;BR/&gt; 33909: (7.14286%)&lt;BR/&gt; 33908: (7.14286%)&lt;BR/&gt; 33907: (7.14286%)&gt;];
}
4135--7891[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="200.224.98.213" src_ip="173.138.130.158" src_port="1080"/>
    </slice>
    <from sec="1083733674" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2533{
style=filled;
color=gray75;
4138[label="168.76.134.158;200pkt 200fpkt", shape=pentagon, color=darkviolet];
7893[label="168.76.134.158;199pkt 199fpkt", shape=invtriangle, color=brown];
stat2533[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.134.158:*, *:2745}[27%]&lt;BR/&gt;{168.76.134.158:*, *:80}[24.5%]&lt;BR/&gt;{168.76.134.158:*, *:6129}[24.5%]&lt;BR/&gt;{168.76.134.158:*, *:1433}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (13.6591%)&lt;BR/&gt; 6129: (12.2807%)&lt;BR/&gt; 80: (12.2807%)&lt;BR/&gt; 1433: (12.0301%)&lt;BR/&gt; 1041: (0.75188%)&gt;];
}
4138--7893[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="168.76.134.158"/>
      <filter dst_port="6129" src_ip="168.76.134.158"/>
      <filter dst_port="80" src_ip="168.76.134.158"/>
      <filter dst_port="1433" src_ip="168.76.134.158"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.4.147.158"/>
    </slice>
    <from sec="1083733496" usec="0"/>
    <to sec="1083733587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2535{
style=filled;
color=gray75;
4144[label="192.199.66.159;74pkt 74fpkt", shape=pentagon, color=darkviolet];
7898[label="192.199.66.159;73pkt 73fpkt", shape=invtriangle, color=brown];
stat2535[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.199.66.159:*, *:1080}[50%]&lt;BR/&gt;{192.199.66.159:*, *:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.1701%)&lt;BR/&gt; 3128: (24.8299%)&lt;BR/&gt; 4958: (0.680272%)&lt;BR/&gt; 4896: (0.680272%)&lt;BR/&gt; 4850: (0.680272%)&gt;];
}
4144--7898[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="192.199.66.159"/>
      <filter dst_port="1080" src_ip="192.199.66.159"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.69.132.159"/>
    </slice>
    <from sec="1083733337" usec="0"/>
    <to sec="1083733507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.120.153.159"/>
    </slice>
    <from sec="1083733306" usec="0"/>
    <to sec="1083733363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.11.158.159"/>
    </slice>
    <from sec="1083733714" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.55.194.159"/>
    </slice>
    <from sec="1083733492" usec="0"/>
    <to sec="1083733574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.42.201.159"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2541{
style=filled;
color=gray75;
4162[label="55.43.41.160;177pkt 177fpkt", shape=pentagon, color=darkviolet];
7909[label="55.43.41.160;176pkt 176fpkt", shape=invtriangle, color=brown];
10323[label="55.43.41.160;177pkt 177fpkt", shape=invhouse, color=bisque];
stat2541[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.43.41.160:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4162--7909[label="1;176pkt 176fpkt"];
4162--10323[label="1;177pkt 177fpkt"];
7909--10323[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="55.43.41.160" src_port="1045"/>
    </slice>
    <from sec="1083733548" usec="0"/>
    <to sec="1083733584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_2542{
style=filled;
color=gray75;
504[label="208.96.49.160;s;604pkt 604fpkt", shape=diamond, color=yellow];
7910[label="208.96.49.160;655pkt 655fpkt", shape=invtriangle, color=brown];
10324[label="208.96.49.160;655pkt 655fpkt", shape=invhouse, color=bisque];
stat2542[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.49.160:53, *:*}[89.1603%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.4148%)&lt;BR/&gt; 65534: (4.28422%)&lt;BR/&gt; 0: (2.29885%)&lt;BR/&gt; 32768: (1.4629%)&lt;BR/&gt; 1024: (1.17555%)&gt;];
}
504--7910[label="1;604pkt 604fpkt"];
504--10324[label="1;604pkt 604fpkt"];
7910--10324[label="1;655pkt 655fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.49.160" src_port="53"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2543{
style=filled;
color=gray75;
4165[label="198.163.100.160;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7912[label="198.163.100.160;20pkt 20fpkt", shape=invtriangle, color=brown];
10326[label="198.163.100.160;21pkt 21fpkt", shape=invhouse, color=bisque];
stat2543[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.163.100.160:80, 209.29.138.127:*}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45211: (2.41935%)&lt;BR/&gt; 38454: (2.41935%)&lt;BR/&gt; 37466: (2.41935%)&lt;BR/&gt; 37220: (2.41935%)&gt;];
}
4165--7912[label="1;20pkt 20fpkt"];
4165--10326[label="1;21pkt 21fpkt"];
7912--10326[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="198.163.100.160" src_port="80"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_2544{
style=filled;
color=gray75;
183[label="216.43.120.160;s;448pkt 448fpkt", shape=diamond, color=yellow];
7913[label="216.43.120.160;463pkt 463fpkt", shape=invtriangle, color=brown];
10327[label="216.43.120.160;463pkt 463fpkt", shape=invhouse, color=bisque];
stat2544[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.43.120.160:80, 209.29.138.10:*}[93.319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60032: (0.10917%)&lt;BR/&gt; 60006: (0.10917%)&lt;BR/&gt; 58424: (0.10917%)&lt;BR/&gt; 58423: (0.10917%)&gt;];
}
183--7913[label="0.997768;447pkt 447fpkt"];
183--10327[label="0.997768;447pkt 447fpkt"];
7913--10327[label="1;463pkt 463fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="216.43.120.160" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2545{
style=filled;
color=gray75;
4169[label="196.10.167.160;62pkt 62fpkt", shape=pentagon, color=darkviolet];
7915[label="196.10.167.160;61pkt 61fpkt", shape=invtriangle, color=brown];
stat2545[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.10.167.160:80, 168.127.113.162:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1221: (0.813008%)&lt;BR/&gt; 1220: (0.813008%)&lt;BR/&gt; 1219: (0.813008%)&lt;BR/&gt; 1218: (0.813008%)&gt;];
}
4169--7915[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.162" src_ip="196.10.167.160" src_port="80"/>
    </slice>
    <from sec="1083733531" usec="0"/>
    <to sec="1083733606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2546{
style=filled;
color=gray75;
4173[label="205.141.224.160;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7918[label="205.141.224.160;14pkt 14fpkt", shape=invtriangle, color=brown];
10330[label="205.141.224.160;15pkt 15fpkt", shape=invhouse, color=bisque];
stat2546[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.141.224.160:80, 209.29.136.44:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3424: (3.40909%)&lt;BR/&gt; 3418: (3.40909%)&lt;BR/&gt; 3417: (3.40909%)&lt;BR/&gt; 3410: (3.40909%)&gt;];
}
4173--7918[label="1;14pkt 14fpkt"];
4173--10330[label="1;15pkt 15fpkt"];
7918--10330[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.44" src_ip="205.141.224.160" src_port="80"/>
    </slice>
    <from sec="1083733473" usec="0"/>
    <to sec="1083733768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.25.250.160"/>
    </slice>
    <from sec="1083733804" usec="0"/>
    <to sec="1083733852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2548{
style=filled;
color=gray75;
4176[label="95.81.17.161;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7921[label="95.81.17.161;10pkt 10fpkt", shape=invtriangle, color=brown];
stat2548[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.81.17.161:80, 209.29.136.3:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29017: (5%)&lt;BR/&gt; 29011: (5%)&lt;BR/&gt; 28966: (5%)&lt;BR/&gt; 28862: (5%)&gt;];
}
4176--7921[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" src_ip="95.81.17.161" src_port="80"/>
    </slice>
    <from sec="1083733698" usec="0"/>
    <to sec="1083733809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2549{
style=filled;
color=gray75;
4178[label="192.56.26.161;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7922[label="192.56.26.161;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2549[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.56.26.161:3027, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{192.56.26.161:1325, 141.22.204.212:445}[33.3333%]&lt;BR/&gt;{192.56.26.161:1525, 209.29.137.250:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (40%)&lt;BR/&gt; 1525: (20%)&lt;BR/&gt; 1325: (20%)&lt;BR/&gt; 3027: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
4178--7922[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.137.250" dst_port="445" src_ip="192.56.26.161" src_port="1525"/>
      <filter dst_ip="141.22.204.212" dst_port="445" src_ip="192.56.26.161" src_port="1325"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="192.56.26.161" src_port="3027"/>
    </slice>
    <from sec="1083733601" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.116.32.161"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083733750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2551{
style=filled;
color=gray75;
4183[label="210.86.85.161;69pkt 69fpkt", shape=pentagon, color=darkviolet];
7927[label="210.86.85.161;68pkt 68fpkt", shape=invtriangle, color=brown];
stat2551[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.86.85.161:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4973: (0.729927%)&lt;BR/&gt; 4855: (0.729927%)&lt;BR/&gt; 4781: (0.729927%)&lt;BR/&gt; 4737: (0.729927%)&gt;];
}
4183--7927[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="210.86.85.161"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2552{
style=filled;
color=gray75;
4185[label="202.70.92.161;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7929[label="202.70.92.161;23pkt 23fpkt", shape=invtriangle, color=brown];
stat2552[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.70.92.161:80, 209.29.138.127:*}[69.5652%]&lt;BR/&gt;{202.70.92.161:80, 209.29.138.126:*}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4712: (2.17391%)&lt;BR/&gt; 4568: (2.17391%)&lt;BR/&gt; 4552: (2.17391%)&lt;BR/&gt; 4551: (2.17391%)&gt;];
}
4185--7929[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="202.70.92.161" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="202.70.92.161" src_port="80"/>
    </slice>
    <from sec="1083733255" usec="0"/>
    <to sec="1083733660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2553{
style=filled;
color=gray75;
4187[label="93.186.97.161;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7931[label="93.186.97.161;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2553[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.186.97.161:25043, 155.148.131.35:80}[20%]&lt;BR/&gt;{93.186.97.161:17341, 136.151.235.67:80}[20%]&lt;BR/&gt;{93.186.97.161:21192, 136.151.211.166:445}[20%]&lt;BR/&gt;{93.186.97.161:42343, 141.132.45.169:3127}[20%]&lt;BR/&gt;{93.186.97.161:27773, 141.145.203.182:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 42343: (10%)&lt;BR/&gt; 27773: (10%)&lt;BR/&gt; 25043: (10%)&gt;];
}
4187--7931[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.145.203.182" dst_port="445" src_ip="93.186.97.161" src_port="27773"/>
      <filter dst_ip="141.132.45.169" dst_port="3127" src_ip="93.186.97.161" src_port="42343"/>
      <filter dst_ip="136.151.211.166" dst_port="445" src_ip="93.186.97.161" src_port="21192"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.186.97.161" src_port="17341"/>
      <filter dst_ip="155.148.131.35" dst_port="80" src_ip="93.186.97.161" src_port="25043"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083734027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.156.149.161"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.139.178.161"/>
    </slice>
    <from sec="1083733343" usec="0"/>
    <to sec="1083733495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.169.182.161"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.84.250.161"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2558{
style=filled;
color=gray75;
4198[label="54.171.13.162;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7940[label="54.171.13.162;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2558[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.171.13.162:1694, 219.223.192.80:445}[50%]&lt;BR/&gt;{54.171.13.162:2370, 173.138.36.154:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 2370: (25%)&lt;BR/&gt; 1694: (25%)&gt;];
}
4198--7940[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.36.154" dst_port="445" src_ip="54.171.13.162" src_port="2370"/>
      <filter dst_ip="219.223.192.80" dst_port="445" src_ip="54.171.13.162" src_port="1694"/>
    </slice>
    <from sec="1083733673" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2559{
style=filled;
color=gray75;
4201[label="136.151.47.162;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7942[label="136.151.47.162;22pkt 22fpkt", shape=invtriangle, color=brown];
stat2559[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.47.162:80, 45.108.82.184:*}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59340: (2.27273%)&lt;BR/&gt; 57334: (2.27273%)&lt;BR/&gt; 55761: (2.27273%)&lt;BR/&gt; 55568: (2.27273%)&gt;];
}
4201--7942[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="136.151.47.162" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2560{
style=filled;
color=gray75;
4208[label="193.120.105.162;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7947[label="193.120.105.162;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2560[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.120.105.162:4392, 141.135.148.21:445}[33.3333%]&lt;BR/&gt;{193.120.105.162:2762, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{193.120.105.162:3025, 155.148.212.76:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 4392: (16.6667%)&lt;BR/&gt; 3025: (16.6667%)&lt;BR/&gt; 2762: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
4208--7947[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.212.76" dst_port="445" src_ip="193.120.105.162" src_port="3025"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="193.120.105.162" src_port="2762"/>
      <filter dst_ip="141.135.148.21" dst_port="445" src_ip="193.120.105.162" src_port="4392"/>
    </slice>
    <from sec="1083733398" usec="0"/>
    <to sec="1083734047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.163.128.162"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083733470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.120.160.162"/>
    </slice>
    <from sec="1083733814" usec="0"/>
    <to sec="1083733945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2563{
style=filled;
color=gray75;
4214[label="53.162.161.162;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7952[label="53.162.161.162;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2563[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.162.161.162:29524, 209.29.136.89:2806}[33.3333%]&lt;BR/&gt;{53.162.161.162:29524, 209.29.136.89:3063}[33.3333%]&lt;BR/&gt;{53.162.161.162:29524, 209.29.136.89:4946}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29524: (50%)&lt;BR/&gt; 4946: (20%)&lt;BR/&gt; 3063: (20%)&lt;BR/&gt; 2806: (10%)&gt;];
}
4214--7952[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="4946" src_ip="53.162.161.162" src_port="29524"/>
      <filter dst_ip="209.29.136.89" dst_port="3063" src_ip="53.162.161.162" src_port="29524"/>
      <filter dst_ip="209.29.136.89" dst_port="2806" src_ip="53.162.161.162" src_port="29524"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2564{
style=filled;
color=gray75;
4215[label="217.98.163.162;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7953[label="217.98.163.162;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2564[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.98.163.162:*, 173.138.211.114:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41313: (8.33333%)&lt;BR/&gt; 40977: (8.33333%)&lt;BR/&gt; 40470: (8.33333%)&lt;BR/&gt; 39884: (8.33333%)&gt;];
}
4215--7953[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.211.114" dst_port="80" src_ip="217.98.163.162"/>
    </slice>
    <from sec="1083733346" usec="0"/>
    <to sec="1083733988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2565{
style=filled;
color=gray75;
4218[label="200.106.178.162;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7956[label="200.106.178.162;3pkt 3fpkt", shape=invtriangle, color=brown];
10351[label="200.106.178.162;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2565[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.106.178.162:3290, 155.211.225.80:445}[25%]&lt;BR/&gt;{200.106.178.162:1447, 141.22.229.186:445}[25%]&lt;BR/&gt;{200.106.178.162:2958, 136.151.235.67:80}[25%]&lt;BR/&gt;{200.106.178.162:3104, 136.151.235.67:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.2727%)&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 3290: (13.6364%)&lt;BR/&gt; 2958: (13.6364%)&lt;BR/&gt; 1447: (13.6364%)&gt;];
}
4218--7956[label="1;3pkt 3fpkt"];
4218--10351[label="1;4pkt 4fpkt"];
7956--10351[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="200.106.178.162" src_port="3104"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="200.106.178.162" src_port="2958"/>
      <filter dst_ip="141.22.229.186" dst_port="445" src_ip="200.106.178.162" src_port="1447"/>
      <filter dst_ip="155.211.225.80" dst_port="445" src_ip="200.106.178.162" src_port="3290"/>
    </slice>
    <from sec="1083733580" usec="0"/>
    <to sec="1083734052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2566{
style=filled;
color=gray75;
4219[label="202.23.194.162;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7957[label="202.23.194.162;17pkt 17fpkt", shape=invtriangle, color=brown];
10352[label="202.23.194.162;16pkt 16fpkt", shape=invhouse, color=bisque];
stat2566[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.23.194.162:80, 168.127.5.193:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4054: (3%)&lt;BR/&gt; 4024: (3%)&lt;BR/&gt; 3955: (3%)&lt;BR/&gt; 3394: (3%)&gt;];
}
4219--7957[label="1;17pkt 17fpkt"];
4219--10352[label="1;16pkt 16fpkt"];
7957--10352[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.5.193" src_ip="202.23.194.162" src_port="80"/>
    </slice>
    <from sec="1083733723" usec="0"/>
    <to sec="1083733757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.71.53.163"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.195.69.163"/>
    </slice>
    <from sec="1083733345" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.8.176.163"/>
    </slice>
    <from sec="1083733275" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.100.184.163"/>
    </slice>
    <from sec="1083733309" usec="0"/>
    <to sec="1083733457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.8.6.164"/>
    </slice>
    <from sec="1083733351" usec="0"/>
    <to sec="1083733416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2572{
style=filled;
color=gray75;
4242[label="208.96.49.164;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7972[label="208.96.49.164;2pkt 2fpkt", shape=invtriangle, color=brown];
10365[label="208.96.49.164;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2572[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.49.164:80, 208.81.23.183:19828}[33.3333%]&lt;BR/&gt;{208.96.49.164:80, 208.81.23.183:20029}[33.3333%]&lt;BR/&gt;{208.96.49.164:80, 208.81.23.183:20038}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20038: (21.4286%)&lt;BR/&gt; 20029: (21.4286%)&lt;BR/&gt; 19828: (7.14286%)&gt;];
}
4242--7972[label="1;2pkt 2fpkt"];
4242--10365[label="1;2pkt 2fpkt"];
7972--10365[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.81.23.183" dst_port="20038" src_ip="208.96.49.164" src_port="80"/>
      <filter dst_ip="208.81.23.183" dst_port="20029" src_ip="208.96.49.164" src_port="80"/>
      <filter dst_ip="208.81.23.183" dst_port="19828" src_ip="208.96.49.164" src_port="80"/>
    </slice>
    <from sec="1083733889" usec="0"/>
    <to sec="1083733901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2573{
style=filled;
color=gray75;
4244[label="199.183.95.164;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7973[label="199.183.95.164;14pkt 14fpkt", shape=invtriangle, color=brown];
stat2573[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.183.95.164:80, 208.96.38.17:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64063: (3.44828%)&lt;BR/&gt; 61140: (3.44828%)&lt;BR/&gt; 61094: (3.44828%)&lt;BR/&gt; 61093: (3.44828%)&gt;];
}
4244--7973[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.38.17" src_ip="199.183.95.164" src_port="80"/>
    </slice>
    <from sec="1083733296" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.220.134.164"/>
    </slice>
    <from sec="1083733486" usec="0"/>
    <to sec="1083733576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.101.198.164"/>
    </slice>
    <from sec="1083733256" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2576{
style=filled;
color=gray75;
4252[label="197.10.233.164;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7980[label="197.10.233.164;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2576[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.10.233.164:1918, 219.222.12.101:445}[50%]&lt;BR/&gt;{197.10.233.164:1952, 219.223.215.229:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 1952: (25%)&lt;BR/&gt; 1918: (25%)&gt;];
}
4252--7980[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.215.229" dst_port="445" src_ip="197.10.233.164" src_port="1952"/>
      <filter dst_ip="219.222.12.101" dst_port="445" src_ip="197.10.233.164" src_port="1918"/>
    </slice>
    <from sec="1083733499" usec="0"/>
    <to sec="1083733900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2577{
style=filled;
color=gray75;
4253[label="148.95.238.164;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7981[label="148.95.238.164;5pkt 5fpkt", shape=invtriangle, color=brown];
10369[label="148.95.238.164;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2577[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.95.238.164:*, *:445}[66.6667%]&lt;BR/&gt;{148.95.238.164:*, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (35.2941%)&lt;BR/&gt; 80: (14.7059%)&lt;BR/&gt; 60425: (8.82353%)&lt;BR/&gt; 2837: (8.82353%)&lt;BR/&gt; 2618: (8.82353%)&gt;];
}
4253--7981[label="1;5pkt 5fpkt"];
4253--10369[label="1;6pkt 6fpkt"];
7981--10369[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="148.95.238.164"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="148.95.238.164"/>
    </slice>
    <from sec="1083733625" usec="0"/>
    <to sec="1083734023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2578{
style=filled;
color=gray75;
4254[label="44.148.38.165;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7982[label="44.148.38.165;27pkt 27fpkt", shape=invtriangle, color=brown];
stat2578[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.148.38.165:80, 209.29.136.3:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30316: (1.85185%)&lt;BR/&gt; 29633: (1.85185%)&lt;BR/&gt; 29481: (1.85185%)&lt;BR/&gt; 29443: (1.85185%)&gt;];
}
4254--7982[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" src_ip="44.148.38.165" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.97.46.165"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2580{
style=filled;
color=gray75;
4262[label="216.43.120.165;116pkt 116fpkt", shape=pentagon, color=darkviolet];
7989[label="216.43.120.165;116pkt 116fpkt", shape=invtriangle, color=brown];
stat2580[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.43.120.165:80, 209.29.138.10:*}[45.6897%]&lt;BR/&gt;{216.43.120.165:80, 209.29.138.127:*}[29.3103%]&lt;BR/&gt;{216.43.120.165:80, 209.29.138.126:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56262: (0.431034%)&lt;BR/&gt; 56149: (0.431034%)&lt;BR/&gt; 56090: (0.431034%)&lt;BR/&gt; 56040: (0.431034%)&gt;];
}
4262--7989[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="216.43.120.165" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="216.43.120.165" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="216.43.120.165" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.16.129.165"/>
    </slice>
    <from sec="1083733699" usec="0"/>
    <to sec="1083733906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.118.20.166"/>
    </slice>
    <from sec="1083733715" usec="0"/>
    <to sec="1083733968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="137.129.32.166"/>
    </slice>
    <from sec="1083733454" usec="0"/>
    <to sec="1083733706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2584{
style=filled;
color=gray75;
4274[label="52.11.103.166;113pkt 113fpkt", shape=pentagon, color=darkviolet];
7997[label="52.11.103.166;113pkt 113fpkt", shape=invtriangle, color=brown];
10379[label="52.11.103.166;113pkt 113fpkt", shape=invhouse, color=bisque];
stat2584[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.11.103.166:*, *:3127}[33.6283%]&lt;BR/&gt;{52.11.103.166:*, *:3128}[33.6283%]&lt;BR/&gt;{52.11.103.166:*, *:1080}[32.7434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.8142%)&lt;BR/&gt; 3127: (16.8142%)&lt;BR/&gt; 1080: (16.3717%)&lt;BR/&gt; 1937: (0.884956%)&lt;BR/&gt; 1714: (0.884956%)&gt;];
}
4274--7997[label="1;113pkt 113fpkt"];
4274--10379[label="1;113pkt 113fpkt"];
7997--10379[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="52.11.103.166"/>
      <filter dst_port="3127" src_ip="52.11.103.166"/>
      <filter dst_port="1080" src_ip="52.11.103.166"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2585{
style=filled;
color=gray75;
4278[label="212.74.177.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7999[label="212.74.177.166;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2585[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.74.177.166:31794, 209.29.136.89:4363}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31794: (50%)&lt;BR/&gt; 4363: (50%)&gt;];
}
4278--7999[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="4363" src_ip="212.74.177.166" src_port="31794"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.3.212.166"/>
    </slice>
    <from sec="1083733825" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.14.218.166"/>
    </slice>
    <from sec="1083733687" usec="0"/>
    <to sec="1083733796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.159.28.167"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2589{
style=filled;
color=gray75;
4289[label="208.96.50.167;241pkt 241fpkt", shape=pentagon, color=darkviolet];
8010[label="208.96.50.167;241pkt 241fpkt", shape=invtriangle, color=brown];
stat2589[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.50.167:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4289--8010[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.50.167"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2590{
style=filled;
color=gray75;
4297[label="168.127.114.167;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8014[label="168.127.114.167;23pkt 23fpkt", shape=invtriangle, color=brown];
10388[label="168.127.114.167;24pkt 24fpkt", shape=invhouse, color=bisque];
stat2590[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.114.167:*, 95.181.164.33:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2946: (2.11268%)&lt;BR/&gt; 2942: (2.11268%)&lt;BR/&gt; 2941: (2.11268%)&lt;BR/&gt; 2940: (2.11268%)&gt;];
}
4297--8014[label="1;23pkt 23fpkt"];
4297--10388[label="1;24pkt 24fpkt"];
8014--10388[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="95.181.164.33" dst_port="80" src_ip="168.127.114.167"/>
    </slice>
    <from sec="1083733268" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2591{
style=filled;
color=gray75;
4298[label="41.166.130.167;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8015[label="41.166.130.167;6pkt 6fpkt", shape=invtriangle, color=brown];
10389[label="41.166.130.167;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2591[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.166.130.167:0, *:0}[33.3333%]&lt;BR/&gt;{41.166.130.167:*, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{41.166.130.167:*, *:445}[33.3333%]&lt;BR/&gt;{41.166.130.167:*, 141.132.122.36:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (35.2941%)&lt;BR/&gt; 445: (17.6471%)&lt;BR/&gt; 80: (14.7059%)&lt;BR/&gt; 4208: (8.82353%)&lt;BR/&gt; 3388: (8.82353%)&gt;];
}
4298--8015[label="1;6pkt 6fpkt"];
4298--10389[label="1;5pkt 5fpkt"];
8015--10389[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.132.122.36" src_ip="41.166.130.167"/>
      <filter dst_port="445" src_ip="41.166.130.167"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.166.130.167"/>
      <filter src_ip="41.166.130.167"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2592{
style=filled;
color=gray75;
4301[label="173.138.149.167;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8016[label="173.138.149.167;2pkt 2fpkt", shape=invtriangle, color=brown];
10390[label="173.138.149.167;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2592[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.149.167:3127, 209.132.154.83:4525}[50%]&lt;BR/&gt;{173.138.149.167:1034, 198.222.100.229:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (30%)&lt;BR/&gt; 1034: (30%)&lt;BR/&gt; 4525: (20%)&lt;BR/&gt; 3127: (20%)&gt;];
}
4301--8016[label="1;2pkt 2fpkt"];
4301--10390[label="1;1pkt 1fpkt"];
8016--10390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.229" dst_port="5050" src_ip="173.138.149.167" src_port="1034"/>
      <filter dst_ip="209.132.154.83" dst_port="4525" src_ip="173.138.149.167" src_port="3127"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.192.230.167"/>
    </slice>
    <from sec="1083733984" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2594{
style=filled;
color=gray75;
4310[label="168.112.34.168;17090pkt 17090fpkt", shape=pentagon, color=darkviolet];
8023[label="168.112.34.168;17089pkt 17089fpkt", shape=invtriangle, color=brown];
10395[label="168.112.34.168;17090pkt 17090fpkt", shape=invhouse, color=bisque];
stat2594[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.112.34.168:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3646: (0.0263317%)&lt;BR/&gt; 3576: (0.0263317%)&lt;BR/&gt; 3412: (0.0263317%)&lt;BR/&gt; 3392: (0.0263317%)&gt;];
}
4310--8023[label="1;17089pkt 17089fpkt"];
4310--10395[label="1;17090pkt 17090fpkt"];
8023--10395[label="1;17089pkt 17089fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.112.34.168"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_2595{
style=filled;
color=gray75;
693[label="208.96.49.168;s;129pkt 129fpkt", shape=diamond, color=yellow];
8024[label="208.96.49.168;140pkt 140fpkt", shape=invtriangle, color=brown];
10396[label="208.96.49.168;140pkt 140fpkt", shape=invhouse, color=bisque];
stat2595[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.49.168:25, *:*}[51.4286%]&lt;BR/&gt;{208.96.49.168:*, *:113}[47.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.9169%)&lt;BR/&gt; 113: (23.5941%)&lt;BR/&gt; 2745: (0.488998%)&lt;BR/&gt; 65295: (0.366748%)&lt;BR/&gt; 63293: (0.366748%)&gt;];
}
693--8024[label="1;129pkt 129fpkt"];
693--10396[label="1;129pkt 129fpkt"];
8024--10396[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.49.168" src_port="25"/>
      <filter dst_port="113" src_ip="208.96.49.168"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2596{
style=filled;
color=gray75;
4314[label="93.148.112.168;239pkt 239fpkt", shape=pentagon, color=darkviolet];
8026[label="93.148.112.168;239pkt 239fpkt", shape=invtriangle, color=brown];
10398[label="93.148.112.168;239pkt 239fpkt", shape=invhouse, color=bisque];
stat2596[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.148.112.168:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4314--8026[label="1;239pkt 239fpkt"];
4314--10398[label="1;239pkt 239fpkt"];
8026--10398[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="93.148.112.168" src_port="1025"/>
    </slice>
    <from sec="1083733324" usec="0"/>
    <to sec="1083733339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2597{
style=filled;
color=gray75;
4316[label="41.70.131.168;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8027[label="41.70.131.168;2pkt 2fpkt", shape=invtriangle, color=brown];
10399[label="41.70.131.168;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2597[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.70.131.168:3292, 168.127.169.39:445}[33.3333%]&lt;BR/&gt;{41.70.131.168:1177, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{41.70.131.168:2593, 141.85.30.234:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 3292: (18.75%)&lt;BR/&gt; 2593: (18.75%)&lt;BR/&gt; 1177: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
4316--8027[label="1;2pkt 2fpkt"];
4316--10399[label="1;3pkt 3fpkt"];
8027--10399[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.30.234" dst_port="445" src_ip="41.70.131.168" src_port="2593"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.70.131.168" src_port="1177"/>
      <filter dst_ip="168.127.169.39" dst_port="445" src_ip="41.70.131.168" src_port="3292"/>
    </slice>
    <from sec="1083733771" usec="0"/>
    <to sec="1083733930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2598{
style=filled;
color=gray75;
4319[label="95.123.160.168;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8030[label="95.123.160.168;9pkt 9fpkt", shape=invtriangle, color=brown];
10402[label="95.123.160.168;9pkt 9fpkt", shape=invhouse, color=bisque];
stat2598[shape=component, label=&lt;Rules:&lt;BR/&gt;{95.123.160.168:80, 209.29.136.44:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3696: (5.35714%)&lt;BR/&gt; 3364: (5.35714%)&lt;BR/&gt; 3228: (5.35714%)&lt;BR/&gt; 3113: (5.35714%)&gt;];
}
4319--8030[label="1;9pkt 9fpkt"];
4319--10402[label="1;9pkt 9fpkt"];
8030--10402[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.44" src_ip="95.123.160.168" src_port="80"/>
    </slice>
    <from sec="1083733297" usec="0"/>
    <to sec="1083734005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.2.163.168"/>
    </slice>
    <from sec="1083733540" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.11.163.168"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083733783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2601{
style=filled;
color=gray75;
4322[label="136.151.193.168;35pkt 35fpkt", shape=pentagon, color=darkviolet];
8033[label="136.151.193.168;35pkt 35fpkt", shape=invtriangle, color=brown];
10404[label="136.151.193.168;35pkt 35fpkt", shape=invhouse, color=bisque];
stat2601[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.193.168:80, 45.108.82.184:*}[54.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60718: (1.42857%)&lt;BR/&gt; 60662: (1.42857%)&lt;BR/&gt; 60525: (1.42857%)&lt;BR/&gt; 60277: (1.42857%)&gt;];
}
4322--8033[label="1;35pkt 35fpkt"];
4322--10404[label="1;35pkt 35fpkt"];
8033--10404[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="45.108.82.184" src_ip="136.151.193.168" src_port="80"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.80.226.168"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.194.80.169"/>
    </slice>
    <from sec="1083734024" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2604{
style=filled;
color=gray75;
4337[label="196.136.161.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8043[label="196.136.161.169;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2604[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.136.161.169:80, 155.148.182.202:24708}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24708: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4337--8043[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" dst_port="24708" src_ip="196.136.161.169" src_port="80"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2605{
style=filled;
color=gray75;
4339[label="209.18.181.169;47pkt 47fpkt", shape=pentagon, color=darkviolet];
8045[label="209.18.181.169;46pkt 46fpkt", shape=invtriangle, color=brown];
10409[label="209.18.181.169;47pkt 47fpkt", shape=invhouse, color=bisque];
stat2605[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.18.181.169:*, 197.28.236.166:25}[38.2979%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9286%)&lt;BR/&gt; 45627: (1.07143%)&lt;BR/&gt; 45626: (1.07143%)&lt;BR/&gt; 45625: (1.07143%)&lt;BR/&gt; 45624: (1.07143%)&gt;];
}
4339--8045[label="1;46pkt 46fpkt"];
4339--10409[label="1;47pkt 47fpkt"];
8045--10409[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="197.28.236.166" dst_port="25" src_ip="209.18.181.169"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083734057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.5.12.171"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2607{
style=filled;
color=gray75;
4360[label="44.101.36.171;32pkt 32fpkt", shape=pentagon, color=darkviolet];
8063[label="44.101.36.171;31pkt 31fpkt", shape=invtriangle, color=brown];
10421[label="44.101.36.171;32pkt 32fpkt", shape=invhouse, color=bisque];
stat2607[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.101.36.171:*, 141.22.86.218:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.5789%)&lt;BR/&gt; 445: (3.15789%)&lt;BR/&gt; 53: (3.15789%)&lt;BR/&gt; 65530: (1.57895%)&lt;BR/&gt; 57364: (1.57895%)&gt;];
}
4360--8063[label="1;31pkt 31fpkt"];
4360--10421[label="1;32pkt 32fpkt"];
8063--10421[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.218" dst_port="80" src_ip="44.101.36.171"/>
    </slice>
    <from sec="1083733655" usec="0"/>
    <to sec="1083733671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.109.64.171"/>
    </slice>
    <from sec="1083733757" usec="0"/>
    <to sec="1083733854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.221.80.171"/>
    </slice>
    <from sec="1083733364" usec="0"/>
    <to sec="1083733798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2610{
style=filled;
color=gray75;
4368[label="46.58.105.171;32pkt 32fpkt", shape=pentagon, color=darkviolet];
8066[label="46.58.105.171;32pkt 32fpkt", shape=invtriangle, color=brown];
stat2610[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.58.105.171:2703, 208.96.57.43:*}[37.5%]&lt;BR/&gt;{46.58.105.171:2703, 141.22.86.116:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (50%)&lt;BR/&gt; 54169: (1.5625%)&lt;BR/&gt; 54167: (1.5625%)&lt;BR/&gt; 54162: (1.5625%)&lt;BR/&gt; 54160: (1.5625%)&gt;];
}
4368--8066[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.116" src_ip="46.58.105.171" src_port="2703"/>
      <filter dst_ip="208.96.57.43" src_ip="46.58.105.171" src_port="2703"/>
    </slice>
    <from sec="1083733317" usec="0"/>
    <to sec="1083733957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2611{
style=filled;
color=gray75;
4369[label="136.151.110.171;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8067[label="136.151.110.171;10pkt 10fpkt", shape=invtriangle, color=brown];
stat2611[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.110.171:*, 205.130.90.15:80}[30%]&lt;BR/&gt;{136.151.110.171:*, 205.130.90.48:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3149: (5%)&lt;BR/&gt; 3144: (5%)&lt;BR/&gt; 3143: (5%)&lt;BR/&gt; 3142: (5%)&gt;];
}
4369--8067[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="205.130.90.15" dst_port="80" src_ip="136.151.110.171"/>
      <filter dst_ip="205.130.90.48" dst_port="80" src_ip="136.151.110.171"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.17.151.171"/>
    </slice>
    <from sec="1083733884" usec="0"/>
    <to sec="1083733981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2613{
style=filled;
color=gray75;
4373[label="213.101.197.171;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8070[label="213.101.197.171;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2613[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.197.171:1863, 155.148.136.17:1206}[33.3333%]&lt;BR/&gt;{213.101.197.171:1863, 136.151.144.80:1502}[33.3333%]&lt;BR/&gt;{213.101.197.171:1863, 168.127.114.133:3290}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3290: (20%)&lt;BR/&gt; 1206: (20%)&lt;BR/&gt; 1502: (10%)&gt;];
}
4373--8070[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.114.133" dst_port="3290" src_ip="213.101.197.171" src_port="1863"/>
      <filter dst_ip="136.151.144.80" dst_port="1502" src_ip="213.101.197.171" src_port="1863"/>
      <filter dst_ip="155.148.136.17" dst_port="1206" src_ip="213.101.197.171" src_port="1863"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2614{
style=filled;
color=gray75;
4375[label="217.187.224.171;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8072[label="217.187.224.171;4pkt 4fpkt", shape=invtriangle, color=brown];
10425[label="217.187.224.171;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2614[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.187.224.171:80, 136.151.205.174:4879}[25%]&lt;BR/&gt;{217.187.224.171:80, 136.151.205.174:4880}[25%]&lt;BR/&gt;{217.187.224.171:80, 136.151.205.174:4881}[25%]&lt;BR/&gt;{217.187.224.171:80, 136.151.205.174:4890}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4890: (12.5%)&lt;BR/&gt; 4881: (12.5%)&lt;BR/&gt; 4880: (12.5%)&lt;BR/&gt; 4879: (12.5%)&gt;];
}
4375--8072[label="1;4pkt 4fpkt"];
4375--10425[label="1;4pkt 4fpkt"];
8072--10425[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.205.174" dst_port="4890" src_ip="217.187.224.171" src_port="80"/>
      <filter dst_ip="136.151.205.174" dst_port="4881" src_ip="217.187.224.171" src_port="80"/>
      <filter dst_ip="136.151.205.174" dst_port="4880" src_ip="217.187.224.171" src_port="80"/>
      <filter dst_ip="136.151.205.174" dst_port="4879" src_ip="217.187.224.171" src_port="80"/>
    </slice>
    <from sec="1083734031" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2615{
style=filled;
color=gray75;
4377[label="93.213.14.172;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8074[label="93.213.14.172;9pkt 9fpkt", shape=invtriangle, color=brown];
10427[label="93.213.14.172;9pkt 9fpkt", shape=invhouse, color=bisque];
stat2615[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.213.14.172:*, 136.151.235.67:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57127: (5.55556%)&lt;BR/&gt; 55141: (5.55556%)&lt;BR/&gt; 51571: (5.55556%)&lt;BR/&gt; 48898: (5.55556%)&gt;];
}
4377--8074[label="1;9pkt 9fpkt"];
4377--10427[label="1;9pkt 9fpkt"];
8074--10427[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.213.14.172"/>
    </slice>
    <from sec="1083733278" usec="0"/>
    <to sec="1083733885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2616{
style=filled;
color=gray75;
4387[label="198.94.70.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8080[label="198.94.70.172;1pkt 1fpkt", shape=invtriangle, color=brown];
10429[label="198.94.70.172;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2616[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.94.70.172:47308, 173.138.139.82:113}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47308: (50%)&lt;BR/&gt; 113: (50%)&gt;];
}
4387--8080[label="1;1pkt 1fpkt"];
4387--10429[label="1;1pkt 1fpkt"];
8080--10429[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.139.82" dst_port="113" src_ip="198.94.70.172" src_port="47308"/>
    </slice>
    <from sec="1083733782" usec="0"/>
    <to sec="1083733989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.107.133.172"/>
    </slice>
    <from sec="1083733437" usec="0"/>
    <to sec="1083733662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.53.154.172"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.171.172"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.139.176.172"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.32.179.172"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2622{
style=filled;
color=gray75;
4406[label="44.212.46.173;33pkt 33fpkt", shape=pentagon, color=darkviolet];
8092[label="44.212.46.173;34pkt 34fpkt", shape=invtriangle, color=brown];
10437[label="44.212.46.173;33pkt 33fpkt", shape=invhouse, color=bisque];
stat2622[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.212.46.173:80, 209.29.138.126:*}[50%]&lt;BR/&gt;{44.212.46.173:80, 209.29.138.127:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4981: (1.5%)&lt;BR/&gt; 4979: (1.5%)&lt;BR/&gt; 4978: (1.5%)&lt;BR/&gt; 4950: (1.5%)&gt;];
}
4406--8092[label="1;33pkt 33fpkt"];
4406--10437[label="1;33pkt 33fpkt"];
8092--10437[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="44.212.46.173" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="44.212.46.173" src_port="80"/>
    </slice>
    <from sec="1083733564" usec="0"/>
    <to sec="1083733908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.171.108.173"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2624{
style=filled;
color=gray75;
4412[label="209.29.137.173;57pkt 57fpkt", shape=pentagon, color=darkviolet];
8097[label="209.29.137.173;57pkt 57fpkt", shape=invtriangle, color=brown];
stat2624[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.137.173:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4412--8097[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.137.173"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2625{
style=filled;
color=gray75;
4414[label="196.134.164.173;75pkt 75fpkt", shape=pentagon, color=darkviolet];
8099[label="196.134.164.173;75pkt 75fpkt", shape=invtriangle, color=brown];
stat2625[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.134.164.173:*, *:3128}[50.6667%]&lt;BR/&gt;{196.134.164.173:*, *:1080}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (26%)&lt;BR/&gt; 1080: (24.6667%)&lt;BR/&gt; 4955: (0.666667%)&lt;BR/&gt; 4939: (0.666667%)&lt;BR/&gt; 4930: (0.666667%)&gt;];
}
4414--8099[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="196.134.164.173"/>
      <filter dst_port="1080" src_ip="196.134.164.173"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2626{
style=filled;
color=gray75;
4418[label="213.101.197.173;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8101[label="213.101.197.173;12pkt 12fpkt", shape=invtriangle, color=brown];
10442[label="213.101.197.173;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2626[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.197.173:1863, 155.148.160.241:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4998: (4.05405%)&lt;BR/&gt; 4997: (4.05405%)&lt;BR/&gt; 4989: (4.05405%)&lt;BR/&gt; 4957: (4.05405%)&gt;];
}
4418--8101[label="1;12pkt 12fpkt"];
4418--10442[label="1;12pkt 12fpkt"];
8101--10442[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.160.241" src_ip="213.101.197.173" src_port="1863"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2627{
style=filled;
color=gray75;
4419[label="134.1.252.173;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8102[label="134.1.252.173;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2627[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.1.252.173:3482, 141.135.231.4:445}[25%]&lt;BR/&gt;{134.1.252.173:1134, 155.148.186.67:445}[25%]&lt;BR/&gt;{134.1.252.173:1358, 136.151.235.67:80}[25%]&lt;BR/&gt;{134.1.252.173:3323, 173.138.168.246:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 3482: (14.2857%)&lt;BR/&gt; 3323: (14.2857%)&lt;BR/&gt; 1134: (14.2857%)&lt;BR/&gt; 1358: (7.14286%)&gt;];
}
4419--8102[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.168.246" dst_port="445" src_ip="134.1.252.173" src_port="3323"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="134.1.252.173" src_port="1358"/>
      <filter dst_ip="155.148.186.67" dst_port="445" src_ip="134.1.252.173" src_port="1134"/>
      <filter dst_ip="141.135.231.4" dst_port="445" src_ip="134.1.252.173" src_port="3482"/>
    </slice>
    <from sec="1083733344" usec="0"/>
    <to sec="1083733696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2628{
style=filled;
color=gray75;
4420[label="44.52.6.174;45pkt 45fpkt", shape=pentagon, color=darkviolet];
8103[label="44.52.6.174;45pkt 45fpkt", shape=invtriangle, color=brown];
10443[label="44.52.6.174;45pkt 45fpkt", shape=invhouse, color=bisque];
stat2628[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.52.6.174:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57614: (1.11111%)&lt;BR/&gt; 57586: (1.11111%)&lt;BR/&gt; 57575: (1.11111%)&lt;BR/&gt; 57510: (1.11111%)&gt;];
}
4420--8103[label="1;45pkt 45fpkt"];
4420--10443[label="1;45pkt 45fpkt"];
8103--10443[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="44.52.6.174" src_port="80"/>
    </slice>
    <from sec="1083733833" usec="0"/>
    <to sec="1083733917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.198.88.174"/>
    </slice>
    <from sec="1083733370" usec="0"/>
    <to sec="1083733546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2630{
style=filled;
color=gray75;
4423[label="136.151.99.174;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8106[label="136.151.99.174;30pkt 30fpkt", shape=invtriangle, color=brown];
10444[label="136.151.99.174;29pkt 29fpkt", shape=invhouse, color=bisque];
stat2630[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.99.174:1024, *:53}[53.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (31.4607%)&lt;BR/&gt; 1024: (26.4045%)&lt;BR/&gt; 25: (11.7978%)&lt;BR/&gt; 113: (6.74157%)&lt;BR/&gt; 36958: (1.68539%)&gt;];
}
4423--8106[label="1;30pkt 30fpkt"];
4423--10444[label="1;29pkt 29fpkt"];
8106--10444[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.151.99.174" src_port="1024"/>
    </slice>
    <from sec="1083733547" usec="0"/>
    <to sec="1083734068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2631{
style=filled;
color=gray75;
4424[label="192.219.106.174;65pkt 65fpkt", shape=pentagon, color=darkviolet];
8107[label="192.219.106.174;64pkt 64fpkt", shape=invtriangle, color=brown];
stat2631[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.219.106.174:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4949: (0.775194%)&lt;BR/&gt; 4932: (0.775194%)&lt;BR/&gt; 4841: (0.775194%)&lt;BR/&gt; 4575: (0.775194%)&gt;];
}
4424--8107[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="192.219.106.174"/>
    </slice>
    <from sec="1083733228" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.3.139.174"/>
    </slice>
    <from sec="1083733499" usec="0"/>
    <to sec="1083733714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2633{
style=filled;
color=gray75;
4431[label="45.172.173.174;23pkt 23fpkt", shape=pentagon, color=darkviolet];
8111[label="45.172.173.174;22pkt 22fpkt", shape=invtriangle, color=brown];
10446[label="45.172.173.174;22pkt 22fpkt", shape=invhouse, color=bisque];
stat2633[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.172.173.174:25, 173.138.211.102:*}[26.087%]&lt;BR/&gt;{45.172.173.174:25, 141.22.86.218:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65134: (2.23881%)&lt;BR/&gt; 58782: (2.23881%)&lt;BR/&gt; 58700: (2.23881%)&lt;BR/&gt; 57916: (2.23881%)&gt;];
}
4431--8111[label="1;22pkt 22fpkt"];
4431--10446[label="1;22pkt 22fpkt"];
8111--10446[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.218" src_ip="45.172.173.174" src_port="25"/>
      <filter dst_ip="173.138.211.102" src_ip="45.172.173.174" src_port="25"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2634{
style=filled;
color=gray75;
4432[label="134.253.197.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8112[label="134.253.197.174;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2634[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.253.197.174:3007, 141.132.20.44:445}[50%]&lt;BR/&gt;{134.253.197.174:1373, 141.132.243.86:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3007: (25%)&lt;BR/&gt; 1373: (25%)&gt;];
}
4432--8112[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.132.243.86" dst_port="445" src_ip="134.253.197.174" src_port="1373"/>
      <filter dst_ip="141.132.20.44" dst_port="445" src_ip="134.253.197.174" src_port="3007"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.136.202.174"/>
    </slice>
    <from sec="1083733735" usec="0"/>
    <to sec="1083733783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.105.212.174"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.16.215.174"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.92.67.175"/>
    </slice>
    <from sec="1083733253" usec="0"/>
    <to sec="1083733481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2639{
style=filled;
color=gray75;
4446[label="41.54.129.175;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8121[label="41.54.129.175;7pkt 7fpkt", shape=invtriangle, color=brown];
10452[label="41.54.129.175;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2639[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.54.129.175:4947, 209.29.136.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4947: (50%)&lt;BR/&gt; 4654: (7.89474%)&lt;BR/&gt; 3432: (7.89474%)&lt;BR/&gt; 3345: (7.89474%)&lt;BR/&gt; 2725: (7.89474%)&gt;];
}
4446--8121[label="1;6pkt 6fpkt"];
4446--10452[label="1;6pkt 6fpkt"];
8121--10452[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="41.54.129.175" src_port="4947"/>
    </slice>
    <from sec="1083733249" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.148.156.175"/>
    </slice>
    <from sec="1083733740" usec="0"/>
    <to sec="1083733926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.171.175"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.209.228.175"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2643{
style=filled;
color=gray75;
4459[label="196.6.82.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8130[label="196.6.82.176;1pkt 1fpkt", shape=invtriangle, color=brown];
10458[label="196.6.82.176;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2643[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.6.82.176:80, 141.85.220.74:29429}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29429: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4459--8130[label="1;1pkt 1fpkt"];
4459--10458[label="1;1pkt 1fpkt"];
8130--10458[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.220.74" dst_port="29429" src_ip="196.6.82.176" src_port="80"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.24.97.176"/>
    </slice>
    <from sec="1083733449" usec="0"/>
    <to sec="1083733658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.118.137.176"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083733525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2646{
style=filled;
color=gray75;
4464[label="155.148.141.176;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8135[label="155.148.141.176;2pkt 2fpkt", shape=invtriangle, color=brown];
10461[label="155.148.141.176;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2646[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.141.176:1028, 196.131.154.99:10015}[33.3333%]&lt;BR/&gt;{155.148.141.176:1607, 93.91.170.190:554}[33.3333%]&lt;BR/&gt;{155.148.141.176:1637, 93.91.170.190:554}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (42.8571%)&lt;BR/&gt; 1637: (21.4286%)&lt;BR/&gt; 1607: (21.4286%)&lt;BR/&gt; 10015: (7.14286%)&lt;BR/&gt; 1028: (7.14286%)&gt;];
}
4464--8135[label="1;2pkt 2fpkt"];
4464--10461[label="1;2pkt 2fpkt"];
8135--10461[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="93.91.170.190" dst_port="554" src_ip="155.148.141.176" src_port="1637"/>
      <filter dst_ip="93.91.170.190" dst_port="554" src_ip="155.148.141.176" src_port="1607"/>
      <filter dst_ip="196.131.154.99" dst_port="10015" src_ip="155.148.141.176" src_port="1028"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2647{
style=filled;
color=gray75;
4466[label="217.210.149.176;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8136[label="217.210.149.176;21pkt 21fpkt", shape=invtriangle, color=brown];
10462[label="217.210.149.176;21pkt 21fpkt", shape=invhouse, color=bisque];
stat2647[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.210.149.176:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58828: (2.34375%)&lt;BR/&gt; 58640: (2.34375%)&lt;BR/&gt; 58509: (2.34375%)&lt;BR/&gt; 57137: (2.34375%)&gt;];
}
4466--8136[label="1;21pkt 21fpkt"];
4466--10462[label="1;21pkt 21fpkt"];
8136--10462[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="217.210.149.176" src_port="80"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2648{
style=filled;
color=gray75;
4467[label="201.238.175.176;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8137[label="201.238.175.176;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2648[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.238.175.176:2844, 141.22.199.50:80}[50%]&lt;BR/&gt;{201.238.175.176:3805, 141.145.44.131:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3805: (25%)&lt;BR/&gt; 2844: (25%)&gt;];
}
4467--8137[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.145.44.131" dst_port="80" src_ip="201.238.175.176" src_port="3805"/>
      <filter dst_ip="141.22.199.50" dst_port="80" src_ip="201.238.175.176" src_port="2844"/>
    </slice>
    <from sec="1083733242" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2649{
style=filled;
color=gray75;
4472[label="197.10.209.176;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8140[label="197.10.209.176;25pkt 25fpkt", shape=invtriangle, color=brown];
10464[label="197.10.209.176;25pkt 25fpkt", shape=invhouse, color=bisque];
stat2649[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.10.209.176:*, 173.138.102.1:*}[48%]&lt;BR/&gt;{197.10.209.176:*, 141.22.88.173:*}[48%]&lt;BR/&gt;{197.10.209.176:*, *:445}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (12%)&lt;BR/&gt; 1025: (8%)&lt;BR/&gt; 139: (8%)&lt;BR/&gt; 2745: (6%)&lt;BR/&gt; 6129: (4%)&gt;];
}
4472--8140[label="1;25pkt 25fpkt"];
4472--10464[label="1;25pkt 25fpkt"];
8140--10464[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.88.173" src_ip="197.10.209.176"/>
      <filter dst_ip="173.138.102.1" src_ip="197.10.209.176"/>
      <filter dst_port="445" src_ip="197.10.209.176"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083733900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.126.2.177"/>
    </slice>
    <from sec="1083733847" usec="0"/>
    <to sec="1083734035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.155.35.177"/>
    </slice>
    <from sec="1083733317" usec="0"/>
    <to sec="1083733361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.134.135.177"/>
    </slice>
    <from sec="1083733694" usec="0"/>
    <to sec="1083734000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2653{
style=filled;
color=gray75;
4479[label="203.212.159.177;57pkt 57fpkt", shape=pentagon, color=darkviolet];
8145[label="203.212.159.177;57pkt 57fpkt", shape=invtriangle, color=brown];
10469[label="203.212.159.177;56pkt 56fpkt", shape=invhouse, color=bisque];
stat2653[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.212.159.177:80, 168.127.114.38:*}[33.3333%]&lt;BR/&gt;{203.212.159.177:80, 209.29.165.20:*}[22.807%]&lt;BR/&gt;{203.212.159.177:80, 168.127.115.109:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54085: (0.882353%)&lt;BR/&gt; 49236: (0.882353%)&lt;BR/&gt; 49235: (0.882353%)&lt;BR/&gt; 49234: (0.882353%)&gt;];
}
4479--8145[label="1;57pkt 57fpkt"];
4479--10469[label="1;56pkt 56fpkt"];
8145--10469[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.114.38" src_ip="203.212.159.177" src_port="80"/>
      <filter dst_ip="209.29.165.20" src_ip="203.212.159.177" src_port="80"/>
      <filter dst_ip="168.127.115.109" src_ip="203.212.159.177" src_port="80"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083733908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.187.224.177"/>
    </slice>
    <from sec="1083733461" usec="0"/>
    <to sec="1083733600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.3.40.178"/>
    </slice>
    <from sec="1083733716" usec="0"/>
    <to sec="1083733950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2656{
style=filled;
color=gray75;
4491[label="46.58.105.178;29pkt 29fpkt", shape=pentagon, color=darkviolet];
8153[label="46.58.105.178;29pkt 29fpkt", shape=invtriangle, color=brown];
stat2656[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.58.105.178:7, 208.96.57.43:*}[41.3793%]&lt;BR/&gt;{46.58.105.178:2703, 208.96.57.43:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (25.8621%)&lt;BR/&gt; 7: (24.1379%)&lt;BR/&gt; 54140: (1.72414%)&lt;BR/&gt; 54138: (1.72414%)&lt;BR/&gt; 47498: (1.72414%)&gt;];
}
4491--8153[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.57.43" src_ip="46.58.105.178" src_port="2703"/>
      <filter dst_ip="208.96.57.43" src_ip="46.58.105.178" src_port="7"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2657{
style=filled;
color=gray75;
4494[label="173.138.152.178;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8154[label="173.138.152.178;17pkt 17fpkt", shape=invtriangle, color=brown];
10475[label="173.138.152.178;16pkt 16fpkt", shape=invhouse, color=bisque];
stat2657[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.152.178:*, 71.176.85.218:25}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44%)&lt;BR/&gt; 5050: (6%)&lt;BR/&gt; 64416: (3%)&lt;BR/&gt; 61329: (3%)&lt;BR/&gt; 61328: (3%)&gt;];
}
4494--8154[label="1;17pkt 17fpkt"];
4494--10475[label="1;16pkt 16fpkt"];
8154--10475[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="71.176.85.218" dst_port="25" src_ip="173.138.152.178"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2658{
style=filled;
color=gray75;
4496[label="196.164.182.178;193pkt 193fpkt", shape=pentagon, color=darkviolet];
8156[label="196.164.182.178;193pkt 193fpkt", shape=invtriangle, color=brown];
10476[label="196.164.182.178;192pkt 192fpkt", shape=invhouse, color=bisque];
stat2658[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.164.182.178:64492, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64492: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4496--8156[label="1;193pkt 193fpkt"];
4496--10476[label="1;192pkt 192fpkt"];
8156--10476[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.164.182.178" src_port="64492"/>
    </slice>
    <from sec="1083733509" usec="0"/>
    <to sec="1083733546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2659{
style=filled;
color=gray75;
4498[label="213.101.197.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8157[label="213.101.197.178;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2659[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.197.178:1863, 141.22.234.25:3049}[50%]&lt;BR/&gt;{213.101.197.178:1863, 141.22.234.184:1347}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1347: (33.3333%)&lt;BR/&gt; 3049: (16.6667%)&gt;];
}
4498--8157[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.234.184" dst_port="1347" src_ip="213.101.197.178" src_port="1863"/>
      <filter dst_ip="141.22.234.25" dst_port="3049" src_ip="213.101.197.178" src_port="1863"/>
    </slice>
    <from sec="1083733871" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2660{
style=filled;
color=gray75;
4501[label="155.148.225.178;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8158[label="155.148.225.178;3pkt 3fpkt", shape=invtriangle, color=brown];
10477[label="155.148.225.178;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2660[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.225.178:2972, 198.106.173.4:80}[25%]&lt;BR/&gt;{155.148.225.178:2975, 198.106.173.4:80}[25%]&lt;BR/&gt;{155.148.225.178:2969, 202.202.99.189:81}[25%]&lt;BR/&gt;{155.148.225.178:2974, 202.202.99.189:81}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 81: (27.2727%)&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 2975: (13.6364%)&lt;BR/&gt; 2974: (13.6364%)&lt;BR/&gt; 2969: (13.6364%)&gt;];
}
4501--8158[label="1;3pkt 3fpkt"];
4501--10477[label="1;4pkt 4fpkt"];
8158--10477[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="202.202.99.189" dst_port="81" src_ip="155.148.225.178" src_port="2974"/>
      <filter dst_ip="202.202.99.189" dst_port="81" src_ip="155.148.225.178" src_port="2969"/>
      <filter dst_ip="198.106.173.4" dst_port="80" src_ip="155.148.225.178" src_port="2975"/>
      <filter dst_ip="198.106.173.4" dst_port="80" src_ip="155.148.225.178" src_port="2972"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2661{
style=filled;
color=gray75;
4502[label="46.82.232.178;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8159[label="46.82.232.178;4pkt 4fpkt", shape=invtriangle, color=brown];
10478[label="46.82.232.178;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2661[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.82.232.178:80, 209.29.136.3:29543}[25%]&lt;BR/&gt;{46.82.232.178:80, 209.29.136.3:29848}[25%]&lt;BR/&gt;{46.82.232.178:80, 209.29.136.3:30203}[25%]&lt;BR/&gt;{46.82.232.178:80, 209.29.136.3:30230}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30230: (12.5%)&lt;BR/&gt; 30203: (12.5%)&lt;BR/&gt; 29848: (12.5%)&lt;BR/&gt; 29543: (12.5%)&gt;];
}
4502--8159[label="1;4pkt 4fpkt"];
4502--10478[label="1;4pkt 4fpkt"];
8159--10478[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" dst_port="30230" src_ip="46.82.232.178" src_port="80"/>
      <filter dst_ip="209.29.136.3" dst_port="30203" src_ip="46.82.232.178" src_port="80"/>
      <filter dst_ip="209.29.136.3" dst_port="29848" src_ip="46.82.232.178" src_port="80"/>
      <filter dst_ip="209.29.136.3" dst_port="29543" src_ip="46.82.232.178" src_port="80"/>
    </slice>
    <from sec="1083733912" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.10.248.178"/>
    </slice>
    <from sec="1083733557" usec="0"/>
    <to sec="1083733694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.91.0.179"/>
    </slice>
    <from sec="1083733363" usec="0"/>
    <to sec="1083733417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.27.15.179"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.21.99.179"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083733615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2666{
style=filled;
color=gray75;
4522[label="213.101.101.179;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8169[label="213.101.101.179;6pkt 6fpkt", shape=invtriangle, color=brown];
10487[label="213.101.101.179;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2666[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.101.179:80, 209.29.138.126:*}[66.6667%]&lt;BR/&gt;{213.101.101.179:80, 209.29.138.127:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4993: (8.33333%)&lt;BR/&gt; 3221: (8.33333%)&lt;BR/&gt; 3126: (8.33333%)&lt;BR/&gt; 1430: (8.33333%)&gt;];
}
4522--8169[label="1;6pkt 6fpkt"];
4522--10487[label="1;6pkt 6fpkt"];
8169--10487[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="213.101.101.179" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="213.101.101.179" src_port="80"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2667{
style=filled;
color=gray75;
4523[label="196.28.104.179;343pkt 343fpkt", shape=pentagon, color=darkviolet];
8170[label="196.28.104.179;342pkt 342fpkt", shape=invtriangle, color=brown];
10488[label="196.28.104.179;342pkt 342fpkt", shape=invhouse, color=bisque];
stat2667[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.28.104.179:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4523--8170[label="1;342pkt 342fpkt"];
4523--10488[label="1;342pkt 342fpkt"];
8170--10488[label="1;342pkt 342fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.28.104.179" src_port="1025"/>
    </slice>
    <from sec="1083733344" usec="0"/>
    <to sec="1083733395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.70.200.179"/>
    </slice>
    <from sec="1083733534" usec="0"/>
    <to sec="1083733693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.1.15.180"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2671{
style=filled;
color=gray75;
4539[label="203.218.71.180;100pkt 100fpkt", shape=pentagon, color=darkviolet];
8180[label="203.218.71.180;99pkt 99fpkt", shape=invtriangle, color=brown];
10493[label="203.218.71.180;100pkt 100fpkt", shape=invhouse, color=bisque];
stat2671[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.218.71.180:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4985: (0.501672%)&lt;BR/&gt; 4950: (0.501672%)&lt;BR/&gt; 4843: (0.501672%)&lt;BR/&gt; 4824: (0.501672%)&gt;];
}
4539--8180[label="1;99pkt 99fpkt"];
4539--10493[label="1;100pkt 100fpkt"];
8180--10493[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="203.218.71.180"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.194.127.180"/>
    </slice>
    <from sec="1083734005" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2673{
style=filled;
color=gray75;
4546[label="173.138.176.180;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8184[label="173.138.176.180;8pkt 8fpkt", shape=invtriangle, color=brown];
10497[label="173.138.176.180;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2673[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.176.180:*, 213.132.158.24:25}[37.5%]&lt;BR/&gt;{173.138.176.180:*, 213.132.158.25:25}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4961: (6.25%)&lt;BR/&gt; 4958: (6.25%)&lt;BR/&gt; 4952: (6.25%)&lt;BR/&gt; 4938: (6.25%)&gt;];
}
4546--8184[label="1;8pkt 8fpkt"];
4546--10497[label="1;8pkt 8fpkt"];
8184--10497[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="213.132.158.24" dst_port="25" src_ip="173.138.176.180"/>
      <filter dst_ip="213.132.158.25" dst_port="25" src_ip="173.138.176.180"/>
    </slice>
    <from sec="1083733255" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2674{
style=filled;
color=gray75;
4551[label="197.2.228.180;179pkt 179fpkt", shape=pentagon, color=darkviolet];
8187[label="197.2.228.180;178pkt 178fpkt", shape=invtriangle, color=brown];
stat2674[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.2.228.180:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4551--8187[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.2.228.180" src_port="1025"/>
    </slice>
    <from sec="1083733982" usec="0"/>
    <to sec="1083734013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.223.74.181"/>
    </slice>
    <from sec="1083733329" usec="0"/>
    <to sec="1083733622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.169.87.181"/>
    </slice>
    <from sec="1083733799" usec="0"/>
    <to sec="1083733876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2677{
style=filled;
color=gray75;
4559[label="209.140.98.181;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8193[label="209.140.98.181;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2677[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.140.98.181:80, 155.148.65.7:3081}[25%]&lt;BR/&gt;{209.140.98.181:80, 155.148.65.7:3086}[25%]&lt;BR/&gt;{209.140.98.181:80, 155.148.65.7:3087}[25%]&lt;BR/&gt;{209.140.98.181:80, 155.148.65.7:3088}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3088: (12.5%)&lt;BR/&gt; 3087: (12.5%)&lt;BR/&gt; 3086: (12.5%)&lt;BR/&gt; 3081: (12.5%)&gt;];
}
4559--8193[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.65.7" dst_port="3088" src_ip="209.140.98.181" src_port="80"/>
      <filter dst_ip="155.148.65.7" dst_port="3087" src_ip="209.140.98.181" src_port="80"/>
      <filter dst_ip="155.148.65.7" dst_port="3086" src_ip="209.140.98.181" src_port="80"/>
      <filter dst_ip="155.148.65.7" dst_port="3081" src_ip="209.140.98.181" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2678{
style=filled;
color=gray75;
4561[label="213.209.112.181;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8194[label="213.209.112.181;3pkt 3fpkt", shape=invtriangle, color=brown];
10503[label="213.209.112.181;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2678[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.209.112.181:2081, 168.127.165.7:445}[25%]&lt;BR/&gt;{213.209.112.181:42570, 136.151.235.67:80}[25%]&lt;BR/&gt;{213.209.112.181:1969, 155.211.146.106:445}[25%]&lt;BR/&gt;{213.209.112.181:2253, 141.85.120.133:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (45%)&lt;BR/&gt; 2253: (15%)&lt;BR/&gt; 2081: (15%)&lt;BR/&gt; 1969: (15%)&lt;BR/&gt; 42570: (5%)&gt;];
}
4561--8194[label="1;3pkt 3fpkt"];
4561--10503[label="1;3pkt 3fpkt"];
8194--10503[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.85.120.133" dst_port="445" src_ip="213.209.112.181" src_port="2253"/>
      <filter dst_ip="155.211.146.106" dst_port="445" src_ip="213.209.112.181" src_port="1969"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="213.209.112.181" src_port="42570"/>
      <filter dst_ip="168.127.165.7" dst_port="445" src_ip="213.209.112.181" src_port="2081"/>
    </slice>
    <from sec="1083733487" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.54.161.181"/>
    </slice>
    <from sec="1083733223" usec="0"/>
    <to sec="1083733456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2680{
style=filled;
color=gray75;
4564[label="196.10.167.181;56pkt 56fpkt", shape=pentagon, color=darkviolet];
8197[label="196.10.167.181;55pkt 55fpkt", shape=invtriangle, color=brown];
10505[label="196.10.167.181;55pkt 55fpkt", shape=invhouse, color=bisque];
stat2680[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.10.167.181:80, 168.127.113.162:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1239: (0.903614%)&lt;BR/&gt; 1238: (0.903614%)&lt;BR/&gt; 1237: (0.903614%)&lt;BR/&gt; 1236: (0.903614%)&gt;];
}
4564--8197[label="1;55pkt 55fpkt"];
4564--10505[label="1;55pkt 55fpkt"];
8197--10505[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.162" src_ip="196.10.167.181" src_port="80"/>
    </slice>
    <from sec="1083733533" usec="0"/>
    <to sec="1083733643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.115.171.181"/>
    </slice>
    <from sec="1083733740" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.139.227.181"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.232.50.182"/>
    </slice>
    <from sec="1083733505" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2684{
style=filled;
color=gray75;
4576[label="109.172.80.182;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8205[label="109.172.80.182;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2684[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.172.80.182:6882, 208.96.50.84:58669}[50%]&lt;BR/&gt;{109.172.80.182:6884, 208.96.50.84:58177}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58669: (25%)&lt;BR/&gt; 58177: (25%)&lt;BR/&gt; 6884: (25%)&lt;BR/&gt; 6882: (25%)&gt;];
}
4576--8205[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58177" src_ip="109.172.80.182" src_port="6884"/>
      <filter dst_ip="208.96.50.84" dst_port="58669" src_ip="109.172.80.182" src_port="6882"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.72.86.182"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.109.88.182"/>
    </slice>
    <from sec="1083733914" usec="0"/>
    <to sec="1083733998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2687{
style=filled;
color=gray75;
4579[label="109.25.110.182;47pkt 47fpkt", shape=pentagon, color=darkviolet];
8208[label="109.25.110.182;47pkt 47fpkt", shape=invtriangle, color=brown];
10509[label="109.25.110.182;47pkt 47fpkt", shape=invhouse, color=bisque];
stat2687[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.25.110.182:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4997: (1.06383%)&lt;BR/&gt; 4959: (1.06383%)&lt;BR/&gt; 4947: (1.06383%)&lt;BR/&gt; 4910: (1.06383%)&gt;];
}
4579--8208[label="1;47pkt 47fpkt"];
4579--10509[label="1;47pkt 47fpkt"];
8208--10509[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="109.25.110.182"/>
    </slice>
    <from sec="1083733679" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2688{
style=filled;
color=gray75;
4582[label="215.222.199.182;120pkt 120fpkt", shape=pentagon, color=darkviolet];
8210[label="215.222.199.182;120pkt 120fpkt", shape=invtriangle, color=brown];
stat2688[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.222.199.182:80, 209.29.138.127:*}[51.6667%]&lt;BR/&gt;{215.222.199.182:80, 209.29.138.126:*}[48.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3004: (0.833333%)&lt;BR/&gt; 2693: (0.833333%)&lt;BR/&gt; 4848: (0.416667%)&lt;BR/&gt; 4724: (0.416667%)&gt;];
}
4582--8210[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="215.222.199.182" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="215.222.199.182" src_port="80"/>
    </slice>
    <from sec="1083733382" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2689{
style=filled;
color=gray75;
4583[label="136.151.226.182;27pkt 27fpkt", shape=pentagon, color=darkviolet];
8211[label="136.151.226.182;27pkt 27fpkt", shape=invtriangle, color=brown];
stat2689[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.226.182:25, *:*}[81.4815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.1481%)&lt;BR/&gt; 65012: (1.85185%)&lt;BR/&gt; 64832: (1.85185%)&lt;BR/&gt; 64831: (1.85185%)&lt;BR/&gt; 64830: (1.85185%)&gt;];
}
4583--8211[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.226.182" src_port="25"/>
    </slice>
    <from sec="1083733266" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2690{
style=filled;
color=gray75;
4584[label="44.149.8.183;86pkt 86fpkt", shape=pentagon, color=darkviolet];
8212[label="44.149.8.183;86pkt 86fpkt", shape=invtriangle, color=brown];
stat2690[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.149.8.183:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4584--8212[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="44.149.8.183"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083734064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.206.21.183"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2692{
style=filled;
color=gray75;
4587[label="192.214.69.183;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8214[label="192.214.69.183;2pkt 2fpkt", shape=invtriangle, color=brown];
10510[label="192.214.69.183;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2692[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.214.69.183:3007, 168.127.113.130:9892}[50%]&lt;BR/&gt;{192.214.69.183:8883, 168.127.113.130:4664}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9892: (25%)&lt;BR/&gt; 8883: (25%)&lt;BR/&gt; 4664: (25%)&lt;BR/&gt; 3007: (25%)&gt;];
}
4587--8214[label="1;2pkt 2fpkt"];
4587--10510[label="1;2pkt 2fpkt"];
8214--10510[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.130" dst_port="4664" src_ip="192.214.69.183" src_port="8883"/>
      <filter dst_ip="168.127.113.130" dst_port="9892" src_ip="192.214.69.183" src_port="3007"/>
    </slice>
    <from sec="1083733687" usec="0"/>
    <to sec="1083733726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.24.117.183"/>
    </slice>
    <from sec="1083733257" usec="0"/>
    <to sec="1083733601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2694{
style=filled;
color=gray75;
4590[label="200.176.118.183;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8217[label="200.176.118.183;8pkt 8fpkt", shape=invtriangle, color=brown];
10513[label="200.176.118.183;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2694[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.176.118.183:*, *:445}[75%]&lt;BR/&gt;{200.176.118.183:*, 136.151.235.67:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 4666: (6.25%)&lt;BR/&gt; 4049: (6.25%)&lt;BR/&gt; 2620: (6.25%)&gt;];
}
4590--8217[label="1;8pkt 8fpkt"];
4590--10513[label="1;8pkt 8fpkt"];
8217--10513[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.176.118.183"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="200.176.118.183"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.98.135.183"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2696{
style=filled;
color=gray75;
4595[label="109.194.155.183;78pkt 78fpkt", shape=pentagon, color=darkviolet];
8220[label="109.194.155.183;78pkt 78fpkt", shape=invtriangle, color=brown];
stat2696[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.194.155.183:*, *:1080}[33.3333%]&lt;BR/&gt;{109.194.155.183:*, *:3127}[33.3333%]&lt;BR/&gt;{109.194.155.183:*, *:3128}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.6667%)&lt;BR/&gt; 3127: (16.6667%)&lt;BR/&gt; 1080: (16.6667%)&lt;BR/&gt; 4879: (0.641026%)&lt;BR/&gt; 4740: (0.641026%)&gt;];
}
4595--8220[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="109.194.155.183"/>
      <filter dst_port="3127" src_ip="109.194.155.183"/>
      <filter dst_port="1080" src_ip="109.194.155.183"/>
    </slice>
    <from sec="1083733721" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2697{
style=filled;
color=gray75;
4600[label="213.101.36.184;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8223[label="213.101.36.184;9pkt 9fpkt", shape=invtriangle, color=brown];
10517[label="213.101.36.184;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2697[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.36.184:80, 209.29.138.126:*}[55.5556%]&lt;BR/&gt;{213.101.36.184:80, 209.29.138.127:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40134: (5.76923%)&lt;BR/&gt; 3951: (5.76923%)&lt;BR/&gt; 3629: (5.76923%)&lt;BR/&gt; 3110: (5.76923%)&gt;];
}
4600--8223[label="1;9pkt 9fpkt"];
4600--10517[label="1;8pkt 8fpkt"];
8223--10517[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="213.101.36.184" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="213.101.36.184" src_port="80"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_2698{
style=filled;
color=gray75;
876[label="44.140.77.184;s;75pkt 75fpkt", shape=diamond, color=yellow];
8226[label="44.140.77.184;80pkt 80fpkt", shape=invtriangle, color=brown];
10520[label="44.140.77.184;80pkt 80fpkt", shape=invhouse, color=bisque];
stat2698[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.140.77.184:*, *:80}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8936%)&lt;BR/&gt; 53: (4.46809%)&lt;BR/&gt; 64842: (0.638298%)&lt;BR/&gt; 64150: (0.638298%)&lt;BR/&gt; 63673: (0.638298%)&gt;];
}
876--982[label="0.0666667;5pkt 5fpkt"];
876--8226[label="1;75pkt 75fpkt"];
876--10520[label="1;75pkt 75fpkt"];
8226--10520[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="44.140.77.184"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.110.94.184"/>
    </slice>
    <from sec="1083733789" usec="0"/>
    <to sec="1083733932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.24.161.184"/>
    </slice>
    <from sec="1083733570" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2701{
style=filled;
color=gray75;
4610[label="196.19.197.184;137pkt 137fpkt", shape=pentagon, color=darkviolet];
8231[label="196.19.197.184;137pkt 137fpkt", shape=invtriangle, color=brown];
10524[label="196.19.197.184;137pkt 137fpkt", shape=invhouse, color=bisque];
stat2701[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.19.197.184:*, *:3127}[20.438%]&lt;BR/&gt;{196.19.197.184:*, *:6129}[20.438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (10.219%)&lt;BR/&gt; 3127: (10.219%)&lt;BR/&gt; 2745: (9.85401%)&lt;BR/&gt; 1433: (9.85401%)&lt;BR/&gt; 1025: (9.85401%)&gt;];
}
4610--8231[label="1;137pkt 137fpkt"];
4610--10524[label="1;137pkt 137fpkt"];
8231--10524[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="196.19.197.184"/>
      <filter dst_port="3127" src_ip="196.19.197.184"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2702{
style=filled;
color=gray75;
4612[label="93.229.218.184;631pkt 631fpkt", shape=pentagon, color=darkviolet];
8233[label="93.229.218.184;631pkt 631fpkt", shape=invtriangle, color=brown];
stat2702[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.229.218.184:7100, *:*}[33.7559%]&lt;BR/&gt;{93.229.218.184:7000, *:*}[33.2805%]&lt;BR/&gt;{93.229.218.184:7200, *:*}[32.9635%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7100: (16.878%)&lt;BR/&gt; 7000: (16.6403%)&lt;BR/&gt; 7200: (16.4818%)&lt;BR/&gt; 47273: (0.158479%)&lt;BR/&gt; 47222: (0.158479%)&gt;];
}
4612--8233[label="1;631pkt 631fpkt"];
</description>
    <slice>
      <filter src_ip="93.229.218.184" src_port="7100"/>
      <filter src_ip="93.229.218.184" src_port="7000"/>
      <filter src_ip="93.229.218.184" src_port="7200"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2703{
style=filled;
color=gray75;
4613[label="173.138.233.184;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8234[label="173.138.233.184;12pkt 12fpkt", shape=invtriangle, color=brown];
10525[label="173.138.233.184;11pkt 11fpkt", shape=invhouse, color=bisque];
stat2703[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.233.184:*, 95.115.95.71:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1954: (4.41176%)&lt;BR/&gt; 1951: (4.41176%)&lt;BR/&gt; 1942: (4.41176%)&lt;BR/&gt; 1811: (4.41176%)&gt;];
}
4613--8234[label="1;11pkt 11fpkt"];
4613--10525[label="1;11pkt 11fpkt"];
8234--10525[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="95.115.95.71" dst_port="21" src_ip="173.138.233.184"/>
    </slice>
    <from sec="1083733403" usec="0"/>
    <to sec="1083733495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2704{
style=filled;
color=gray75;
4614[label="141.22.234.184;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8235[label="141.22.234.184;2pkt 2fpkt", shape=invtriangle, color=brown];
10526[label="141.22.234.184;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2704[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.234.184:1265, 213.101.193.1:1863}[50%]&lt;BR/&gt;{141.22.234.184:1347, 213.101.197.178:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1347: (25%)&lt;BR/&gt; 1265: (25%)&gt;];
}
4614--8235[label="1;2pkt 2fpkt"];
4614--10526[label="1;2pkt 2fpkt"];
8235--10526[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.197.178" dst_port="1863" src_ip="141.22.234.184" src_port="1347"/>
      <filter dst_ip="213.101.193.1" dst_port="1863" src_ip="141.22.234.184" src_port="1265"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2705{
style=filled;
color=gray75;
4620[label="208.96.51.185;159pkt 159fpkt", shape=pentagon, color=darkviolet];
8239[label="208.96.51.185;159pkt 159fpkt", shape=invtriangle, color=brown];
stat2705[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.51.185:65534, *:53}[93.0818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65534: (46.5409%)&lt;BR/&gt; 53: (46.5409%)&lt;BR/&gt; 0: (6.91824%)&gt;];
}
4620--8239[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="208.96.51.185" src_port="65534"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2706{
style=filled;
color=gray75;
65[label="208.68.211.246;s;6046pkt 6046fpkt", shape=diamond, color=yellow];
95[label="46.180.164.18;s;324pkt 324fpkt", shape=diamond, color=yellow];
111[label="192.198.11.226;s;20pkt 20fpkt", shape=diamond, color=yellow];
167[label="46.225.4.48;s;143pkt 143fpkt", shape=diamond, color=yellow];
194[label="141.22.64.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
226[label="45.172.209.232;s;39pkt 39fpkt", shape=diamond, color=yellow];
233[label="209.29.136.211;d;165pkt 165fpkt", shape=diamond, color=yellow];
321[label="192.198.11.227;s;19pkt 19fpkt", shape=diamond, color=yellow];
331[label="168.127.47.179;d;68pkt 68fpkt", shape=diamond, color=yellow];
346[label="136.151.200.157;d;64pkt 64fpkt", shape=diamond, color=yellow];
363[label="136.151.94.71;d;180pkt 180fpkt", shape=diamond, color=yellow];
367[label="198.2.141.27;s;12pkt 12fpkt", shape=diamond, color=yellow];
402[label="192.198.11.240;s;15pkt 15fpkt", shape=diamond, color=yellow];
433[label="198.163.124.103;s;75pkt 75fpkt", shape=diamond, color=yellow];
509[label="46.180.164.26;s;337pkt 337fpkt", shape=diamond, color=yellow];
555[label="198.163.124.106;s;103pkt 103fpkt", shape=diamond, color=yellow];
572[label="192.198.11.194;s;9pkt 9fpkt", shape=diamond, color=yellow];
609[label="208.96.38.38;d;33pkt 33fpkt", shape=diamond, color=yellow];
916[label="192.198.11.243;s;21pkt 21fpkt", shape=diamond, color=yellow];
928[label="168.127.113.176;d;31pkt 31fpkt", shape=diamond, color=yellow];
991[label="44.212.24.0;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1012[label="45.172.229.0;57pkt 57fpkt", shape=pentagon, color=darkviolet];
1137[label="213.101.59.6;29pkt 29fpkt", shape=pentagon, color=darkviolet];
1281[label="213.101.66.12;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1315[label="213.19.66.14;51pkt 51fpkt", shape=pentagon, color=darkviolet];
1325[label="213.101.192.14;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1337[label="213.19.66.15;47pkt 47fpkt", shape=pentagon, color=darkviolet];
1416[label="46.180.164.18;337pkt 337fpkt", shape=pentagon, color=darkviolet];
1491[label="45.172.209.21;111pkt 111fpkt", shape=pentagon, color=darkviolet];
1573[label="213.101.194.25;54pkt 54fpkt", shape=pentagon, color=darkviolet];
1608[label="198.2.141.27;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1954[label="213.101.32.43;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2051[label="46.225.4.48;144pkt 144fpkt", shape=pentagon, color=darkviolet];
2294[label="213.19.64.60;75pkt 75fpkt", shape=pentagon, color=darkviolet];
2629[label="44.212.13.77;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2938[label="196.29.205.91;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3185[label="46.111.174.104;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3456[label="198.107.182.120;65pkt 65fpkt", shape=pentagon, color=darkviolet];
3654[label="213.19.88.132;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3787[label="44.212.19.139;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3950[label="198.163.105.148;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3976[label="213.101.197.149;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4072[label="45.172.198.154;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4490[label="202.214.93.178;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4625[label="44.149.138.185;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4754[label="192.198.11.194;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4937[label="45.172.192.205;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5125[label="213.101.193.217;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5156[label="213.101.192.219;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5178[label="213.101.198.220;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5236[label="45.172.196.224;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5238[label="44.51.200.224;45pkt 45fpkt", shape=pentagon, color=darkviolet];
5287[label="192.198.11.227;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5374[label="45.172.209.232;40pkt 40fpkt", shape=pentagon, color=darkviolet];
5495[label="192.198.11.240;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5537[label="192.198.11.243;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5582[label="208.68.211.246;6046pkt 6046fpkt", shape=pentagon, color=darkviolet];
5583[label="45.172.230.246;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5686[label="44.212.24.0;31pkt 31fpkt", shape=invtriangle, color=brown];
5703[label="45.172.229.0;57pkt 57fpkt", shape=invtriangle, color=brown];
5793[label="213.101.59.6;30pkt 30fpkt", shape=invtriangle, color=brown];
5936[label="213.101.192.14;3pkt 3fpkt", shape=invtriangle, color=brown];
6044[label="45.172.209.21;110pkt 110fpkt", shape=invtriangle, color=brown];
6108[label="46.180.164.26;347pkt 347fpkt", shape=invtriangle, color=brown];
6122[label="198.2.141.27;11pkt 11fpkt", shape=invtriangle, color=brown];
6590[label="213.19.64.60;75pkt 75fpkt", shape=invtriangle, color=brown];
6774[label="213.101.67.73;19pkt 19fpkt", shape=invtriangle, color=brown];
7050[label="196.29.205.91;25pkt 25fpkt", shape=invtriangle, color=brown];
7208[label="198.163.124.103;86pkt 86fpkt", shape=invtriangle, color=brown];
7229[label="46.111.174.104;29pkt 29fpkt", shape=invtriangle, color=brown];
7417[label="198.107.182.120;65pkt 65fpkt", shape=invtriangle, color=brown];
7654[label="44.212.19.139;7pkt 7fpkt", shape=invtriangle, color=brown];
7766[label="198.163.105.148;16pkt 16fpkt", shape=invtriangle, color=brown];
7787[label="213.101.197.149;3pkt 3fpkt", shape=invtriangle, color=brown];
8152[label="202.214.93.178;5pkt 5fpkt", shape=invtriangle, color=brown];
8241[label="44.149.138.185;5pkt 5fpkt", shape=invtriangle, color=brown];
8603[label="213.101.192.219;3pkt 3fpkt", shape=invtriangle, color=brown];
8662[label="45.172.196.224;18pkt 18fpkt", shape=invtriangle, color=brown];
8664[label="44.51.200.224;45pkt 45fpkt", shape=invtriangle, color=brown];
8696[label="192.198.11.227;28pkt 28fpkt", shape=invtriangle, color=brown];
8757[label="45.172.209.232;40pkt 40fpkt", shape=invtriangle, color=brown];
8841[label="192.198.11.240;17pkt 17fpkt", shape=invtriangle, color=brown];
8873[label="192.198.11.243;20pkt 20fpkt", shape=invtriangle, color=brown];
8905[label="45.172.230.246;23pkt 23fpkt", shape=invtriangle, color=brown];
8974[label="44.212.24.0;32pkt 32fpkt", shape=invhouse, color=bisque];
8986[label="45.172.229.0;57pkt 57fpkt", shape=invhouse, color=bisque];
9049[label="213.101.59.6;30pkt 30fpkt", shape=invhouse, color=bisque];
9142[label="213.101.192.14;3pkt 3fpkt", shape=invhouse, color=bisque];
9206[label="45.172.209.21;110pkt 110fpkt", shape=invhouse, color=bisque];
9629[label="213.101.67.73;18pkt 18fpkt", shape=invhouse, color=bisque];
10020[label="198.107.182.120;65pkt 65fpkt", shape=invhouse, color=bisque];
10474[label="202.214.93.178;5pkt 5fpkt", shape=invhouse, color=bisque];
10791[label="44.51.200.224;44pkt 44fpkt", shape=invhouse, color=bisque];
10843[label="45.172.209.232;40pkt 40fpkt", shape=invhouse, color=bisque];
10896[label="192.198.11.240;17pkt 17fpkt", shape=invhouse, color=bisque];
10913[label="192.198.11.243;20pkt 20fpkt", shape=invhouse, color=bisque];
10929[label="45.172.230.246;23pkt 23fpkt", shape=invhouse, color=bisque];
stat2706[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.68.211.246:*, *:135}[73.3827%]&lt;BR/&gt;{*:80, *:*}[24.3598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (35.9911%)&lt;BR/&gt; 80: (13.2708%)&lt;BR/&gt; 1863: (0.291667%)&lt;BR/&gt; 443: (0.21131%)&lt;BR/&gt; 123: (0.202381%)&gt;];
}
65--346[label="0.015625;1pkt 1fpkt"];
65--955[label="0.000165399;1pkt 1fpkt"];
65--966[label="0.000165399;1pkt 1fpkt"];
65--976[label="0.000607533;1pkt 1fpkt"];
65--987[label="0.000607533;1pkt 1fpkt"];
65--5582[label="1;6046pkt 6046fpkt"];
95--609[label="0.0606061;2pkt 2fpkt"];
95--1416[label="0.996914;323pkt 323fpkt"];
111--194[label="0.5;1pkt 1fpkt"];
111--346[label="0.1;2pkt 2fpkt"];
167--363[label="0.993007;142pkt 142fpkt"];
167--2051[label="1;143pkt 143fpkt"];
194--916[label="0.5;1pkt 1fpkt"];
194--5537[label="0.5;1pkt 1fpkt"];
194--8873[label="0.5;1pkt 1fpkt"];
194--10913[label="0.5;1pkt 1fpkt"];
226--233[label="0.205128;8pkt 8fpkt"];
226--331[label="0.25641;10pkt 10fpkt"];
226--5374[label="1;39pkt 39fpkt"];
226--8757[label="1;39pkt 39fpkt"];
226--10843[label="1;39pkt 39fpkt"];
233--1325[label="0.5;1pkt 1fpkt"];
233--1337[label="0.0851064;4pkt 4fpkt"];
233--1491[label="0.477477;53pkt 53fpkt"];
233--1573[label="0.0185185;1pkt 1fpkt"];
233--2294[label="0.0266667;2pkt 2fpkt"];
233--3185[label="0.275862;8pkt 8fpkt"];
233--3456[label="0.0461538;3pkt 3fpkt"];
233--3787[label="0.125;1pkt 1fpkt"];
233--3950[label="0.25;4pkt 4fpkt"];
233--3976[label="1;3pkt 3fpkt"];
233--4072[label="0.047619;1pkt 1fpkt"];
233--5238[label="0.0444444;2pkt 2fpkt"];
233--5374[label="0.2;8pkt 8fpkt"];
233--5525[label="0.229167;22pkt 22fpkt"];
233--5583[label="0.0434783;1pkt 1fpkt"];
233--5936[label="0.333333;1pkt 1fpkt"];
233--6044[label="0.481818;53pkt 53fpkt"];
233--6590[label="0.0266667;2pkt 2fpkt"];
233--6774[label="0.263158;5pkt 5fpkt"];
233--7229[label="0.275862;8pkt 8fpkt"];
233--7417[label="0.0461538;3pkt 3fpkt"];
233--7766[label="0.25;4pkt 4fpkt"];
233--7787[label="1;3pkt 3fpkt"];
233--8664[label="0.0444444;2pkt 2fpkt"];
233--8757[label="0.2;8pkt 8fpkt"];
233--8905[label="0.0434783;1pkt 1fpkt"];
233--9142[label="0.333333;1pkt 1fpkt"];
233--9206[label="0.481818;53pkt 53fpkt"];
233--9629[label="0.277778;5pkt 5fpkt"];
233--10020[label="0.0461538;3pkt 3fpkt"];
233--10791[label="0.0454545;2pkt 2fpkt"];
233--10843[label="0.2;8pkt 8fpkt"];
233--10929[label="0.0434783;1pkt 1fpkt"];
321--346[label="0.105263;2pkt 2fpkt"];
321--912[label="0.0526316;1pkt 1fpkt"];
321--5287[label="1;19pkt 19fpkt"];
321--8696[label="1;19pkt 19fpkt"];
331--1315[label="0.0588235;3pkt 3fpkt"];
331--1491[label="0.676471;46pkt 46fpkt"];
331--1573[label="0.0185185;1pkt 1fpkt"];
331--2294[label="0.0147059;1pkt 1fpkt"];
331--4490[label="0.2;1pkt 1fpkt"];
331--5156[label="0.333333;1pkt 1fpkt"];
331--5178[label="0.0588235;1pkt 1fpkt"];
331--5374[label="0.25;10pkt 10fpkt"];
331--6044[label="0.676471;46pkt 46fpkt"];
331--6590[label="0.0147059;1pkt 1fpkt"];
331--8152[label="0.2;1pkt 1fpkt"];
331--8603[label="0.333333;1pkt 1fpkt"];
331--8757[label="0.25;10pkt 10fpkt"];
331--9206[label="0.676471;46pkt 46fpkt"];
331--10474[label="0.2;1pkt 1fpkt"];
331--10843[label="0.25;10pkt 10fpkt"];
346--402[label="0.133333;2pkt 2fpkt"];
346--433[label="0.0625;4pkt 4fpkt"];
346--991[label="0.0645161;2pkt 2fpkt"];
346--1137[label="0.172414;5pkt 5fpkt"];
346--1315[label="0.0392157;2pkt 2fpkt"];
346--1573[label="0.0185185;1pkt 1fpkt"];
346--1954[label="0.0285714;1pkt 1fpkt"];
346--2294[label="0.015625;1pkt 1fpkt"];
346--3654[label="0.714286;5pkt 5fpkt"];
346--3787[label="0.25;2pkt 2fpkt"];
346--5125[label="0.25;1pkt 1fpkt"];
346--5236[label="0.166667;3pkt 3fpkt"];
346--5287[label="0.0689655;2pkt 2fpkt"];
346--5495[label="0.117647;2pkt 2fpkt"];
346--5582[label="0.015625;1pkt 1fpkt"];
346--5686[label="0.0645161;2pkt 2fpkt"];
346--5793[label="0.166667;5pkt 5fpkt"];
346--6590[label="0.015625;1pkt 1fpkt"];
346--7208[label="0.0625;4pkt 4fpkt"];
346--7654[label="0.285714;2pkt 2fpkt"];
346--8662[label="0.166667;3pkt 3fpkt"];
346--8696[label="0.0714286;2pkt 2fpkt"];
346--8841[label="0.117647;2pkt 2fpkt"];
346--8974[label="0.0625;2pkt 2fpkt"];
346--9049[label="0.166667;5pkt 5fpkt"];
346--10896[label="0.117647;2pkt 2fpkt"];
363--367[label="0.25;3pkt 3fpkt"];
363--572[label="0.111111;1pkt 1fpkt"];
363--916[label="0.047619;1pkt 1fpkt"];
363--1281[label="0.0243902;1pkt 1fpkt"];
363--1608[label="0.25;3pkt 3fpkt"];
363--2051[label="0.986111;142pkt 142fpkt"];
363--2629[label="0.222222;2pkt 2fpkt"];
363--2687[label="0.0243902;1pkt 1fpkt"];
363--4625[label="0.166667;1pkt 1fpkt"];
363--4754[label="0.1;1pkt 1fpkt"];
363--5238[label="0.0444444;2pkt 2fpkt"];
363--5287[label="0.0344828;1pkt 1fpkt"];
363--5537[label="0.047619;1pkt 1fpkt"];
363--6122[label="0.272727;3pkt 3fpkt"];
363--8241[label="0.2;1pkt 1fpkt"];
363--8664[label="0.0444444;2pkt 2fpkt"];
363--8696[label="0.0357143;1pkt 1fpkt"];
363--8873[label="0.05;1pkt 1fpkt"];
363--10791[label="0.0454545;2pkt 2fpkt"];
363--10913[label="0.05;1pkt 1fpkt"];
367--1608[label="1;12pkt 12fpkt"];
367--6122[label="1;11pkt 11fpkt"];
402--5495[label="1;15pkt 15fpkt"];
402--8841[label="1;15pkt 15fpkt"];
402--10896[label="1;15pkt 15fpkt"];
433--609[label="0.121212;4pkt 4fpkt"];
433--7208[label="1;75pkt 75fpkt"];
509--609[label="0.484848;16pkt 16fpkt"];
509--6108[label="0.997033;336pkt 336fpkt"];
555--609[label="0.0606061;2pkt 2fpkt"];
572--4754[label="1;9pkt 9fpkt"];
609--1416[label="0.0606061;2pkt 2fpkt"];
609--4625[label="0.166667;1pkt 1fpkt"];
609--6108[label="0.484848;16pkt 16fpkt"];
609--7208[label="0.121212;4pkt 4fpkt"];
609--8241[label="0.2;1pkt 1fpkt"];
916--5537[label="1;21pkt 21fpkt"];
916--8873[label="1;20pkt 20fpkt"];
916--10913[label="1;20pkt 20fpkt"];
928--1012[label="0.0322581;1pkt 1fpkt"];
928--1573[label="0.0322581;1pkt 1fpkt"];
928--2687[label="0.0322581;1pkt 1fpkt"];
928--2938[label="0.64;16pkt 16fpkt"];
928--4937[label="0.0526316;1pkt 1fpkt"];
928--5178[label="0.0588235;1pkt 1fpkt"];
928--5703[label="0.0322581;1pkt 1fpkt"];
928--7050[label="0.64;16pkt 16fpkt"];
928--8986[label="0.0322581;1pkt 1fpkt"];
991--5686[label="1;31pkt 31fpkt"];
991--8974[label="1;31pkt 31fpkt"];
1012--5703[label="1;57pkt 57fpkt"];
1012--8986[label="1;57pkt 57fpkt"];
1137--5793[label="1;29pkt 29fpkt"];
1137--9049[label="1;29pkt 29fpkt"];
1325--5936[label="1;2pkt 2fpkt"];
1325--9142[label="1;2pkt 2fpkt"];
1491--6044[label="1;110pkt 110fpkt"];
1491--9206[label="1;110pkt 110fpkt"];
1608--6122[label="1;11pkt 11fpkt"];
2294--6590[label="1;75pkt 75fpkt"];
2938--7050[label="1;25pkt 25fpkt"];
3185--7229[label="1;29pkt 29fpkt"];
3456--7417[label="1;65pkt 65fpkt"];
3456--10020[label="1;65pkt 65fpkt"];
3787--7654[label="1;7pkt 7fpkt"];
3950--7766[label="1;16pkt 16fpkt"];
3976--7787[label="1;3pkt 3fpkt"];
4490--8152[label="1;5pkt 5fpkt"];
4490--10474[label="1;5pkt 5fpkt"];
4625--8241[label="1;5pkt 5fpkt"];
5156--8603[label="1;3pkt 3fpkt"];
5236--8662[label="1;18pkt 18fpkt"];
5238--8664[label="1;45pkt 45fpkt"];
5238--10791[label="1;44pkt 44fpkt"];
5287--8696[label="1;28pkt 28fpkt"];
5374--8757[label="1;40pkt 40fpkt"];
5374--10843[label="1;40pkt 40fpkt"];
5495--8841[label="1;17pkt 17fpkt"];
5495--10896[label="1;17pkt 17fpkt"];
5537--8873[label="1;20pkt 20fpkt"];
5537--10913[label="1;20pkt 20fpkt"];
5583--8905[label="1;23pkt 23fpkt"];
5583--10929[label="1;23pkt 23fpkt"];
5686--8974[label="1;31pkt 31fpkt"];
5703--8986[label="1;57pkt 57fpkt"];
5793--9049[label="1;30pkt 30fpkt"];
5936--9142[label="1;3pkt 3fpkt"];
6044--9206[label="1;110pkt 110fpkt"];
6774--9629[label="1;18pkt 18fpkt"];
7417--10020[label="1;65pkt 65fpkt"];
8152--10474[label="1;5pkt 5fpkt"];
8664--10791[label="1;44pkt 44fpkt"];
8757--10843[label="1;40pkt 40fpkt"];
8841--10896[label="1;17pkt 17fpkt"];
8873--10913[label="1;20pkt 20fpkt"];
8905--10929[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_port="135" src_ip="208.68.211.246"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.34.212.185"/>
    </slice>
    <from sec="1083733940" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.173.172.186"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2709{
style=filled;
color=gray75;
4640[label="40.1.218.186;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8252[label="40.1.218.186;6pkt 6fpkt", shape=invtriangle, color=brown];
10536[label="40.1.218.186;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2709[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.1.218.186:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4538: (8.33333%)&lt;BR/&gt; 4398: (8.33333%)&lt;BR/&gt; 4258: (8.33333%)&lt;BR/&gt; 2656: (8.33333%)&gt;];
}
4640--8252[label="1;6pkt 6fpkt"];
4640--10536[label="1;6pkt 6fpkt"];
8252--10536[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="40.1.218.186"/>
    </slice>
    <from sec="1083733944" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2710{
style=filled;
color=gray75;
4641[label="46.71.221.186;47pkt 47fpkt", shape=pentagon, color=darkviolet];
8253[label="46.71.221.186;47pkt 47fpkt", shape=invtriangle, color=brown];
10537[label="46.71.221.186;47pkt 47fpkt", shape=invhouse, color=bisque];
stat2710[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.221.186:80, 209.29.136.3:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30315: (1.06383%)&lt;BR/&gt; 30304: (1.06383%)&lt;BR/&gt; 30295: (1.06383%)&lt;BR/&gt; 30288: (1.06383%)&gt;];
}
4641--8253[label="1;47pkt 47fpkt"];
4641--10537[label="1;47pkt 47fpkt"];
8253--10537[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" src_ip="46.71.221.186" src_port="80"/>
    </slice>
    <from sec="1083733242" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.135.238.186"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2712{
style=filled;
color=gray75;
4654[label="109.193.104.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8261[label="109.193.104.187;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2712[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.193.104.187:4121, 168.16.221.108:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4121: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
4654--8261[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.16.221.108" dst_port="445" src_ip="109.193.104.187" src_port="4121"/>
    </slice>
    <from sec="1083733392" usec="0"/>
    <to sec="1083733729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.103.140.187"/>
    </slice>
    <from sec="1083733376" usec="0"/>
    <to sec="1083733890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2714{
style=filled;
color=gray75;
4658[label="203.212.159.187;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8264[label="203.212.159.187;20pkt 20fpkt", shape=invtriangle, color=brown];
stat2714[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.212.159.187:80, 168.127.198.205:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1302: (2.43902%)&lt;BR/&gt; 1301: (2.43902%)&lt;BR/&gt; 1300: (2.43902%)&lt;BR/&gt; 1299: (2.43902%)&gt;];
}
4658--8264[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.198.205" src_ip="203.212.159.187" src_port="80"/>
    </slice>
    <from sec="1083733723" usec="0"/>
    <to sec="1083733750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2715{
style=filled;
color=gray75;
4659[label="215.242.179.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8265[label="215.242.179.187;2pkt 2fpkt", shape=invtriangle, color=brown];
10541[label="215.242.179.187;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2715[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.242.179.187:80, 209.29.136.3:27765}[50%]&lt;BR/&gt;{215.242.179.187:80, 209.29.136.3:29516}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29516: (37.5%)&lt;BR/&gt; 27765: (12.5%)&gt;];
}
4659--8265[label="1;1pkt 1fpkt"];
4659--10541[label="1;1pkt 1fpkt"];
8265--10541[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" dst_port="29516" src_ip="215.242.179.187" src_port="80"/>
      <filter dst_ip="209.29.136.3" dst_port="27765" src_ip="215.242.179.187" src_port="80"/>
    </slice>
    <from sec="1083733574" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.107.90.188"/>
    </slice>
    <from sec="1083733780" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.194.124.188"/>
    </slice>
    <from sec="1083733968" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2718{
style=filled;
color=gray75;
4669[label="44.149.138.188;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8272[label="44.149.138.188;13pkt 13fpkt", shape=invtriangle, color=brown];
10547[label="44.149.138.188;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2718[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.149.138.188:80, 155.148.139.49:*}[30.7692%]&lt;BR/&gt;{44.149.138.188:80, 155.148.138.48:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50044: (3.84615%)&lt;BR/&gt; 50043: (3.84615%)&lt;BR/&gt; 32066: (3.84615%)&lt;BR/&gt; 31086: (3.84615%)&gt;];
}
4669--8272[label="1;13pkt 13fpkt"];
4669--10547[label="1;13pkt 13fpkt"];
8272--10547[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.139.49" src_ip="44.149.138.188" src_port="80"/>
      <filter dst_ip="155.148.138.48" src_ip="44.149.138.188" src_port="80"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2719{
style=filled;
color=gray75;
4674[label="136.150.37.189;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8276[label="136.150.37.189;34pkt 34fpkt", shape=invtriangle, color=brown];
10550[label="136.150.37.189;33pkt 33fpkt", shape=invhouse, color=bisque];
stat2719[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.37.189:*, 198.121.131.151:80}[47.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40380: (1.48515%)&lt;BR/&gt; 40378: (1.48515%)&lt;BR/&gt; 40377: (1.48515%)&lt;BR/&gt; 40376: (1.48515%)&gt;];
}
4674--8276[label="1;34pkt 34fpkt"];
4674--10550[label="1;33pkt 33fpkt"];
8276--10550[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="198.121.131.151" dst_port="80" src_ip="136.150.37.189"/>
    </slice>
    <from sec="1083733726" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2720{
style=filled;
color=gray75;
4675[label="208.96.51.189;39pkt 39fpkt", shape=pentagon, color=darkviolet];
8277[label="208.96.51.189;38pkt 38fpkt", shape=invtriangle, color=brown];
10551[label="208.96.51.189;38pkt 38fpkt", shape=invhouse, color=bisque];
stat2720[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.51.189:1024, *:53}[74.359%]&lt;BR/&gt;{208.96.51.189:*, 198.121.149.64:2703}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (36.9565%)&lt;BR/&gt; 53: (36.9565%)&lt;BR/&gt; 2703: (10.4348%)&lt;BR/&gt; 3693: (1.30435%)&lt;BR/&gt; 3634: (1.30435%)&gt;];
}
4675--8277[label="1;38pkt 38fpkt"];
4675--10551[label="1;38pkt 38fpkt"];
8277--10551[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="198.121.149.64" dst_port="2703" src_ip="208.96.51.189"/>
      <filter dst_port="53" src_ip="208.96.51.189" src_port="1024"/>
    </slice>
    <from sec="1083733274" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.19.57.189"/>
    </slice>
    <from sec="1083733567" usec="0"/>
    <to sec="1083733621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2722{
style=filled;
color=gray75;
4693[label="45.206.128.190;40pkt 40fpkt", shape=pentagon, color=darkviolet];
8288[label="45.206.128.190;39pkt 39fpkt", shape=invtriangle, color=brown];
10557[label="45.206.128.190;40pkt 40fpkt", shape=invhouse, color=bisque];
stat2722[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.206.128.190:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56243: (1.2605%)&lt;BR/&gt; 56193: (1.2605%)&lt;BR/&gt; 56141: (1.2605%)&lt;BR/&gt; 54541: (1.2605%)&gt;];
}
4693--8288[label="1;39pkt 39fpkt"];
4693--10557[label="1;40pkt 40fpkt"];
8288--10557[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="45.206.128.190" src_port="80"/>
    </slice>
    <from sec="1083733358" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.7.228.190"/>
    </slice>
    <from sec="1083733315" usec="0"/>
    <to sec="1083733415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2724{
style=filled;
color=gray75;
4696[label="93.7.242.190;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8290[label="93.7.242.190;11pkt 11fpkt", shape=invtriangle, color=brown];
10559[label="93.7.242.190;11pkt 11fpkt", shape=invhouse, color=bisque];
stat2724[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.7.242.190:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64150: (4.41176%)&lt;BR/&gt; 50607: (4.41176%)&lt;BR/&gt; 50444: (4.41176%)&lt;BR/&gt; 32936: (4.41176%)&gt;];
}
4696--8290[label="1;11pkt 11fpkt"];
4696--10559[label="1;11pkt 11fpkt"];
8290--10559[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="93.7.242.190"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2725{
style=filled;
color=gray75;
4697[label="201.89.250.190;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8291[label="201.89.250.190;3pkt 3fpkt", shape=invtriangle, color=brown];
10560[label="201.89.250.190;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2725[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.89.250.190:4970, 136.151.235.67:80}[25%]&lt;BR/&gt;{201.89.250.190:1095, 155.211.95.107:445}[25%]&lt;BR/&gt;{201.89.250.190:4529, 173.138.22.163:445}[25%]&lt;BR/&gt;{201.89.250.190:2163, 209.29.165.182:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (45%)&lt;BR/&gt; 4529: (15%)&lt;BR/&gt; 2163: (15%)&lt;BR/&gt; 1095: (15%)&lt;BR/&gt; 4970: (5%)&gt;];
}
4697--8291[label="1;3pkt 3fpkt"];
4697--10560[label="1;3pkt 3fpkt"];
8291--10560[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.165.182" dst_port="445" src_ip="201.89.250.190" src_port="2163"/>
      <filter dst_ip="173.138.22.163" dst_port="445" src_ip="201.89.250.190" src_port="4529"/>
      <filter dst_ip="155.211.95.107" dst_port="445" src_ip="201.89.250.190" src_port="1095"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.89.250.190" src_port="4970"/>
    </slice>
    <from sec="1083733607" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.420823,5.66881,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_2726{
style=filled;
color=gray75;
5262[label="53.157.241.225;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat2726[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.157.241.225:*, 155.211.232.51:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51632: (5%)&lt;BR/&gt; 46679: (5%)&lt;BR/&gt; 42015: (5%)&lt;BR/&gt; 41468: (5%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="155.211.232.51" dst_port="80" src_ip="53.157.241.225"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.161.160.191"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.160.178.191"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.149.194.191"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2730{
style=filled;
color=gray75;
4711[label="168.76.205.191;68pkt 68fpkt", shape=pentagon, color=darkviolet];
8298[label="168.76.205.191;68pkt 68fpkt", shape=invtriangle, color=brown];
stat2730[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.205.191:*, *:80}[25%]&lt;BR/&gt;{168.76.205.191:*, *:1433}[25%]&lt;BR/&gt;{168.76.205.191:*, *:2745}[25%]&lt;BR/&gt;{168.76.205.191:*, *:6129}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (13.2353%)&lt;BR/&gt; 6129: (12.5%)&lt;BR/&gt; 2745: (12.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 3458: (1.47059%)&gt;];
}
4711--8298[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="168.76.205.191"/>
      <filter dst_port="2745" src_ip="168.76.205.191"/>
      <filter dst_port="1433" src_ip="168.76.205.191"/>
      <filter dst_port="80" src_ip="168.76.205.191"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.225.214.191"/>
    </slice>
    <from sec="1083733700" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.19.236.191"/>
    </slice>
    <from sec="1083733836" usec="0"/>
    <to sec="1083733908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02254,5.64452,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_2733{
style=filled;
color=gray75;
120[label="208.96.48.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
8304[label="208.96.48.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2733[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.48.192:2401, 192.211.51.120:65530}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65530: (50%)&lt;BR/&gt; 2401: (50%)&gt;];
}
120--8304[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.211.51.120" dst_port="65530" src_ip="208.96.48.192" src_port="2401"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.34.76.192"/>
    </slice>
    <from sec="1083733285" usec="0"/>
    <to sec="1083733430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.26.132.192"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083733919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.220.143.192"/>
    </slice>
    <from sec="1083733605" usec="0"/>
    <to sec="1083733983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2737{
style=filled;
color=gray75;
4728[label="136.151.147.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8310[label="136.151.147.192;1pkt 1fpkt", shape=invtriangle, color=brown];
10568[label="136.151.147.192;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2737[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.147.192:4914, 53.109.158.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4914: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4728--8310[label="1;1pkt 1fpkt"];
4728--10568[label="1;1pkt 1fpkt"];
8310--10568[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="53.109.158.81" dst_port="80" src_ip="136.151.147.192" src_port="4914"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.105.181.192"/>
    </slice>
    <from sec="1083733605" usec="0"/>
    <to sec="1083733699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.142.14.193"/>
    </slice>
    <from sec="1083733302" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2740{
style=filled;
color=gray75;
4740[label="141.22.67.193;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8319[label="141.22.67.193;9pkt 9fpkt", shape=invtriangle, color=brown];
stat2740[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.67.193:*, *:1863}[30%]&lt;BR/&gt;{141.22.67.193:3028, *:7001}[20%]&lt;BR/&gt;{141.22.67.193:*, 44.212.48.110:7001}[20%]&lt;BR/&gt;{141.22.67.193:3028, 44.212.48.111:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3028: (15.7895%)&lt;BR/&gt; 1863: (15.7895%)&lt;BR/&gt; 7001: (13.1579%)&lt;BR/&gt; 0: (10.5263%)&lt;BR/&gt; 3026: (5.26316%)&gt;];
}
4740--8319[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="141.22.67.193"/>
      <filter dst_ip="44.212.48.111" src_ip="141.22.67.193" src_port="3028"/>
      <filter dst_ip="44.212.48.110" dst_port="7001" src_ip="141.22.67.193"/>
      <filter dst_port="7001" src_ip="141.22.67.193" src_port="3028"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2742{
style=filled;
color=gray75;
4743[label="201.232.106.193;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8322[label="201.232.106.193;15pkt 15fpkt", shape=invtriangle, color=brown];
stat2742[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.232.106.193:*, 136.151.235.67:80}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64929: (3.33333%)&lt;BR/&gt; 60259: (3.33333%)&lt;BR/&gt; 52148: (3.33333%)&lt;BR/&gt; 49595: (3.33333%)&gt;];
}
4743--8322[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.232.106.193"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.3.165.193"/>
    </slice>
    <from sec="1083733248" usec="0"/>
    <to sec="1083733315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.155.168.193"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083733267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2745{
style=filled;
color=gray75;
4750[label="109.182.212.193;99pkt 99fpkt", shape=pentagon, color=darkviolet];
8327[label="109.182.212.193;99pkt 99fpkt", shape=invtriangle, color=brown];
stat2745[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.182.212.193:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3212: (1.0101%)&lt;BR/&gt; 4964: (0.505051%)&lt;BR/&gt; 4961: (0.505051%)&lt;BR/&gt; 4939: (0.505051%)&gt;];
}
4750--8327[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="109.182.212.193"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2746{
style=filled;
color=gray75;
4751[label="201.14.223.193;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8328[label="201.14.223.193;14pkt 14fpkt", shape=invtriangle, color=brown];
stat2746[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.14.223.193:80, 155.148.138.169:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1553: (3.57143%)&lt;BR/&gt; 1552: (3.57143%)&lt;BR/&gt; 1551: (3.57143%)&lt;BR/&gt; 1547: (3.57143%)&gt;];
}
4751--8328[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.138.169" src_ip="201.14.223.193" src_port="80"/>
    </slice>
    <from sec="1083733403" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.177.236.193"/>
    </slice>
    <from sec="1083733836" usec="0"/>
    <to sec="1083733914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2748{
style=filled;
color=gray75;
4757[label="93.197.64.194;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8330[label="93.197.64.194;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2748[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.197.64.194:*, 209.18.179.84:*}[30.7692%]&lt;BR/&gt;{93.197.64.194:*, 209.29.176.137:*}[30.7692%]&lt;BR/&gt;{93.197.64.194:*, 136.151.235.67:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.2308%)&lt;BR/&gt; 6129: (7.69231%)&lt;BR/&gt; 2745: (7.69231%)&lt;BR/&gt; 139: (7.69231%)&lt;BR/&gt; 61768: (3.84615%)&gt;];
}
4757--8330[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.176.137" src_ip="93.197.64.194"/>
      <filter dst_ip="209.18.179.84" src_ip="93.197.64.194"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.197.64.194"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2749{
style=filled;
color=gray75;
4758[label="192.84.86.194;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8331[label="192.84.86.194;8pkt 8fpkt", shape=invtriangle, color=brown];
stat2749[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.84.86.194:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59742: (6.25%)&lt;BR/&gt; 31209: (6.25%)&lt;BR/&gt; 28263: (6.25%)&lt;BR/&gt; 25962: (6.25%)&gt;];
}
4758--8331[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="192.84.86.194"/>
    </slice>
    <from sec="1083733269" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.163.94.194"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2751{
style=filled;
color=gray75;
4761[label="197.18.99.194;243pkt 243fpkt", shape=pentagon, color=darkviolet];
8333[label="197.18.99.194;243pkt 243fpkt", shape=invtriangle, color=brown];
stat2751[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.18.99.194:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 35259: (0.205761%)&lt;BR/&gt; 35258: (0.205761%)&lt;BR/&gt; 35247: (0.205761%)&lt;BR/&gt; 35237: (0.205761%)&gt;];
}
4761--8333[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.18.99.194"/>
    </slice>
    <from sec="1083733369" usec="0"/>
    <to sec="1083733383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2752{
style=filled;
color=gray75;
4762[label="201.48.108.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8334[label="201.48.108.194;2pkt 2fpkt", shape=invtriangle, color=brown];
10579[label="201.48.108.194;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2752[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.48.108.194:80, 168.127.113.173:1304}[50%]&lt;BR/&gt;{201.48.108.194:80, 168.127.113.173:1305}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1305: (30%)&lt;BR/&gt; 1304: (20%)&gt;];
}
4762--8334[label="1;2pkt 2fpkt"];
4762--10579[label="1;1pkt 1fpkt"];
8334--10579[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.173" dst_port="1305" src_ip="201.48.108.194" src_port="80"/>
      <filter dst_ip="168.127.113.173" dst_port="1304" src_ip="201.48.108.194" src_port="80"/>
    </slice>
    <from sec="1083733294" usec="0"/>
    <to sec="1083733788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.208.185.194"/>
    </slice>
    <from sec="1083733689" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2754{
style=filled;
color=gray75;
4770[label="93.23.224.194;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8338[label="93.23.224.194;8pkt 8fpkt", shape=invtriangle, color=brown];
10582[label="93.23.224.194;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2754[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.23.224.194:0, *:0}[66.6667%]&lt;BR/&gt;{93.23.224.194:*, 136.151.235.67:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (72%)&lt;BR/&gt; 80: (8%)&lt;BR/&gt; 4301: (6%)&lt;BR/&gt; 2046: (6%)&lt;BR/&gt; 445: (6%)&gt;];
}
4770--8338[label="1;8pkt 8fpkt"];
4770--10582[label="1;8pkt 8fpkt"];
8338--10582[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.23.224.194"/>
      <filter src_ip="93.23.224.194"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.68.250.194"/>
    </slice>
    <from sec="1083733321" usec="0"/>
    <to sec="1083733485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2756{
style=filled;
color=gray75;
4775[label="47.79.27.195;111pkt 111fpkt", shape=pentagon, color=darkviolet];
8341[label="47.79.27.195;111pkt 111fpkt", shape=invtriangle, color=brown];
10583[label="47.79.27.195;110pkt 110fpkt", shape=invhouse, color=bisque];
stat2756[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.79.27.195:*, *:1080}[33.3333%]&lt;BR/&gt;{47.79.27.195:*, *:3127}[33.3333%]&lt;BR/&gt;{47.79.27.195:*, *:3128}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.7169%)&lt;BR/&gt; 1080: (16.7169%)&lt;BR/&gt; 3127: (16.5663%)&lt;BR/&gt; 4552: (0.903614%)&lt;BR/&gt; 4405: (0.903614%)&gt;];
}
4775--8341[label="1;111pkt 111fpkt"];
4775--10583[label="1;110pkt 110fpkt"];
8341--10583[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="47.79.27.195"/>
      <filter dst_port="3127" src_ip="47.79.27.195"/>
      <filter dst_port="1080" src_ip="47.79.27.195"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.194.29.195"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083733288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2758{
style=filled;
color=gray75;
4777[label="198.198.40.195;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8343[label="198.198.40.195;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2758[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.40.195:80, 209.29.138.126:*}[50%]&lt;BR/&gt;{198.198.40.195:80, 209.29.138.127:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4787: (8.33333%)&lt;BR/&gt; 4297: (8.33333%)&lt;BR/&gt; 3719: (8.33333%)&lt;BR/&gt; 3111: (8.33333%)&gt;];
}
4777--8343[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="198.198.40.195" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="198.198.40.195" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.6.158.195"/>
    </slice>
    <from sec="1083733713" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2760{
style=filled;
color=gray75;
4786[label="173.138.164.195;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8350[label="173.138.164.195;15pkt 15fpkt", shape=invtriangle, color=brown];
10588[label="173.138.164.195;15pkt 15fpkt", shape=invhouse, color=bisque];
stat2760[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.164.195:25, *:*}[43.75%]&lt;BR/&gt;{173.138.164.195:*, 194.11.245.253:25}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44773: (3.26087%)&lt;BR/&gt; 41286: (3.26087%)&lt;BR/&gt; 41285: (3.26087%)&lt;BR/&gt; 41283: (3.26087%)&gt;];
}
4786--8350[label="1;15pkt 15fpkt"];
4786--10588[label="1;15pkt 15fpkt"];
8350--10588[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.164.195" src_port="25"/>
      <filter dst_ip="194.11.245.253" dst_port="25" src_ip="173.138.164.195"/>
    </slice>
    <from sec="1083733249" usec="0"/>
    <to sec="1083734008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2761{
style=filled;
color=gray75;
4790[label="204.237.199.195;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8352[label="204.237.199.195;9pkt 9fpkt", shape=invtriangle, color=brown];
stat2761[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.237.199.195:80, 209.29.138.126:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2843: (5.55556%)&lt;BR/&gt; 2408: (5.55556%)&lt;BR/&gt; 2383: (5.55556%)&lt;BR/&gt; 2366: (5.55556%)&gt;];
}
4790--8352[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="204.237.199.195" src_port="80"/>
    </slice>
    <from sec="1083733693" usec="0"/>
    <to sec="1083734059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.90.220.195"/>
    </slice>
    <from sec="1083733428" usec="0"/>
    <to sec="1083733501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.214.226.195"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2764{
style=filled;
color=gray75;
4796[label="93.205.26.196;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8356[label="93.205.26.196;15pkt 15fpkt", shape=invtriangle, color=brown];
10592[label="93.205.26.196;15pkt 15fpkt", shape=invhouse, color=bisque];
stat2764[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.205.26.196:*, 219.24.89.79:*}[37.5%]&lt;BR/&gt;{93.205.26.196:*, 219.194.195.124:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (9.78261%)&lt;BR/&gt; 1025: (9.78261%)&lt;BR/&gt; 445: (9.78261%)&lt;BR/&gt; 6129: (6.52174%)&lt;BR/&gt; 3127: (6.52174%)&gt;];
}
4796--8356[label="1;15pkt 15fpkt"];
4796--10592[label="1;15pkt 15fpkt"];
8356--10592[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="219.194.195.124" src_ip="93.205.26.196"/>
      <filter dst_ip="219.24.89.79" src_ip="93.205.26.196"/>
    </slice>
    <from sec="1083733481" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2765{
style=filled;
color=gray75;
4798[label="136.150.109.196;26pkt 26fpkt", shape=pentagon, color=darkviolet];
8358[label="136.150.109.196;26pkt 26fpkt", shape=invtriangle, color=brown];
10593[label="136.150.109.196;25pkt 25fpkt", shape=invhouse, color=bisque];
stat2765[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.109.196:*, 175.29.120.151:80}[65.3846%]&lt;BR/&gt;{136.150.109.196:*, 204.195.106.57:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64085: (1.94805%)&lt;BR/&gt; 64026: (1.94805%)&lt;BR/&gt; 63752: (1.94805%)&lt;BR/&gt; 63736: (1.94805%)&gt;];
}
4798--8358[label="1;26pkt 26fpkt"];
4798--10593[label="1;25pkt 25fpkt"];
8358--10593[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="175.29.120.151" dst_port="80" src_ip="136.150.109.196"/>
      <filter dst_ip="204.195.106.57" dst_port="80" src_ip="136.150.109.196"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2766{
style=filled;
color=gray75;
4800[label="213.247.112.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8360[label="213.247.112.196;1pkt 1fpkt", shape=invtriangle, color=brown];
10595[label="213.247.112.196;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2766[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.247.112.196:80, 209.29.136.89:1343}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1343: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4800--8360[label="1;1pkt 1fpkt"];
4800--10595[label="1;1pkt 1fpkt"];
8360--10595[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="1343" src_ip="213.247.112.196" src_port="80"/>
    </slice>
    <from sec="1083733851" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2767{
style=filled;
color=gray75;
4803[label="204.70.182.196;55pkt 55fpkt", shape=pentagon, color=darkviolet];
8362[label="204.70.182.196;55pkt 55fpkt", shape=invtriangle, color=brown];
10596[label="204.70.182.196;55pkt 55fpkt", shape=invhouse, color=bisque];
stat2767[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.70.182.196:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60362: (0.909091%)&lt;BR/&gt; 60287: (0.909091%)&lt;BR/&gt; 57315: (0.909091%)&lt;BR/&gt; 57314: (0.909091%)&gt;];
}
4803--8362[label="1;55pkt 55fpkt"];
4803--10596[label="1;55pkt 55fpkt"];
8362--10596[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="204.70.182.196" src_port="80"/>
    </slice>
    <from sec="1083733727" usec="0"/>
    <to sec="1083734029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2768{
style=filled;
color=gray75;
4804[label="213.101.193.196;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8363[label="213.101.193.196;6pkt 6fpkt", shape=invtriangle, color=brown];
10597[label="213.101.193.196;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2768[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.193.196:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 52447: (8.33333%)&lt;BR/&gt; 4936: (8.33333%)&lt;BR/&gt; 4415: (8.33333%)&lt;BR/&gt; 3665: (8.33333%)&gt;];
}
4804--8363[label="1;6pkt 6fpkt"];
4804--10597[label="1;6pkt 6fpkt"];
8363--10597[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="213.101.193.196" src_port="1863"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2769{
style=filled;
color=gray75;
4815[label="46.238.118.197;26pkt 26fpkt", shape=pentagon, color=darkviolet];
8370[label="46.238.118.197;26pkt 26fpkt", shape=invtriangle, color=brown];
10601[label="46.238.118.197;25pkt 25fpkt", shape=invhouse, color=bisque];
stat2769[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.238.118.197:80, 209.29.136.89:*}[42.3077%]&lt;BR/&gt;{46.238.118.197:80, 209.29.138.10:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0519%)&lt;BR/&gt; 59125: (1.94805%)&lt;BR/&gt; 59124: (1.94805%)&lt;BR/&gt; 59057: (1.94805%)&lt;BR/&gt; 58531: (1.94805%)&gt;];
}
4815--8370[label="1;26pkt 26fpkt"];
4815--10601[label="1;25pkt 25fpkt"];
8370--10601[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="46.238.118.197" src_port="80"/>
      <filter dst_ip="209.29.138.10" src_ip="46.238.118.197" src_port="80"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2770{
style=filled;
color=gray75;
4816[label="93.226.121.197;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8371[label="93.226.121.197;9pkt 9fpkt", shape=invtriangle, color=brown];
10602[label="93.226.121.197;9pkt 9fpkt", shape=invhouse, color=bisque];
stat2770[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.226.121.197:*, *:445}[60%]&lt;BR/&gt;{93.226.121.197:*, 136.151.235.67:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (32.1429%)&lt;BR/&gt; 80: (17.8571%)&lt;BR/&gt; 65005: (5.35714%)&lt;BR/&gt; 64047: (5.35714%)&lt;BR/&gt; 63515: (5.35714%)&gt;];
}
4816--8371[label="1;9pkt 9fpkt"];
4816--10602[label="1;9pkt 9fpkt"];
8371--10602[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="93.226.121.197"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.226.121.197"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083733979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.176.146.197"/>
    </slice>
    <from sec="1083733381" usec="0"/>
    <to sec="1083733882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2772{
style=filled;
color=gray75;
4823[label="213.101.193.197;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8376[label="213.101.193.197;4pkt 4fpkt", shape=invtriangle, color=brown];
10606[label="213.101.193.197;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2772[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.193.197:1863, 168.127.114.19:4599}[20%]&lt;BR/&gt;{213.101.193.197:1863, 136.151.126.144:28378}[20%]&lt;BR/&gt;{213.101.193.197:1863, 155.148.88.163:2481}[20%]&lt;BR/&gt;{213.101.193.197:1863, 209.29.136.89:1608}[20%]&lt;BR/&gt;{213.101.193.197:1863, 209.29.136.89:3985}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 28378: (11.5385%)&lt;BR/&gt; 4599: (11.5385%)&lt;BR/&gt; 3985: (11.5385%)&lt;BR/&gt; 1608: (11.5385%)&gt;];
}
4823--8376[label="1;4pkt 4fpkt"];
4823--10606[label="1;4pkt 4fpkt"];
8376--10606[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3985" src_ip="213.101.193.197" src_port="1863"/>
      <filter dst_ip="209.29.136.89" dst_port="1608" src_ip="213.101.193.197" src_port="1863"/>
      <filter dst_ip="155.148.88.163" dst_port="2481" src_ip="213.101.193.197" src_port="1863"/>
      <filter dst_ip="136.151.126.144" dst_port="28378" src_ip="213.101.193.197" src_port="1863"/>
      <filter dst_ip="168.127.114.19" dst_port="4599" src_ip="213.101.193.197" src_port="1863"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.117.241.197"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.91.28.198"/>
    </slice>
    <from sec="1083733511" usec="0"/>
    <to sec="1083733710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.151.38.198"/>
    </slice>
    <from sec="1083733671" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2776{
style=filled;
color=gray75;
4827[label="168.127.71.198;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8380[label="168.127.71.198;19pkt 19fpkt", shape=invtriangle, color=brown];
10610[label="168.127.71.198;19pkt 19fpkt", shape=invhouse, color=bisque];
stat2776[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.71.198:*, 71.179.128.169:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.1053%)&lt;BR/&gt; 110: (5.26316%)&lt;BR/&gt; 0: (5.26316%)&lt;BR/&gt; 1402: (2.63158%)&lt;BR/&gt; 1401: (2.63158%)&gt;];
}
4827--8380[label="1;19pkt 19fpkt"];
4827--10610[label="1;19pkt 19fpkt"];
8380--10610[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="71.179.128.169" dst_port="80" src_ip="168.127.71.198"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.33.107.198"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083733275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2778{
style=filled;
color=gray75;
4830[label="209.29.131.198;207pkt 207fpkt", shape=pentagon, color=darkviolet];
8382[label="209.29.131.198;207pkt 207fpkt", shape=invtriangle, color=brown];
stat2778[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.29.131.198:40922, *:53}[46.8599%]&lt;BR/&gt;{209.29.131.198:53, *:*}[30.9179%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.5797%)&lt;BR/&gt; 40922: (23.43%)&lt;BR/&gt; 25: (5.7971%)&lt;BR/&gt; 113: (4.83092%)&lt;BR/&gt; 32772: (0.724638%)&gt;];
}
4830--8382[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter src_ip="209.29.131.198" src_port="53"/>
      <filter dst_port="53" src_ip="209.29.131.198" src_port="40922"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.117.162.198"/>
    </slice>
    <from sec="1083733638" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.44.182.198"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2781{
style=filled;
color=gray75;
4848[label="109.218.111.199;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8394[label="109.218.111.199;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2781[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.218.111.199:2028, 141.135.46.32:445}[20%]&lt;BR/&gt;{109.218.111.199:2934, 168.16.102.90:445}[20%]&lt;BR/&gt;{109.218.111.199:2731, 141.135.146.232:445}[20%]&lt;BR/&gt;{109.218.111.199:2054, 136.151.235.67:80}[20%]&lt;BR/&gt;{109.218.111.199:2665, 136.151.235.67:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 2934: (11.1111%)&lt;BR/&gt; 2731: (11.1111%)&lt;BR/&gt; 2054: (11.1111%)&gt;];
}
4848--8394[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.218.111.199" src_port="2665"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.218.111.199" src_port="2054"/>
      <filter dst_ip="141.135.146.232" dst_port="445" src_ip="109.218.111.199" src_port="2731"/>
      <filter dst_ip="168.16.102.90" dst_port="445" src_ip="109.218.111.199" src_port="2934"/>
      <filter dst_ip="141.135.46.32" dst_port="445" src_ip="109.218.111.199" src_port="2028"/>
    </slice>
    <from sec="1083733505" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_2782{
style=filled;
color=gray75;
210[label="220.69.172.199;s;203pkt 203fpkt", shape=diamond, color=yellow];
8396[label="220.69.172.199;219pkt 219fpkt", shape=invtriangle, color=brown];
10619[label="220.69.172.199;218pkt 218fpkt", shape=invhouse, color=bisque];
stat2782[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.69.172.199:80, 155.148.88.174:*}[92.6941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49528: (0.234375%)&lt;BR/&gt; 49527: (0.234375%)&lt;BR/&gt; 49526: (0.234375%)&lt;BR/&gt; 49525: (0.234375%)&gt;];
}
210--8396[label="1;203pkt 203fpkt"];
210--10619[label="0.995074;202pkt 202fpkt"];
8396--10619[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.88.174" src_ip="220.69.172.199" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.113.194.199"/>
    </slice>
    <from sec="1083733589" usec="0"/>
    <to sec="1083734066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2784{
style=filled;
color=gray75;
898[label="198.192.171.200;s;27pkt 27fpkt", shape=diamond, color=yellow];
4863[label="198.192.171.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8401[label="198.192.171.200;2pkt 2fpkt", shape=invtriangle, color=brown];
10623[label="198.192.171.200;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2784[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.192.171.200:80, 209.29.138.10:*}[65.5172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3360: (5.88235%)&lt;BR/&gt; 3863: (4.41176%)&lt;BR/&gt; 54260: (1.47059%)&lt;BR/&gt; 53977: (1.47059%)&gt;];
}
898--4863[label="0.5;1pkt 1fpkt"];
898--8401[label="0.5;1pkt 1fpkt"];
898--10623[label="0.333333;1pkt 1fpkt"];
4863--8401[label="1;2pkt 2fpkt"];
4863--10623[label="1;2pkt 2fpkt"];
8401--10623[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="198.192.171.200" src_port="80"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2785{
style=filled;
color=gray75;
4864[label="136.150.180.200;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8402[label="136.150.180.200;9pkt 9fpkt", shape=invtriangle, color=brown];
stat2785[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.180.200:*, 198.108.206.54:80}[55.5556%]&lt;BR/&gt;{136.150.180.200:*, 198.163.124.106:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 14990: (5.55556%)&lt;BR/&gt; 14868: (5.55556%)&lt;BR/&gt; 14864: (5.55556%)&lt;BR/&gt; 14862: (5.55556%)&gt;];
}
4864--8402[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="198.108.206.54" dst_port="80" src_ip="136.150.180.200"/>
      <filter dst_ip="198.163.124.106" dst_port="80" src_ip="136.150.180.200"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.102.189.200"/>
    </slice>
    <from sec="1083733891" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2787{
style=filled;
color=gray75;
4866[label="202.221.204.200;246pkt 246fpkt", shape=pentagon, color=darkviolet];
8404[label="202.221.204.200;245pkt 245fpkt", shape=invtriangle, color=brown];
10625[label="202.221.204.200;246pkt 246fpkt", shape=invhouse, color=bisque];
stat2787[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.221.204.200:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4866--8404[label="1;245pkt 245fpkt"];
4866--10625[label="1;246pkt 246fpkt"];
8404--10625[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.221.204.200" src_port="1032"/>
    </slice>
    <from sec="1083733960" usec="0"/>
    <to sec="1083733974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2788{
style=filled;
color=gray75;
4870[label="198.165.34.201;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8407[label="198.165.34.201;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2788[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.165.34.201:0, *:0}[71.4286%]&lt;BR/&gt;{198.165.34.201:*, 136.151.5.233:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (76.9231%)&lt;BR/&gt; 65243: (7.69231%)&lt;BR/&gt; 445: (7.69231%)&lt;BR/&gt; 65115: (3.84615%)&lt;BR/&gt; 80: (3.84615%)&gt;];
}
4870--8407[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.5.233" src_ip="198.165.34.201"/>
      <filter src_ip="198.165.34.201"/>
    </slice>
    <from sec="1083733506" usec="0"/>
    <to sec="1083734073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2789{
style=filled;
color=gray75;
4880[label="155.148.8.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8411[label="155.148.8.202;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2789[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.8.202:3996, 192.238.196.89:15016}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15016: (50%)&lt;BR/&gt; 3996: (50%)&gt;];
}
4880--8411[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.238.196.89" dst_port="15016" src_ip="155.148.8.202" src_port="3996"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2790{
style=filled;
color=gray75;
4886[label="198.163.115.202;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8414[label="198.163.115.202;11pkt 11fpkt", shape=invtriangle, color=brown];
10632[label="198.163.115.202;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2790[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.163.115.202:80, 141.22.160.57:*}[25%]&lt;BR/&gt;{198.163.115.202:80, 136.151.123.220:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63006: (4.28571%)&lt;BR/&gt; 62114: (4.28571%)&lt;BR/&gt; 61102: (4.28571%)&lt;BR/&gt; 36240: (4.28571%)&gt;];
}
4886--8414[label="1;11pkt 11fpkt"];
4886--10632[label="1;12pkt 12fpkt"];
8414--10632[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.123.220" src_ip="198.163.115.202" src_port="80"/>
      <filter dst_ip="141.22.160.57" src_ip="198.163.115.202" src_port="80"/>
    </slice>
    <from sec="1083733329" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.20.154.202"/>
    </slice>
    <from sec="1083733471" usec="0"/>
    <to sec="1083733560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.225.174.202"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.188.209.202"/>
    </slice>
    <from sec="1083733848" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2794{
style=filled;
color=gray75;
4896[label="147.226.250.202;111pkt 111fpkt", shape=pentagon, color=darkviolet];
8421[label="147.226.250.202;111pkt 111fpkt", shape=invtriangle, color=brown];
stat2794[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.226.250.202:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60960: (0.45045%)&lt;BR/&gt; 60939: (0.45045%)&lt;BR/&gt; 60900: (0.45045%)&lt;BR/&gt; 60859: (0.45045%)&gt;];
}
4896--8421[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="147.226.250.202" src_port="80"/>
    </slice>
    <from sec="1083733853" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.55.27.203"/>
    </slice>
    <from sec="1083733639" usec="0"/>
    <to sec="1083733710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.5.80.203"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2797{
style=filled;
color=gray75;
4904[label="201.48.108.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8426[label="201.48.108.203;1pkt 1fpkt", shape=invtriangle, color=brown];
10641[label="201.48.108.203;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2797[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.48.108.203:80, 168.127.115.69:1313}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1313: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4904--8426[label="1;1pkt 1fpkt"];
4904--10641[label="1;1pkt 1fpkt"];
8426--10641[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.115.69" dst_port="1313" src_ip="201.48.108.203" src_port="80"/>
    </slice>
    <from sec="1083733430" usec="0"/>
    <to sec="1083733658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.129.126.203"/>
    </slice>
    <from sec="1083733720" usec="0"/>
    <to sec="1083733854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.17.222.203"/>
    </slice>
    <from sec="1083733760" usec="0"/>
    <to sec="1083733880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2800{
style=filled;
color=gray75;
4913[label="136.150.9.204;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8433[label="136.150.9.204;34pkt 34fpkt", shape=invtriangle, color=brown];
10648[label="136.150.9.204;34pkt 34fpkt", shape=invhouse, color=bisque];
stat2800[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.9.204:49152, *:53}[44.1176%]&lt;BR/&gt;{136.150.9.204:*, *:113}[26.4706%]&lt;BR/&gt;{136.150.9.204:25, *:*}[26.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (23.5294%)&lt;BR/&gt; 49152: (22.0588%)&lt;BR/&gt; 113: (13.2353%)&lt;BR/&gt; 25: (13.2353%)&lt;BR/&gt; 64554: (1.47059%)&gt;];
}
4913--8433[label="1;34pkt 34fpkt"];
4913--10648[label="1;34pkt 34fpkt"];
8433--10648[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="136.150.9.204" src_port="25"/>
      <filter dst_port="113" src_ip="136.150.9.204"/>
      <filter dst_port="53" src_ip="136.150.9.204" src_port="49152"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.23.16.204"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083733608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.68.60.204"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083733346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2803{
style=filled;
color=gray75;
4920[label="46.41.94.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8437[label="46.41.94.204;2pkt 2fpkt", shape=invtriangle, color=brown];
10652[label="46.41.94.204;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2803[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.41.94.204:49925, 209.29.136.89:1305}[50%]&lt;BR/&gt;{46.41.94.204:49925, 209.29.136.89:3588}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49925: (50%)&lt;BR/&gt; 1305: (37.5%)&lt;BR/&gt; 3588: (12.5%)&gt;];
}
4920--8437[label="1;1pkt 1fpkt"];
4920--10652[label="1;1pkt 1fpkt"];
8437--10652[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3588" src_ip="46.41.94.204" src_port="49925"/>
      <filter dst_ip="209.29.136.89" dst_port="1305" src_ip="46.41.94.204" src_port="49925"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2804{
style=filled;
color=gray75;
4922[label="93.2.129.204;95pkt 95fpkt", shape=pentagon, color=darkviolet];
8439[label="93.2.129.204;95pkt 95fpkt", shape=invtriangle, color=brown];
10653[label="93.2.129.204;95pkt 95fpkt", shape=invhouse, color=bisque];
stat2804[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.2.129.204:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4903: (0.526316%)&lt;BR/&gt; 4840: (0.526316%)&lt;BR/&gt; 4805: (0.526316%)&lt;BR/&gt; 4784: (0.526316%)&gt;];
}
4922--8439[label="1;95pkt 95fpkt"];
4922--10653[label="1;95pkt 95fpkt"];
8439--10653[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="93.2.129.204"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.218.132.204"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2806{
style=filled;
color=gray75;
4924[label="141.22.142.204;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8441[label="141.22.142.204;4pkt 4fpkt", shape=invtriangle, color=brown];
10655[label="141.22.142.204;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2806[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.142.204:1199, 213.19.64.60:80}[20%]&lt;BR/&gt;{141.22.142.204:1041, 213.101.193.124:1863}[20%]&lt;BR/&gt;{141.22.142.204:1204, 213.101.197.192:1863}[20%]&lt;BR/&gt;{141.22.142.204:1205, 213.101.197.204:1863}[20%]&lt;BR/&gt;{141.22.142.204:1191, 213.101.197.224:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (38.4615%)&lt;BR/&gt; 1205: (11.5385%)&lt;BR/&gt; 1204: (11.5385%)&lt;BR/&gt; 1199: (11.5385%)&lt;BR/&gt; 1041: (11.5385%)&gt;];
}
4924--8441[label="1;4pkt 4fpkt"];
4924--10655[label="1;4pkt 4fpkt"];
8441--10655[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.197.224" dst_port="1863" src_ip="141.22.142.204" src_port="1191"/>
      <filter dst_ip="213.101.197.204" dst_port="1863" src_ip="141.22.142.204" src_port="1205"/>
      <filter dst_ip="213.101.197.192" dst_port="1863" src_ip="141.22.142.204" src_port="1204"/>
      <filter dst_ip="213.101.193.124" dst_port="1863" src_ip="141.22.142.204" src_port="1041"/>
      <filter dst_ip="213.19.64.60" dst_port="80" src_ip="141.22.142.204" src_port="1199"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2807{
style=filled;
color=gray75;
4925[label="220.20.144.204;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8442[label="220.20.144.204;8pkt 8fpkt", shape=invtriangle, color=brown];
10656[label="220.20.144.204;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2807[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.20.144.204:80, 209.29.138.127:*}[62.5%]&lt;BR/&gt;{220.20.144.204:80, 209.29.138.126:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2738: (6.52174%)&lt;BR/&gt; 2251: (6.52174%)&lt;BR/&gt; 1863: (6.52174%)&lt;BR/&gt; 1862: (6.52174%)&gt;];
}
4925--8442[label="1;8pkt 8fpkt"];
4925--10656[label="1;7pkt 7fpkt"];
8442--10656[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="220.20.144.204" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="220.20.144.204" src_port="80"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2808{
style=filled;
color=gray75;
4932[label="171.49.119.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8444[label="171.49.119.205;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2808[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.49.119.205:0, 197.14.226.3:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4932--8444[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.14.226.3" src_ip="171.49.119.205"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.6.196.205"/>
    </slice>
    <from sec="1083733769" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.48.202.205"/>
    </slice>
    <from sec="1083733919" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.45.1.206"/>
    </slice>
    <from sec="1083733482" usec="0"/>
    <to sec="1083733608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2812{
style=filled;
color=gray75;
4944[label="196.116.5.206;161pkt 161fpkt", shape=pentagon, color=darkviolet];
8451[label="196.116.5.206;161pkt 161fpkt", shape=invtriangle, color=brown];
10662[label="196.116.5.206;161pkt 161fpkt", shape=invhouse, color=bisque];
stat2812[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.116.5.206:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (7.14286%)&lt;BR/&gt; 3127: (7.14286%)&lt;BR/&gt; 2745: (7.14286%)&lt;BR/&gt; 1025: (7.14286%)&lt;BR/&gt; 445: (7.14286%)&gt;];
}
4944--8451[label="1;161pkt 161fpkt"];
4944--10662[label="1;161pkt 161fpkt"];
8451--10662[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter src_ip="196.116.5.206"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2813{
style=filled;
color=gray75;
4946[label="41.220.20.206;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8452[label="41.220.20.206;7pkt 7fpkt", shape=invtriangle, color=brown];
10663[label="41.220.20.206;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2813[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.220.20.206:*, *:445}[71.4286%]&lt;BR/&gt;{41.220.20.206:*, 136.151.235.67:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 4321: (7.5%)&lt;BR/&gt; 3470: (7.5%)&lt;BR/&gt; 2405: (7.5%)&gt;];
}
4946--8452[label="1;7pkt 7fpkt"];
4946--10663[label="1;6pkt 6fpkt"];
8452--10663[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="41.220.20.206"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.220.20.206"/>
    </slice>
    <from sec="1083733292" usec="0"/>
    <to sec="1083734030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.42.86.206"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.115.110.206"/>
    </slice>
    <from sec="1083733576" usec="0"/>
    <to sec="1083733730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2816{
style=filled;
color=gray75;
4952[label="201.35.126.206;74pkt 74fpkt", shape=pentagon, color=darkviolet];
8457[label="201.35.126.206;75pkt 75fpkt", shape=invtriangle, color=brown];
stat2816[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.35.126.206:*, *:1080}[50.6667%]&lt;BR/&gt;{201.35.126.206:*, *:3128}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (25.1678%)&lt;BR/&gt; 3128: (24.8322%)&lt;BR/&gt; 4831: (0.671141%)&lt;BR/&gt; 4770: (0.671141%)&lt;BR/&gt; 4733: (0.671141%)&gt;];
}
4952--8457[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="201.35.126.206"/>
      <filter dst_port="3128" src_ip="201.35.126.206"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.1.131.206"/>
    </slice>
    <from sec="1083733301" usec="0"/>
    <to sec="1083733384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2818{
style=filled;
color=gray75;
4954[label="173.138.147.206;208pkt 208fpkt", shape=pentagon, color=darkviolet];
8459[label="173.138.147.206;207pkt 207fpkt", shape=invtriangle, color=brown];
10665[label="173.138.147.206;208pkt 208fpkt", shape=invhouse, color=bisque];
stat2818[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.147.206:1025, *:*}[43.2692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (21.5891%)&lt;BR/&gt; 6129: (9.14928%)&lt;BR/&gt; 2745: (8.42697%)&lt;BR/&gt; 3127: (6.5008%)&lt;BR/&gt; 1433: (2.64848%)&gt;];
}
4954--8459[label="1;207pkt 207fpkt"];
4954--10665[label="1;208pkt 208fpkt"];
8459--10665[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.147.206" src_port="1025"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2819{
style=filled;
color=gray75;
4955[label="173.138.152.206;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8460[label="173.138.152.206;21pkt 21fpkt", shape=invtriangle, color=brown];
stat2819[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.152.206:*, 199.198.219.19:6667}[90.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (47.619%)&lt;BR/&gt; 3501: (2.38095%)&lt;BR/&gt; 1278: (2.38095%)&lt;BR/&gt; 1277: (2.38095%)&lt;BR/&gt; 1276: (2.38095%)&gt;];
}
4955--8460[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="199.198.219.19" dst_port="6667" src_ip="173.138.152.206"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.0.193.206"/>
    </slice>
    <from sec="1083733278" usec="0"/>
    <to sec="1083733560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.193.216.206"/>
    </slice>
    <from sec="1083733921" usec="0"/>
    <to sec="1083734009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.51.13.207"/>
    </slice>
    <from sec="1083733765" usec="0"/>
    <to sec="1083733863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.18.16.207"/>
    </slice>
    <from sec="1083733679" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.121.132.207"/>
    </slice>
    <from sec="1083733503" usec="0"/>
    <to sec="1083733626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.216.194.207"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2826{
style=filled;
color=gray75;
4981[label="44.143.53.208;36pkt 36fpkt", shape=pentagon, color=darkviolet];
8473[label="44.143.53.208;35pkt 35fpkt", shape=invtriangle, color=brown];
stat2826[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.143.53.208:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60576: (1.40845%)&lt;BR/&gt; 60199: (1.40845%)&lt;BR/&gt; 60132: (1.40845%)&lt;BR/&gt; 59264: (1.40845%)&gt;];
}
4981--8473[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="44.143.53.208" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2827{
style=filled;
color=gray75;
4983[label="203.17.75.208;172pkt 172fpkt", shape=pentagon, color=darkviolet];
8474[label="203.17.75.208;171pkt 171fpkt", shape=invtriangle, color=brown];
10672[label="203.17.75.208;172pkt 172fpkt", shape=invhouse, color=bisque];
stat2827[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.17.75.208:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4983--8474[label="1;171pkt 171fpkt"];
4983--10672[label="1;172pkt 172fpkt"];
8474--10672[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.17.75.208" src_port="1026"/>
    </slice>
    <from sec="1083733841" usec="0"/>
    <to sec="1083733871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2828{
style=filled;
color=gray75;
4986[label="200.117.94.208;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8475[label="200.117.94.208;3pkt 3fpkt", shape=invtriangle, color=brown];
10673[label="200.117.94.208;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2828[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.117.94.208:4642, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{200.117.94.208:4118, 155.211.158.93:445}[33.3333%]&lt;BR/&gt;{200.117.94.208:3809, 136.151.199.167:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 4118: (18.75%)&lt;BR/&gt; 3809: (18.75%)&lt;BR/&gt; 4642: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
4986--8475[label="1;3pkt 3fpkt"];
4986--10673[label="1;2pkt 2fpkt"];
8475--10673[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.199.167" dst_port="445" src_ip="200.117.94.208" src_port="3809"/>
      <filter dst_ip="155.211.158.93" dst_port="445" src_ip="200.117.94.208" src_port="4118"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="200.117.94.208" src_port="4642"/>
    </slice>
    <from sec="1083733710" usec="0"/>
    <to sec="1083733808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.140.167.208"/>
    </slice>
    <from sec="1083733812" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.165.244.208"/>
    </slice>
    <from sec="1083733403" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2831{
style=filled;
color=gray75;
4998[label="209.198.0.209;88pkt 88fpkt", shape=pentagon, color=darkviolet];
8482[label="209.198.0.209;87pkt 87fpkt", shape=invtriangle, color=brown];
stat2831[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.198.0.209:80, 136.151.94.71:*}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62864: (0.571429%)&lt;BR/&gt; 62686: (0.571429%)&lt;BR/&gt; 62606: (0.571429%)&lt;BR/&gt; 50129: (0.571429%)&gt;];
}
4998--8482[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.94.71" src_ip="209.198.0.209" src_port="80"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2832{
style=filled;
color=gray75;
5001[label="202.24.33.209;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8484[label="202.24.33.209;14pkt 14fpkt", shape=invtriangle, color=brown];
10679[label="202.24.33.209;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2832[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.24.33.209:80, 209.29.138.127:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4892: (3.75%)&lt;BR/&gt; 4753: (3.75%)&lt;BR/&gt; 4715: (3.75%)&lt;BR/&gt; 4686: (3.75%)&gt;];
}
5001--8484[label="1;13pkt 13fpkt"];
5001--10679[label="1;13pkt 13fpkt"];
8484--10679[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="202.24.33.209" src_port="80"/>
    </slice>
    <from sec="1083733340" usec="0"/>
    <to sec="1083734020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2833{
style=filled;
color=gray75;
5004[label="173.138.128.209;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8486[label="173.138.128.209;1pkt 1fpkt", shape=invtriangle, color=brown];
10681[label="173.138.128.209;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2833[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.128.209:3882, 198.222.100.208:5050}[50%]&lt;BR/&gt;{173.138.128.209:3748, 198.222.100.249:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 3748: (30%)&lt;BR/&gt; 3882: (20%)&gt;];
}
5004--8486[label="1;1pkt 1fpkt"];
5004--10681[label="1;2pkt 2fpkt"];
8486--10681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.249" dst_port="5050" src_ip="173.138.128.209" src_port="3748"/>
      <filter dst_ip="198.222.100.208" dst_port="5050" src_ip="173.138.128.209" src_port="3882"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2834{
style=filled;
color=gray75;
5005[label="141.22.143.209;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8487[label="141.22.143.209;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2834[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.143.209:*, 203.211.194.15:80}[41.6667%]&lt;BR/&gt;{141.22.143.209:*, 198.163.115.194:80}[25%]&lt;BR/&gt;{141.22.143.209:*, 44.51.200.235:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8261%)&lt;BR/&gt; 3339: (4.34783%)&lt;BR/&gt; 3338: (4.34783%)&lt;BR/&gt; 3337: (4.34783%)&lt;BR/&gt; 3336: (4.34783%)&gt;];
}
5005--8487[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="203.211.194.15" dst_port="80" src_ip="141.22.143.209"/>
      <filter dst_ip="44.51.200.235" dst_port="80" src_ip="141.22.143.209"/>
      <filter dst_ip="198.163.115.194" dst_port="80" src_ip="141.22.143.209"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.6.154.209"/>
    </slice>
    <from sec="1083733556" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.112.194.209"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.20.197.209"/>
    </slice>
    <from sec="1083733850" usec="0"/>
    <to sec="1083733970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.49.209.209"/>
    </slice>
    <from sec="1083733255" usec="0"/>
    <to sec="1083733739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2839{
style=filled;
color=gray75;
5020[label="213.101.106.210;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8499[label="213.101.106.210;10pkt 10fpkt", shape=invtriangle, color=brown];
10692[label="213.101.106.210;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2839[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.106.210:80, 155.148.197.225:*}[40%]&lt;BR/&gt;{213.101.106.210:443, *:*}[40%]&lt;BR/&gt;{213.101.106.210:80, 136.151.98.83:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 443: (20%)&lt;BR/&gt; 30114: (5%)&lt;BR/&gt; 4721: (5%)&lt;BR/&gt; 4718: (5%)&gt;];
}
5020--8499[label="1;10pkt 10fpkt"];
5020--10692[label="1;10pkt 10fpkt"];
8499--10692[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="213.101.106.210" src_port="443"/>
      <filter dst_ip="155.148.197.225" src_ip="213.101.106.210" src_port="80"/>
      <filter dst_ip="136.151.98.83" src_ip="213.101.106.210" src_port="80"/>
    </slice>
    <from sec="1083733487" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2840{
style=filled;
color=gray75;
695[label="155.148.245.124;d;10pkt 10fpkt", shape=diamond, color=yellow];
860[label="201.236.190.210;s;8pkt 8fpkt", shape=diamond, color=yellow];
5025[label="201.236.190.210;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8504[label="201.236.190.210;7pkt 7fpkt", shape=invtriangle, color=brown];
10696[label="201.236.190.210;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2840[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.236.190.210:2002, 155.148.245.124:*}[33.3333%]&lt;BR/&gt;{201.236.190.210:3002, 155.148.245.124:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2002: (23.1707%)&lt;BR/&gt; 3002: (21.9512%)&lt;BR/&gt; 1348: (6.09756%)&lt;BR/&gt; 1347: (6.09756%)&lt;BR/&gt; 1346: (6.09756%)&gt;];
}
695--860[label="0.75;6pkt 6fpkt"];
695--5025[label="0.75;6pkt 6fpkt"];
695--8504[label="0.714286;5pkt 5fpkt"];
695--10696[label="0.75;6pkt 6fpkt"];
860--5025[label="1;8pkt 8fpkt"];
860--8504[label="1;7pkt 7fpkt"];
860--10696[label="1;8pkt 8fpkt"];
5025--8504[label="1;7pkt 7fpkt"];
5025--10696[label="1;8pkt 8fpkt"];
8504--10696[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.245.124" src_ip="201.236.190.210" src_port="3002"/>
      <filter dst_ip="155.148.245.124" src_ip="201.236.190.210" src_port="2002"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2841{
style=filled;
color=gray75;
5026[label="213.101.192.210;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8505[label="213.101.192.210;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2841[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.192.210:1863, 155.148.250.33:61793}[33.3333%]&lt;BR/&gt;{213.101.192.210:1863, 168.127.45.60:1373}[33.3333%]&lt;BR/&gt;{213.101.192.210:1863, 168.127.113.129:1065}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 61793: (20%)&lt;BR/&gt; 1373: (20%)&lt;BR/&gt; 1065: (10%)&gt;];
}
5026--8505[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="1065" src_ip="213.101.192.210" src_port="1863"/>
      <filter dst_ip="168.127.45.60" dst_port="1373" src_ip="213.101.192.210" src_port="1863"/>
      <filter dst_ip="155.148.250.33" dst_port="61793" src_ip="213.101.192.210" src_port="1863"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.22.2.211"/>
    </slice>
    <from sec="1083733820" usec="0"/>
    <to sec="1083733893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2843{
style=filled;
color=gray75;
5030[label="41.163.11.211;78pkt 78fpkt", shape=pentagon, color=darkviolet];
8510[label="41.163.11.211;77pkt 77fpkt", shape=invtriangle, color=brown];
10701[label="41.163.11.211;77pkt 77fpkt", shape=invhouse, color=bisque];
stat2843[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.163.11.211:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3218: (1.2931%)&lt;BR/&gt; 4940: (0.646552%)&lt;BR/&gt; 4892: (0.646552%)&lt;BR/&gt; 4862: (0.646552%)&gt;];
}
5030--8510[label="1;77pkt 77fpkt"];
5030--10701[label="1;77pkt 77fpkt"];
8510--10701[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="41.163.11.211"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2844{
style=filled;
color=gray75;
5031[label="205.100.19.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8511[label="205.100.19.211;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2844[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.100.19.211:8080, 209.29.138.10:34062}[50%]&lt;BR/&gt;{205.100.19.211:8080, 209.29.138.10:41262}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 34062: (33.3333%)&lt;BR/&gt; 41262: (16.6667%)&gt;];
}
5031--8511[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" dst_port="41262" src_ip="205.100.19.211" src_port="8080"/>
      <filter dst_ip="209.29.138.10" dst_port="34062" src_ip="205.100.19.211" src_port="8080"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2845{
style=filled;
color=gray75;
5033[label="136.151.29.211;35pkt 35fpkt", shape=pentagon, color=darkviolet];
8513[label="136.151.29.211;34pkt 34fpkt", shape=invtriangle, color=brown];
stat2845[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.29.211:*, *:80}[82.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.029%)&lt;BR/&gt; 7001: (2.89855%)&lt;BR/&gt; 1455: (2.89855%)&lt;BR/&gt; 1863: (2.17391%)&lt;BR/&gt; 1550: (1.44928%)&gt;];
}
5033--8513[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.151.29.211"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.236.171.211"/>
    </slice>
    <from sec="1083733513" usec="0"/>
    <to sec="1083733617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2847{
style=filled;
color=gray75;
401[label="44.65.117.246;s;50pkt 50fpkt", shape=diamond, color=yellow];
636[label="46.71.223.70;s;28pkt 28fpkt", shape=diamond, color=yellow];
865[label="173.138.176.181;d;8pkt 8fpkt", shape=diamond, color=yellow];
4296[label="220.77.106.167;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5051[label="211.228.24.212;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5580[label="44.65.117.246;52pkt 52fpkt", shape=pentagon, color=darkviolet];
6737[label="46.71.223.70;28pkt 28fpkt", shape=invtriangle, color=brown];
8013[label="220.77.106.167;20pkt 20fpkt", shape=invtriangle, color=brown];
8525[label="211.228.24.212;2pkt 2fpkt", shape=invtriangle, color=brown];
8902[label="44.65.117.246;51pkt 51fpkt", shape=invtriangle, color=brown];
10706[label="211.228.24.212;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2847[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.65.117.246:25, *:*}[48.5981%]&lt;BR/&gt;{46.71.223.70:25, 173.138.128.194:*}[25.2336%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.8496%)&lt;BR/&gt; 6667: (5.82707%)&lt;BR/&gt; 113: (4.32331%)&lt;BR/&gt; 64581: (0.75188%)&lt;BR/&gt; 1161: (0.75188%)&gt;];
}
401--865[label="0.125;1pkt 1fpkt"];
401--5580[label="1;50pkt 50fpkt"];
401--8902[label="0.98;49pkt 49fpkt"];
636--865[label="0.125;1pkt 1fpkt"];
636--6737[label="0.964286;27pkt 27fpkt"];
865--4296[label="0.25;2pkt 2fpkt"];
865--5051[label="0.666667;2pkt 2fpkt"];
865--5580[label="0.125;1pkt 1fpkt"];
865--8013[label="0.125;1pkt 1fpkt"];
865--8525[label="0.5;1pkt 1fpkt"];
865--8902[label="0.125;1pkt 1fpkt"];
865--10706[label="0.666667;2pkt 2fpkt"];
4296--8013[label="1;20pkt 20fpkt"];
5051--8525[label="1;2pkt 2fpkt"];
5051--10706[label="1;3pkt 3fpkt"];
5580--8902[label="1;51pkt 51fpkt"];
8525--10706[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="44.65.117.246" src_port="25"/>
      <filter dst_ip="173.138.128.194" src_ip="46.71.223.70" src_port="25"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2848{
style=filled;
color=gray75;
5053[label="155.148.45.212;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8527[label="155.148.45.212;33pkt 33fpkt", shape=invtriangle, color=brown];
10708[label="155.148.45.212;33pkt 33fpkt", shape=invhouse, color=bisque];
stat2848[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.45.212:*, 193.114.85.3:21}[67.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (37.5%)&lt;BR/&gt; 8000: (4.5%)&lt;BR/&gt; 8001: (3%)&lt;BR/&gt; 6001: (3%)&lt;BR/&gt; 4000: (3%)&gt;];
}
5053--8527[label="1;33pkt 33fpkt"];
5053--10708[label="1;33pkt 33fpkt"];
8527--10708[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="193.114.85.3" dst_port="21" src_ip="155.148.45.212"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2849{
style=filled;
color=gray75;
5054[label="109.197.52.212;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8528[label="109.197.52.212;7pkt 7fpkt", shape=invtriangle, color=brown];
10709[label="109.197.52.212;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2849[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.197.52.212:*, *:445}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (47.3684%)&lt;BR/&gt; 4712: (7.89474%)&lt;BR/&gt; 4265: (7.89474%)&lt;BR/&gt; 2302: (7.89474%)&lt;BR/&gt; 2291: (7.89474%)&gt;];
}
5054--8528[label="1;6pkt 6fpkt"];
5054--10709[label="1;6pkt 6fpkt"];
8528--10709[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.197.52.212"/>
    </slice>
    <from sec="1083733400" usec="0"/>
    <to sec="1083733975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2850{
style=filled;
color=gray75;
5059[label="109.196.135.212;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8532[label="109.196.135.212;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2850[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.196.135.212:6881, 208.96.50.84:58688}[20%]&lt;BR/&gt;{109.196.135.212:6885, 208.96.50.84:56416}[20%]&lt;BR/&gt;{109.196.135.212:6882, 208.96.50.84:55205}[20%]&lt;BR/&gt;{109.196.135.212:6882, 208.96.50.84:58495}[20%]&lt;BR/&gt;{109.196.135.212:6882, 208.96.50.84:58496}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (27.7778%)&lt;BR/&gt; 58688: (11.1111%)&lt;BR/&gt; 58496: (11.1111%)&lt;BR/&gt; 58495: (11.1111%)&lt;BR/&gt; 56416: (11.1111%)&gt;];
}
5059--8532[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58496" src_ip="109.196.135.212" src_port="6882"/>
      <filter dst_ip="208.96.50.84" dst_port="58495" src_ip="109.196.135.212" src_port="6882"/>
      <filter dst_ip="208.96.50.84" dst_port="55205" src_ip="109.196.135.212" src_port="6882"/>
      <filter dst_ip="208.96.50.84" dst_port="56416" src_ip="109.196.135.212" src_port="6885"/>
      <filter dst_ip="208.96.50.84" dst_port="58688" src_ip="109.196.135.212" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2851{
style=filled;
color=gray75;
5060[label="155.148.136.212;43pkt 43fpkt", shape=pentagon, color=darkviolet];
8533[label="155.148.136.212;43pkt 43fpkt", shape=invtriangle, color=brown];
10713[label="155.148.136.212;43pkt 43fpkt", shape=invhouse, color=bisque];
stat2851[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.136.212:43539, *:*}[60.4651%]&lt;BR/&gt;{155.148.136.212:*, 192.168.5.3:2869}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43539: (30.2326%)&lt;BR/&gt; 2869: (11.6279%)&lt;BR/&gt; 31934: (2.32558%)&lt;BR/&gt; 30125: (2.32558%)&lt;BR/&gt; 29494: (2.32558%)&gt;];
}
5060--8533[label="1;43pkt 43fpkt"];
5060--10713[label="1;43pkt 43fpkt"];
8533--10713[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="155.148.136.212" src_port="43539"/>
      <filter dst_ip="192.168.5.3" dst_port="2869" src_ip="155.148.136.212"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2852{
style=filled;
color=gray75;
5061[label="192.50.150.212;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8534[label="192.50.150.212;30pkt 30fpkt", shape=invtriangle, color=brown];
10714[label="192.50.150.212;30pkt 30fpkt", shape=invhouse, color=bisque];
stat2852[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.50.150.212:*, 219.100.206.44:*}[23.3333%]&lt;BR/&gt;{192.50.150.212:*, 219.223.215.62:*}[23.3333%]&lt;BR/&gt;{192.50.150.212:*, 219.194.195.165:*}[23.3333%]&lt;BR/&gt;{192.50.150.212:*, 219.222.14.245:*}[23.3333%]&lt;BR/&gt;{192.50.150.212:*, *:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 6129: (6.66667%)&lt;BR/&gt; 3127: (6.66667%)&lt;BR/&gt; 2745: (6.66667%)&lt;BR/&gt; 1025: (6.66667%)&gt;];
}
5061--8534[label="1;30pkt 30fpkt"];
5061--10714[label="1;30pkt 30fpkt"];
8534--10714[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="219.222.14.245" src_ip="192.50.150.212"/>
      <filter dst_ip="219.194.195.165" src_ip="192.50.150.212"/>
      <filter dst_ip="219.223.215.62" src_ip="192.50.150.212"/>
      <filter dst_ip="219.100.206.44" src_ip="192.50.150.212"/>
      <filter dst_port="80" src_ip="192.50.150.212"/>
    </slice>
    <from sec="1083733289" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2853{
style=filled;
color=gray75;
5063[label="197.173.156.212;166pkt 166fpkt", shape=pentagon, color=darkviolet];
8536[label="197.173.156.212;165pkt 165fpkt", shape=invtriangle, color=brown];
10716[label="197.173.156.212;165pkt 165fpkt", shape=invhouse, color=bisque];
stat2853[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.173.156.212:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5063--8536[label="1;165pkt 165fpkt"];
5063--10716[label="1;165pkt 165fpkt"];
8536--10716[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.173.156.212" src_port="1036"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083733284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.115.193.212"/>
    </slice>
    <from sec="1083733329" usec="0"/>
    <to sec="1083733495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.189.62.213"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.19.82.213"/>
    </slice>
    <from sec="1083733829" usec="0"/>
    <to sec="1083733896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2857{
style=filled;
color=gray75;
5070[label="46.134.83.213;48pkt 48fpkt", shape=pentagon, color=darkviolet];
8542[label="46.134.83.213;47pkt 47fpkt", shape=invtriangle, color=brown];
stat2857[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.134.83.213:80, 209.29.138.127:*}[54.1667%]&lt;BR/&gt;{46.134.83.213:80, 209.29.138.126:*}[45.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5000: (1.05263%)&lt;BR/&gt; 4996: (1.05263%)&lt;BR/&gt; 4365: (1.05263%)&lt;BR/&gt; 4329: (1.05263%)&gt;];
}
5070--8542[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.134.83.213" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.134.83.213" src_port="80"/>
    </slice>
    <from sec="1083733285" usec="0"/>
    <to sec="1083733823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2858{
style=filled;
color=gray75;
5074[label="136.151.106.213;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8544[label="136.151.106.213;16pkt 16fpkt", shape=invtriangle, color=brown];
10720[label="136.151.106.213;16pkt 16fpkt", shape=invhouse, color=bisque];
stat2858[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.106.213:*, *:25}[37.5%]&lt;BR/&gt;{136.151.106.213:*, *:113}[31.25%]&lt;BR/&gt;{136.151.106.213:25, *:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.375%)&lt;BR/&gt; 113: (15.625%)&lt;BR/&gt; 41484: (3.125%)&lt;BR/&gt; 41483: (3.125%)&lt;BR/&gt; 41482: (3.125%)&gt;];
}
5074--8544[label="1;16pkt 16fpkt"];
5074--10720[label="1;16pkt 16fpkt"];
8544--10720[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.106.213" src_port="25"/>
      <filter dst_port="25" src_ip="136.151.106.213"/>
      <filter dst_port="113" src_ip="136.151.106.213"/>
    </slice>
    <from sec="1083733274" usec="0"/>
    <to sec="1083734033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2859{
style=filled;
color=gray75;
649[label="173.138.131.58;d;7pkt 7fpkt", shape=diamond, color=yellow];
3867[label="46.71.197.142;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5076[label="46.71.197.213;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7712[label="46.71.197.142;8pkt 8fpkt", shape=invtriangle, color=brown];
8546[label="46.71.197.213;7pkt 7fpkt", shape=invtriangle, color=brown];
10204[label="46.71.197.142;8pkt 8fpkt", shape=invhouse, color=bisque];
10722[label="46.71.197.213;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2859[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.197.213:25, *:*}[35%]&lt;BR/&gt;{*:25, 173.138.131.58:*}[30%]&lt;BR/&gt;{46.71.197.142:25, 173.138.211.102:*}[20%]&lt;BR/&gt;{*:25, 173.138.211.20:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0566%)&lt;BR/&gt; 4415: (3.77358%)&lt;BR/&gt; 4410: (3.77358%)&lt;BR/&gt; 4407: (3.77358%)&lt;BR/&gt; 4400: (2.83019%)&gt;];
}
649--3867[label="0.285714;2pkt 2fpkt"];
649--5076[label="0.142857;1pkt 1fpkt"];
649--7712[label="0.285714;2pkt 2fpkt"];
649--8546[label="0.142857;1pkt 1fpkt"];
649--10204[label="0.285714;2pkt 2fpkt"];
649--10722[label="0.142857;1pkt 1fpkt"];
3867--7712[label="1;8pkt 8fpkt"];
3867--10204[label="1;8pkt 8fpkt"];
5076--8546[label="1;7pkt 7fpkt"];
5076--10722[label="1;7pkt 7fpkt"];
7712--10204[label="1;8pkt 8fpkt"];
8546--10722[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="46.71.197.213" src_port="25"/>
      <filter dst_ip="173.138.131.58" src_port="25"/>
      <filter dst_ip="173.138.211.20" src_port="25"/>
      <filter dst_ip="173.138.211.102" src_ip="46.71.197.142" src_port="25"/>
    </slice>
    <from sec="1083733534" usec="0"/>
    <to sec="1083733944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2860{
style=filled;
color=gray75;
5079[label="52.176.0.214;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8548[label="52.176.0.214;3pkt 3fpkt", shape=invtriangle, color=brown];
10723[label="52.176.0.214;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2860[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.176.0.214:43812, 209.29.136.89:1206}[25%]&lt;BR/&gt;{52.176.0.214:43812, 209.29.136.89:1929}[25%]&lt;BR/&gt;{52.176.0.214:43812, 209.29.136.89:2974}[25%]&lt;BR/&gt;{52.176.0.214:43812, 209.29.136.89:4035}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43812: (50%)&lt;BR/&gt; 4035: (15%)&lt;BR/&gt; 2974: (15%)&lt;BR/&gt; 1206: (15%)&lt;BR/&gt; 1929: (5%)&gt;];
}
5079--8548[label="1;3pkt 3fpkt"];
5079--10723[label="1;3pkt 3fpkt"];
8548--10723[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="4035" src_ip="52.176.0.214" src_port="43812"/>
      <filter dst_ip="209.29.136.89" dst_port="2974" src_ip="52.176.0.214" src_port="43812"/>
      <filter dst_ip="209.29.136.89" dst_port="1929" src_ip="52.176.0.214" src_port="43812"/>
      <filter dst_ip="209.29.136.89" dst_port="1206" src_ip="52.176.0.214" src_port="43812"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.19.41.214"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.244.42.214"/>
    </slice>
    <from sec="1083733402" usec="0"/>
    <to sec="1083733741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2863{
style=filled;
color=gray75;
5082[label="45.243.46.214;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8551[label="45.243.46.214;21pkt 21fpkt", shape=invtriangle, color=brown];
10725[label="45.243.46.214;21pkt 21fpkt", shape=invhouse, color=bisque];
stat2863[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.243.46.214:*, 219.223.235.50:*}[31.8182%]&lt;BR/&gt;{45.243.46.214:*, 219.223.235.113:*}[31.8182%]&lt;BR/&gt;{45.243.46.214:*, 219.24.89.180:*}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (7.8125%)&lt;BR/&gt; 6129: (7.03125%)&lt;BR/&gt; 3127: (7.03125%)&lt;BR/&gt; 2745: (7.03125%)&lt;BR/&gt; 1025: (7.03125%)&gt;];
}
5082--8551[label="1;21pkt 21fpkt"];
5082--10725[label="1;21pkt 21fpkt"];
8551--10725[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="219.24.89.180" src_ip="45.243.46.214"/>
      <filter dst_ip="219.223.235.113" src_ip="45.243.46.214"/>
      <filter dst_ip="219.223.235.50" src_ip="45.243.46.214"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2864{
style=filled;
color=gray75;
5083[label="192.46.50.214;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8552[label="192.46.50.214;2pkt 2fpkt", shape=invtriangle, color=brown];
10726[label="192.46.50.214;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2864[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.46.50.214:1764, 208.96.85.10:445}[33.3333%]&lt;BR/&gt;{192.46.50.214:1289, 173.138.101.53:445}[33.3333%]&lt;BR/&gt;{192.46.50.214:1133, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 1764: (21.4286%)&lt;BR/&gt; 1289: (21.4286%)&lt;BR/&gt; 1133: (7.14286%)&lt;BR/&gt; 80: (7.14286%)&gt;];
}
5083--8552[label="1;2pkt 2fpkt"];
5083--10726[label="1;2pkt 2fpkt"];
8552--10726[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="192.46.50.214" src_port="1133"/>
      <filter dst_ip="173.138.101.53" dst_port="445" src_ip="192.46.50.214" src_port="1289"/>
      <filter dst_ip="208.96.85.10" dst_port="445" src_ip="192.46.50.214" src_port="1764"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083733519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2865{
style=filled;
color=gray75;
5084[label="109.214.50.214;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8553[label="109.214.50.214;3pkt 3fpkt", shape=invtriangle, color=brown];
10727[label="109.214.50.214;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2865[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.214.50.214:3955, 141.211.121.8:445}[25%]&lt;BR/&gt;{109.214.50.214:1468, 136.151.235.67:80}[25%]&lt;BR/&gt;{109.214.50.214:6349, 209.29.136.89:2660}[25%]&lt;BR/&gt;{109.214.50.214:2950, 173.138.43.164:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (30%)&lt;BR/&gt; 6349: (15%)&lt;BR/&gt; 3955: (15%)&lt;BR/&gt; 2950: (15%)&lt;BR/&gt; 2660: (15%)&gt;];
}
5084--8553[label="1;3pkt 3fpkt"];
5084--10727[label="1;3pkt 3fpkt"];
8553--10727[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.43.164" dst_port="445" src_ip="109.214.50.214" src_port="2950"/>
      <filter dst_ip="209.29.136.89" dst_port="2660" src_ip="109.214.50.214" src_port="6349"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="109.214.50.214" src_port="1468"/>
      <filter dst_ip="141.211.121.8" dst_port="445" src_ip="109.214.50.214" src_port="3955"/>
    </slice>
    <from sec="1083733278" usec="0"/>
    <to sec="1083733998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2866{
style=filled;
color=gray75;
5085[label="208.96.53.214;97pkt 97fpkt", shape=pentagon, color=darkviolet];
8554[label="208.96.53.214;97pkt 97fpkt", shape=invtriangle, color=brown];
stat2866[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.96.53.214:0, *:0}[95.8763%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.8763%)&lt;BR/&gt; 80: (1.54639%)&lt;BR/&gt; 12494: (0.515464%)&lt;BR/&gt; 9454: (0.515464%)&lt;BR/&gt; 6946: (0.515464%)&gt;];
}
5085--8554[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.53.214"/>
    </slice>
    <from sec="1083733230" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2867{
style=filled;
color=gray75;
5086[label="136.151.61.214;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8555[label="136.151.61.214;14pkt 14fpkt", shape=invtriangle, color=brown];
10728[label="136.151.61.214;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2867[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.61.214:53, *:53}[40%]&lt;BR/&gt;{136.151.61.214:*, *:113}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.4884%)&lt;BR/&gt; 113: (10.4651%)&lt;BR/&gt; 80: (6.97674%)&lt;BR/&gt; 50636: (3.48837%)&lt;BR/&gt; 41819: (3.48837%)&gt;];
}
5086--8555[label="1;14pkt 14fpkt"];
5086--10728[label="1;14pkt 14fpkt"];
8555--10728[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="113" src_ip="136.151.61.214"/>
      <filter dst_port="53" src_ip="136.151.61.214" src_port="53"/>
    </slice>
    <from sec="1083733242" usec="0"/>
    <to sec="1083734090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2868{
style=filled;
color=gray75;
5088[label="46.134.83.214;46pkt 46fpkt", shape=pentagon, color=darkviolet];
8557[label="46.134.83.214;46pkt 46fpkt", shape=invtriangle, color=brown];
10730[label="46.134.83.214;46pkt 46fpkt", shape=invhouse, color=bisque];
stat2868[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.134.83.214:80, 209.29.138.127:*}[63.0435%]&lt;BR/&gt;{46.134.83.214:80, 209.29.138.126:*}[36.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4999: (1.08696%)&lt;BR/&gt; 4997: (1.08696%)&lt;BR/&gt; 4801: (1.08696%)&lt;BR/&gt; 4285: (1.08696%)&gt;];
}
5088--8557[label="1;46pkt 46fpkt"];
5088--10730[label="1;46pkt 46fpkt"];
8557--10730[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.134.83.214" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.134.83.214" src_port="80"/>
    </slice>
    <from sec="1083733297" usec="0"/>
    <to sec="1083733780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2869{
style=filled;
color=gray75;
5090[label="136.150.163.214;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8559[label="136.150.163.214;8pkt 8fpkt", shape=invtriangle, color=brown];
stat2869[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.163.214:0, *:0}[25%]&lt;BR/&gt;{136.150.163.214:*, 213.101.100.91:80}[25%]&lt;BR/&gt;{136.150.163.214:*, 213.101.59.49:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.25%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 1582: (6.25%)&lt;BR/&gt; 1580: (6.25%)&lt;BR/&gt; 1579: (6.25%)&gt;];
}
5090--8559[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.59.49" dst_port="80" src_ip="136.150.163.214"/>
      <filter dst_ip="213.101.100.91" dst_port="80" src_ip="136.150.163.214"/>
      <filter src_ip="136.150.163.214"/>
    </slice>
    <from sec="1083733405" usec="0"/>
    <to sec="1083734042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.103.193.214"/>
    </slice>
    <from sec="1083733557" usec="0"/>
    <to sec="1083733780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.69.5.215"/>
    </slice>
    <from sec="1083733673" usec="0"/>
    <to sec="1083733793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2872{
style=filled;
color=gray75;
5094[label="208.16.32.215;237pkt 237fpkt", shape=pentagon, color=darkviolet];
8563[label="208.16.32.215;236pkt 236fpkt", shape=invtriangle, color=brown];
10734[label="208.16.32.215;237pkt 237fpkt", shape=invhouse, color=bisque];
stat2872[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.16.32.215:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5094--8563[label="1;236pkt 236fpkt"];
5094--10734[label="1;237pkt 237fpkt"];
8563--10734[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.16.32.215" src_port="1028"/>
    </slice>
    <from sec="1083733468" usec="0"/>
    <to sec="1083733497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.16.78.215"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083733524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2874{
style=filled;
color=gray75;
392[label="208.96.52.22;d;49pkt 49fpkt", shape=diamond, color=yellow];
524[label="201.222.85.247;s;22pkt 22fpkt", shape=diamond, color=yellow];
567[label="198.163.115.194;s;64pkt 64fpkt", shape=diamond, color=yellow];
912[label="209.29.136.220;d;32pkt 32fpkt", shape=diamond, color=yellow];
2201[label="198.108.206.54;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2495[label="213.98.137.70;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3899[label="45.172.198.144;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4573[label="196.106.48.182;725pkt 725fpkt", shape=pentagon, color=darkviolet];
4763[label="198.163.115.194;84pkt 84fpkt", shape=pentagon, color=darkviolet];
5102[label="213.101.192.215;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5323[label="198.163.102.229;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5422[label="44.51.200.235;72pkt 72fpkt", shape=pentagon, color=darkviolet];
6734[label="213.98.137.70;6pkt 6fpkt", shape=invtriangle, color=brown];
8203[label="196.106.48.182;725pkt 725fpkt", shape=invtriangle, color=brown];
8335[label="198.163.115.194;84pkt 84fpkt", shape=invtriangle, color=brown];
8566[label="213.101.192.215;5pkt 5fpkt", shape=invtriangle, color=brown];
8721[label="198.163.102.229;8pkt 8fpkt", shape=invtriangle, color=brown];
10580[label="198.163.115.194;84pkt 84fpkt", shape=invhouse, color=bisque];
stat2874[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.106.48.182:1029, *:137}[71.8719%]&lt;BR/&gt;{*:80, *:*}[24.7247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (35.5836%)&lt;BR/&gt; 1029: (35.5341%)&lt;BR/&gt; 80: (13.2542%)&lt;BR/&gt; 139: (0.37092%)&lt;BR/&gt; 1863: (0.321464%)&gt;];
}
392--524[label="1;22pkt 22fpkt"];
392--555[label="0.0204082;1pkt 1fpkt"];
392--567[label="0.0612245;3pkt 3fpkt"];
392--2201[label="0.1;2pkt 2fpkt"];
392--4763[label="0.0612245;3pkt 3fpkt"];
392--5102[label="0.2;1pkt 1fpkt"];
392--5323[label="0.111111;1pkt 1fpkt"];
392--5422[label="0.183673;9pkt 9fpkt"];
392--8335[label="0.0612245;3pkt 3fpkt"];
392--8566[label="0.2;1pkt 1fpkt"];
392--8721[label="0.125;1pkt 1fpkt"];
392--10580[label="0.0612245;3pkt 3fpkt"];
567--4763[label="1;64pkt 64fpkt"];
567--8335[label="1;64pkt 64fpkt"];
567--10580[label="1;64pkt 64fpkt"];
912--2495[label="0.333333;2pkt 2fpkt"];
912--3899[label="0.0454545;1pkt 1fpkt"];
912--4573[label="0.0625;2pkt 2fpkt"];
912--5287[label="0.0344828;1pkt 1fpkt"];
912--5422[label="0.125;4pkt 4fpkt"];
912--6734[label="0.333333;2pkt 2fpkt"];
912--8203[label="0.0625;2pkt 2fpkt"];
912--8696[label="0.0357143;1pkt 1fpkt"];
2495--6734[label="1;6pkt 6fpkt"];
4573--8203[label="1;725pkt 725fpkt"];
4763--8335[label="1;84pkt 84fpkt"];
4763--10580[label="1;84pkt 84fpkt"];
5102--8566[label="1;5pkt 5fpkt"];
5323--8721[label="1;8pkt 8fpkt"];
8335--10580[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_port="137" src_ip="196.106.48.182" src_port="1029"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2875{
style=filled;
color=gray75;
5108[label="198.198.95.216;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8570[label="198.198.95.216;20pkt 20fpkt", shape=invtriangle, color=brown];
stat2875[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.95.216:80, 209.29.138.126:*}[42.8571%]&lt;BR/&gt;{198.198.95.216:80, 173.138.128.114:*}[28.5714%]&lt;BR/&gt;{198.198.95.216:80, 209.29.138.127:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60247: (2.43902%)&lt;BR/&gt; 54554: (2.43902%)&lt;BR/&gt; 54492: (2.43902%)&lt;BR/&gt; 54469: (2.43902%)&gt;];
}
5108--8570[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.198.95.216" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.198.95.216" src_port="80"/>
      <filter dst_ip="173.138.128.114" src_ip="198.198.95.216" src_port="80"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2876{
style=filled;
color=gray75;
5109[label="41.160.102.216;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8571[label="41.160.102.216;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2876[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.160.102.216:0, 141.135.240.43:0}[33.3333%]&lt;BR/&gt;{41.160.102.216:1656, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{41.160.102.216:0, 136.151.153.181:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (66.6667%)&lt;BR/&gt; 1656: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
5109--8571[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.153.181" src_ip="41.160.102.216"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.160.102.216" src_port="1656"/>
      <filter dst_ip="141.135.240.43" src_ip="41.160.102.216"/>
    </slice>
    <from sec="1083733612" usec="0"/>
    <to sec="1083733779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.23.108.216"/>
    </slice>
    <from sec="1083733518" usec="0"/>
    <to sec="1083733631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2878{
style=filled;
color=gray75;
5114[label="209.141.140.216;1087pkt 1087fpkt", shape=pentagon, color=darkviolet];
8574[label="209.141.140.216;1086pkt 1086fpkt", shape=invtriangle, color=brown];
stat2878[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.141.140.216:2957, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2957: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5114--8574[label="1;1086pkt 1086fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.141.140.216" src_port="2957"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.215.150.216"/>
    </slice>
    <from sec="1083733259" usec="0"/>
    <to sec="1083733409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2880{
style=filled;
color=gray75;
5121[label="45.4.46.217;71pkt 71fpkt", shape=pentagon, color=darkviolet];
8579[label="45.4.46.217;70pkt 70fpkt", shape=invtriangle, color=brown];
stat2880[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.4.46.217:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4833: (0.70922%)&lt;BR/&gt; 4770: (0.70922%)&lt;BR/&gt; 4752: (0.70922%)&lt;BR/&gt; 4661: (0.70922%)&gt;];
}
5121--8579[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="45.4.46.217"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.193.182.217"/>
    </slice>
    <from sec="1083733697" usec="0"/>
    <to sec="1083733943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.999557,5.62757,502,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2882{
style=filled;
color=gray75;
186[label="197.21.26.176;s;10pkt 10fpkt", shape=diamond, color=yellow];
677[label="155.148.98.151;d;9pkt 9fpkt", shape=diamond, color=yellow];
4456[label="197.21.26.176;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5124[label="213.101.192.217;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8129[label="197.21.26.176;9pkt 9fpkt", shape=invtriangle, color=brown];
8581[label="213.101.192.217;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2882[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.21.26.176:22, 155.148.98.151:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (19.7674%)&lt;BR/&gt; 1863: (8.13953%)&lt;BR/&gt; 4778: (4.65116%)&lt;BR/&gt; 4777: (4.65116%)&lt;BR/&gt; 4674: (4.65116%)&gt;];
}
186--677[label="0.555556;5pkt 5fpkt"];
186--4456[label="1;9pkt 9fpkt"];
186--8129[label="1;9pkt 9fpkt"];
677--4456[label="0.444444;4pkt 4fpkt"];
677--5124[label="0.333333;1pkt 1fpkt"];
677--8129[label="0.444444;4pkt 4fpkt"];
677--8581[label="0.333333;1pkt 1fpkt"];
4456--8129[label="1;9pkt 9fpkt"];
5124--8581[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.98.151" src_ip="197.21.26.176" src_port="22"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2883{
style=filled;
color=gray75;
5127[label="136.151.2.218;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8583[label="136.151.2.218;10pkt 10fpkt", shape=invtriangle, color=brown];
10743[label="136.151.2.218;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2883[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.2.218:53, *:*}[45.4545%]&lt;BR/&gt;{136.151.2.218:80, *:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (24.1935%)&lt;BR/&gt; 80: (16.129%)&lt;BR/&gt; 25: (9.67742%)&lt;BR/&gt; 63854: (4.83871%)&lt;BR/&gt; 48902: (4.83871%)&gt;];
}
5127--8583[label="1;10pkt 10fpkt"];
5127--10743[label="1;10pkt 10fpkt"];
8583--10743[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.2.218" src_port="53"/>
      <filter src_ip="136.151.2.218" src_port="80"/>
    </slice>
    <from sec="1083733313" usec="0"/>
    <to sec="1083734078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2884{
style=filled;
color=gray75;
5131[label="71.176.85.218;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8585[label="71.176.85.218;14pkt 14fpkt", shape=invtriangle, color=brown];
stat2884[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.176.85.218:25, 173.138.152.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61329: (3.57143%)&lt;BR/&gt; 61328: (3.57143%)&lt;BR/&gt; 61323: (3.57143%)&lt;BR/&gt; 61322: (3.57143%)&gt;];
}
5131--8585[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.152.178" src_ip="71.176.85.218" src_port="25"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2885{
style=filled;
color=gray75;
5138[label="136.150.128.218;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8589[label="136.150.128.218;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2885[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.128.218:32792, *:53}[53.8462%]&lt;BR/&gt;{136.150.128.218:80, *:*}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30.7692%)&lt;BR/&gt; 32792: (26.9231%)&lt;BR/&gt; 80: (19.2308%)&lt;BR/&gt; 63436: (3.84615%)&lt;BR/&gt; 61491: (3.84615%)&gt;];
}
5138--8589[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="136.150.128.218" src_port="80"/>
      <filter dst_port="53" src_ip="136.150.128.218" src_port="32792"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2886{
style=filled;
color=gray75;
5139[label="173.138.139.218;61pkt 61fpkt", shape=pentagon, color=darkviolet];
8590[label="173.138.139.218;60pkt 60fpkt", shape=invtriangle, color=brown];
10744[label="173.138.139.218;60pkt 60fpkt", shape=invhouse, color=bisque];
stat2886[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.139.218:*, *:25}[96.7213%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.1713%)&lt;BR/&gt; 2619: (1.65746%)&lt;BR/&gt; 44641: (0.828729%)&lt;BR/&gt; 3996: (0.828729%)&lt;BR/&gt; 2646: (0.828729%)&gt;];
}
5139--8590[label="1;60pkt 60fpkt"];
5139--10744[label="1;60pkt 60fpkt"];
8590--10744[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="173.138.139.218"/>
    </slice>
    <from sec="1083733703" usec="0"/>
    <to sec="1083733969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.117.199.218"/>
    </slice>
    <from sec="1083733233" usec="0"/>
    <to sec="1083733793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2888{
style=filled;
color=gray75;
5141[label="209.213.205.218;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8592[label="209.213.205.218;18pkt 18fpkt", shape=invtriangle, color=brown];
stat2888[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.213.205.218:*, 209.29.160.139:*}[44.4444%]&lt;BR/&gt;{209.213.205.218:*, 209.29.164.238:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (7.14286%)&lt;BR/&gt; 6129: (5.71429%)&lt;BR/&gt; 3127: (5.71429%)&lt;BR/&gt; 2745: (5.71429%)&lt;BR/&gt; 1025: (5.71429%)&gt;];
}
5141--8592[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.164.238" src_ip="209.213.205.218"/>
      <filter dst_ip="209.29.160.139" src_ip="209.213.205.218"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083733850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2889{
style=filled;
color=gray75;
5144[label="201.102.65.219;107pkt 107fpkt", shape=pentagon, color=darkviolet];
8595[label="201.102.65.219;106pkt 106fpkt", shape=invtriangle, color=brown];
10747[label="201.102.65.219;106pkt 106fpkt", shape=invhouse, color=bisque];
stat2889[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.102.65.219:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5144--8595[label="1;106pkt 106fpkt"];
5144--10747[label="1;106pkt 106fpkt"];
8595--10747[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.102.65.219" src_port="1025"/>
    </slice>
    <from sec="1083733482" usec="0"/>
    <to sec="1083733496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.14.128.219"/>
    </slice>
    <from sec="1083733910" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.199.154.219"/>
    </slice>
    <from sec="1083733284" usec="0"/>
    <to sec="1083733584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2892{
style=filled;
color=gray75;
92[label="44.212.34.203;s;35pkt 35fpkt", shape=diamond, color=yellow];
154[label="208.45.23.196;s;15pkt 15fpkt", shape=diamond, color=yellow];
297[label="44.65.117.237;s;36pkt 36fpkt", shape=diamond, color=yellow];
357[label="136.151.247.52;d;80pkt 80fpkt", shape=diamond, color=yellow];
620[label="44.64.14.56;s;41pkt 41fpkt", shape=diamond, color=yellow];
760[label="173.138.238.184;d;42pkt 42fpkt", shape=diamond, color=yellow];
794[label="45.172.219.139;s;21pkt 21fpkt", shape=diamond, color=yellow];
1612[label="198.29.160.27;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2227[label="44.64.14.56;66pkt 66fpkt", shape=pentagon, color=darkviolet];
2476[label="208.40.142.69;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2687[label="213.101.36.80;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3517[label="208.52.164.124;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3805[label="45.172.219.139;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4702[label="201.149.102.191;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4784[label="93.92.130.195;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4794[label="208.45.23.196;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4900[label="44.212.34.203;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4960[label="201.129.244.206;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5158[label="46.71.197.219;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6125[label="198.29.160.27;6pkt 6fpkt", shape=invtriangle, color=brown];
6544[label="44.64.14.56;65pkt 65fpkt", shape=invtriangle, color=brown];
6718[label="208.40.142.69;13pkt 13fpkt", shape=invtriangle, color=brown];
7666[label="45.172.219.139;30pkt 30fpkt", shape=invtriangle, color=brown];
8347[label="93.92.130.195;4pkt 4fpkt", shape=invtriangle, color=brown];
8463[label="201.129.244.206;13pkt 13fpkt", shape=invtriangle, color=brown];
8604[label="46.71.197.219;11pkt 11fpkt", shape=invtriangle, color=brown];
9603[label="208.40.142.69;13pkt 13fpkt", shape=invhouse, color=bisque];
10172[label="45.172.219.139;30pkt 30fpkt", shape=invhouse, color=bisque];
10586[label="93.92.130.195;3pkt 3fpkt", shape=invhouse, color=bisque];
10753[label="46.71.197.219;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2892[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[23.9766%]&lt;BR/&gt;{*:25, 136.151.247.52:*}[22.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.5238%)&lt;BR/&gt; 80: (7.48299%)&lt;BR/&gt; 443: (2.10884%)&lt;BR/&gt; 3766: (0.544218%)&lt;BR/&gt; 1238: (0.408163%)&gt;];
}
92--357[label="0.0571429;2pkt 2fpkt"];
92--4900[label="1;35pkt 35fpkt"];
154--357[label="1;15pkt 15fpkt"];
154--4794[label="1;15pkt 15fpkt"];
297--397[label="0.0571429;2pkt 2fpkt"];
297--760[label="0.333333;12pkt 12fpkt"];
357--794[label="0.238095;5pkt 5fpkt"];
357--2476[label="0.307692;4pkt 4fpkt"];
357--2687[label="0.0487805;2pkt 2fpkt"];
357--3517[label="0.25;1pkt 1fpkt"];
357--3805[label="0.166667;5pkt 5fpkt"];
357--4702[label="1;5pkt 5fpkt"];
357--4784[label="1;4pkt 4fpkt"];
357--4794[label="0.882353;15pkt 15fpkt"];
357--4900[label="0.0377358;2pkt 2fpkt"];
357--4960[label="0.692308;9pkt 9fpkt"];
357--6718[label="0.307692;4pkt 4fpkt"];
357--7666[label="0.166667;5pkt 5fpkt"];
357--8347[label="1;4pkt 4fpkt"];
357--8463[label="0.692308;9pkt 9fpkt"];
357--9603[label="0.307692;4pkt 4fpkt"];
357--10172[label="0.166667;5pkt 5fpkt"];
357--10586[label="1;3pkt 3fpkt"];
620--760[label="0.0487805;2pkt 2fpkt"];
620--2227[label="1;41pkt 41fpkt"];
620--6544[label="0.97561;40pkt 40fpkt"];
760--794[label="0.380952;8pkt 8fpkt"];
760--1612[label="1;7pkt 7fpkt"];
760--2227[label="0.047619;2pkt 2fpkt"];
760--3805[label="0.266667;8pkt 8fpkt"];
760--5158[label="0.416667;5pkt 5fpkt"];
760--6125[label="1;6pkt 6fpkt"];
760--6544[label="0.047619;2pkt 2fpkt"];
760--7666[label="0.266667;8pkt 8fpkt"];
760--8604[label="0.454545;5pkt 5fpkt"];
760--10172[label="0.266667;8pkt 8fpkt"];
760--10753[label="0.416667;5pkt 5fpkt"];
794--3805[label="1;21pkt 21fpkt"];
794--7666[label="1;21pkt 21fpkt"];
794--10172[label="1;21pkt 21fpkt"];
1612--6125[label="1;6pkt 6fpkt"];
2227--6544[label="1;65pkt 65fpkt"];
2476--6718[label="1;13pkt 13fpkt"];
2476--9603[label="1;13pkt 13fpkt"];
3805--7666[label="1;30pkt 30fpkt"];
3805--10172[label="1;30pkt 30fpkt"];
4784--8347[label="1;4pkt 4fpkt"];
4784--10586[label="1;3pkt 3fpkt"];
4960--8463[label="1;13pkt 13fpkt"];
5158--8604[label="1;11pkt 11fpkt"];
5158--10753[label="1;12pkt 12fpkt"];
6718--9603[label="1;13pkt 13fpkt"];
7666--10172[label="1;30pkt 30fpkt"];
8347--10586[label="1;3pkt 3fpkt"];
8604--10753[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="136.151.247.52" src_port="25"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2893{
style=filled;
color=gray75;
5160[label="209.200.210.219;39pkt 39fpkt", shape=pentagon, color=darkviolet];
8605[label="209.200.210.219;38pkt 38fpkt", shape=invtriangle, color=brown];
10754[label="209.200.210.219;39pkt 39fpkt", shape=invhouse, color=bisque];
stat2893[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.200.210.219:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (7.75862%)&lt;BR/&gt; 1025: (7.75862%)&lt;BR/&gt; 445: (7.75862%)&lt;BR/&gt; 2745: (7.32759%)&lt;BR/&gt; 6129: (6.46552%)&gt;];
}
5160--8605[label="1;38pkt 38fpkt"];
5160--10754[label="1;39pkt 39fpkt"];
8605--10754[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="209.200.210.219"/>
    </slice>
    <from sec="1083733461" usec="0"/>
    <to sec="1083734061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2894{
style=filled;
color=gray75;
5166[label="205.123.46.220;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8609[label="205.123.46.220;14pkt 14fpkt", shape=invtriangle, color=brown];
stat2894[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.123.46.220:*, *:445}[53.3333%]&lt;BR/&gt;{205.123.46.220:0, *:0}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (41.3793%)&lt;BR/&gt; 445: (27.5862%)&lt;BR/&gt; 4299: (3.44828%)&lt;BR/&gt; 4249: (3.44828%)&lt;BR/&gt; 4005: (3.44828%)&gt;];
}
5166--8609[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="205.123.46.220"/>
      <filter src_ip="205.123.46.220"/>
    </slice>
    <from sec="1083733661" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.33.65.220"/>
    </slice>
    <from sec="1083733314" usec="0"/>
    <to sec="1083733675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.151.67.220"/>
    </slice>
    <from sec="1083733846" usec="0"/>
    <to sec="1083733981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2897{
style=filled;
color=gray75;
5171[label="198.198.93.220;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8613[label="198.198.93.220;14pkt 14fpkt", shape=invtriangle, color=brown];
10759[label="198.198.93.220;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2897[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.93.220:80, 209.29.138.126:*}[78.5714%]&lt;BR/&gt;{198.198.93.220:80, 209.29.138.127:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4673: (3.57143%)&lt;BR/&gt; 4558: (3.57143%)&lt;BR/&gt; 4208: (3.57143%)&lt;BR/&gt; 4095: (3.57143%)&gt;];
}
5171--8613[label="1;14pkt 14fpkt"];
5171--10759[label="1;14pkt 14fpkt"];
8613--10759[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.198.93.220" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.198.93.220" src_port="80"/>
    </slice>
    <from sec="1083733277" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.4.156.220"/>
    </slice>
    <from sec="1083733756" usec="0"/>
    <to sec="1083733843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.28.156.220"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.110.158.220"/>
    </slice>
    <from sec="1083733331" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2901{
style=filled;
color=gray75;
5179[label="201.32.214.220;48pkt 48fpkt", shape=pentagon, color=darkviolet];
8618[label="201.32.214.220;48pkt 48fpkt", shape=invtriangle, color=brown];
10763[label="201.32.214.220;47pkt 47fpkt", shape=invhouse, color=bisque];
stat2901[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.32.214.220:80, 168.127.16.223:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3952: (1.04895%)&lt;BR/&gt; 3951: (1.04895%)&lt;BR/&gt; 3943: (1.04895%)&lt;BR/&gt; 3935: (1.04895%)&gt;];
}
5179--8618[label="1;48pkt 48fpkt"];
5179--10763[label="1;47pkt 47fpkt"];
8618--10763[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.16.223" src_ip="201.32.214.220" src_port="80"/>
    </slice>
    <from sec="1083733642" usec="0"/>
    <to sec="1083734018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2902{
style=filled;
color=gray75;
5180[label="197.10.232.220;180pkt 180fpkt", shape=pentagon, color=darkviolet];
8619[label="197.10.232.220;179pkt 179fpkt", shape=invtriangle, color=brown];
10764[label="197.10.232.220;180pkt 180fpkt", shape=invhouse, color=bisque];
stat2902[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.10.232.220:10386, *:137}[99.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10386: (49.7217%)&lt;BR/&gt; 137: (49.7217%)&lt;BR/&gt; 36403: (0.278293%)&lt;BR/&gt; 80: (0.278293%)&gt;];
}
5180--8619[label="1;179pkt 179fpkt"];
5180--10764[label="1;180pkt 180fpkt"];
8619--10764[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.10.232.220" src_port="10386"/>
    </slice>
    <from sec="1083733247" usec="0"/>
    <to sec="1083733412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.163.46.221"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.26.157.221"/>
    </slice>
    <from sec="1083733615" usec="0"/>
    <to sec="1083733730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.91.187.221"/>
    </slice>
    <from sec="1083733588" usec="0"/>
    <to sec="1083733707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.1.224.221"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.17.57.222"/>
    </slice>
    <from sec="1083733350" usec="0"/>
    <to sec="1083733826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2908{
style=filled;
color=gray75;
5200[label="155.16.68.222;78pkt 78fpkt", shape=pentagon, color=darkviolet];
8636[label="155.16.68.222;77pkt 77fpkt", shape=invtriangle, color=brown];
10778[label="155.16.68.222;78pkt 78fpkt", shape=invhouse, color=bisque];
stat2908[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.16.68.222:*, *:445}[32.0513%]&lt;BR/&gt;{155.16.68.222:*, *:135}[23.0769%]&lt;BR/&gt;{155.16.68.222:*, *:139}[21.7949%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (16.0944%)&lt;BR/&gt; 135: (11.3734%)&lt;BR/&gt; 139: (10.9442%)&lt;BR/&gt; 1433: (5.79399%)&lt;BR/&gt; 80: (5.79399%)&gt;];
}
5200--8636[label="1;77pkt 77fpkt"];
5200--10778[label="1;78pkt 78fpkt"];
8636--10778[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="155.16.68.222"/>
      <filter dst_port="135" src_ip="155.16.68.222"/>
      <filter dst_port="139" src_ip="155.16.68.222"/>
    </slice>
    <from sec="1083733283" usec="0"/>
    <to sec="1083734031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.118.169.222"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2910{
style=filled;
color=gray75;
5206[label="193.185.234.222;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8641[label="193.185.234.222;13pkt 13fpkt", shape=invtriangle, color=brown];
10782[label="193.185.234.222;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2910[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.185.234.222:*, 136.151.235.67:80}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.3415%)&lt;BR/&gt; 32775: (3.65854%)&lt;BR/&gt; 11404: (3.65854%)&lt;BR/&gt; 10298: (3.65854%)&lt;BR/&gt; 10152: (3.65854%)&gt;];
}
5206--8641[label="1;13pkt 13fpkt"];
5206--10782[label="1;14pkt 14fpkt"];
8641--10782[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="193.185.234.222"/>
    </slice>
    <from sec="1083733237" usec="0"/>
    <to sec="1083734070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.118.59.223"/>
    </slice>
    <from sec="1083733280" usec="0"/>
    <to sec="1083733390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2912{
style=filled;
color=gray75;
5216[label="41.234.179.223;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8647[label="41.234.179.223;3pkt 3fpkt", shape=invtriangle, color=brown];
10784[label="41.234.179.223;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2912[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.234.179.223:2695, 209.29.136.89:2847}[33.3333%]&lt;BR/&gt;{41.234.179.223:2695, 209.29.136.89:3062}[33.3333%]&lt;BR/&gt;{41.234.179.223:2695, 209.29.136.89:4956}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2695: (50%)&lt;BR/&gt; 4956: (16.6667%)&lt;BR/&gt; 3062: (16.6667%)&lt;BR/&gt; 2847: (16.6667%)&gt;];
}
5216--8647[label="1;3pkt 3fpkt"];
5216--10784[label="1;3pkt 3fpkt"];
8647--10784[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="4956" src_ip="41.234.179.223" src_port="2695"/>
      <filter dst_ip="209.29.136.89" dst_port="3062" src_ip="41.234.179.223" src_port="2695"/>
      <filter dst_ip="209.29.136.89" dst_port="2847" src_ip="41.234.179.223" src_port="2695"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.246.182.223"/>
    </slice>
    <from sec="1083733344" usec="0"/>
    <to sec="1083733416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2914{
style=filled;
color=gray75;
5222[label="192.198.11.224;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8650[label="192.198.11.224;24pkt 24fpkt", shape=invtriangle, color=brown];
10785[label="192.198.11.224;23pkt 23fpkt", shape=invhouse, color=bisque];
stat2914[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.198.11.224:80, 141.22.86.56:*}[54.1667%]&lt;BR/&gt;{192.198.11.224:80, 209.29.136.44:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65249: (2.11268%)&lt;BR/&gt; 65241: (2.11268%)&lt;BR/&gt; 65233: (2.11268%)&lt;BR/&gt; 65225: (2.11268%)&gt;];
}
5222--8650[label="1;24pkt 24fpkt"];
5222--10785[label="1;23pkt 23fpkt"];
8650--10785[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.56" src_ip="192.198.11.224" src_port="80"/>
      <filter dst_ip="209.29.136.44" src_ip="192.198.11.224" src_port="80"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083733566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.16.23.224"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083733362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2916{
style=filled;
color=gray75;
5224[label="201.110.41.224;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8652[label="201.110.41.224;19pkt 19fpkt", shape=invtriangle, color=brown];
stat2916[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.110.41.224:*, 136.151.235.67:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3684%)&lt;BR/&gt; 61830: (2.63158%)&lt;BR/&gt; 59760: (2.63158%)&lt;BR/&gt; 55487: (2.63158%)&lt;BR/&gt; 53388: (2.63158%)&gt;];
}
5224--8652[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="201.110.41.224"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083733879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.22.86.224"/>
    </slice>
    <from sec="1083733720" usec="0"/>
    <to sec="1083733861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2918{
style=filled;
color=gray75;
5229[label="193.121.96.224;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8656[label="193.121.96.224;3pkt 3fpkt", shape=invtriangle, color=brown];
10787[label="193.121.96.224;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2918[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.121.96.224:0, 219.223.212.8:0}[33.3333%]&lt;BR/&gt;{193.121.96.224:3647, 219.223.212.160:445}[33.3333%]&lt;BR/&gt;{193.121.96.224:0, 219.223.212.160:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (66.6667%)&lt;BR/&gt; 3647: (16.6667%)&lt;BR/&gt; 445: (16.6667%)&gt;];
}
5229--8656[label="1;3pkt 3fpkt"];
5229--10787[label="1;3pkt 3fpkt"];
8656--10787[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.212.160" src_ip="193.121.96.224"/>
      <filter dst_ip="219.223.212.160" dst_port="445" src_ip="193.121.96.224" src_port="3647"/>
      <filter dst_ip="219.223.212.8" src_ip="193.121.96.224"/>
    </slice>
    <from sec="1083733496" usec="0"/>
    <to sec="1083733989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.19.130.224"/>
    </slice>
    <from sec="1083733682" usec="0"/>
    <to sec="1083733747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2920{
style=filled;
color=gray75;
5234[label="202.81.144.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8660[label="202.81.144.224;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2920[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.81.144.224:6881, 168.127.113.129:2710}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2710: (50%)&gt;];
}
5234--8660[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2710" src_ip="202.81.144.224" src_port="6881"/>
    </slice>
    <from sec="1083733560" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.18.193.224"/>
    </slice>
    <from sec="1083734068" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.101.197.224"/>
    </slice>
    <from sec="1083733231" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2923{
style=filled;
color=gray75;
5241[label="212.99.1.225;94pkt 94fpkt", shape=pentagon, color=darkviolet];
8666[label="212.99.1.225;94pkt 94fpkt", shape=invtriangle, color=brown];
10793[label="212.99.1.225;93pkt 93fpkt", shape=invhouse, color=bisque];
stat2923[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.99.1.225:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4979: (0.533808%)&lt;BR/&gt; 4868: (0.533808%)&lt;BR/&gt; 4829: (0.533808%)&lt;BR/&gt; 4793: (0.533808%)&gt;];
}
5241--8666[label="1;94pkt 94fpkt"];
5241--10793[label="1;93pkt 93fpkt"];
8666--10793[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="212.99.1.225"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.107.57.225"/>
    </slice>
    <from sec="1083734010" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2925{
style=filled;
color=gray75;
5246[label="53.133.70.225;422pkt 422fpkt", shape=pentagon, color=darkviolet];
8671[label="53.133.70.225;421pkt 421fpkt", shape=invtriangle, color=brown];
10797[label="53.133.70.225;421pkt 421fpkt", shape=invhouse, color=bisque];
stat2925[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.133.70.225:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4480: (0.237342%)&lt;BR/&gt; 3958: (0.237342%)&lt;BR/&gt; 3839: (0.237342%)&lt;BR/&gt; 3600: (0.237342%)&gt;];
}
5246--8671[label="1;421pkt 421fpkt"];
5246--10797[label="1;421pkt 421fpkt"];
8671--10797[label="1;421pkt 421fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="53.133.70.225"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.57.108.225"/>
    </slice>
    <from sec="1083733870" usec="0"/>
    <to sec="1083733973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2927{
style=filled;
color=gray75;
5253[label="211.108.142.225;220pkt 220fpkt", shape=pentagon, color=darkviolet];
8675[label="211.108.142.225;220pkt 220fpkt", shape=invtriangle, color=brown];
10800[label="211.108.142.225;220pkt 220fpkt", shape=invhouse, color=bisque];
stat2927[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.108.142.225:1064, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1064: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5253--8675[label="1;220pkt 220fpkt"];
5253--10800[label="1;220pkt 220fpkt"];
8675--10800[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.108.142.225" src_port="1064"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2928{
style=filled;
color=gray75;
5256[label="196.131.168.225;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8676[label="196.131.168.225;7pkt 7fpkt", shape=invtriangle, color=brown];
10801[label="196.131.168.225;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2928[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.131.168.225:80, 168.127.16.223:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3670: (7.5%)&lt;BR/&gt; 3662: (7.5%)&lt;BR/&gt; 3653: (7.5%)&lt;BR/&gt; 3648: (7.5%)&gt;];
}
5256--8676[label="1;7pkt 7fpkt"];
5256--10801[label="1;6pkt 6fpkt"];
8676--10801[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.16.223" src_ip="196.131.168.225" src_port="80"/>
    </slice>
    <from sec="1083733642" usec="0"/>
    <to sec="1083733766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.182.171.225"/>
    </slice>
    <from sec="1083733327" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2930{
style=filled;
color=gray75;
5258[label="155.148.197.225;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8678[label="155.148.197.225;8pkt 8fpkt", shape=invtriangle, color=brown];
stat2930[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.197.225:*, 213.101.106.210:80}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 4721: (5.88235%)&lt;BR/&gt; 4718: (5.88235%)&lt;BR/&gt; 4716: (5.88235%)&lt;BR/&gt; 4714: (5.88235%)&gt;];
}
5258--8678[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.106.210" dst_port="80" src_ip="155.148.197.225"/>
    </slice>
    <from sec="1083733483" usec="0"/>
    <to sec="1083733677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2931{
style=filled;
color=gray75;
5259[label="46.71.204.225;52pkt 52fpkt", shape=pentagon, color=darkviolet];
8679[label="46.71.204.225;51pkt 51fpkt", shape=invtriangle, color=brown];
10802[label="46.71.204.225;51pkt 51fpkt", shape=invhouse, color=bisque];
stat2931[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.204.225:80, 209.29.138.126:*}[50%]&lt;BR/&gt;{46.71.204.225:80, 209.29.138.127:*}[42.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36278: (0.974026%)&lt;BR/&gt; 30268: (0.974026%)&lt;BR/&gt; 27024: (0.974026%)&lt;BR/&gt; 4930: (0.974026%)&gt;];
}
5259--8679[label="1;51pkt 51fpkt"];
5259--10802[label="1;51pkt 51fpkt"];
8679--10802[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="46.71.204.225" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.71.204.225" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.239.16.226"/>
    </slice>
    <from sec="1083733273" usec="0"/>
    <to sec="1083733502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2933{
style=filled;
color=gray75;
5266[label="47.104.30.226;63pkt 63fpkt", shape=pentagon, color=darkviolet];
8683[label="47.104.30.226;63pkt 63fpkt", shape=invtriangle, color=brown];
stat2933[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.104.30.226:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4957: (0.793651%)&lt;BR/&gt; 4916: (0.793651%)&lt;BR/&gt; 4909: (0.793651%)&lt;BR/&gt; 4855: (0.793651%)&gt;];
}
5266--8683[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="47.104.30.226"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2934{
style=filled;
color=gray75;
5271[label="209.70.64.226;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8686[label="209.70.64.226;20pkt 20fpkt", shape=invtriangle, color=brown];
10806[label="209.70.64.226;20pkt 20fpkt", shape=invhouse, color=bisque];
stat2934[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.70.64.226:179, 209.70.108.191:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 179: (50%)&lt;BR/&gt; 40408: (2.45902%)&lt;BR/&gt; 40404: (2.45902%)&lt;BR/&gt; 40403: (2.45902%)&lt;BR/&gt; 40402: (2.45902%)&gt;];
}
5271--8686[label="1;20pkt 20fpkt"];
5271--10806[label="1;20pkt 20fpkt"];
8686--10806[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="209.70.108.191" src_ip="209.70.64.226" src_port="179"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.86.66.226"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.167.106.226"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2937{
style=filled;
color=gray75;
5275[label="155.160.121.226;186pkt 186fpkt", shape=pentagon, color=darkviolet];
8690[label="155.160.121.226;185pkt 185fpkt", shape=invtriangle, color=brown];
stat2937[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.160.121.226:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5275--8690[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter src_ip="155.160.121.226"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.71.206.226"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2939{
style=filled;
color=gray75;
5288[label="210.126.12.227;67pkt 67fpkt", shape=pentagon, color=darkviolet];
8697[label="210.126.12.227;67pkt 67fpkt", shape=invtriangle, color=brown];
stat2939[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.126.12.227:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 1175: (1.49254%)&lt;BR/&gt; 4971: (0.746269%)&lt;BR/&gt; 4863: (0.746269%)&lt;BR/&gt; 4861: (0.746269%)&gt;];
}
5288--8697[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="210.126.12.227"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.2.66.227"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.14.122.227"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2942{
style=filled;
color=gray75;
5296[label="45.172.196.227;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8700[label="45.172.196.227;5pkt 5fpkt", shape=invtriangle, color=brown];
10810[label="45.172.196.227;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2942[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.172.196.227:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64885: (8.82353%)&lt;BR/&gt; 49180: (8.82353%)&lt;BR/&gt; 33008: (8.82353%)&lt;BR/&gt; 4564: (8.82353%)&gt;];
}
5296--8700[label="1;5pkt 5fpkt"];
5296--10810[label="1;6pkt 6fpkt"];
8700--10810[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="45.172.196.227" src_port="80"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083734051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.101.197.227"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.5.202.227"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.28.76.228"/>
    </slice>
    <from sec="1083733478" usec="0"/>
    <to sec="1083733613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.51.92.228"/>
    </slice>
    <from sec="1083733865" usec="0"/>
    <to sec="1083733962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2947{
style=filled;
color=gray75;
5306[label="198.143.105.228;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8707[label="198.143.105.228;29pkt 29fpkt", shape=invtriangle, color=brown];
10814[label="198.143.105.228;30pkt 30fpkt", shape=invhouse, color=bisque];
stat2947[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.143.105.228:80, 209.29.138.10:*}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58712: (1.68539%)&lt;BR/&gt; 58401: (1.68539%)&lt;BR/&gt; 57878: (1.68539%)&lt;BR/&gt; 57844: (1.68539%)&gt;];
}
5306--8707[label="1;29pkt 29fpkt"];
5306--10814[label="1;30pkt 30fpkt"];
8707--10814[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="198.143.105.228" src_port="80"/>
    </slice>
    <from sec="1083733253" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2948{
style=filled;
color=gray75;
5313[label="213.101.192.228;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8713[label="213.101.192.228;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2948[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.192.228:1863, 141.22.120.20:3172}[33.3333%]&lt;BR/&gt;{213.101.192.228:1863, 168.127.115.30:2068}[33.3333%]&lt;BR/&gt;{213.101.192.228:1863, 141.22.188.62:3031}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3172: (20%)&lt;BR/&gt; 2068: (20%)&lt;BR/&gt; 3031: (10%)&gt;];
}
5313--8713[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.188.62" dst_port="3031" src_ip="213.101.192.228" src_port="1863"/>
      <filter dst_ip="168.127.115.30" dst_port="2068" src_ip="213.101.192.228" src_port="1863"/>
      <filter dst_ip="141.22.120.20" dst_port="3172" src_ip="213.101.192.228" src_port="1863"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,053,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2949{
style=filled;
color=gray75;
613[label="44.140.77.208;s;73pkt 73fpkt", shape=diamond, color=yellow];
643[label="141.22.67.85;d;14pkt 14fpkt", shape=diamond, color=yellow];
713[label="44.140.77.162;s;81pkt 81fpkt", shape=diamond, color=yellow];
726[label="44.140.77.218;s;49pkt 49fpkt", shape=diamond, color=yellow];
787[label="44.140.77.128;s;71pkt 71fpkt", shape=diamond, color=yellow];
893[label="44.140.77.1;s;71pkt 71fpkt", shape=diamond, color=yellow];
1023[label="44.140.77.1;85pkt 85fpkt", shape=pentagon, color=darkviolet];
1383[label="44.140.77.17;79pkt 79fpkt", shape=pentagon, color=darkviolet];
2212[label="44.140.77.55;90pkt 90fpkt", shape=pentagon, color=darkviolet];
3575[label="44.140.77.128;79pkt 79fpkt", shape=pentagon, color=darkviolet];
4204[label="44.140.77.162;86pkt 86fpkt", shape=pentagon, color=darkviolet];
4458[label="44.140.77.176;83pkt 83fpkt", shape=pentagon, color=darkviolet];
4650[label="44.140.77.187;72pkt 72fpkt", shape=pentagon, color=darkviolet];
4984[label="44.140.77.208;80pkt 80fpkt", shape=pentagon, color=darkviolet];
5130[label="44.140.77.218;78pkt 78fpkt", shape=pentagon, color=darkviolet];
5321[label="46.86.70.229;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5713[label="44.140.77.1;85pkt 85fpkt", shape=invtriangle, color=brown];
5974[label="44.140.77.17;80pkt 80fpkt", shape=invtriangle, color=brown];
6534[label="44.140.77.55;89pkt 89fpkt", shape=invtriangle, color=brown];
7501[label="44.140.77.128;78pkt 78fpkt", shape=invtriangle, color=brown];
7944[label="44.140.77.162;86pkt 86fpkt", shape=invtriangle, color=brown];
8719[label="46.86.70.229;8pkt 8fpkt", shape=invtriangle, color=brown];
8994[label="44.140.77.1;85pkt 85fpkt", shape=invhouse, color=bisque];
10076[label="44.140.77.128;79pkt 79fpkt", shape=invhouse, color=bisque];
10344[label="44.140.77.162;86pkt 86fpkt", shape=invhouse, color=bisque];
10824[label="46.86.70.229;7pkt 7fpkt", shape=invhouse, color=bisque];
stat2949[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[88.8291%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5567%)&lt;BR/&gt; 53: (5.07856%)&lt;BR/&gt; 54990: (0.224467%)&lt;BR/&gt; 54052: (0.196409%)&lt;BR/&gt; 8080: (0.196409%)&gt;];
}
613--643[label="0.0714286;1pkt 1fpkt"];
613--900[label="0.0188679;1pkt 1fpkt"];
613--982[label="0.0547945;4pkt 4fpkt"];
613--4984[label="1;73pkt 73fpkt"];
643--713[label="0.142857;2pkt 2fpkt"];
643--726[label="0.0714286;1pkt 1fpkt"];
643--787[label="0.0714286;1pkt 1fpkt"];
643--893[label="0.0714286;1pkt 1fpkt"];
643--982[label="0.285714;4pkt 4fpkt"];
643--1023[label="0.0714286;1pkt 1fpkt"];
643--1383[label="0.0714286;1pkt 1fpkt"];
643--2212[label="0.142857;2pkt 2fpkt"];
643--3575[label="0.0714286;1pkt 1fpkt"];
643--4204[label="0.142857;2pkt 2fpkt"];
643--4458[label="0.0714286;1pkt 1fpkt"];
643--4650[label="0.0714286;1pkt 1fpkt"];
643--4984[label="0.0714286;1pkt 1fpkt"];
643--5130[label="0.0714286;1pkt 1fpkt"];
643--5321[label="0.125;1pkt 1fpkt"];
643--5713[label="0.0714286;1pkt 1fpkt"];
643--5974[label="0.0714286;1pkt 1fpkt"];
643--6534[label="0.142857;2pkt 2fpkt"];
643--7501[label="0.0714286;1pkt 1fpkt"];
643--7944[label="0.142857;2pkt 2fpkt"];
643--8719[label="0.125;1pkt 1fpkt"];
643--8994[label="0.0714286;1pkt 1fpkt"];
643--10076[label="0.0714286;1pkt 1fpkt"];
643--10344[label="0.142857;2pkt 2fpkt"];
643--10824[label="0.142857;1pkt 1fpkt"];
713--982[label="0.0740741;6pkt 6fpkt"];
713--4204[label="1;81pkt 81fpkt"];
713--7944[label="1;81pkt 81fpkt"];
713--10344[label="1;81pkt 81fpkt"];
726--982[label="0.0816327;4pkt 4fpkt"];
726--5130[label="1;49pkt 49fpkt"];
787--982[label="0.0140845;1pkt 1fpkt"];
787--3575[label="1;71pkt 71fpkt"];
787--7501[label="0.985915;70pkt 70fpkt"];
787--10076[label="1;71pkt 71fpkt"];
893--982[label="0.0422535;3pkt 3fpkt"];
893--1023[label="1;71pkt 71fpkt"];
893--5713[label="1;71pkt 71fpkt"];
893--8994[label="1;71pkt 71fpkt"];
1023--5713[label="1;85pkt 85fpkt"];
1023--8994[label="1;85pkt 85fpkt"];
1383--5974[label="1;79pkt 79fpkt"];
2212--6534[label="1;89pkt 89fpkt"];
3575--7501[label="1;78pkt 78fpkt"];
3575--10076[label="1;79pkt 79fpkt"];
4204--7944[label="1;86pkt 86fpkt"];
4204--10344[label="1;86pkt 86fpkt"];
5321--8719[label="1;8pkt 8fpkt"];
5321--10824[label="1;7pkt 7fpkt"];
5713--8994[label="1;85pkt 85fpkt"];
7501--10076[label="1;78pkt 78fpkt"];
7944--10344[label="1;86pkt 86fpkt"];
8719--10824[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2950{
style=filled;
color=gray75;
5329[label="46.71.204.229;29pkt 29fpkt", shape=pentagon, color=darkviolet];
8723[label="46.71.204.229;29pkt 29fpkt", shape=invtriangle, color=brown];
stat2950[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.204.229:80, 209.29.138.127:*}[51.7241%]&lt;BR/&gt;{46.71.204.229:80, 209.29.138.126:*}[41.3793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29295: (1.72414%)&lt;BR/&gt; 27141: (1.72414%)&lt;BR/&gt; 4896: (1.72414%)&lt;BR/&gt; 4763: (1.72414%)&gt;];
}
5329--8723[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.71.204.229" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.71.204.229" src_port="80"/>
    </slice>
    <from sec="1083733257" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2951{
style=filled;
color=gray75;
5332[label="109.195.36.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8725[label="109.195.36.230;1pkt 1fpkt", shape=invtriangle, color=brown];
10826[label="109.195.36.230;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2951[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.195.36.230:3998, 168.16.157.239:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3998: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
5332--8725[label="1;1pkt 1fpkt"];
5332--10826[label="1;1pkt 1fpkt"];
8725--10826[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.16.157.239" dst_port="445" src_ip="109.195.36.230" src_port="3998"/>
    </slice>
    <from sec="1083733360" usec="0"/>
    <to sec="1083733546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2952{
style=filled;
color=gray75;
5333[label="46.45.50.230;76pkt 76fpkt", shape=pentagon, color=darkviolet];
8726[label="46.45.50.230;76pkt 76fpkt", shape=invtriangle, color=brown];
stat2952[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.45.50.230:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3651: (1.31579%)&lt;BR/&gt; 1340: (1.31579%)&lt;BR/&gt; 4806: (0.657895%)&lt;BR/&gt; 4786: (0.657895%)&gt;];
}
5333--8726[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="46.45.50.230"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.158.81.230"/>
    </slice>
    <from sec="1083733745" usec="0"/>
    <to sec="1083733982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2954{
style=filled;
color=gray75;
578[label="208.96.50.11;s;69pkt 69fpkt", shape=diamond, color=yellow];
602[label="45.108.82.176;d;82pkt 82fpkt", shape=diamond, color=yellow];
648[label="52.65.135.84;d;4pkt 4fpkt", shape=diamond, color=yellow];
811[label="210.125.91.205;d;6pkt 6fpkt", shape=diamond, color=yellow];
1126[label="168.127.198.5;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1669[label="136.150.20.30;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5350[label="168.127.94.231;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5509[label="208.96.53.241;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5786[label="168.127.198.5;24pkt 24fpkt", shape=invtriangle, color=brown];
6160[label="136.150.20.30;41pkt 41fpkt", shape=invtriangle, color=brown];
8737[label="168.127.94.231;21pkt 21fpkt", shape=invtriangle, color=brown];
8852[label="208.96.53.241;32pkt 32fpkt", shape=invtriangle, color=brown];
9043[label="168.127.198.5;24pkt 24fpkt", shape=invhouse, color=bisque];
stat2954[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 45.108.82.176:*}[57.7114%]&lt;BR/&gt;{208.96.50.11:80, *:*}[27.8607%]&lt;BR/&gt;{136.150.20.30:80, *:*}[20.8955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7933%)&lt;BR/&gt; 0: (1.66271%)&lt;BR/&gt; 554: (0.712589%)&lt;BR/&gt; 60842: (0.475059%)&lt;BR/&gt; 56048: (0.475059%)&gt;];
}
578--602[label="0.202899;14pkt 14fpkt"];
578--648[label="1;4pkt 4fpkt"];
578--811[label="1;6pkt 6fpkt"];
602--1126[label="0.541667;13pkt 13fpkt"];
602--1669[label="0.317073;13pkt 13fpkt"];
602--4202[label="0.0121951;1pkt 1fpkt"];
602--5350[label="0.666667;14pkt 14fpkt"];
602--5509[label="0.4375;14pkt 14fpkt"];
602--5786[label="0.541667;13pkt 13fpkt"];
602--5916[label="0.0121951;1pkt 1fpkt"];
602--6160[label="0.317073;13pkt 13fpkt"];
602--8737[label="0.666667;14pkt 14fpkt"];
602--8852[label="0.4375;14pkt 14fpkt"];
602--9043[label="0.541667;13pkt 13fpkt"];
1126--5786[label="1;24pkt 24fpkt"];
1126--9043[label="1;24pkt 24fpkt"];
1669--6160[label="1;41pkt 41fpkt"];
5350--8737[label="1;21pkt 21fpkt"];
5509--8852[label="1;32pkt 32fpkt"];
5786--9043[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="208.96.50.11" src_port="80"/>
      <filter src_ip="136.150.20.30" src_port="80"/>
      <filter dst_ip="45.108.82.176" src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.239.118.231"/>
    </slice>
    <from sec="1083733469" usec="0"/>
    <to sec="1083733528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2956{
style=filled;
color=gray75;
5353[label="168.76.144.231;60pkt 60fpkt", shape=pentagon, color=darkviolet];
8739[label="168.76.144.231;60pkt 60fpkt", shape=invtriangle, color=brown];
stat2956[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.144.231:*, *:80}[25%]&lt;BR/&gt;{168.76.144.231:*, *:1433}[25%]&lt;BR/&gt;{168.76.144.231:*, *:2745}[25%]&lt;BR/&gt;{168.76.144.231:*, *:6129}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6129: (12.5%)&lt;BR/&gt; 2745: (12.5%)&lt;BR/&gt; 1433: (12.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 4654: (0.833333%)&gt;];
}
5353--8739[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="168.76.144.231"/>
      <filter dst_port="2745" src_ip="168.76.144.231"/>
      <filter dst_port="1433" src_ip="168.76.144.231"/>
      <filter dst_port="80" src_ip="168.76.144.231"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.177.234.231"/>
    </slice>
    <from sec="1083733641" usec="0"/>
    <to sec="1083733790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2958{
style=filled;
color=gray75;
5356[label="46.29.249.231;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8742[label="46.29.249.231;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2958[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.29.249.231:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4970: (7.14286%)&lt;BR/&gt; 4226: (7.14286%)&lt;BR/&gt; 3723: (7.14286%)&lt;BR/&gt; 3661: (7.14286%)&gt;];
}
5356--8742[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="46.29.249.231"/>
    </slice>
    <from sec="1083733386" usec="0"/>
    <to sec="1083733824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2959{
style=filled;
color=gray75;
5360[label="199.250.56.232;230pkt 230fpkt", shape=pentagon, color=darkviolet];
8746[label="199.250.56.232;230pkt 230fpkt", shape=invtriangle, color=brown];
stat2959[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.250.56.232:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5360--8746[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.250.56.232" src_port="1027"/>
    </slice>
    <from sec="1083733743" usec="0"/>
    <to sec="1083733756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.187.72.232"/>
    </slice>
    <from sec="1083733638" usec="0"/>
    <to sec="1083733734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2961{
style=filled;
color=gray75;
5363[label="211.139.96.232;71pkt 71fpkt", shape=pentagon, color=darkviolet];
8749[label="211.139.96.232;70pkt 70fpkt", shape=invtriangle, color=brown];
10838[label="211.139.96.232;71pkt 71fpkt", shape=invhouse, color=bisque];
stat2961[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.139.96.232:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4636: (1.41509%)&lt;BR/&gt; 4878: (0.707547%)&lt;BR/&gt; 4853: (0.707547%)&lt;BR/&gt; 4833: (0.707547%)&gt;];
}
5363--8749[label="1;70pkt 70fpkt"];
5363--10838[label="1;71pkt 71fpkt"];
8749--10838[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="211.139.96.232"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083734083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.185.172.232"/>
    </slice>
    <from sec="1083733790" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.155.192.232"/>
    </slice>
    <from sec="1083733824" usec="0"/>
    <to sec="1083733924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.205.193.232"/>
    </slice>
    <from sec="1083733558" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2965{
style=filled;
color=gray75;
5380[label="192.198.11.233;29pkt 29fpkt", shape=pentagon, color=darkviolet];
8761[label="192.198.11.233;28pkt 28fpkt", shape=invtriangle, color=brown];
10847[label="192.198.11.233;28pkt 28fpkt", shape=invhouse, color=bisque];
stat2965[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.198.11.233:80, 141.22.86.56:*}[44.8276%]&lt;BR/&gt;{192.198.11.233:80, 209.29.136.44:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65244: (1.76471%)&lt;BR/&gt; 65236: (1.76471%)&lt;BR/&gt; 65228: (1.76471%)&lt;BR/&gt; 65220: (1.76471%)&gt;];
}
5380--8761[label="1;28pkt 28fpkt"];
5380--10847[label="1;28pkt 28fpkt"];
8761--10847[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.86.56" src_ip="192.198.11.233" src_port="80"/>
      <filter dst_ip="209.29.136.44" src_ip="192.198.11.233" src_port="80"/>
    </slice>
    <from sec="1083733267" usec="0"/>
    <to sec="1083733993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.85.23.233"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.155.25.233"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083733547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2968{
style=filled;
color=gray75;
5384[label="202.24.33.233;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8765[label="202.24.33.233;29pkt 29fpkt", shape=invtriangle, color=brown];
10850[label="202.24.33.233;30pkt 30fpkt", shape=invhouse, color=bisque];
stat2968[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.24.33.233:80, 209.29.138.127:*}[46.6667%]&lt;BR/&gt;{202.24.33.233:80, 209.29.138.126:*}[36.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30118: (1.68539%)&lt;BR/&gt; 28496: (1.68539%)&lt;BR/&gt; 26488: (1.68539%)&lt;BR/&gt; 26385: (1.68539%)&gt;];
}
5384--8765[label="1;29pkt 29fpkt"];
5384--10850[label="1;30pkt 30fpkt"];
8765--10850[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="202.24.33.233" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="202.24.33.233" src_port="80"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2969{
style=filled;
color=gray75;
5385[label="136.150.40.233;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8766[label="136.150.40.233;6pkt 6fpkt", shape=invtriangle, color=brown];
10851[label="136.150.40.233;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2969[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.40.233:*, 213.101.100.91:80}[33.3333%]&lt;BR/&gt;{136.150.40.233:*, 213.101.59.6:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.1765%)&lt;BR/&gt; 1133: (8.82353%)&lt;BR/&gt; 1130: (8.82353%)&lt;BR/&gt; 1129: (8.82353%)&lt;BR/&gt; 1128: (8.82353%)&gt;];
}
5385--8766[label="1;6pkt 6fpkt"];
5385--10851[label="1;5pkt 5fpkt"];
8766--10851[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.59.6" dst_port="80" src_ip="136.150.40.233"/>
      <filter dst_ip="213.101.100.91" dst_port="80" src_ip="136.150.40.233"/>
    </slice>
    <from sec="1083733609" usec="0"/>
    <to sec="1083733621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2970{
style=filled;
color=gray75;
5386[label="145.130.45.233;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8767[label="145.130.45.233;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2970[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.130.45.233:1446, 209.29.136.89:16072}[25%]&lt;BR/&gt;{145.130.45.233:5872, 209.29.136.89:2591}[25%]&lt;BR/&gt;{145.130.45.233:5872, 209.29.136.89:2775}[25%]&lt;BR/&gt;{145.130.45.233:5872, 209.29.136.89:4541}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5872: (35.7143%)&lt;BR/&gt; 16072: (14.2857%)&lt;BR/&gt; 4541: (14.2857%)&lt;BR/&gt; 2775: (14.2857%)&lt;BR/&gt; 1446: (14.2857%)&gt;];
}
5386--8767[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="4541" src_ip="145.130.45.233" src_port="5872"/>
      <filter dst_ip="209.29.136.89" dst_port="2775" src_ip="145.130.45.233" src_port="5872"/>
      <filter dst_ip="209.29.136.89" dst_port="2591" src_ip="145.130.45.233" src_port="5872"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="145.130.45.233" src_port="1446"/>
    </slice>
    <from sec="1083733301" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2971{
style=filled;
color=gray75;
5389[label="173.138.139.233;36pkt 36fpkt", shape=pentagon, color=darkviolet];
8769[label="173.138.139.233;35pkt 35fpkt", shape=invtriangle, color=brown];
stat2971[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.139.233:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5389--8769[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.139.233"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.18.146.233"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2973{
style=filled;
color=gray75;
5397[label="41.167.8.234;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8775[label="41.167.8.234;4pkt 4fpkt", shape=invtriangle, color=brown];
10854[label="41.167.8.234;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2973[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.167.8.234:1669, 136.151.166.10:445}[20%]&lt;BR/&gt;{41.167.8.234:1904, 141.145.114.92:445}[20%]&lt;BR/&gt;{41.167.8.234:2078, 141.145.186.146:445}[20%]&lt;BR/&gt;{41.167.8.234:1591, 136.151.235.67:80}[20%]&lt;BR/&gt;{41.167.8.234:4505, 136.151.235.67:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (34.6154%)&lt;BR/&gt; 80: (15.3846%)&lt;BR/&gt; 4505: (11.5385%)&lt;BR/&gt; 2078: (11.5385%)&lt;BR/&gt; 1904: (11.5385%)&gt;];
}
5397--8775[label="1;4pkt 4fpkt"];
5397--10854[label="1;4pkt 4fpkt"];
8775--10854[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.167.8.234" src_port="4505"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.167.8.234" src_port="1591"/>
      <filter dst_ip="141.145.186.146" dst_port="445" src_ip="41.167.8.234" src_port="2078"/>
      <filter dst_ip="141.145.114.92" dst_port="445" src_ip="41.167.8.234" src_port="1904"/>
      <filter dst_ip="136.151.166.10" dst_port="445" src_ip="41.167.8.234" src_port="1669"/>
    </slice>
    <from sec="1083733301" usec="0"/>
    <to sec="1083733996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2974{
style=filled;
color=gray75;
5398[label="192.198.11.234;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8776[label="192.198.11.234;9pkt 9fpkt", shape=invtriangle, color=brown];
10855[label="192.198.11.234;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2974[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.198.11.234:80, 136.151.109.0:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4256: (5.76923%)&lt;BR/&gt; 4254: (5.76923%)&lt;BR/&gt; 4253: (5.76923%)&lt;BR/&gt; 4251: (5.76923%)&gt;];
}
5398--8776[label="1;9pkt 9fpkt"];
5398--10855[label="1;8pkt 8fpkt"];
8776--10855[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.109.0" src_ip="192.198.11.234" src_port="80"/>
    </slice>
    <from sec="1083733406" usec="0"/>
    <to sec="1083733851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.221.105.234"/>
    </slice>
    <from sec="1083733560" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.22.116.234"/>
    </slice>
    <from sec="1083733280" usec="0"/>
    <to sec="1083733508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.112.254.234"/>
    </slice>
    <from sec="1083733841" usec="0"/>
    <to sec="1083733923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.102.96.235"/>
    </slice>
    <from sec="1083733282" usec="0"/>
    <to sec="1083733734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2979{
style=filled;
color=gray75;
5425[label="41.16.240.235;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8790[label="41.16.240.235;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2979[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.16.240.235:1341, 136.151.235.67:80}[50%]&lt;BR/&gt;{41.16.240.235:3925, 136.151.47.159:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3925: (33.3333%)&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 1341: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
5425--8790[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.47.159" dst_port="445" src_ip="41.16.240.235" src_port="3925"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.16.240.235" src_port="1341"/>
    </slice>
    <from sec="1083733327" usec="0"/>
    <to sec="1083733680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2980{
style=filled;
color=gray75;
5426[label="152.225.253.235;101pkt 101fpkt", shape=pentagon, color=darkviolet];
8791[label="152.225.253.235;100pkt 100fpkt", shape=invtriangle, color=brown];
10867[label="152.225.253.235;100pkt 100fpkt", shape=invhouse, color=bisque];
stat2980[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.225.253.235:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3785: (0.996678%)&lt;BR/&gt; 4853: (0.498339%)&lt;BR/&gt; 4753: (0.498339%)&lt;BR/&gt; 4715: (0.498339%)&gt;];
}
5426--8791[label="1;100pkt 100fpkt"];
5426--10867[label="1;100pkt 100fpkt"];
8791--10867[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="152.225.253.235"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.177.11.236"/>
    </slice>
    <from sec="1083733235" usec="0"/>
    <to sec="1083733381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.71.50.236"/>
    </slice>
    <from sec="1083733966" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.163.56.236"/>
    </slice>
    <from sec="1083733556" usec="0"/>
    <to sec="1083733642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2984{
style=filled;
color=gray75;
5442[label="46.71.204.236;63pkt 63fpkt", shape=pentagon, color=darkviolet];
8801[label="46.71.204.236;63pkt 63fpkt", shape=invtriangle, color=brown];
10871[label="46.71.204.236;62pkt 62fpkt", shape=invhouse, color=bisque];
stat2984[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.204.236:80, 209.29.138.127:*}[49.2063%]&lt;BR/&gt;{46.71.204.236:80, 209.29.138.126:*}[47.619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36277: (0.797872%)&lt;BR/&gt; 4929: (0.797872%)&lt;BR/&gt; 4782: (0.797872%)&lt;BR/&gt; 4714: (0.797872%)&gt;];
}
5442--8801[label="1;63pkt 63fpkt"];
5442--10871[label="1;62pkt 62fpkt"];
8801--10871[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.71.204.236" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.71.204.236" src_port="80"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.107.10.237"/>
    </slice>
    <from sec="1083734007" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2986{
style=filled;
color=gray75;
5445[label="202.24.33.237;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8803[label="202.24.33.237;25pkt 25fpkt", shape=invtriangle, color=brown];
10873[label="202.24.33.237;24pkt 24fpkt", shape=invhouse, color=bisque];
stat2986[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.24.33.237:80, 209.29.138.126:*}[60%]&lt;BR/&gt;{202.24.33.237:80, 209.29.138.127:*}[32%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26470: (2.02703%)&lt;BR/&gt; 26372: (2.02703%)&lt;BR/&gt; 4820: (2.02703%)&lt;BR/&gt; 4450: (2.02703%)&gt;];
}
5445--8803[label="1;25pkt 25fpkt"];
5445--10873[label="1;24pkt 24fpkt"];
8803--10873[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="202.24.33.237" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="202.24.33.237" src_port="80"/>
    </slice>
    <from sec="1083733298" usec="0"/>
    <to sec="1083734059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2987{
style=filled;
color=gray75;
5447[label="44.143.53.237;50pkt 50fpkt", shape=pentagon, color=darkviolet];
8805[label="44.143.53.237;50pkt 50fpkt", shape=invtriangle, color=brown];
10874[label="44.143.53.237;51pkt 51fpkt", shape=invhouse, color=bisque];
stat2987[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.143.53.237:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60987: (0.993377%)&lt;BR/&gt; 60958: (0.993377%)&lt;BR/&gt; 34040: (0.993377%)&lt;BR/&gt; 34019: (0.993377%)&gt;];
}
5447--8805[label="1;50pkt 50fpkt"];
5447--10874[label="1;50pkt 50fpkt"];
8805--10874[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="44.143.53.237" src_port="80"/>
    </slice>
    <from sec="1083734046" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.105.76.237"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.34.128.237"/>
    </slice>
    <from sec="1083733508" usec="0"/>
    <to sec="1083733609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.225.142.237"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.126.216.237"/>
    </slice>
    <from sec="1083733590" usec="0"/>
    <to sec="1083733931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2992{
style=filled;
color=gray75;
5463[label="93.146.218.237;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8813[label="93.146.218.237;1pkt 1fpkt", shape=invtriangle, color=brown];
10879[label="93.146.218.237;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2992[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.146.218.237:1042, 136.151.235.67:80}[50%]&lt;BR/&gt;{93.146.218.237:1194, 136.151.235.67:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1194: (37.5%)&lt;BR/&gt; 1042: (12.5%)&gt;];
}
5463--8813[label="1;1pkt 1fpkt"];
5463--10879[label="1;1pkt 1fpkt"];
8813--10879[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.146.218.237" src_port="1194"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.146.218.237" src_port="1042"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083734071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.138.221.237"/>
    </slice>
    <from sec="1083733953" usec="0"/>
    <to sec="1083734020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2994{
style=filled;
color=gray75;
5468[label="147.226.250.237;111pkt 111fpkt", shape=pentagon, color=darkviolet];
8818[label="147.226.250.237;111pkt 111fpkt", shape=invtriangle, color=brown];
10882[label="147.226.250.237;111pkt 111fpkt", shape=invhouse, color=bisque];
stat2994[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.226.250.237:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60974: (0.45045%)&lt;BR/&gt; 60955: (0.45045%)&lt;BR/&gt; 60921: (0.45045%)&lt;BR/&gt; 60889: (0.45045%)&gt;];
}
5468--8818[label="1;111pkt 111fpkt"];
5468--10882[label="1;111pkt 111fpkt"];
8818--10882[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="147.226.250.237" src_port="80"/>
    </slice>
    <from sec="1083733853" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2995{
style=filled;
color=gray75;
5469[label="209.198.0.238;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8819[label="209.198.0.238;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2995[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.198.0.238:80, 136.151.94.71:50070}[33.3333%]&lt;BR/&gt;{209.198.0.238:80, 136.151.94.71:50117}[33.3333%]&lt;BR/&gt;{209.198.0.238:80, 136.151.94.71:50127}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50127: (16.6667%)&lt;BR/&gt; 50117: (16.6667%)&lt;BR/&gt; 50070: (16.6667%)&gt;];
}
5469--8819[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.94.71" dst_port="50127" src_ip="209.198.0.238" src_port="80"/>
      <filter dst_ip="136.151.94.71" dst_port="50117" src_ip="209.198.0.238" src_port="80"/>
      <filter dst_ip="136.151.94.71" dst_port="50070" src_ip="209.198.0.238" src_port="80"/>
    </slice>
    <from sec="1083733833" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2996{
style=filled;
color=gray75;
5470[label="136.151.36.238;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8820[label="136.151.36.238;15pkt 15fpkt", shape=invtriangle, color=brown];
10883[label="136.151.36.238;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2996[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.36.238:*, 213.101.101.66:80}[60%]&lt;BR/&gt;{136.151.36.238:*, 213.101.101.64:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5909%)&lt;BR/&gt; 0: (6.81818%)&lt;BR/&gt; 64472: (3.40909%)&lt;BR/&gt; 64471: (3.40909%)&lt;BR/&gt; 64470: (3.40909%)&gt;];
}
5470--8820[label="1;15pkt 15fpkt"];
5470--10883[label="1;14pkt 14fpkt"];
8820--10883[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.101.66" dst_port="80" src_ip="136.151.36.238"/>
      <filter dst_ip="213.101.101.64" dst_port="80" src_ip="136.151.36.238"/>
    </slice>
    <from sec="1083733285" usec="0"/>
    <to sec="1083733705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2997{
style=filled;
color=gray75;
5471[label="213.101.59.238;31pkt 31fpkt", shape=pentagon, color=darkviolet];
8821[label="213.101.59.238;30pkt 30fpkt", shape=invtriangle, color=brown];
10884[label="213.101.59.238;30pkt 30fpkt", shape=invhouse, color=bisque];
stat2997[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.59.238:80, 209.18.117.207:*}[45.1613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.7582%)&lt;BR/&gt; 443: (8.24176%)&lt;BR/&gt; 1083: (3.2967%)&lt;BR/&gt; 31698: (1.64835%)&lt;BR/&gt; 31697: (1.64835%)&gt;];
}
5471--8821[label="1;30pkt 30fpkt"];
5471--10884[label="1;30pkt 30fpkt"];
8821--10884[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="209.18.117.207" src_ip="213.101.59.238" src_port="80"/>
    </slice>
    <from sec="1083733596" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2998{
style=filled;
color=gray75;
5477[label="45.172.209.238;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8826[label="45.172.209.238;13pkt 13fpkt", shape=invtriangle, color=brown];
10887[label="45.172.209.238;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2998[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.172.209.238:80, 155.148.182.202:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31084: (3.75%)&lt;BR/&gt; 31083: (3.75%)&lt;BR/&gt; 31081: (3.75%)&lt;BR/&gt; 31064: (3.75%)&gt;];
}
5477--8826[label="1;13pkt 13fpkt"];
5477--10887[label="1;13pkt 13fpkt"];
8826--10887[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" src_ip="45.172.209.238" src_port="80"/>
    </slice>
    <from sec="1083733707" usec="0"/>
    <to sec="1083733769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.59.211.238"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083733571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.39.213.238"/>
    </slice>
    <from sec="1083733281" usec="0"/>
    <to sec="1083733521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3001{
style=filled;
color=gray75;
5481[label="44.58.31.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8830[label="44.58.31.239;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3001[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.58.31.239:6884, 208.96.50.84:58586}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58586: (50%)&lt;BR/&gt; 6884: (50%)&gt;];
}
5481--8830[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="58586" src_ip="44.58.31.239" src_port="6884"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3002{
style=filled;
color=gray75;
5482[label="93.160.43.239;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8831[label="93.160.43.239;14pkt 14fpkt", shape=invtriangle, color=brown];
10890[label="93.160.43.239;14pkt 14fpkt", shape=invhouse, color=bisque];
stat3002[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.160.43.239:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55811: (3.57143%)&lt;BR/&gt; 4436: (3.57143%)&lt;BR/&gt; 4034: (3.57143%)&lt;BR/&gt; 3905: (3.57143%)&gt;];
}
5482--8831[label="1;14pkt 14fpkt"];
5482--10890[label="1;14pkt 14fpkt"];
8831--10890[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="93.160.43.239"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.2.178.239"/>
    </slice>
    <from sec="1083733553" usec="0"/>
    <to sec="1083733682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.178.240.239"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.212.245.239"/>
    </slice>
    <from sec="1083733782" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3006{
style=filled;
color=gray75;
5493[label="136.151.252.239;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8839[label="136.151.252.239;30pkt 30fpkt", shape=invtriangle, color=brown];
stat3006[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.252.239:25, *:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 43390: (1.66667%)&lt;BR/&gt; 4865: (1.66667%)&lt;BR/&gt; 4436: (1.66667%)&lt;BR/&gt; 4272: (1.66667%)&gt;];
}
5493--8839[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.252.239" src_port="25"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3007{
style=filled;
color=gray75;
5496[label="168.127.13.240;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8842[label="168.127.13.240;3pkt 3fpkt", shape=invtriangle, color=brown];
stat3007[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.127.13.240:2138, 213.101.36.12:80}[25%]&lt;BR/&gt;{168.127.13.240:2134, 213.101.100.90:80}[25%]&lt;BR/&gt;{168.127.13.240:2136, 213.101.59.6:80}[25%]&lt;BR/&gt;{168.127.13.240:2140, 213.101.59.6:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 2140: (14.2857%)&lt;BR/&gt; 2138: (14.2857%)&lt;BR/&gt; 2134: (14.2857%)&lt;BR/&gt; 443: (14.2857%)&gt;];
}
5496--8842[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.59.6" dst_port="443" src_ip="168.127.13.240" src_port="2140"/>
      <filter dst_ip="213.101.59.6" dst_port="80" src_ip="168.127.13.240" src_port="2136"/>
      <filter dst_ip="213.101.100.90" dst_port="80" src_ip="168.127.13.240" src_port="2134"/>
      <filter dst_ip="213.101.36.12" dst_port="80" src_ip="168.127.13.240" src_port="2138"/>
    </slice>
    <from sec="1083733658" usec="0"/>
    <to sec="1083733900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3008{
style=filled;
color=gray75;
5498[label="109.25.109.240;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8844[label="109.25.109.240;3pkt 3fpkt", shape=invtriangle, color=brown];
10898[label="109.25.109.240;4pkt 4fpkt", shape=invhouse, color=bisque];
stat3008[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.25.109.240:2474, 209.29.136.89:16072}[25%]&lt;BR/&gt;{109.25.109.240:2567, 209.29.136.89:16072}[25%]&lt;BR/&gt;{109.25.109.240:4700, 209.29.136.89:2108}[25%]&lt;BR/&gt;{109.25.109.240:4700, 209.29.136.89:3235}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4700: (27.2727%)&lt;BR/&gt; 16072: (22.7273%)&lt;BR/&gt; 3235: (13.6364%)&lt;BR/&gt; 2567: (13.6364%)&lt;BR/&gt; 2108: (13.6364%)&gt;];
}
5498--8844[label="1;3pkt 3fpkt"];
5498--10898[label="1;4pkt 4fpkt"];
8844--10898[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3235" src_ip="109.25.109.240" src_port="4700"/>
      <filter dst_ip="209.29.136.89" dst_port="2108" src_ip="109.25.109.240" src_port="4700"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="109.25.109.240" src_port="2567"/>
      <filter dst_ip="209.29.136.89" dst_port="16072" src_ip="109.25.109.240" src_port="2474"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.10.41.241"/>
    </slice>
    <from sec="1083733550" usec="0"/>
    <to sec="1083733627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.148.69.241"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3011{
style=filled;
color=gray75;
5511[label="174.64.158.241;72pkt 72fpkt", shape=pentagon, color=darkviolet];
8855[label="174.64.158.241;72pkt 72fpkt", shape=invtriangle, color=brown];
10904[label="174.64.158.241;71pkt 71fpkt", shape=invhouse, color=bisque];
stat3011[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.64.158.241:80, 209.29.138.127:*}[65.2778%]&lt;BR/&gt;{174.64.158.241:80, 209.29.138.126:*}[34.7222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4985: (0.697674%)&lt;BR/&gt; 4983: (0.697674%)&lt;BR/&gt; 4966: (0.697674%)&lt;BR/&gt; 4945: (0.697674%)&gt;];
}
5511--8855[label="1;72pkt 72fpkt"];
5511--10904[label="1;71pkt 71fpkt"];
8855--10904[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="174.64.158.241" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="174.64.158.241" src_port="80"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3012{
style=filled;
color=gray75;
5512[label="155.148.160.241;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8856[label="155.148.160.241;19pkt 19fpkt", shape=invtriangle, color=brown];
10905[label="155.148.160.241;19pkt 19fpkt", shape=invhouse, color=bisque];
stat3012[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.160.241:*, 213.101.197.173:1863}[63.1579%]&lt;BR/&gt;{155.148.160.241:*, 213.101.197.141:1863}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4998: (2.63158%)&lt;BR/&gt; 4997: (2.63158%)&lt;BR/&gt; 4989: (2.63158%)&lt;BR/&gt; 4957: (2.63158%)&gt;];
}
5512--8856[label="1;19pkt 19fpkt"];
5512--10905[label="1;19pkt 19fpkt"];
8856--10905[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.197.173" dst_port="1863" src_ip="155.148.160.241"/>
      <filter dst_ip="213.101.197.141" dst_port="1863" src_ip="155.148.160.241"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083734077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3013{
style=filled;
color=gray75;
5516[label="192.198.11.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8859[label="192.198.11.242;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3013[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.198.11.242:80, 136.151.104.40:1203}[50%]&lt;BR/&gt;{192.198.11.242:80, 141.22.142.72:1037}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1037: (33.3333%)&lt;BR/&gt; 1203: (16.6667%)&gt;];
}
5516--8859[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.142.72" dst_port="1037" src_ip="192.198.11.242" src_port="80"/>
      <filter dst_ip="136.151.104.40" dst_port="1203" src_ip="192.198.11.242" src_port="80"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3014{
style=filled;
color=gray75;
5517[label="196.3.22.242;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8860[label="196.3.22.242;5pkt 5fpkt", shape=invtriangle, color=brown];
stat3014[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.3.22.242:4856, 141.145.227.25:445}[20%]&lt;BR/&gt;{196.3.22.242:4661, 219.24.89.82:445}[20%]&lt;BR/&gt;{196.3.22.242:4568, 141.211.50.86:445}[20%]&lt;BR/&gt;{196.3.22.242:4963, 168.127.160.105:445}[20%]&lt;BR/&gt;{196.3.22.242:3503, 141.22.121.242:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4963: (10%)&lt;BR/&gt; 4856: (10%)&lt;BR/&gt; 4661: (10%)&lt;BR/&gt; 4568: (10%)&gt;];
}
5517--8860[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.22.121.242" dst_port="445" src_ip="196.3.22.242" src_port="3503"/>
      <filter dst_ip="168.127.160.105" dst_port="445" src_ip="196.3.22.242" src_port="4963"/>
      <filter dst_ip="141.211.50.86" dst_port="445" src_ip="196.3.22.242" src_port="4568"/>
      <filter dst_ip="219.24.89.82" dst_port="445" src_ip="196.3.22.242" src_port="4661"/>
      <filter dst_ip="141.145.227.25" dst_port="445" src_ip="196.3.22.242" src_port="4856"/>
    </slice>
    <from sec="1083733249" usec="0"/>
    <to sec="1083734004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="95.105.60.242"/>
    </slice>
    <from sec="1083733210" usec="0"/>
    <to sec="1083733328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3016{
style=filled;
color=gray75;
5522[label="109.220.70.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8863[label="109.220.70.242;2pkt 2fpkt", shape=invtriangle, color=brown];
10908[label="109.220.70.242;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3016[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.220.70.242:1238, 141.211.95.78:445}[50%]&lt;BR/&gt;{109.220.70.242:1764, 141.135.68.179:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 1764: (25%)&lt;BR/&gt; 1238: (25%)&gt;];
}
5522--8863[label="1;2pkt 2fpkt"];
5522--10908[label="1;2pkt 2fpkt"];
8863--10908[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.135.68.179" dst_port="445" src_ip="109.220.70.242" src_port="1764"/>
      <filter dst_ip="141.211.95.78" dst_port="445" src_ip="109.220.70.242" src_port="1238"/>
    </slice>
    <from sec="1083733818" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3017{
style=filled;
color=gray75;
5526[label="198.143.105.242;37pkt 37fpkt", shape=pentagon, color=darkviolet];
8865[label="198.143.105.242;36pkt 36fpkt", shape=invtriangle, color=brown];
10909[label="198.143.105.242;37pkt 37fpkt", shape=invhouse, color=bisque];
stat3017[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.143.105.242:80, 209.29.138.10:*}[94.5946%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58364: (1.36364%)&lt;BR/&gt; 58345: (1.36364%)&lt;BR/&gt; 57725: (1.36364%)&lt;BR/&gt; 57690: (1.36364%)&gt;];
}
5526--8865[label="1;36pkt 36fpkt"];
5526--10909[label="1;37pkt 37fpkt"];
8865--10909[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="198.143.105.242" src_port="80"/>
    </slice>
    <from sec="1083733249" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3018{
style=filled;
color=gray75;
5529[label="196.25.148.242;176pkt 176fpkt", shape=pentagon, color=darkviolet];
8868[label="196.25.148.242;176pkt 176fpkt", shape=invtriangle, color=brown];
stat3018[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.25.148.242:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5529--8868[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.25.148.242" src_port="1030"/>
    </slice>
    <from sec="1083733562" usec="0"/>
    <to sec="1083733592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3019{
style=filled;
color=gray75;
523[label="213.101.36.221;s;2pkt 2fpkt", shape=diamond, color=yellow];
757[label="208.96.38.63;d;8pkt 8fpkt", shape=diamond, color=yellow];
2085[label="213.101.59.49;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5183[label="213.101.36.221;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5531[label="213.101.192.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8622[label="213.101.36.221;1pkt 1fpkt", shape=invtriangle, color=brown];
8869[label="213.101.192.242;3pkt 3fpkt", shape=invtriangle, color=brown];
10767[label="213.101.36.221;1pkt 1fpkt", shape=invhouse, color=bisque];
10910[label="213.101.192.242;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3019[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.101.59.49:80, *:*}[43.3333%]&lt;BR/&gt;{213.101.59.49:443, *:*}[33.3333%]&lt;BR/&gt;{*:*, 208.96.38.63:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.6667%)&lt;BR/&gt; 443: (12.2222%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 3883: (5.55556%)&lt;BR/&gt; 3599: (4.44444%)&gt;];
}
523--757[label="1;2pkt 2fpkt"];
523--5183[label="1;2pkt 2fpkt"];
523--8622[label="1;1pkt 1fpkt"];
523--10767[label="1;1pkt 1fpkt"];
757--2085[label="0.375;3pkt 3fpkt"];
757--5183[label="1;2pkt 2fpkt"];
757--5531[label="0.333333;1pkt 1fpkt"];
757--8622[label="1;1pkt 1fpkt"];
757--8869[label="0.333333;1pkt 1fpkt"];
757--10767[label="1;1pkt 1fpkt"];
757--10910[label="0.5;1pkt 1fpkt"];
5183--8622[label="1;1pkt 1fpkt"];
5183--10767[label="1;1pkt 1fpkt"];
5531--8869[label="1;3pkt 3fpkt"];
5531--10910[label="1;2pkt 2fpkt"];
8622--10767[label="1;1pkt 1fpkt"];
8869--10910[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.38.63"/>
      <filter src_ip="213.101.59.49" src_port="80"/>
      <filter src_ip="213.101.59.49" src_port="443"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3020{
style=filled;
color=gray75;
5534[label="220.218.210.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8871[label="220.218.210.242;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3020[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.218.210.242:80, 209.29.136.89:1351}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1351: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5534--8871[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="1351" src_ip="220.218.210.242" src_port="80"/>
    </slice>
    <from sec="1083733883" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.238.1.243"/>
    </slice>
    <from sec="1083733529" usec="0"/>
    <to sec="1083733732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.28.81.243"/>
    </slice>
    <from sec="1083733643" usec="0"/>
    <to sec="1083733774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3023{
style=filled;
color=gray75;
5541[label="93.234.94.243;78pkt 78fpkt", shape=pentagon, color=darkviolet];
8876[label="93.234.94.243;77pkt 77fpkt", shape=invtriangle, color=brown];
10916[label="93.234.94.243;78pkt 78fpkt", shape=invhouse, color=bisque];
stat3023[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.234.94.243:21, 209.29.136.89:*}[42.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (21.2446%)&lt;BR/&gt; 3882: (0.643777%)&lt;BR/&gt; 3877: (0.643777%)&lt;BR/&gt; 3869: (0.643777%)&lt;BR/&gt; 3866: (0.643777%)&gt;];
}
5541--8876[label="1;77pkt 77fpkt"];
5541--10916[label="1;78pkt 78fpkt"];
8876--10916[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="93.234.94.243" src_port="21"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.27.192.243"/>
    </slice>
    <from sec="1083733648" usec="0"/>
    <to sec="1083733810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3025{
style=filled;
color=gray75;
883[label="93.227.32.244;s;196pkt 196fpkt", shape=diamond, color=yellow];
5546[label="93.227.32.244;211pkt 211fpkt", shape=pentagon, color=darkviolet];
8880[label="93.227.32.244;211pkt 211fpkt", shape=invtriangle, color=brown];
10918[label="93.227.32.244;210pkt 210fpkt", shape=invhouse, color=bisque];
stat3025[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.227.32.244:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4331: (0.483092%)&lt;BR/&gt; 4231: (0.483092%)&lt;BR/&gt; 4172: (0.483092%)&lt;BR/&gt; 1912: (0.483092%)&gt;];
}
883--982[label="0.0357143;7pkt 7fpkt"];
883--5546[label="0.994898;195pkt 195fpkt"];
883--8880[label="0.994898;195pkt 195fpkt"];
883--10918[label="0.989796;194pkt 194fpkt"];
5546--8880[label="1;211pkt 211fpkt"];
5546--10918[label="1;210pkt 210fpkt"];
8880--10918[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="93.227.32.244"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3026{
style=filled;
color=gray75;
5547[label="40.241.38.244;37pkt 37fpkt", shape=pentagon, color=darkviolet];
8881[label="40.241.38.244;37pkt 37fpkt", shape=invtriangle, color=brown];
10919[label="40.241.38.244;37pkt 37fpkt", shape=invhouse, color=bisque];
stat3026[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.241.38.244:80, 209.29.138.10:*}[97.2973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63228: (1.35135%)&lt;BR/&gt; 59832: (1.35135%)&lt;BR/&gt; 59831: (1.35135%)&lt;BR/&gt; 59729: (1.35135%)&gt;];
}
5547--8881[label="1;37pkt 37fpkt"];
5547--10919[label="1;37pkt 37fpkt"];
8881--10919[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="40.241.38.244" src_port="80"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.12.56.244"/>
    </slice>
    <from sec="1083733639" usec="0"/>
    <to sec="1083733931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3028{
style=filled;
color=gray75;
5553[label="44.65.117.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8885[label="44.65.117.244;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3028[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.65.117.244:25, 173.138.211.116:1865}[50%]&lt;BR/&gt;{44.65.117.244:25, 155.148.107.160:39121}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 39121: (33.3333%)&lt;BR/&gt; 1865: (16.6667%)&gt;];
}
5553--8885[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.107.160" dst_port="39121" src_ip="44.65.117.244" src_port="25"/>
      <filter dst_ip="173.138.211.116" dst_port="1865" src_ip="44.65.117.244" src_port="25"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.165.118.244"/>
    </slice>
    <from sec="1083733479" usec="0"/>
    <to sec="1083733614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3030{
style=filled;
color=gray75;
5557[label="93.217.193.244;191pkt 191fpkt", shape=pentagon, color=darkviolet];
8889[label="93.217.193.244;190pkt 190fpkt", shape=invtriangle, color=brown];
stat3030[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.217.193.244:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29735: (0.524934%)&lt;BR/&gt; 64526: (0.262467%)&lt;BR/&gt; 64373: (0.262467%)&lt;BR/&gt; 62806: (0.262467%)&gt;];
}
5557--8889[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter src_ip="93.217.193.244" src_port="80"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3031{
style=filled;
color=gray75;
5562[label="198.218.16.245;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8892[label="198.218.16.245;34pkt 34fpkt", shape=invtriangle, color=brown];
stat3031[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.218.16.245:80, 209.29.138.126:*}[61.7647%]&lt;BR/&gt;{198.218.16.245:80, 209.29.138.127:*}[38.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4838: (2.94118%)&lt;BR/&gt; 4989: (1.47059%)&lt;BR/&gt; 4971: (1.47059%)&lt;BR/&gt; 4946: (1.47059%)&gt;];
}
5562--8892[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.218.16.245" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.218.16.245" src_port="80"/>
    </slice>
    <from sec="1083733819" usec="0"/>
    <to sec="1083734056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.189.187.245"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3033{
style=filled;
color=gray75;
5571[label="198.109.202.245;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8897[label="198.109.202.245;10pkt 10fpkt", shape=invtriangle, color=brown];
stat3033[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.109.202.245:80, 209.29.138.126:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3651: (5%)&lt;BR/&gt; 3603: (5%)&lt;BR/&gt; 3602: (5%)&lt;BR/&gt; 3314: (5%)&gt;];
}
5571--8897[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.109.202.245" src_port="80"/>
    </slice>
    <from sec="1083734020" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3034{
style=filled;
color=gray75;
5572[label="47.80.218.245;40pkt 40fpkt", shape=pentagon, color=darkviolet];
8898[label="47.80.218.245;40pkt 40fpkt", shape=invtriangle, color=brown];
10926[label="47.80.218.245;40pkt 40fpkt", shape=invhouse, color=bisque];
stat3034[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.80.218.245:80, 209.29.138.126:*}[77.5%]&lt;BR/&gt;{47.80.218.245:80, 209.29.138.127:*}[22.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4130: (1.25%)&lt;BR/&gt; 4095: (1.25%)&lt;BR/&gt; 4074: (1.25%)&lt;BR/&gt; 4073: (1.25%)&gt;];
}
5572--8898[label="1;40pkt 40fpkt"];
5572--10926[label="1;40pkt 40fpkt"];
8898--10926[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="47.80.218.245" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="47.80.218.245" src_port="80"/>
    </slice>
    <from sec="1083733779" usec="0"/>
    <to sec="1083734032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.112.6.246"/>
    </slice>
    <from sec="1083733642" usec="0"/>
    <to sec="1083733826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="94.140.88.246"/>
    </slice>
    <from sec="1083733453" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.17.157.246"/>
    </slice>
    <from sec="1083733208" usec="0"/>
    <to sec="1083733336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3038{
style=filled;
color=gray75;
5585[label="109.254.8.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8906[label="109.254.8.247;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3038[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.254.8.247:2011, 209.29.136.89:3215}[50%]&lt;BR/&gt;{109.254.8.247:2011, 209.29.136.89:3219}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2011: (50%)&lt;BR/&gt; 3219: (33.3333%)&lt;BR/&gt; 3215: (16.6667%)&gt;];
}
5585--8906[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" dst_port="3219" src_ip="109.254.8.247" src_port="2011"/>
      <filter dst_ip="209.29.136.89" dst_port="3215" src_ip="109.254.8.247" src_port="2011"/>
    </slice>
    <from sec="1083733491" usec="0"/>
    <to sec="1083733624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,011,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.20.104.247"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.179.123.247"/>
    </slice>
    <from sec="1083733494" usec="0"/>
    <to sec="1083733949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.173.8.248"/>
    </slice>
    <from sec="1083733935" usec="0"/>
    <to sec="1083734041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3042{
style=filled;
color=gray75;
5594[label="208.129.36.248;240pkt 240fpkt", shape=pentagon, color=darkviolet];
8913[label="208.129.36.248;239pkt 239fpkt", shape=invtriangle, color=brown];
10934[label="208.129.36.248;239pkt 239fpkt", shape=invhouse, color=bisque];
stat3042[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.129.36.248:21, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1446: (0.626741%)&lt;BR/&gt; 1972: (0.417827%)&lt;BR/&gt; 1904: (0.417827%)&lt;BR/&gt; 1883: (0.417827%)&gt;];
}
5594--8913[label="1;239pkt 239fpkt"];
5594--10934[label="1;239pkt 239fpkt"];
8913--10934[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter src_ip="208.129.36.248" src_port="21"/>
    </slice>
    <from sec="1083734028" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3043{
style=filled;
color=gray75;
5599[label="136.150.97.248;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8915[label="136.150.97.248;21pkt 21fpkt", shape=invtriangle, color=brown];
10936[label="136.150.97.248;22pkt 22fpkt", shape=invhouse, color=bisque];
stat3043[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.97.248:*, 44.212.46.36:80}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.2308%)&lt;BR/&gt; 7001: (4.61538%)&lt;BR/&gt; 1863: (3.84615%)&lt;BR/&gt; 1090: (2.30769%)&lt;BR/&gt; 1089: (2.30769%)&gt;];
}
5599--8915[label="1;21pkt 21fpkt"];
5599--10936[label="1;22pkt 22fpkt"];
8915--10936[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="44.212.46.36" dst_port="80" src_ip="136.150.97.248"/>
    </slice>
    <from sec="1083734006" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.24.114.248"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.68.122.248"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.18.144.248"/>
    </slice>
    <from sec="1083733567" usec="0"/>
    <to sec="1083733907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3047{
style=filled;
color=gray75;
5609[label="210.237.238.248;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8922[label="210.237.238.248;3pkt 3fpkt", shape=invtriangle, color=brown];
10941[label="210.237.238.248;3pkt 3fpkt", shape=invhouse, color=bisque];
stat3047[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.237.238.248:36004, 136.151.126.224:80}[33.3333%]&lt;BR/&gt;{210.237.238.248:38402, 136.151.126.224:80}[33.3333%]&lt;BR/&gt;{210.237.238.248:56744, 136.151.126.224:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56744: (16.6667%)&lt;BR/&gt; 38402: (16.6667%)&lt;BR/&gt; 36004: (16.6667%)&gt;];
}
5609--8922[label="1;3pkt 3fpkt"];
5609--10941[label="1;3pkt 3fpkt"];
8922--10941[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.126.224" dst_port="80" src_ip="210.237.238.248" src_port="56744"/>
      <filter dst_ip="136.151.126.224" dst_port="80" src_ip="210.237.238.248" src_port="38402"/>
      <filter dst_ip="136.151.126.224" dst_port="80" src_ip="210.237.238.248" src_port="36004"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083733376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3048{
style=filled;
color=gray75;
5611[label="109.237.242.248;244pkt 244fpkt", shape=pentagon, color=darkviolet];
8923[label="109.237.242.248;243pkt 243fpkt", shape=invtriangle, color=brown];
stat3048[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.237.242.248:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5611--8923[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="109.237.242.248" src_port="1025"/>
    </slice>
    <from sec="1083733690" usec="0"/>
    <to sec="1083733706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3049{
style=filled;
color=gray75;
5613[label="196.19.38.249;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8924[label="196.19.38.249;3pkt 3fpkt", shape=invtriangle, color=brown];
stat3049[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.19.38.249:1305, 136.151.255.136:80}[25%]&lt;BR/&gt;{196.19.38.249:1295, 136.151.249.15:80}[25%]&lt;BR/&gt;{196.19.38.249:1296, 136.151.249.15:80}[25%]&lt;BR/&gt;{196.19.38.249:1297, 136.151.249.15:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1297: (14.2857%)&lt;BR/&gt; 1296: (14.2857%)&lt;BR/&gt; 1295: (14.2857%)&lt;BR/&gt; 1305: (7.14286%)&gt;];
}
5613--8924[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.249.15" dst_port="80" src_ip="196.19.38.249" src_port="1297"/>
      <filter dst_ip="136.151.249.15" dst_port="80" src_ip="196.19.38.249" src_port="1296"/>
      <filter dst_ip="136.151.249.15" dst_port="80" src_ip="196.19.38.249" src_port="1295"/>
      <filter dst_ip="136.151.255.136" dst_port="80" src_ip="196.19.38.249" src_port="1305"/>
    </slice>
    <from sec="1083733283" usec="0"/>
    <to sec="1083733520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.23.118.249"/>
    </slice>
    <from sec="1083733262" usec="0"/>
    <to sec="1083733378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.244.134.249"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3052{
style=filled;
color=gray75;
5619[label="155.148.138.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8927[label="155.148.138.249;2pkt 2fpkt", shape=invtriangle, color=brown];
10942[label="155.148.138.249;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3052[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.138.249:4687, 213.101.197.140:1863}[50%]&lt;BR/&gt;{155.148.138.249:4448, 213.101.193.204:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4687: (30%)&lt;BR/&gt; 4448: (20%)&gt;];
}
5619--8927[label="1;2pkt 2fpkt"];
5619--10942[label="1;1pkt 1fpkt"];
8927--10942[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.193.204" dst_port="1863" src_ip="155.148.138.249" src_port="4448"/>
      <filter dst_ip="213.101.197.140" dst_port="1863" src_ip="155.148.138.249" src_port="4687"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.10.1.250"/>
    </slice>
    <from sec="1083733515" usec="0"/>
    <to sec="1083733579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3054{
style=filled;
color=gray75;
5622[label="196.121.14.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8930[label="196.121.14.250;1pkt 1fpkt", shape=invtriangle, color=brown];
10945[label="196.121.14.250;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3054[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.121.14.250:3617, 136.151.235.67:80}[50%]&lt;BR/&gt;{196.121.14.250:3491, 168.127.52.161:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3491: (30%)&lt;BR/&gt; 445: (30%)&lt;BR/&gt; 3617: (20%)&lt;BR/&gt; 80: (20%)&gt;];
}
5622--8930[label="1;1pkt 1fpkt"];
5622--10945[label="1;2pkt 2fpkt"];
8930--10945[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.52.161" dst_port="445" src_ip="196.121.14.250" src_port="3491"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="196.121.14.250" src_port="3617"/>
    </slice>
    <from sec="1083733802" usec="0"/>
    <to sec="1083733930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.183.116.250"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083733471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3056{
style=filled;
color=gray75;
5637[label="41.167.96.251;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8940[label="41.167.96.251;3pkt 3fpkt", shape=invtriangle, color=brown];
stat3056[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.167.96.251:4699, 136.151.235.67:80}[33.3333%]&lt;BR/&gt;{41.167.96.251:4929, 168.16.213.106:445}[33.3333%]&lt;BR/&gt;{41.167.96.251:4350, 155.211.179.110:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.3333%)&lt;BR/&gt; 4929: (16.6667%)&lt;BR/&gt; 4699: (16.6667%)&lt;BR/&gt; 4350: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
5637--8940[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="155.211.179.110" dst_port="445" src_ip="41.167.96.251" src_port="4350"/>
      <filter dst_ip="168.16.213.106" dst_port="445" src_ip="41.167.96.251" src_port="4929"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.167.96.251" src_port="4699"/>
    </slice>
    <from sec="1083733290" usec="0"/>
    <to sec="1083733519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3057{
style=filled;
color=gray75;
5638[label="136.151.110.251;194pkt 194fpkt", shape=pentagon, color=darkviolet];
8941[label="136.151.110.251;194pkt 194fpkt", shape=invtriangle, color=brown];
stat3057[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.110.251:53, *:*}[94.3299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.0928%)&lt;BR/&gt; 0: (4.12371%)&lt;BR/&gt; 32768: (2.57732%)&lt;BR/&gt; 9253: (1.54639%)&lt;BR/&gt; 32773: (0.773196%)&gt;];
}
5638--8941[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.110.251" src_port="53"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3058{
style=filled;
color=gray75;
5639[label="194.245.133.251;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8942[label="194.245.133.251;8pkt 8fpkt", shape=invtriangle, color=brown];
10951[label="194.245.133.251;8pkt 8fpkt", shape=invhouse, color=bisque];
stat3058[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.133.251:*, 219.223.215.45:*}[62.5%]&lt;BR/&gt;{194.245.133.251:*, *:80}[25%]&lt;BR/&gt;{194.245.133.251:*, *:1025}[25%]&lt;BR/&gt;{194.245.133.251:*, *:2745}[25%]&lt;BR/&gt;{194.245.133.251:*, 219.223.215.137:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (12.5%)&lt;BR/&gt; 1025: (12.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 6129: (6.25%)&lt;BR/&gt; 3127: (6.25%)&gt;];
}
5639--8942[label="1;8pkt 8fpkt"];
5639--10951[label="1;8pkt 8fpkt"];
8942--10951[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="219.223.215.45" src_ip="194.245.133.251"/>
      <filter dst_ip="219.223.215.137" src_ip="194.245.133.251"/>
      <filter dst_port="2745" src_ip="194.245.133.251"/>
      <filter dst_port="1025" src_ip="194.245.133.251"/>
      <filter dst_port="80" src_ip="194.245.133.251"/>
    </slice>
    <from sec="1083733339" usec="0"/>
    <to sec="1083734068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3059{
style=filled;
color=gray75;
5642[label="221.172.188.251;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8945[label="221.172.188.251;9pkt 9fpkt", shape=invtriangle, color=brown];
stat3059[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.172.188.251:80, 209.29.138.127:*}[55.5556%]&lt;BR/&gt;{221.172.188.251:80, 209.29.138.126:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4591: (5.55556%)&lt;BR/&gt; 4109: (5.55556%)&lt;BR/&gt; 3913: (5.55556%)&lt;BR/&gt; 3826: (5.55556%)&gt;];
}
5642--8945[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="221.172.188.251" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="221.172.188.251" src_port="80"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3060{
style=filled;
color=gray75;
5645[label="203.201.19.252;56pkt 56fpkt", shape=pentagon, color=darkviolet];
8947[label="203.201.19.252;56pkt 56fpkt", shape=invtriangle, color=brown];
10952[label="203.201.19.252;56pkt 56fpkt", shape=invhouse, color=bisque];
stat3060[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.201.19.252:*, *:139}[50%]&lt;BR/&gt;{203.201.19.252:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 2014: (1.78571%)&lt;BR/&gt; 4861: (0.892857%)&lt;BR/&gt; 4860: (0.892857%)&gt;];
}
5645--8947[label="1;56pkt 56fpkt"];
5645--10952[label="1;56pkt 56fpkt"];
8947--10952[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="203.201.19.252"/>
      <filter dst_port="139" src_ip="203.201.19.252"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083734050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.109.165.253"/>
    </slice>
    <from sec="1083733450" usec="0"/>
    <to sec="1083733647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.53.83.254"/>
    </slice>
    <from sec="1083733910" usec="0"/>
    <to sec="1083733976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="159.86.84.254"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3064{
style=filled;
color=gray75;
5670[label="46.181.206.254;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8963[label="46.181.206.254;8pkt 8fpkt", shape=invtriangle, color=brown];
10961[label="46.181.206.254;8pkt 8fpkt", shape=invhouse, color=bisque];
stat3064[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.181.206.254:30033, 209.29.136.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30033: (50%)&lt;BR/&gt; 4413: (6.25%)&lt;BR/&gt; 4141: (6.25%)&lt;BR/&gt; 3568: (6.25%)&lt;BR/&gt; 3041: (6.25%)&gt;];
}
5670--8963[label="1;8pkt 8fpkt"];
5670--10961[label="1;8pkt 8fpkt"];
8963--10961[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="46.181.206.254" src_port="30033"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083734045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3065{
style=filled;
color=gray75;
5675[label="192.42.144.255;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8966[label="192.42.144.255;14pkt 14fpkt", shape=invtriangle, color=brown];
10963[label="192.42.144.255;14pkt 14fpkt", shape=invhouse, color=bisque];
stat3065[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.144.255:0, *:0}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.6744%)&lt;BR/&gt; 4035: (1.16279%)&lt;BR/&gt; 80: (1.16279%)&gt;];
}
5675--8966[label="1;14pkt 14fpkt"];
5675--10963[label="1;14pkt 14fpkt"];
8966--10963[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="192.42.144.255"/>
    </slice>
    <from sec="1083733267" usec="0"/>
    <to sec="1083734060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.116.167.255"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083733347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500467,5.67221,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.105.196.255"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.451646,5.65535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3068{
style=filled;
color=gray75;
5680[label="197.16.208.255;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8970[label="197.16.208.255;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3068[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.16.208.255:45339, 136.151.235.67:80}[50%]&lt;BR/&gt;{197.16.208.255:43317, 141.135.43.86:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43317: (33.3333%)&lt;BR/&gt; 45339: (16.6667%)&gt;];
}
5680--8970[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.135.43.86" dst_port="80" src_ip="197.16.208.255" src_port="43317"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="197.16.208.255" src_port="45339"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083733505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3069{
style=filled;
color=gray75;
5681[label="168.76.208.255;52pkt 52fpkt", shape=pentagon, color=darkviolet];
8971[label="168.76.208.255;51pkt 51fpkt", shape=invtriangle, color=brown];
10965[label="168.76.208.255;52pkt 52fpkt", shape=invhouse, color=bisque];
stat3069[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.208.255:*, *:80}[25%]&lt;BR/&gt;{168.76.208.255:*, *:1433}[25%]&lt;BR/&gt;{168.76.208.255:*, *:2745}[25%]&lt;BR/&gt;{168.76.208.255:*, *:6129}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (12.5806%)&lt;BR/&gt; 1433: (12.5806%)&lt;BR/&gt; 80: (12.5806%)&lt;BR/&gt; 6129: (12.2581%)&lt;BR/&gt; 1130: (1.93548%)&gt;];
}
5681--8971[label="1;51pkt 51fpkt"];
5681--10965[label="1;52pkt 52fpkt"];
8971--10965[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="6129" src_ip="168.76.208.255"/>
      <filter dst_port="2745" src_ip="168.76.208.255"/>
      <filter dst_port="1433" src_ip="168.76.208.255"/>
      <filter dst_port="80" src_ip="168.76.208.255"/>
    </slice>
    <from sec="1083733289" usec="0"/>
    <to sec="1083734018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.55.94.0"/>
    </slice>
    <from sec="1083733254" usec="0"/>
    <to sec="1083733549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.195.118.0"/>
    </slice>
    <from sec="1083733538" usec="0"/>
    <to sec="1083733716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.149.33.1"/>
    </slice>
    <from sec="1083733871" usec="0"/>
    <to sec="1083733974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.172.48.1"/>
    </slice>
    <from sec="1083733498" usec="0"/>
    <to sec="1083733575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.33.50.1"/>
    </slice>
    <from sec="1083733973" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.188.52.1"/>
    </slice>
    <from sec="1083734008" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.91.64.1"/>
    </slice>
    <from sec="1083733825" usec="0"/>
    <to sec="1083733931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.54.11.2"/>
    </slice>
    <from sec="1083733272" usec="0"/>
    <to sec="1083733370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.238.104.2"/>
    </slice>
    <from sec="1083733598" usec="0"/>
    <to sec="1083733903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.66.228.4"/>
    </slice>
    <from sec="1083733652" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.95.178.5"/>
    </slice>
    <from sec="1083733891" usec="0"/>
    <to sec="1083733965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.211.199.5"/>
    </slice>
    <from sec="1083733861" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.230.243.6"/>
    </slice>
    <from sec="1083733339" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.17.49.7"/>
    </slice>
    <from sec="1083733831" usec="0"/>
    <to sec="1083733942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.28.97.7"/>
    </slice>
    <from sec="1083733600" usec="0"/>
    <to sec="1083733688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.111.132.7"/>
    </slice>
    <from sec="1083733854" usec="0"/>
    <to sec="1083734041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3086{
style=filled;
color=gray75;
70[label="136.150.168.102;s;1016pkt 1016fpkt", shape=diamond, color=yellow];
215[label="44.65.117.246;d;265pkt 265fpkt", shape=diamond, color=yellow];
251[label="173.138.238.184;s;78pkt 78fpkt", shape=diamond, color=yellow];
376[label="173.138.153.187;s;94pkt 94fpkt", shape=diamond, color=yellow];
380[label="44.65.117.237;d;111pkt 111fpkt", shape=diamond, color=yellow];
393[label="173.138.227.7;s;90pkt 90fpkt", shape=diamond, color=yellow];
398[label="209.29.137.52;s;70pkt 70fpkt", shape=diamond, color=yellow];
416[label="46.71.223.70;d;29pkt 29fpkt", shape=diamond, color=yellow];
451[label="136.151.248.110;s;257pkt 257fpkt", shape=diamond, color=yellow];
459[label="173.138.130.223;s;82pkt 82fpkt", shape=diamond, color=yellow];
513[label="47.11.186.202;d;75pkt 75fpkt", shape=diamond, color=yellow];
564[label="136.151.193.154;s;919pkt 919fpkt", shape=diamond, color=yellow];
650[label="173.138.131.58;s;15pkt 15fpkt", shape=diamond, color=yellow];
719[label="173.138.128.194;s;55pkt 55fpkt", shape=diamond, color=yellow];
727[label="173.138.156.227;s;500pkt 500fpkt", shape=diamond, color=yellow];
777[label="136.151.229.152;s;338pkt 338fpkt", shape=diamond, color=yellow];
870[label="46.71.197.142;d;17pkt 17fpkt", shape=diamond, color=yellow];
1179[label="173.138.227.7;100pkt 100fpkt", shape=pentagon, color=darkviolet];
1473[label="173.138.211.20;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2118[label="173.138.170.50;72pkt 72fpkt", shape=pentagon, color=darkviolet];
2157[label="209.29.137.52;84pkt 84fpkt", shape=pentagon, color=darkviolet];
2701[label="173.138.210.80;468pkt 468fpkt", shape=pentagon, color=darkviolet];
3142[label="136.150.168.102;1212pkt 1212fpkt", shape=pentagon, color=darkviolet];
3397[label="173.138.211.116;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3449[label="136.150.100.120;2018pkt 2018fpkt", shape=pentagon, color=darkviolet];
3471[label="173.138.211.121;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4040[label="136.151.229.152;352pkt 352fpkt", shape=pentagon, color=darkviolet];
4070[label="136.151.193.154;957pkt 957fpkt", shape=pentagon, color=darkviolet];
4566[label="173.138.176.181;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4615[label="173.138.238.184;84pkt 84fpkt", shape=pentagon, color=darkviolet];
4657[label="173.138.153.187;99pkt 99fpkt", shape=pentagon, color=darkviolet];
5215[label="173.138.130.223;90pkt 90fpkt", shape=pentagon, color=darkviolet];
5824[label="173.138.227.7;100pkt 100fpkt", shape=invtriangle, color=brown];
6472[label="173.138.170.50;71pkt 71fpkt", shape=invtriangle, color=brown];
6498[label="209.29.137.52;83pkt 83fpkt", shape=invtriangle, color=brown];
6882[label="173.138.210.80;468pkt 468fpkt", shape=invtriangle, color=brown];
7370[label="173.138.211.116;33pkt 33fpkt", shape=invtriangle, color=brown];
7409[label="136.150.100.120;2018pkt 2018fpkt", shape=invtriangle, color=brown];
7430[label="173.138.211.121;21pkt 21fpkt", shape=invtriangle, color=brown];
7827[label="136.151.229.152;352pkt 352fpkt", shape=invtriangle, color=brown];
7847[label="136.151.193.154;956pkt 956fpkt", shape=invtriangle, color=brown];
8199[label="173.138.176.181;20pkt 20fpkt", shape=invtriangle, color=brown];
8236[label="173.138.238.184;83pkt 83fpkt", shape=invtriangle, color=brown];
8645[label="173.138.130.223;90pkt 90fpkt", shape=invtriangle, color=brown];
9067[label="173.138.227.7;101pkt 101fpkt", shape=invhouse, color=bisque];
10271[label="136.151.229.152;351pkt 351fpkt", shape=invhouse, color=bisque];
10284[label="136.151.193.154;956pkt 956fpkt", shape=invhouse, color=bisque];
10507[label="173.138.176.181;20pkt 20fpkt", shape=invhouse, color=bisque];
stat3086[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.100.120:*, *:25}[23.6988%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.9204%)&lt;BR/&gt; 113: (1.21332%)&lt;BR/&gt; 0: (0.559495%)&lt;BR/&gt; 53: (0.335047%)&lt;BR/&gt; 80: (0.0585518%)&gt;];
}
70--215[label="0.34717;92pkt 92fpkt"];
70--380[label="0.396396;44pkt 44fpkt"];
70--513[label="0.533333;40pkt 40fpkt"];
70--3142[label="1;1016pkt 1016fpkt"];
215--451[label="0.00389105;1pkt 1fpkt"];
215--459[label="0.243902;20pkt 20fpkt"];
215--468[label="0.00377358;1pkt 1fpkt"];
215--564[label="0.00377358;1pkt 1fpkt"];
215--657[label="0.0113208;3pkt 3fpkt"];
215--719[label="0.0909091;5pkt 5fpkt"];
215--727[label="0.00754717;2pkt 2fpkt"];
215--2701[label="0.0113208;3pkt 3fpkt"];
215--3135[label="0.0113208;3pkt 3fpkt"];
215--3142[label="0.34717;92pkt 92fpkt"];
215--3449[label="0.456604;121pkt 121fpkt"];
215--3471[label="0.0952381;2pkt 2fpkt"];
215--3940[label="0.0194175;2pkt 2fpkt"];
215--4070[label="0.00377358;1pkt 1fpkt"];
215--4566[label="0.05;1pkt 1fpkt"];
215--5215[label="0.222222;20pkt 20fpkt"];
215--6882[label="0.0113208;3pkt 3fpkt"];
215--7191[label="0.0113208;3pkt 3fpkt"];
215--7409[label="0.456604;121pkt 121fpkt"];
215--7430[label="0.0952381;2pkt 2fpkt"];
215--7760[label="0.0196078;2pkt 2fpkt"];
215--7847[label="0.00377358;1pkt 1fpkt"];
215--8199[label="0.05;1pkt 1fpkt"];
215--8645[label="0.222222;20pkt 20fpkt"];
215--10229[label="0.0196078;2pkt 2fpkt"];
215--10284[label="0.00377358;1pkt 1fpkt"];
215--10507[label="0.05;1pkt 1fpkt"];
251--380[label="0.153846;12pkt 12fpkt"];
251--4615[label="1;78pkt 78fpkt"];
251--8236[label="0.987179;77pkt 77fpkt"];
376--380[label="0.0638298;6pkt 6fpkt"];
376--4657[label="1;94pkt 94fpkt"];
380--398[label="0.0285714;2pkt 2fpkt"];
380--451[label="0.018018;2pkt 2fpkt"];
380--564[label="0.027027;3pkt 3fpkt"];
380--777[label="0.00900901;1pkt 1fpkt"];
380--2157[label="0.0238095;2pkt 2fpkt"];
380--2701[label="0.018018;2pkt 2fpkt"];
380--3142[label="0.396396;44pkt 44fpkt"];
380--3397[label="0.030303;1pkt 1fpkt"];
380--3449[label="0.315315;35pkt 35fpkt"];
380--4040[label="0.00900901;1pkt 1fpkt"];
380--4070[label="0.027027;3pkt 3fpkt"];
380--4615[label="0.142857;12pkt 12fpkt"];
380--4657[label="0.0606061;6pkt 6fpkt"];
380--6498[label="0.0240964;2pkt 2fpkt"];
380--6882[label="0.018018;2pkt 2fpkt"];
380--7370[label="0.030303;1pkt 1fpkt"];
380--7409[label="0.315315;35pkt 35fpkt"];
380--7827[label="0.00900901;1pkt 1fpkt"];
380--7847[label="0.027027;3pkt 3fpkt"];
380--8236[label="0.144578;12pkt 12fpkt"];
380--10271[label="0.00900901;1pkt 1fpkt"];
380--10284[label="0.027027;3pkt 3fpkt"];
393--513[label="0.0133333;1pkt 1fpkt"];
393--870[label="0.0588235;1pkt 1fpkt"];
393--1179[label="0.988889;89pkt 89fpkt"];
393--5824[label="0.988889;89pkt 89fpkt"];
393--9067[label="1;90pkt 90fpkt"];
398--2157[label="1;70pkt 70fpkt"];
398--6498[label="0.985714;69pkt 69fpkt"];
416--719[label="0.965517;28pkt 28fpkt"];
416--4566[label="0.05;1pkt 1fpkt"];
416--8199[label="0.05;1pkt 1fpkt"];
416--10507[label="0.05;1pkt 1fpkt"];
459--870[label="0.0588235;1pkt 1fpkt"];
459--5215[label="1;82pkt 82fpkt"];
459--8645[label="1;82pkt 82fpkt"];
513--563[label="0.0133333;1pkt 1fpkt"];
513--564[label="0.04;3pkt 3fpkt"];
513--777[label="0.0133333;1pkt 1fpkt"];
513--1179[label="0.0133333;1pkt 1fpkt"];
513--3142[label="0.533333;40pkt 40fpkt"];
513--3449[label="0.346667;26pkt 26fpkt"];
513--4040[label="0.0133333;1pkt 1fpkt"];
513--4070[label="0.04;3pkt 3fpkt"];
513--4966[label="0.0133333;1pkt 1fpkt"];
513--5824[label="0.0133333;1pkt 1fpkt"];
513--7409[label="0.346667;26pkt 26fpkt"];
513--7827[label="0.0133333;1pkt 1fpkt"];
513--7847[label="0.04;3pkt 3fpkt"];
513--8467[label="0.0133333;1pkt 1fpkt"];
513--9067[label="0.0133333;1pkt 1fpkt"];
513--10271[label="0.0133333;1pkt 1fpkt"];
513--10284[label="0.04;3pkt 3fpkt"];
513--10669[label="0.0133333;1pkt 1fpkt"];
564--4070[label="1;919pkt 919fpkt"];
564--7847[label="0.998912;918pkt 918fpkt"];
564--10284[label="0.998912;918pkt 918fpkt"];
650--870[label="0.133333;2pkt 2fpkt"];
727--870[label="0.0588235;1pkt 1fpkt"];
777--4040[label="1;338pkt 338fpkt"];
777--7827[label="1;338pkt 338fpkt"];
777--10271[label="0.997041;337pkt 337fpkt"];
870--1179[label="0.0588235;1pkt 1fpkt"];
870--1473[label="0.352941;6pkt 6fpkt"];
870--2118[label="0.0588235;1pkt 1fpkt"];
870--5215[label="0.0588235;1pkt 1fpkt"];
870--5824[label="0.0588235;1pkt 1fpkt"];
870--6472[label="0.0588235;1pkt 1fpkt"];
870--8645[label="0.0588235;1pkt 1fpkt"];
870--9067[label="0.0588235;1pkt 1fpkt"];
1179--5824[label="1;100pkt 100fpkt"];
1179--9067[label="1;100pkt 100fpkt"];
2118--6472[label="1;71pkt 71fpkt"];
2157--6498[label="1;83pkt 83fpkt"];
2701--6882[label="1;468pkt 468fpkt"];
3397--7370[label="1;33pkt 33fpkt"];
3449--7409[label="1;2018pkt 2018fpkt"];
3471--7430[label="1;21pkt 21fpkt"];
4040--7827[label="1;352pkt 352fpkt"];
4040--10271[label="1;351pkt 351fpkt"];
4070--7847[label="1;956pkt 956fpkt"];
4070--10284[label="1;956pkt 956fpkt"];
4566--8199[label="1;20pkt 20fpkt"];
4566--10507[label="1;20pkt 20fpkt"];
4615--8236[label="1;83pkt 83fpkt"];
5215--8645[label="1;90pkt 90fpkt"];
5824--9067[label="1;100pkt 100fpkt"];
7827--10271[label="1;351pkt 351fpkt"];
7847--10284[label="1;956pkt 956fpkt"];
8199--10507[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="136.150.100.120"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.27.229.7"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083733787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.140.3.9"/>
    </slice>
    <from sec="1083733701" usec="0"/>
    <to sec="1083733913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.10.84.9"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.40.89.9"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.199.217.9"/>
    </slice>
    <from sec="1083733884" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.35.233.9"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="94.230.23.10"/>
    </slice>
    <from sec="1083733575" usec="0"/>
    <to sec="1083733806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.127.52.10"/>
    </slice>
    <from sec="1083733586" usec="0"/>
    <to sec="1083733840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.51.73.10"/>
    </slice>
    <from sec="1083733325" usec="0"/>
    <to sec="1083733415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.91.148.10"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083733609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.217.216.10"/>
    </slice>
    <from sec="1083733963" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.22.238.10"/>
    </slice>
    <from sec="1083733622" usec="0"/>
    <to sec="1083733736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.1.40.11"/>
    </slice>
    <from sec="1083733451" usec="0"/>
    <to sec="1083733514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.103.130.11"/>
    </slice>
    <from sec="1083733775" usec="0"/>
    <to sec="1083733885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.246.136.11"/>
    </slice>
    <from sec="1083733361" usec="0"/>
    <to sec="1083733499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.111.0.12"/>
    </slice>
    <from sec="1083733633" usec="0"/>
    <to sec="1083733801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.139.20.12"/>
    </slice>
    <from sec="1083733347" usec="0"/>
    <to sec="1083733685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.179.105.12"/>
    </slice>
    <from sec="1083733360" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.36.147.12"/>
    </slice>
    <from sec="1083733686" usec="0"/>
    <to sec="1083733784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.140.153.12"/>
    </slice>
    <from sec="1083733854" usec="0"/>
    <to sec="1083733988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.112.167.12"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.51.194.12"/>
    </slice>
    <from sec="1083733908" usec="0"/>
    <to sec="1083734076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.1.101.13"/>
    </slice>
    <from sec="1083733359" usec="0"/>
    <to sec="1083733517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.187.152.13"/>
    </slice>
    <from sec="1083733253" usec="0"/>
    <to sec="1083733347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.138.208.13"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.192.226.13"/>
    </slice>
    <from sec="1083733245" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.167.183.14"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.19.52.15"/>
    </slice>
    <from sec="1083733344" usec="0"/>
    <to sec="1083733488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.90.91.15"/>
    </slice>
    <from sec="1083733359" usec="0"/>
    <to sec="1083733468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.24.117.15"/>
    </slice>
    <from sec="1083733633" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.28.156.15"/>
    </slice>
    <from sec="1083733843" usec="0"/>
    <to sec="1083733935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.153.228.15"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.53.8.16"/>
    </slice>
    <from sec="1083733653" usec="0"/>
    <to sec="1083733754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.26.45.16"/>
    </slice>
    <from sec="1083733805" usec="0"/>
    <to sec="1083733921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577427,5.65965,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_3121{
style=filled;
color=gray75;
1362[label="133.98.76.16;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9160[label="133.98.76.16;4pkt 4fpkt", shape=invhouse, color=bisque];
stat3121[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.98.76.16:80, 136.151.98.83:1129}[25%]&lt;BR/&gt;{133.98.76.16:80, 136.151.98.83:1131}[25%]&lt;BR/&gt;{133.98.76.16:80, 136.151.98.83:1133}[25%]&lt;BR/&gt;{133.98.76.16:80, 136.151.98.83:1135}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1135: (12.5%)&lt;BR/&gt; 1133: (12.5%)&lt;BR/&gt; 1131: (12.5%)&lt;BR/&gt; 1129: (12.5%)&gt;];
}
1362--9160[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.98.83" dst_port="1135" src_ip="133.98.76.16" src_port="80"/>
      <filter dst_ip="136.151.98.83" dst_port="1133" src_ip="133.98.76.16" src_port="80"/>
      <filter dst_ip="136.151.98.83" dst_port="1131" src_ip="133.98.76.16" src_port="80"/>
      <filter dst_ip="136.151.98.83" dst_port="1129" src_ip="133.98.76.16" src_port="80"/>
    </slice>
    <from sec="1083733923" usec="0"/>
    <to sec="1083734032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.19.82.16"/>
    </slice>
    <from sec="1083733720" usec="0"/>
    <to sec="1083733796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577427,5.65965,502,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_3123{
style=filled;
color=gray75;
1364[label="141.22.86.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9162[label="141.22.86.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3123[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.22.86.16:22, 109.129.5.29:1040}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1040: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
1364--9162[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="109.129.5.29" dst_port="1040" src_ip="141.22.86.16" src_port="22"/>
    </slice>
    <from sec="1083733875" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.192.204.16"/>
    </slice>
    <from sec="1083733315" usec="0"/>
    <to sec="1083733513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.121.53.17"/>
    </slice>
    <from sec="1083733618" usec="0"/>
    <to sec="1083733735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="95.2.179.17"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.117.203.17"/>
    </slice>
    <from sec="1083733475" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.194.98.18"/>
    </slice>
    <from sec="1083733540" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.220.133.18"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.46.43.19"/>
    </slice>
    <from sec="1083733285" usec="0"/>
    <to sec="1083733435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.26.49.19"/>
    </slice>
    <from sec="1083733528" usec="0"/>
    <to sec="1083733643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,002,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3132{
style=filled;
color=gray75;
6008[label="196.123.120.19;121pkt 121fpkt", shape=invtriangle, color=brown];
9186[label="196.123.120.19;121pkt 121fpkt", shape=invhouse, color=bisque];
stat3132[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.123.120.19:1209, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1209: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6008--9186[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.123.120.19" src_port="1209"/>
    </slice>
    <from sec="1083734081" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.138.164.19"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.42.169.19"/>
    </slice>
    <from sec="1083733451" usec="0"/>
    <to sec="1083733735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.19.210.19"/>
    </slice>
    <from sec="1083733468" usec="0"/>
    <to sec="1083733566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.42.166.21"/>
    </slice>
    <from sec="1083733800" usec="0"/>
    <to sec="1083733882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.17.216.21"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.165.10.22"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.116.96.22"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.3.149.22"/>
    </slice>
    <from sec="1083733384" usec="0"/>
    <to sec="1083733474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.68.62.23"/>
    </slice>
    <from sec="1083733529" usec="0"/>
    <to sec="1083733650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.106.67.23"/>
    </slice>
    <from sec="1083734042" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.205.93.24"/>
    </slice>
    <from sec="1083733877" usec="0"/>
    <to sec="1083734069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.68.57.26"/>
    </slice>
    <from sec="1083733298" usec="0"/>
    <to sec="1083733422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.194.80.26"/>
    </slice>
    <from sec="1083733483" usec="0"/>
    <to sec="1083733573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.3.133.26"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083733969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3147{
style=filled;
color=gray75;
1591[label="40.152.168.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6110[label="40.152.168.26;1pkt 1fpkt", shape=invtriangle, color=brown];
9243[label="40.152.168.26;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3147[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.152.168.26:2006, 141.85.253.33:445}[50%]&lt;BR/&gt;{40.152.168.26:2095, 136.151.235.67:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2006: (37.5%)&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 2095: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
1591--6110[label="1;1pkt 1fpkt"];
1591--9243[label="1;1pkt 1fpkt"];
6110--9243[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="40.152.168.26" src_port="2095"/>
      <filter dst_ip="141.85.253.33" dst_port="445" src_ip="40.152.168.26" src_port="2006"/>
    </slice>
    <from sec="1083733586" usec="0"/>
    <to sec="1083734060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3148{
style=filled;
color=gray75;
6111[label="200.171.227.26;11pkt 11fpkt", shape=invtriangle, color=brown];
9244[label="200.171.227.26;10pkt 10fpkt", shape=invhouse, color=bisque];
stat3148[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.171.227.26:80, 155.148.137.32:*}[63.6364%]&lt;BR/&gt;{200.171.227.26:80, 155.148.182.202:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54853: (4.7619%)&lt;BR/&gt; 54808: (4.7619%)&lt;BR/&gt; 26294: (4.7619%)&lt;BR/&gt; 14608: (4.7619%)&gt;];
}
6111--9244[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.137.32" src_ip="200.171.227.26" src_port="80"/>
      <filter dst_ip="155.148.182.202" src_ip="200.171.227.26" src_port="80"/>
    </slice>
    <from sec="1083733642" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.245.233.26"/>
    </slice>
    <from sec="1083733765" usec="0"/>
    <to sec="1083733886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.69.151.27"/>
    </slice>
    <from sec="1083733248" usec="0"/>
    <to sec="1083733501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.10.160.27"/>
    </slice>
    <from sec="1083733561" usec="0"/>
    <to sec="1083733757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.39.208.27"/>
    </slice>
    <from sec="1083733869" usec="0"/>
    <to sec="1083733991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577427,5.65965,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_3153{
style=filled;
color=gray75;
1626[label="94.30.11.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9257[label="94.30.11.28;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3153[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.30.11.28:6881, 168.127.113.129:2558}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2558: (50%)&gt;];
}
1626--9257[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2558" src_ip="94.30.11.28" src_port="6881"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.117.21.28"/>
    </slice>
    <from sec="1083733292" usec="0"/>
    <to sec="1083733961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.8.176.28"/>
    </slice>
    <from sec="1083733897" usec="0"/>
    <to sec="1083733958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.23.0.29"/>
    </slice>
    <from sec="1083733980" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.22.14.29"/>
    </slice>
    <from sec="1083733500" usec="0"/>
    <to sec="1083733577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="174.178.155.29"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.188.192.29"/>
    </slice>
    <from sec="1083733960" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.27.229.29"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083733407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.11.152.30"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083733364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.196.207.30"/>
    </slice>
    <from sec="1083733873" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.109.35.31"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.119.162.31"/>
    </slice>
    <from sec="1083733797" usec="0"/>
    <to sec="1083733919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.14.165.31"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083733936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.169.23.32"/>
    </slice>
    <from sec="1083733630" usec="0"/>
    <to sec="1083733708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.124.52.32"/>
    </slice>
    <from sec="1083733964" usec="0"/>
    <to sec="1083734053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.122.110.32"/>
    </slice>
    <from sec="1083733730" usec="0"/>
    <to sec="1083733860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.165.130.33"/>
    </slice>
    <from sec="1083733681" usec="0"/>
    <to sec="1083733854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.8.193.33"/>
    </slice>
    <from sec="1083733529" usec="0"/>
    <to sec="1083733648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.194.197.33"/>
    </slice>
    <from sec="1083733593" usec="0"/>
    <to sec="1083733800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3172{
style=filled;
color=gray75;
1735[label="41.167.199.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6211[label="41.167.199.33;2pkt 2fpkt", shape=invtriangle, color=brown];
9313[label="41.167.199.33;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3172[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.167.199.33:3286, 136.151.235.67:80}[50%]&lt;BR/&gt;{41.167.199.33:3035, 173.138.37.89:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3035: (30%)&lt;BR/&gt; 445: (30%)&lt;BR/&gt; 3286: (20%)&lt;BR/&gt; 80: (20%)&gt;];
}
1735--6211[label="1;2pkt 2fpkt"];
1735--9313[label="1;1pkt 1fpkt"];
6211--9313[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.138.37.89" dst_port="445" src_ip="41.167.199.33" src_port="3035"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="41.167.199.33" src_port="3286"/>
    </slice>
    <from sec="1083733769" usec="0"/>
    <to sec="1083733897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.54.210.33"/>
    </slice>
    <from sec="1083734049" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.69.222.33"/>
    </slice>
    <from sec="1083733785" usec="0"/>
    <to sec="1083733999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.27.4.34"/>
    </slice>
    <from sec="1083733704" usec="0"/>
    <to sec="1083733803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.93.18.34"/>
    </slice>
    <from sec="1083733475" usec="0"/>
    <to sec="1083733605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.82.191.35"/>
    </slice>
    <from sec="1083733704" usec="0"/>
    <to sec="1083733792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.95.192.35"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083733299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.188.194.35"/>
    </slice>
    <from sec="1083733786" usec="0"/>
    <to sec="1083733912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.51.224.35"/>
    </slice>
    <from sec="1083733554" usec="0"/>
    <to sec="1083733683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.3.229.35"/>
    </slice>
    <from sec="1083733794" usec="0"/>
    <to sec="1083733965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.214.20.36"/>
    </slice>
    <from sec="1083733332" usec="0"/>
    <to sec="1083733593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.208.42.36"/>
    </slice>
    <from sec="1083733371" usec="0"/>
    <to sec="1083733487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.16.213.36"/>
    </slice>
    <from sec="1083733552" usec="0"/>
    <to sec="1083733671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.42.248.36"/>
    </slice>
    <from sec="1083733400" usec="0"/>
    <to sec="1083733685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.197.3.37"/>
    </slice>
    <from sec="1083733830" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="155.148.87.37"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.54.11.38"/>
    </slice>
    <from sec="1083733727" usec="0"/>
    <to sec="1083733946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.50.44.38"/>
    </slice>
    <from sec="1083733707" usec="0"/>
    <to sec="1083734025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.192.122.38"/>
    </slice>
    <from sec="1083733604" usec="0"/>
    <to sec="1083733912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.180.139.38"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.133.225.39"/>
    </slice>
    <from sec="1083733647" usec="0"/>
    <to sec="1083733783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.38.16.40"/>
    </slice>
    <from sec="1083733440" usec="0"/>
    <to sec="1083733554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.136.57.40"/>
    </slice>
    <from sec="1083733965" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.204.198.40"/>
    </slice>
    <from sec="1083733739" usec="0"/>
    <to sec="1083733791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.122.96.41"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083733603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.136.125.41"/>
    </slice>
    <from sec="1083733648" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.9.216.41"/>
    </slice>
    <from sec="1083733580" usec="0"/>
    <to sec="1083733647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="95.102.170.42"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="174.178.212.42"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083733762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.21.17.43"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.186.130.43"/>
    </slice>
    <from sec="1083733281" usec="0"/>
    <to sec="1083733985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.209.29.44"/>
    </slice>
    <from sec="1083733370" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.82.165.44"/>
    </slice>
    <from sec="1083733891" usec="0"/>
    <to sec="1083733954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.23.22.45"/>
    </slice>
    <from sec="1083733443" usec="0"/>
    <to sec="1083733552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.26.108.45"/>
    </slice>
    <from sec="1083733753" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3207{
style=filled;
color=gray75;
6404[label="198.198.83.46;88pkt 88fpkt", shape=invtriangle, color=brown];
9429[label="198.198.83.46;88pkt 88fpkt", shape=invhouse, color=bisque];
stat3207[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.198.83.46:80, 209.29.138.126:*}[51.1364%]&lt;BR/&gt;{198.198.83.46:80, 209.29.138.127:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29686: (0.568182%)&lt;BR/&gt; 29497: (0.568182%)&lt;BR/&gt; 29192: (0.568182%)&lt;BR/&gt; 29042: (0.568182%)&gt;];
}
6404--9429[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" src_ip="198.198.83.46" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="198.198.83.46" src_port="80"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083734034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.147.40.47"/>
    </slice>
    <from sec="1083733881" usec="0"/>
    <to sec="1083734045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.105.70.47"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083733467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,010,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3210{
style=filled;
color=gray75;
6421[label="47.116.229.47;99pkt 99fpkt", shape=invtriangle, color=brown];
9439[label="47.116.229.47;99pkt 99fpkt", shape=invhouse, color=bisque];
stat3210[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.116.229.47:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4371: (1.0101%)&lt;BR/&gt; 4064: (1.0101%)&lt;BR/&gt; 3680: (1.0101%)&lt;BR/&gt; 3082: (1.0101%)&gt;];
}
6421--9439[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="47.116.229.47"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.228.49.48"/>
    </slice>
    <from sec="1083733660" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.20.97.48"/>
    </slice>
    <from sec="1083733794" usec="0"/>
    <to sec="1083733860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.181.195.49"/>
    </slice>
    <from sec="1083733709" usec="0"/>
    <to sec="1083733925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.136.214.49"/>
    </slice>
    <from sec="1083733812" usec="0"/>
    <to sec="1083733902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.0.152.50"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.31.169.50"/>
    </slice>
    <from sec="1083733703" usec="0"/>
    <to sec="1083733886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.119.247.50"/>
    </slice>
    <from sec="1083733233" usec="0"/>
    <to sec="1083733463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.120.85.51"/>
    </slice>
    <from sec="1083733808" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.25.138.51"/>
    </slice>
    <from sec="1083733291" usec="0"/>
    <to sec="1083733669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.165.148.51"/>
    </slice>
    <from sec="1083733905" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.12.188.51"/>
    </slice>
    <from sec="1083733800" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.103.227.51"/>
    </slice>
    <from sec="1083734045" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.199.142.52"/>
    </slice>
    <from sec="1083733561" usec="0"/>
    <to sec="1083733719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.106.86.53"/>
    </slice>
    <from sec="1083733452" usec="0"/>
    <to sec="1083733571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.5.133.53"/>
    </slice>
    <from sec="1083733307" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.8.129.54"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083733475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.176.147.55"/>
    </slice>
    <from sec="1083733289" usec="0"/>
    <to sec="1083733414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.152.76.56"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.213.147.58"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.180.164.58"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083734001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.88.248.59"/>
    </slice>
    <from sec="1083733681" usec="0"/>
    <to sec="1083733784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.209.41.60"/>
    </slice>
    <from sec="1083733974" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.14.104.60"/>
    </slice>
    <from sec="1083733343" usec="0"/>
    <to sec="1083733493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.171.168.60"/>
    </slice>
    <from sec="1083733355" usec="0"/>
    <to sec="1083733585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.242.22.61"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.107.57.61"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.50.137.61"/>
    </slice>
    <from sec="1083733594" usec="0"/>
    <to sec="1083733656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.143.141.61"/>
    </slice>
    <from sec="1083733446" usec="0"/>
    <to sec="1083733820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.185.229.61"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.19.82.62"/>
    </slice>
    <from sec="1083733516" usec="0"/>
    <to sec="1083733624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.12.151.62"/>
    </slice>
    <from sec="1083733692" usec="0"/>
    <to sec="1083734049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.36.36.63"/>
    </slice>
    <from sec="1083734024" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.27.184.63"/>
    </slice>
    <from sec="1083733604" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.146.16.64"/>
    </slice>
    <from sec="1083733227" usec="0"/>
    <to sec="1083733402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.194.20.64"/>
    </slice>
    <from sec="1083733818" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577427,5.65965,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_3246{
style=filled;
color=gray75;
2369[label="173.138.161.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9572[label="173.138.161.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3246[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.161.64:1082, 198.222.100.226:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1082: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
2369--9572[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.226" dst_port="20" src_ip="173.138.161.64" src_port="1082"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.23.70.65"/>
    </slice>
    <from sec="1083733263" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.212.163.65"/>
    </slice>
    <from sec="1083734010" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.30.162.66"/>
    </slice>
    <from sec="1083733934" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.26.113.67"/>
    </slice>
    <from sec="1083733748" usec="0"/>
    <to sec="1083733899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.19.158.67"/>
    </slice>
    <from sec="1083734025" usec="0"/>
    <to sec="1083734081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="168.127.240.68"/>
    </slice>
    <from sec="1083733232" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.107.84.69"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3254{
style=filled;
color=gray75;
6719[label="47.69.151.69;3pkt 3fpkt", shape=invtriangle, color=brown];
9604[label="47.69.151.69;3pkt 3fpkt", shape=invhouse, color=bisque];
stat3254[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.69.151.69:6881, 208.96.50.84:57192}[33.3333%]&lt;BR/&gt;{47.69.151.69:6883, 208.96.50.84:55466}[33.3333%]&lt;BR/&gt;{47.69.151.69:6884, 208.96.50.84:56421}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57192: (16.6667%)&lt;BR/&gt; 56421: (16.6667%)&lt;BR/&gt; 55466: (16.6667%)&lt;BR/&gt; 6884: (16.6667%)&lt;BR/&gt; 6883: (16.6667%)&gt;];
}
6719--9604[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.50.84" dst_port="56421" src_ip="47.69.151.69" src_port="6884"/>
      <filter dst_ip="208.96.50.84" dst_port="55466" src_ip="47.69.151.69" src_port="6883"/>
      <filter dst_ip="208.96.50.84" dst_port="57192" src_ip="47.69.151.69" src_port="6881"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3255{
style=filled;
color=gray75;
2488[label="213.209.21.70;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6727[label="213.209.21.70;3pkt 3fpkt", shape=invtriangle, color=brown];
9611[label="213.209.21.70;3pkt 3fpkt", shape=invhouse, color=bisque];
stat3255[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.209.21.70:1191, 136.151.235.67:80}[25%]&lt;BR/&gt;{213.209.21.70:3640, 141.135.74.139:445}[25%]&lt;BR/&gt;{213.209.21.70:1919, 136.151.63.142:445}[25%]&lt;BR/&gt;{213.209.21.70:4596, 168.127.87.161:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (45%)&lt;BR/&gt; 4596: (15%)&lt;BR/&gt; 3640: (15%)&lt;BR/&gt; 1919: (15%)&lt;BR/&gt; 1191: (5%)&gt;];
}
2488--6727[label="1;3pkt 3fpkt"];
2488--9611[label="1;3pkt 3fpkt"];
6727--9611[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.87.161" dst_port="445" src_ip="213.209.21.70" src_port="4596"/>
      <filter dst_ip="136.151.63.142" dst_port="445" src_ip="213.209.21.70" src_port="1919"/>
      <filter dst_ip="141.135.74.139" dst_port="445" src_ip="213.209.21.70" src_port="3640"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="213.209.21.70" src_port="1191"/>
    </slice>
    <from sec="1083733577" usec="0"/>
    <to sec="1083734062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.75.76.70"/>
    </slice>
    <from sec="1083733754" usec="0"/>
    <to sec="1083733825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.228.80.73"/>
    </slice>
    <from sec="1083733544" usec="0"/>
    <to sec="1083733619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.7.110.73"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.155.149.73"/>
    </slice>
    <from sec="1083734025" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.22.163.73"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.16.213.73"/>
    </slice>
    <from sec="1083733627" usec="0"/>
    <to sec="1083733901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.3.17.74"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.187.136.74"/>
    </slice>
    <from sec="1083733362" usec="0"/>
    <to sec="1083733437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.0.156.75"/>
    </slice>
    <from sec="1083733913" usec="0"/>
    <to sec="1083733990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.220.177.76"/>
    </slice>
    <from sec="1083733422" usec="0"/>
    <to sec="1083733718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.244.204.76"/>
    </slice>
    <from sec="1083733378" usec="0"/>
    <to sec="1083733493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.246.205.77"/>
    </slice>
    <from sec="1083733323" usec="0"/>
    <to sec="1083733394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.44.119.78"/>
    </slice>
    <from sec="1083733470" usec="0"/>
    <to sec="1083733568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.29.2.79"/>
    </slice>
    <from sec="1083733553" usec="0"/>
    <to sec="1083733632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.212.102.79"/>
    </slice>
    <from sec="1083733341" usec="0"/>
    <to sec="1083733972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.10.45.80"/>
    </slice>
    <from sec="1083733408" usec="0"/>
    <to sec="1083734040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.226.150.80"/>
    </slice>
    <from sec="1083733483" usec="0"/>
    <to sec="1083733807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.160.33.81"/>
    </slice>
    <from sec="1083733250" usec="0"/>
    <to sec="1083733358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.115.104.81"/>
    </slice>
    <from sec="1083733851" usec="0"/>
    <to sec="1083733909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.18.104.82"/>
    </slice>
    <from sec="1083734014" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.32.134.82"/>
    </slice>
    <from sec="1083733786" usec="0"/>
    <to sec="1083734043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.74.240.82"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.147.98.83"/>
    </slice>
    <from sec="1083734015" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.153.161.83"/>
    </slice>
    <from sec="1083733578" usec="0"/>
    <to sec="1083733712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.72.168.83"/>
    </slice>
    <from sec="1083733940" usec="0"/>
    <to sec="1083733996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.84.212.83"/>
    </slice>
    <from sec="1083733337" usec="0"/>
    <to sec="1083733424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.2.13.84"/>
    </slice>
    <from sec="1083733916" usec="0"/>
    <to sec="1083734012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.155.22.84"/>
    </slice>
    <from sec="1083733239" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.122.43.84"/>
    </slice>
    <from sec="1083733914" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.181.96.84"/>
    </slice>
    <from sec="1083733671" usec="0"/>
    <to sec="1083733797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.29.150.84"/>
    </slice>
    <from sec="1083733954" usec="0"/>
    <to sec="1083734033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.32.174.84"/>
    </slice>
    <from sec="1083733397" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.139.178.84"/>
    </slice>
    <from sec="1083733729" usec="0"/>
    <to sec="1083733838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.39.196.84"/>
    </slice>
    <from sec="1083733565" usec="0"/>
    <to sec="1083733731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.27.198.84"/>
    </slice>
    <from sec="1083733721" usec="0"/>
    <to sec="1083733771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.19.2.85"/>
    </slice>
    <from sec="1083733866" usec="0"/>
    <to sec="1083734026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.151.66.85"/>
    </slice>
    <from sec="1083733626" usec="0"/>
    <to sec="1083733703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.84.37.86"/>
    </slice>
    <from sec="1083733495" usec="0"/>
    <to sec="1083733776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.107.53.86"/>
    </slice>
    <from sec="1083733502" usec="0"/>
    <to sec="1083733660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.27.74.86"/>
    </slice>
    <from sec="1083733537" usec="0"/>
    <to sec="1083733619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.35.97.86"/>
    </slice>
    <from sec="1083733453" usec="0"/>
    <to sec="1083733687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.27.141.86"/>
    </slice>
    <from sec="1083733652" usec="0"/>
    <to sec="1083733788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.1.226.86"/>
    </slice>
    <from sec="1083733915" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3299{
style=filled;
color=gray75;
368[label="136.150.23.87;s;21pkt 21fpkt", shape=diamond, color=yellow];
6978[label="136.150.23.87;25pkt 25fpkt", shape=invtriangle, color=brown];
9756[label="136.150.23.87;25pkt 25fpkt", shape=invhouse, color=bisque];
stat3299[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.23.87:*, 203.66.93.153:80}[57.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.0704%)&lt;BR/&gt; 32448: (2.11268%)&lt;BR/&gt; 32432: (2.11268%)&lt;BR/&gt; 32129: (2.11268%)&lt;BR/&gt; 31605: (2.11268%)&gt;];
}
368--6978[label="0.952381;20pkt 20fpkt"];
368--9756[label="0.952381;20pkt 20fpkt"];
6978--9756[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="203.66.93.153" dst_port="80" src_ip="136.150.23.87"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.1.57.87"/>
    </slice>
    <from sec="1083733226" usec="0"/>
    <to sec="1083733334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.107.91.87"/>
    </slice>
    <from sec="1083733884" usec="0"/>
    <to sec="1083734030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.20.123.87"/>
    </slice>
    <from sec="1083733328" usec="0"/>
    <to sec="1083733551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.41.155.87"/>
    </slice>
    <from sec="1083733973" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.140.156.87"/>
    </slice>
    <from sec="1083733841" usec="0"/>
    <to sec="1083733937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.124.50.88"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.95.132.88"/>
    </slice>
    <from sec="1083733772" usec="0"/>
    <to sec="1083733864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.45.212.88"/>
    </slice>
    <from sec="1083733428" usec="0"/>
    <to sec="1083733581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.169.66.89"/>
    </slice>
    <from sec="1083734032" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.89.193.89"/>
    </slice>
    <from sec="1083733398" usec="0"/>
    <to sec="1083733454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.246.143.90"/>
    </slice>
    <from sec="1083733709" usec="0"/>
    <to sec="1083733841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.218.168.90"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.50.220.90"/>
    </slice>
    <from sec="1083733508" usec="0"/>
    <to sec="1083733650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.209.103.91"/>
    </slice>
    <from sec="1083733653" usec="0"/>
    <to sec="1083733752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.137.228.91"/>
    </slice>
    <from sec="1083733298" usec="0"/>
    <to sec="1083733516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.238.57.92"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.112.99.92"/>
    </slice>
    <from sec="1083734009" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.7.230.92"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.3.52.93"/>
    </slice>
    <from sec="1083733794" usec="0"/>
    <to sec="1083733871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.176.171.93"/>
    </slice>
    <from sec="1083733762" usec="0"/>
    <to sec="1083733860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.138.209.93"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.82.254.93"/>
    </slice>
    <from sec="1083733676" usec="0"/>
    <to sec="1083733772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.123.52.95"/>
    </slice>
    <from sec="1083733218" usec="0"/>
    <to sec="1083733249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.40.69.95"/>
    </slice>
    <from sec="1083733436" usec="0"/>
    <to sec="1083733499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.64.69.95"/>
    </slice>
    <from sec="1083733755" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.1.76.95"/>
    </slice>
    <from sec="1083733842" usec="0"/>
    <to sec="1083734053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.201.175.96"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.19.186.96"/>
    </slice>
    <from sec="1083733471" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.244.195.96"/>
    </slice>
    <from sec="1083733799" usec="0"/>
    <to sec="1083733896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.134.99.97"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083733755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.26.116.97"/>
    </slice>
    <from sec="1083733214" usec="0"/>
    <to sec="1083733450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.20.138.97"/>
    </slice>
    <from sec="1083733933" usec="0"/>
    <to sec="1083734017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.111.144.98"/>
    </slice>
    <from sec="1083733284" usec="0"/>
    <to sec="1083733367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09632,5.63531,010,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3333{
style=filled;
color=gray75;
552[label="173.138.155.98;s;43pkt 43fpkt", shape=diamond, color=yellow];
7147[label="173.138.155.98;44pkt 44fpkt", shape=invtriangle, color=brown];
9857[label="173.138.155.98;44pkt 44fpkt", shape=invhouse, color=bisque];
stat3333[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.155.98:*, 44.218.17.50:6667}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (48.855%)&lt;BR/&gt; 4997: (1.14504%)&lt;BR/&gt; 4996: (1.14504%)&lt;BR/&gt; 3718: (1.14504%)&lt;BR/&gt; 2271: (1.14504%)&gt;];
}
552--7147[label="0.976744;42pkt 42fpkt"];
552--9857[label="0.976744;42pkt 42fpkt"];
7147--9857[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="44.218.17.50" dst_port="6667" src_ip="173.138.155.98"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.225.200.99"/>
    </slice>
    <from sec="1083733981" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.253.5.100"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.99.32.101"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.179.2.102"/>
    </slice>
    <from sec="1083733862" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3338{
style=filled;
color=gray75;
7194[label="46.134.90.102;16pkt 16fpkt", shape=invtriangle, color=brown];
9881[label="46.134.90.102;16pkt 16fpkt", shape=invhouse, color=bisque];
stat3338[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.134.90.102:80, 209.29.138.10:*}[37.5%]&lt;BR/&gt;{46.134.90.102:80, 209.29.138.126:*}[31.25%]&lt;BR/&gt;{46.134.90.102:80, 209.29.138.127:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58728: (3.125%)&lt;BR/&gt; 53783: (3.125%)&lt;BR/&gt; 51668: (3.125%)&lt;BR/&gt; 49565: (3.125%)&gt;];
}
7194--9881[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="46.134.90.102" src_port="80"/>
      <filter dst_ip="209.29.138.127" src_ip="46.134.90.102" src_port="80"/>
      <filter dst_ip="209.29.138.126" src_ip="46.134.90.102" src_port="80"/>
    </slice>
    <from sec="1083733301" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.138.160.102"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3340{
style=filled;
color=gray75;
7225[label="173.138.128.104;25pkt 25fpkt", shape=invtriangle, color=brown];
9899[label="173.138.128.104;26pkt 26fpkt", shape=invhouse, color=bisque];
stat3340[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.128.104:*, *:25}[34.6154%]&lt;BR/&gt;{173.138.128.104:25, *:*}[26.9231%]&lt;BR/&gt;{173.138.128.104:*, *:113}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30.3922%)&lt;BR/&gt; 113: (13.7255%)&lt;BR/&gt; 53: (7.84314%)&lt;BR/&gt; 62428: (1.96078%)&lt;BR/&gt; 56489: (1.96078%)&gt;];
}
7225--9899[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.128.104" src_port="25"/>
      <filter dst_port="25" src_ip="173.138.128.104"/>
      <filter dst_port="113" src_ip="173.138.128.104"/>
    </slice>
    <from sec="1083733219" usec="0"/>
    <to sec="1083734092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.222.139.104"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083734010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.209.19.106"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.103.104.106"/>
    </slice>
    <from sec="1083733514" usec="0"/>
    <to sec="1083733602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.226.0.107"/>
    </slice>
    <from sec="1083733530" usec="0"/>
    <to sec="1083733790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.4.75.107"/>
    </slice>
    <from sec="1083733749" usec="0"/>
    <to sec="1083733804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.193.95.107"/>
    </slice>
    <from sec="1083733770" usec="0"/>
    <to sec="1083733885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.138.129.107"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083734067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.158.104.108"/>
    </slice>
    <from sec="1083733591" usec="0"/>
    <to sec="1083733691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.86.24.109"/>
    </slice>
    <from sec="1083733381" usec="0"/>
    <to sec="1083733570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.89.238.109"/>
    </slice>
    <from sec="1083733503" usec="0"/>
    <to sec="1083734016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.221.193.110"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.89.26.111"/>
    </slice>
    <from sec="1083733815" usec="0"/>
    <to sec="1083734054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.103.41.111"/>
    </slice>
    <from sec="1083733562" usec="0"/>
    <to sec="1083733670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.34.67.111"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083733359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.42.193.111"/>
    </slice>
    <from sec="1083733367" usec="0"/>
    <to sec="1083733503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.1.237.112"/>
    </slice>
    <from sec="1083733523" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.42.240.112"/>
    </slice>
    <from sec="1083733206" usec="0"/>
    <to sec="1083733277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.66.22.113"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.225.170.113"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.205.100.114"/>
    </slice>
    <from sec="1083733631" usec="0"/>
    <to sec="1083733718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3361{
style=filled;
color=gray75;
156[label="141.22.88.100;s;245pkt 245fpkt", shape=diamond, color=yellow];
284[label="44.43.150.228;d;183pkt 183fpkt", shape=diamond, color=yellow];
399[label="45.108.82.82;d;14pkt 14fpkt", shape=diamond, color=yellow];
603[label="141.22.86.221;s;190pkt 190fpkt", shape=diamond, color=yellow];
826[label="136.151.242.183;s;31pkt 31fpkt", shape=diamond, color=yellow];
849[label="155.148.180.32;s;83pkt 83fpkt", shape=diamond, color=yellow];
936[label="53.157.203.40;d;15pkt 15fpkt", shape=diamond, color=yellow];
1346[label="209.29.146.15;55pkt 55fpkt", shape=pentagon, color=darkviolet];
1606[label="168.127.136.27;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1621[label="136.151.243.27;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1712[label="155.148.180.32;87pkt 87fpkt", shape=pentagon, color=darkviolet];
1874[label="168.127.91.39;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2353[label="209.18.96.63;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2643[label="168.127.180.77;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2779[label="141.22.86.84;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2935[label="136.151.159.91;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3048[label="141.22.88.97;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3107[label="141.22.88.100;262pkt 262fpkt", shape=pentagon, color=darkviolet];
3122[label="136.151.45.101;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3309[label="136.151.68.112;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3946[label="208.96.53.148;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4074[label="173.138.220.154;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4597[label="136.151.242.183;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4691[label="136.150.98.190;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5185[label="141.22.86.221;201pkt 201fpkt", shape=pentagon, color=darkviolet];
5655[label="173.138.142.253;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5948[label="209.29.146.15;55pkt 55fpkt", shape=invtriangle, color=brown];
6121[label="168.127.136.27;9pkt 9fpkt", shape=invtriangle, color=brown];
6130[label="136.151.243.27;16pkt 16fpkt", shape=invtriangle, color=brown];
6193[label="155.148.180.32;86pkt 86fpkt", shape=invtriangle, color=brown];
6633[label="209.18.96.63;49pkt 49fpkt", shape=invtriangle, color=brown];
6839[label="168.127.180.77;12pkt 12fpkt", shape=invtriangle, color=brown];
6935[label="141.22.86.84;32pkt 32fpkt", shape=invtriangle, color=brown];
7047[label="136.151.159.91;46pkt 46fpkt", shape=invtriangle, color=brown];
7308[label="136.151.68.112;13pkt 13fpkt", shape=invtriangle, color=brown];
7345[label="136.151.232.114;70pkt 70fpkt", shape=invtriangle, color=brown];
7850[label="173.138.220.154;21pkt 21fpkt", shape=invtriangle, color=brown];
8287[label="136.150.98.190;34pkt 34fpkt", shape=invtriangle, color=brown];
8625[label="141.22.86.221;200pkt 200fpkt", shape=invtriangle, color=brown];
8684[label="136.151.47.226;25pkt 25fpkt", shape=invtriangle, color=brown];
9250[label="168.127.136.27;9pkt 9fpkt", shape=invhouse, color=bisque];
9254[label="136.151.243.27;17pkt 17fpkt", shape=invhouse, color=bisque];
9301[label="155.148.180.32;86pkt 86fpkt", shape=invhouse, color=bisque];
9563[label="209.18.96.63;50pkt 50fpkt", shape=invhouse, color=bisque];
9727[label="141.22.86.84;31pkt 31fpkt", shape=invhouse, color=bisque];
9802[label="136.151.159.91;46pkt 46fpkt", shape=invhouse, color=bisque];
9954[label="136.151.68.112;12pkt 12fpkt", shape=invhouse, color=bisque];
9979[label="136.151.232.114;70pkt 70fpkt", shape=invhouse, color=bisque];
10556[label="136.150.98.190;33pkt 33fpkt", shape=invhouse, color=bisque];
10769[label="141.22.86.221;200pkt 200fpkt", shape=invhouse, color=bisque];
10805[label="136.151.47.226;26pkt 26fpkt", shape=invhouse, color=bisque];
stat3361[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[80.8717%]&lt;BR/&gt;{141.22.88.100:*, *:*}[21.1461%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2377%)&lt;BR/&gt; 0: (4.86594%)&lt;BR/&gt; 53: (3.83979%)&lt;BR/&gt; 25: (1.48957%)&lt;BR/&gt; 65534: (1.32406%)&gt;];
}
156--284[label="0.0437158;8pkt 8fpkt"];
156--3107[label="1;245pkt 245fpkt"];
284--317[label="0.00546448;1pkt 1fpkt"];
284--453[label="0.00546448;1pkt 1fpkt"];
284--589[label="0.010929;2pkt 2fpkt"];
284--603[label="0.0437158;8pkt 8fpkt"];
284--676[label="0.00546448;1pkt 1fpkt"];
284--826[label="0.193548;6pkt 6fpkt"];
284--849[label="0.156627;13pkt 13fpkt"];
284--1079[label="0.0555556;1pkt 1fpkt"];
284--1346[label="0.0181818;1pkt 1fpkt"];
284--1606[label="0.2;2pkt 2fpkt"];
284--1621[label="0.0588235;1pkt 1fpkt"];
284--1712[label="0.149425;13pkt 13fpkt"];
284--1874[label="0.0625;1pkt 1fpkt"];
284--2353[label="0.02;1pkt 1fpkt"];
284--2598[label="0.00546448;1pkt 1fpkt"];
284--2779[label="0.125;4pkt 4fpkt"];
284--2787[label="0.00546448;1pkt 1fpkt"];
284--2935[label="0.0652174;3pkt 3fpkt"];
284--3048[label="0.0833333;4pkt 4fpkt"];
284--3107[label="0.0437158;8pkt 8fpkt"];
284--3122[label="0.04;1pkt 1fpkt"];
284--3332[label="0.00546448;1pkt 1fpkt"];
284--3946[label="0.108108;4pkt 4fpkt"];
284--4074[label="0.0454545;1pkt 1fpkt"];
284--4597[label="0.193548;6pkt 6fpkt"];
284--4691[label="0.0294118;1pkt 1fpkt"];
284--5185[label="0.0437158;8pkt 8fpkt"];
284--5655[label="0.0714286;1pkt 1fpkt"];
284--5948[label="0.0181818;1pkt 1fpkt"];
284--6121[label="0.222222;2pkt 2fpkt"];
284--6193[label="0.151163;13pkt 13fpkt"];
284--6633[label="0.0204082;1pkt 1fpkt"];
284--6935[label="0.125;4pkt 4fpkt"];
284--6941[label="0.00546448;1pkt 1fpkt"];
284--7047[label="0.0652174;3pkt 3fpkt"];
284--7345[label="0.0142857;1pkt 1fpkt"];
284--7850[label="0.047619;1pkt 1fpkt"];
284--8287[label="0.0294118;1pkt 1fpkt"];
284--8596[label="0.00546448;1pkt 1fpkt"];
284--8625[label="0.0437158;8pkt 8fpkt"];
284--8684[label="0.12;3pkt 3fpkt"];
284--9250[label="0.222222;2pkt 2fpkt"];
284--9254[label="0.0588235;1pkt 1fpkt"];
284--9301[label="0.151163;13pkt 13fpkt"];
284--9563[label="0.02;1pkt 1fpkt"];
284--9727[label="0.129032;4pkt 4fpkt"];
284--9730[label="0.00546448;1pkt 1fpkt"];
284--9802[label="0.0652174;3pkt 3fpkt"];
284--9979[label="0.0142857;1pkt 1fpkt"];
284--10556[label="0.030303;1pkt 1fpkt"];
284--10769[label="0.0437158;8pkt 8fpkt"];
284--10805[label="0.115385;3pkt 3fpkt"];
399--1606[label="0.2;2pkt 2fpkt"];
399--2643[label="0.5;6pkt 6fpkt"];
399--6121[label="0.222222;2pkt 2fpkt"];
399--6839[label="0.5;6pkt 6fpkt"];
399--9250[label="0.222222;2pkt 2fpkt"];
603--936[label="0.0666667;1pkt 1fpkt"];
603--5185[label="1;190pkt 190fpkt"];
603--8625[label="0.994737;189pkt 189fpkt"];
603--10769[label="0.994737;189pkt 189fpkt"];
826--4597[label="1;31pkt 31fpkt"];
849--1712[label="1;83pkt 83fpkt"];
849--6193[label="0.987952;82pkt 82fpkt"];
849--9301[label="0.987952;82pkt 82fpkt"];
936--3309[label="0.0769231;1pkt 1fpkt"];
936--5185[label="0.0666667;1pkt 1fpkt"];
936--7308[label="0.0769231;1pkt 1fpkt"];
936--7345[label="0.466667;7pkt 7fpkt"];
936--8625[label="0.0666667;1pkt 1fpkt"];
936--9954[label="0.0833333;1pkt 1fpkt"];
936--9979[label="0.466667;7pkt 7fpkt"];
936--10769[label="0.0666667;1pkt 1fpkt"];
1346--5948[label="1;55pkt 55fpkt"];
1606--6121[label="1;9pkt 9fpkt"];
1606--9250[label="1;9pkt 9fpkt"];
1621--6130[label="1;16pkt 16fpkt"];
1621--9254[label="1;17pkt 17fpkt"];
1712--6193[label="1;86pkt 86fpkt"];
1712--9301[label="1;86pkt 86fpkt"];
2353--6633[label="1;49pkt 49fpkt"];
2353--9563[label="1;50pkt 50fpkt"];
2643--6839[label="1;12pkt 12fpkt"];
2779--6935[label="1;32pkt 32fpkt"];
2779--9727[label="1;31pkt 31fpkt"];
2935--7047[label="1;46pkt 46fpkt"];
2935--9802[label="1;46pkt 46fpkt"];
3309--7308[label="1;13pkt 13fpkt"];
3309--9954[label="1;12pkt 12fpkt"];
4074--7850[label="1;21pkt 21fpkt"];
4691--8287[label="1;34pkt 34fpkt"];
4691--10556[label="1;33pkt 33fpkt"];
5185--8625[label="1;200pkt 200fpkt"];
5185--10769[label="1;200pkt 200fpkt"];
6121--9250[label="1;9pkt 9fpkt"];
6130--9254[label="1;16pkt 16fpkt"];
6193--9301[label="1;86pkt 86fpkt"];
6633--9563[label="1;49pkt 49fpkt"];
6935--9727[label="1;31pkt 31fpkt"];
7047--9802[label="1;46pkt 46fpkt"];
7308--9954[label="1;12pkt 12fpkt"];
7345--9979[label="1;70pkt 70fpkt"];
8287--10556[label="1;33pkt 33fpkt"];
8625--10769[label="1;200pkt 200fpkt"];
8684--10805[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="141.22.88.100"/>
      <filter src_port="80"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.5.1.115"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083733907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.71.60.115"/>
    </slice>
    <from sec="1083733309" usec="0"/>
    <to sec="1083733398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.176.118.116"/>
    </slice>
    <from sec="1083733258" usec="0"/>
    <to sec="1083733362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3365{
style=filled;
color=gray75;
3399[label="197.0.247.116;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7372[label="197.0.247.116;2pkt 2fpkt", shape=invtriangle, color=brown];
9996[label="197.0.247.116;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3365[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.0.247.116:15925, 136.151.235.67:80}[50%]&lt;BR/&gt;{197.0.247.116:15751, 155.148.24.103:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 15751: (30%)&lt;BR/&gt; 15925: (20%)&gt;];
}
3399--7372[label="1;2pkt 2fpkt"];
3399--9996[label="1;1pkt 1fpkt"];
7372--9996[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.24.103" dst_port="80" src_ip="197.0.247.116" src_port="15751"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="197.0.247.116" src_port="15925"/>
    </slice>
    <from sec="1083733252" usec="0"/>
    <to sec="1083733388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.240.199.117"/>
    </slice>
    <from sec="1083733354" usec="0"/>
    <to sec="1083733621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.71.203.117"/>
    </slice>
    <from sec="1083733294" usec="0"/>
    <to sec="1083733393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.97.164.118"/>
    </slice>
    <from sec="1083733745" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3369{
style=filled;
color=gray75;
780[label="44.140.77.186;s;72pkt 72fpkt", shape=diamond, color=yellow];
4632[label="44.140.77.186;82pkt 82fpkt", shape=pentagon, color=darkviolet];
8246[label="44.140.77.186;81pkt 81fpkt", shape=invtriangle, color=brown];
10532[label="44.140.77.186;82pkt 82fpkt", shape=invhouse, color=bisque];
stat3369[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.140.77.186:*, *:80}[91.4634%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5836%)&lt;BR/&gt; 53: (4.4164%)&lt;BR/&gt; 64695: (0.630915%)&lt;BR/&gt; 64682: (0.630915%)&lt;BR/&gt; 63780: (0.630915%)&gt;];
}
780--982[label="0.0416667;3pkt 3fpkt"];
780--4632[label="1;72pkt 72fpkt"];
780--8246[label="0.986111;71pkt 71fpkt"];
780--10532[label="1;72pkt 72fpkt"];
4632--8246[label="1;81pkt 81fpkt"];
4632--10532[label="1;82pkt 82fpkt"];
8246--10532[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="44.140.77.186"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.72.142.119"/>
    </slice>
    <from sec="1083733212" usec="0"/>
    <to sec="1083734071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3371{
style=filled;
color=gray75;
3452[label="197.18.108.120;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7412[label="197.18.108.120;3pkt 3fpkt", shape=invtriangle, color=brown];
10016[label="197.18.108.120;3pkt 3fpkt", shape=invhouse, color=bisque];
stat3371[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.18.108.120:1050, 136.151.235.67:80}[25%]&lt;BR/&gt;{197.18.108.120:1837, 155.148.94.118:80}[25%]&lt;BR/&gt;{197.18.108.120:3587, 208.96.3.145:445}[25%]&lt;BR/&gt;{197.18.108.120:1737, 141.145.125.146:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (30%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 3587: (15%)&lt;BR/&gt; 1837: (15%)&lt;BR/&gt; 1737: (15%)&gt;];
}
3452--7412[label="1;3pkt 3fpkt"];
3452--10016[label="1;3pkt 3fpkt"];
7412--10016[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.145.125.146" dst_port="445" src_ip="197.18.108.120" src_port="1737"/>
      <filter dst_ip="208.96.3.145" dst_port="445" src_ip="197.18.108.120" src_port="3587"/>
      <filter dst_ip="155.148.94.118" dst_port="80" src_ip="197.18.108.120" src_port="1837"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="197.18.108.120" src_port="1050"/>
    </slice>
    <from sec="1083733366" usec="0"/>
    <to sec="1083734063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.26.179.120"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083733275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.32.21.122"/>
    </slice>
    <from sec="1083733310" usec="0"/>
    <to sec="1083733634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.161.86.122"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.164.70.123"/>
    </slice>
    <from sec="1083733793" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.139.155.123"/>
    </slice>
    <from sec="1083733535" usec="0"/>
    <to sec="1083733660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.17.193.123"/>
    </slice>
    <from sec="1083733975" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.232.32.124"/>
    </slice>
    <from sec="1083733792" usec="0"/>
    <to sec="1083733933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.181.112.124"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,011,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3380{
style=filled;
color=gray75;
7475[label="196.8.46.126;392pkt 392fpkt", shape=invtriangle, color=brown];
10060[label="196.8.46.126;392pkt 392fpkt", shape=invhouse, color=bisque];
stat3380[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.8.46.126:7000, *:*}[51.2755%]&lt;BR/&gt;{196.8.46.126:6000, *:*}[48.7245%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (25.6378%)&lt;BR/&gt; 6000: (24.3622%)&lt;BR/&gt; 34238: (0.255102%)&lt;BR/&gt; 63564: (0.127551%)&lt;BR/&gt; 63037: (0.127551%)&gt;];
}
7475--10060[label="1;392pkt 392fpkt"];
</description>
    <slice>
      <filter src_ip="196.8.46.126" src_port="7000"/>
      <filter src_ip="196.8.46.126" src_port="6000"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.131.172.126"/>
    </slice>
    <from sec="1083733823" usec="0"/>
    <to sec="1083733943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.194.194.126"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.50.140.129"/>
    </slice>
    <from sec="1083733697" usec="0"/>
    <to sec="1083733798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.21.0.130"/>
    </slice>
    <from sec="1083733780" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.2.92.130"/>
    </slice>
    <from sec="1083733860" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.89.171.130"/>
    </slice>
    <from sec="1083733248" usec="0"/>
    <to sec="1083733323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3387{
style=filled;
color=gray75;
177[label="208.96.49.184;d;387pkt 387fpkt", shape=diamond, color=yellow];
203[label="208.57.12.15;s;6pkt 6fpkt", shape=diamond, color=yellow];
239[label="208.96.53.246;d;293pkt 293fpkt", shape=diamond, color=yellow];
255[label="209.29.137.50;d;172pkt 172fpkt", shape=diamond, color=yellow];
293[label="218.160.145.103;s;9pkt 9fpkt", shape=diamond, color=yellow];
304[label="136.151.104.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
347[label="173.138.210.83;d;207pkt 207fpkt", shape=diamond, color=yellow];
350[label="173.138.129.159;d;552pkt 552fpkt", shape=diamond, color=yellow];
356[label="155.148.182.240;d;84pkt 84fpkt", shape=diamond, color=yellow];
452[label="141.22.86.219;d;814pkt 814fpkt", shape=diamond, color=yellow];
457[label="141.22.86.84;d;89pkt 89fpkt", shape=diamond, color=yellow];
490[label="173.138.45.35;d;441pkt 441fpkt", shape=diamond, color=yellow];
591[label="44.140.77.129;s;57pkt 57fpkt", shape=diamond, color=yellow];
637[label="215.222.217.51;s;9pkt 9fpkt", shape=diamond, color=yellow];
661[label="168.127.136.13;d;385pkt 385fpkt", shape=diamond, color=yellow];
666[label="173.138.45.176;d;65pkt 65fpkt", shape=diamond, color=yellow];
683[label="209.29.155.118;d;288pkt 288fpkt", shape=diamond, color=yellow];
684[label="141.22.241.29;d;615pkt 615fpkt", shape=diamond, color=yellow];
697[label="136.151.118.154;d;108pkt 108fpkt", shape=diamond, color=yellow];
786[label="44.140.77.0;s;49pkt 49fpkt", shape=diamond, color=yellow];
850[label="219.216.144.168;s;71pkt 71fpkt", shape=diamond, color=yellow];
861[label="209.29.130.60;d;198pkt 198fpkt", shape=diamond, color=yellow];
864[label="44.65.117.244;s;32pkt 32fpkt", shape=diamond, color=yellow];
878[label="44.140.77.34;s;67pkt 67fpkt", shape=diamond, color=yellow];
880[label="208.96.49.160;d;374pkt 374fpkt", shape=diamond, color=yellow];
892[label="44.140.77.18;s;66pkt 66fpkt", shape=diamond, color=yellow];
900[label="141.22.88.125;d;53pkt 53fpkt", shape=diamond, color=yellow];
1000[label="44.140.77.0;66pkt 66fpkt", shape=pentagon, color=darkviolet];
1064[label="45.172.218.2;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1250[label="209.253.225.10;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1316[label="44.140.77.14;34pkt 34fpkt", shape=pentagon, color=darkviolet];
1328[label="208.57.12.15;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1403[label="44.140.77.18;67pkt 67fpkt", shape=pentagon, color=darkviolet];
1450[label="197.28.234.19;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1545[label="53.246.121.24;120pkt 120fpkt", shape=pentagon, color=darkviolet];
1600[label="44.140.77.27;43pkt 43fpkt", shape=pentagon, color=darkviolet];
1620[label="197.28.234.27;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1627[label="216.21.20.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1721[label="198.171.66.33;673pkt 673fpkt", shape=pentagon, color=darkviolet];
1749[label="44.140.77.34;74pkt 74fpkt", shape=pentagon, color=darkviolet];
1803[label="202.23.168.36;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1919[label="198.163.98.41;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2057[label="44.140.77.48;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2079[label="44.212.16.49;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2147[label="215.222.217.51;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2265[label="44.140.77.58;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2269[label="209.74.116.58;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2311[label="208.49.2.61;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2411[label="140.46.92.66;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2422[label="219.136.214.66;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2590[label="219.202.175.74;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2632[label="44.140.77.77;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2717[label="219.200.182.81;67pkt 67fpkt", shape=pentagon, color=darkviolet];
2829[label="174.220.127.86;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2973[label="209.131.132.93;107pkt 107fpkt", shape=pentagon, color=darkviolet];
3021[label="205.210.39.96;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3025[label="198.74.79.96;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3126[label="199.115.122.101;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3166[label="218.253.2.104;83pkt 83fpkt", shape=pentagon, color=darkviolet];
3190[label="210.148.6.105;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3222[label="218.253.2.107;107pkt 107fpkt", shape=pentagon, color=darkviolet];
3436[label="94.239.152.119;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3454[label="219.202.175.120;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3538[label="95.81.1.126;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3590[label="44.140.77.129;60pkt 60fpkt", shape=pentagon, color=darkviolet];
3636[label="199.243.72.131;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3653[label="44.140.77.132;71pkt 71fpkt", shape=pentagon, color=darkviolet];
3668[label="219.197.6.133;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3760[label="202.204.147.137;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3835[label="204.142.40.141;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3838[label="44.140.77.141;68pkt 68fpkt", shape=pentagon, color=darkviolet];
3853[label="204.142.40.142;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3987[label="44.140.77.150;75pkt 75fpkt", shape=pentagon, color=darkviolet];
4013[label="40.250.192.151;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4069[label="46.71.192.154;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4126[label="209.45.191.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4293[label="198.74.78.167;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4318[label="219.216.144.168;76pkt 76fpkt", shape=pentagon, color=darkviolet];
4329[label="44.140.77.169;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4330[label="201.146.78.169;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4350[label="209.66.169.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4488[label="44.140.77.178;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4518[label="44.140.77.179;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4634[label="196.14.97.186;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4663[label="44.140.77.188;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4666[label="93.206.105.188;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4680[label="93.206.105.189;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4690[label="197.22.91.190;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4704[label="201.34.141.191;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4745[label="174.64.158.193;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4753[label="93.6.4.194;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4843[label="198.74.76.199;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4883[label="46.120.75.202;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5024[label="214.124.165.210;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5038[label="44.140.77.211;58pkt 58fpkt", shape=pentagon, color=darkviolet];
5343[label="201.178.197.230;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5379[label="208.49.2.233;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5401[label="198.198.112.234;40pkt 40fpkt", shape=pentagon, color=darkviolet];
5415[label="199.115.112.235;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5458[label="204.92.182.237;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5476[label="93.195.176.238;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5508[label="216.61.48.241;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5643[label="204.173.13.252;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5692[label="44.140.77.0;66pkt 66fpkt", shape=invtriangle, color=brown];
5875[label="209.253.225.10;27pkt 27fpkt", shape=invtriangle, color=brown];
5927[label="44.140.77.14;35pkt 35fpkt", shape=invtriangle, color=brown];
5937[label="208.57.12.15;5pkt 5fpkt", shape=invtriangle, color=brown];
5990[label="44.140.77.18;68pkt 68fpkt", shape=invtriangle, color=brown];
6082[label="53.246.121.24;120pkt 120fpkt", shape=invtriangle, color=brown];
6117[label="44.140.77.27;43pkt 43fpkt", shape=invtriangle, color=brown];
6198[label="198.171.66.33;673pkt 673fpkt", shape=invtriangle, color=brown];
6223[label="44.140.77.34;73pkt 73fpkt", shape=invtriangle, color=brown];
6334[label="198.163.98.41;40pkt 40fpkt", shape=invtriangle, color=brown];
6427[label="44.140.77.48;52pkt 52fpkt", shape=invtriangle, color=brown];
6443[label="44.212.16.49;8pkt 8fpkt", shape=invtriangle, color=brown];
6569[label="44.140.77.58;45pkt 45fpkt", shape=invtriangle, color=brown];
6573[label="209.74.116.58;6pkt 6fpkt", shape=invtriangle, color=brown];
6681[label="219.136.214.66;21pkt 21fpkt", shape=invtriangle, color=brown];
6803[label="219.202.175.74;37pkt 37fpkt", shape=invtriangle, color=brown];
6832[label="44.140.77.77;38pkt 38fpkt", shape=invtriangle, color=brown];
7111[label="205.210.39.96;21pkt 21fpkt", shape=invtriangle, color=brown];
7115[label="198.74.79.96;6pkt 6fpkt", shape=invtriangle, color=brown];
7183[label="199.115.122.101;10pkt 10fpkt", shape=invtriangle, color=brown];
7216[label="218.253.2.104;83pkt 83fpkt", shape=invtriangle, color=brown];
7232[label="210.148.6.105;18pkt 18fpkt", shape=invtriangle, color=brown];
7249[label="218.253.2.107;106pkt 106fpkt", shape=invtriangle, color=brown];
7400[label="219.240.44.119;5pkt 5fpkt", shape=invtriangle, color=brown];
7415[label="219.202.175.120;44pkt 44fpkt", shape=invtriangle, color=brown];
7474[label="95.81.1.126;44pkt 44fpkt", shape=invtriangle, color=brown];
7511[label="44.140.77.129;60pkt 60fpkt", shape=invtriangle, color=brown];
7549[label="199.243.72.131;5pkt 5fpkt", shape=invtriangle, color=brown];
7563[label="44.140.77.132;71pkt 71fpkt", shape=invtriangle, color=brown];
7579[label="221.164.66.133;4pkt 4fpkt", shape=invtriangle, color=brown];
7637[label="202.204.147.137;104pkt 104fpkt", shape=invtriangle, color=brown];
7793[label="44.140.77.150;74pkt 74fpkt", shape=invtriangle, color=brown];
7810[label="40.250.192.151;18pkt 18fpkt", shape=invtriangle, color=brown];
7886[label="209.45.191.157;1pkt 1fpkt", shape=invtriangle, color=brown];
8011[label="198.74.78.167;14pkt 14fpkt", shape=invtriangle, color=brown];
8029[label="219.216.144.168;76pkt 76fpkt", shape=invtriangle, color=brown];
8037[label="44.140.77.169;69pkt 69fpkt", shape=invtriangle, color=brown];
8055[label="209.66.169.170;1pkt 1fpkt", shape=invtriangle, color=brown];
8150[label="44.140.77.178;39pkt 39fpkt", shape=invtriangle, color=brown];
8248[label="196.14.97.186;6pkt 6fpkt", shape=invtriangle, color=brown];
8267[label="44.140.77.188;31pkt 31fpkt", shape=invtriangle, color=brown];
8269[label="93.206.105.188;17pkt 17fpkt", shape=invtriangle, color=brown];
8279[label="93.206.105.189;24pkt 24fpkt", shape=invtriangle, color=brown];
8286[label="197.22.91.190;11pkt 11fpkt", shape=invtriangle, color=brown];
8323[label="174.64.158.193;9pkt 9fpkt", shape=invtriangle, color=brown];
8503[label="214.124.165.210;32pkt 32fpkt", shape=invtriangle, color=brown];
8517[label="44.140.77.211;57pkt 57fpkt", shape=invtriangle, color=brown];
8760[label="208.49.2.233;24pkt 24fpkt", shape=invtriangle, color=brown];
8825[label="93.195.176.238;12pkt 12fpkt", shape=invtriangle, color=brown];
8946[label="204.173.13.252;36pkt 36fpkt", shape=invtriangle, color=brown];
8978[label="44.140.77.0;67pkt 67fpkt", shape=invhouse, color=bisque];
9135[label="44.140.77.14;35pkt 35fpkt", shape=invhouse, color=bisque];
9143[label="208.57.12.15;5pkt 5fpkt", shape=invhouse, color=bisque];
9176[label="44.140.77.18;68pkt 68fpkt", shape=invhouse, color=bisque];
9230[label="53.246.121.24;120pkt 120fpkt", shape=invhouse, color=bisque];
9247[label="44.140.77.27;43pkt 43fpkt", shape=invhouse, color=bisque];
9304[label="198.171.66.33;672pkt 672fpkt", shape=invhouse, color=bisque];
9385[label="198.163.98.41;41pkt 41fpkt", shape=invhouse, color=bisque];
9443[label="44.140.77.48;53pkt 53fpkt", shape=invhouse, color=bisque];
9453[label="44.212.16.49;7pkt 7fpkt", shape=invhouse, color=bisque];
9525[label="44.140.77.58;46pkt 46fpkt", shape=invhouse, color=bisque];
9649[label="219.202.175.74;38pkt 38fpkt", shape=invhouse, color=bisque];
9904[label="210.148.6.105;18pkt 18fpkt", shape=invhouse, color=bisque];
9917[label="218.253.2.107;107pkt 107fpkt", shape=invhouse, color=bisque];
10010[label="219.240.44.119;5pkt 5fpkt", shape=invhouse, color=bisque];
10018[label="219.202.175.120;44pkt 44fpkt", shape=invhouse, color=bisque];
10059[label="95.81.1.126;45pkt 45fpkt", shape=invhouse, color=bisque];
10103[label="199.243.72.131;4pkt 4fpkt", shape=invhouse, color=bisque];
10112[label="44.140.77.132;71pkt 71fpkt", shape=invhouse, color=bisque];
10122[label="221.164.66.133;4pkt 4fpkt", shape=invhouse, color=bisque];
10155[label="202.204.147.137;104pkt 104fpkt", shape=invhouse, color=bisque];
10260[label="40.250.192.151;18pkt 18fpkt", shape=invhouse, color=bisque];
10386[label="198.74.78.167;13pkt 13fpkt", shape=invhouse, color=bisque];
10401[label="219.216.144.168;76pkt 76fpkt", shape=invhouse, color=bisque];
10543[label="44.140.77.188;31pkt 31fpkt", shape=invhouse, color=bisque];
10574[label="174.64.158.193;9pkt 9fpkt", shape=invhouse, color=bisque];
10695[label="214.124.165.210;32pkt 32fpkt", shape=invhouse, color=bisque];
10703[label="44.140.77.211;57pkt 57fpkt", shape=invhouse, color=bisque];
10846[label="208.49.2.233;24pkt 24fpkt", shape=invhouse, color=bisque];
stat3387[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:53}[59.0434%]&lt;BR/&gt;{*:53, *:*}[23.7634%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.1118%)&lt;BR/&gt; 80: (9.88893%)&lt;BR/&gt; 25: (2.62735%)&lt;BR/&gt; 2652: (1.35963%)&lt;BR/&gt; 1024: (1.17196%)&gt;];
}
177--637[label="0.111111;1pkt 1fpkt"];
177--850[label="0.0140845;1pkt 1fpkt"];
177--979[label="0.00258398;1pkt 1fpkt"];
177--1159[label="0.00826446;1pkt 1fpkt"];
177--1173[label="0.0126582;1pkt 1fpkt"];
177--1545[label="0.0916667;11pkt 11fpkt"];
177--2147[label="0.111111;1pkt 1fpkt"];
177--2212[label="0.0111111;1pkt 1fpkt"];
177--2311[label="0.0322581;1pkt 1fpkt"];
177--2590[label="0.0263158;1pkt 1fpkt"];
177--2717[label="0.0149254;1pkt 1fpkt"];
177--3222[label="0.00934579;1pkt 1fpkt"];
177--3436[label="0.04;1pkt 1fpkt"];
177--3454[label="0.0222222;1pkt 1fpkt"];
177--3538[label="0.0222222;1pkt 1fpkt"];
177--3668[label="0.02;1pkt 1fpkt"];
177--4069[label="0.025;1pkt 1fpkt"];
177--4318[label="0.0131579;1pkt 1fpkt"];
177--4329[label="0.0144928;1pkt 1fpkt"];
177--4704[label="0.0344828;1pkt 1fpkt"];
177--5024[label="0.030303;1pkt 1fpkt"];
177--5379[label="0.04;1pkt 1fpkt"];
177--5821[label="0.0126582;1pkt 1fpkt"];
177--6082[label="0.0916667;11pkt 11fpkt"];
177--6534[label="0.011236;1pkt 1fpkt"];
177--6803[label="0.027027;1pkt 1fpkt"];
177--7249[label="0.00943396;1pkt 1fpkt"];
177--7415[label="0.0227273;1pkt 1fpkt"];
177--7474[label="0.0227273;1pkt 1fpkt"];
177--8029[label="0.0131579;1pkt 1fpkt"];
177--8037[label="0.0144928;1pkt 1fpkt"];
177--8503[label="0.03125;1pkt 1fpkt"];
177--8760[label="0.0416667;1pkt 1fpkt"];
177--9064[label="0.0125;1pkt 1fpkt"];
177--9230[label="0.0916667;11pkt 11fpkt"];
177--9649[label="0.0263158;1pkt 1fpkt"];
177--9917[label="0.00934579;1pkt 1fpkt"];
177--10018[label="0.0227273;1pkt 1fpkt"];
177--10059[label="0.0222222;1pkt 1fpkt"];
177--10401[label="0.0131579;1pkt 1fpkt"];
177--10695[label="0.03125;1pkt 1fpkt"];
177--10846[label="0.0416667;1pkt 1fpkt"];
203--304[label="1;1pkt 1fpkt"];
203--452[label="0.166667;1pkt 1fpkt"];
203--955[label="0.166667;1pkt 1fpkt"];
203--966[label="0.166667;1pkt 1fpkt"];
203--982[label="0.166667;1pkt 1fpkt"];
203--1328[label="1;5pkt 5fpkt"];
203--5937[label="1;5pkt 5fpkt"];
203--9143[label="1;5pkt 5fpkt"];
239--401[label="0.02;1pkt 1fpkt"];
239--850[label="0.0140845;1pkt 1fpkt"];
239--864[label="0.03125;1pkt 1fpkt"];
239--1064[label="0.0625;1pkt 1fpkt"];
239--1250[label="0.037037;1pkt 1fpkt"];
239--2079[label="0.125;1pkt 1fpkt"];
239--2311[label="0.0322581;1pkt 1fpkt"];
239--2411[label="0.125;1pkt 1fpkt"];
239--2590[label="0.0263158;1pkt 1fpkt"];
239--2717[label="0.0149254;1pkt 1fpkt"];
239--2973[label="0.00934579;1pkt 1fpkt"];
239--3126[label="0.1;1pkt 1fpkt"];
239--3222[label="0.00934579;1pkt 1fpkt"];
239--3270[label="0.04;1pkt 1fpkt"];
239--3454[label="0.0222222;1pkt 1fpkt"];
239--3538[label="0.0222222;1pkt 1fpkt"];
239--3668[label="0.02;1pkt 1fpkt"];
239--4318[label="0.0131579;1pkt 1fpkt"];
239--5024[label="0.030303;1pkt 1fpkt"];
239--5379[label="0.04;1pkt 1fpkt"];
239--5401[label="0.075;3pkt 3fpkt"];
239--5415[label="0.0322581;1pkt 1fpkt"];
239--5580[label="0.0192308;1pkt 1fpkt"];
239--5875[label="0.037037;1pkt 1fpkt"];
239--6443[label="0.125;1pkt 1fpkt"];
239--6803[label="0.027027;1pkt 1fpkt"];
239--7183[label="0.1;1pkt 1fpkt"];
239--7249[label="0.00943396;1pkt 1fpkt"];
239--7415[label="0.0227273;1pkt 1fpkt"];
239--7474[label="0.0227273;1pkt 1fpkt"];
239--8029[label="0.0131579;1pkt 1fpkt"];
239--8503[label="0.03125;1pkt 1fpkt"];
239--8902[label="0.0196078;1pkt 1fpkt"];
239--9649[label="0.0263158;1pkt 1fpkt"];
239--9917[label="0.00934579;1pkt 1fpkt"];
239--10018[label="0.0227273;1pkt 1fpkt"];
239--10059[label="0.0222222;1pkt 1fpkt"];
239--10401[label="0.0131579;1pkt 1fpkt"];
239--10695[label="0.03125;1pkt 1fpkt"];
255--293[label="0.222222;2pkt 2fpkt"];
255--977[label="0.00581395;1pkt 1fpkt"];
255--1159[label="0.00826446;1pkt 1fpkt"];
255--2269[label="0.142857;1pkt 1fpkt"];
255--2829[label="0.2;1pkt 1fpkt"];
255--3025[label="0.166667;1pkt 1fpkt"];
255--3436[label="0.04;1pkt 1fpkt"];
255--4293[label="0.285714;4pkt 4fpkt"];
255--4843[label="0.25;1pkt 1fpkt"];
255--4883[label="0.0333333;1pkt 1fpkt"];
255--5401[label="0.025;1pkt 1fpkt"];
255--6573[label="0.166667;1pkt 1fpkt"];
255--7115[label="0.166667;1pkt 1fpkt"];
255--8011[label="0.285714;4pkt 4fpkt"];
255--10386[label="0.307692;4pkt 4fpkt"];
293--347[label="0.222222;2pkt 2fpkt"];
293--350[label="0.222222;2pkt 2fpkt"];
304--1328[label="1;1pkt 1fpkt"];
304--5937[label="1;1pkt 1fpkt"];
304--9143[label="1;1pkt 1fpkt"];
347--802[label="0.0363636;2pkt 2fpkt"];
347--1159[label="0.0247934;3pkt 3fpkt"];
347--3436[label="0.04;1pkt 1fpkt"];
350--802[label="0.0181818;1pkt 1fpkt"];
350--850[label="0.0140845;1pkt 1fpkt"];
350--978[label="0.00187266;1pkt 1fpkt"];
350--1159[label="0.0330579;4pkt 4fpkt"];
350--1250[label="0.037037;1pkt 1fpkt"];
350--1450[label="0.047619;1pkt 1fpkt"];
350--1620[label="0.0588235;1pkt 1fpkt"];
350--1919[label="0.0243902;1pkt 1fpkt"];
350--2422[label="0.0454545;1pkt 1fpkt"];
350--2717[label="0.0149254;1pkt 1fpkt"];
350--3021[label="0.047619;1pkt 1fpkt"];
350--3025[label="0.166667;1pkt 1fpkt"];
350--3190[label="0.0555556;1pkt 1fpkt"];
350--3436[label="0.04;1pkt 1fpkt"];
350--3538[label="0.0222222;1pkt 1fpkt"];
350--3997[label="0.015873;1pkt 1fpkt"];
350--4013[label="0.0526316;1pkt 1fpkt"];
350--4069[label="0.025;1pkt 1fpkt"];
350--4293[label="0.214286;3pkt 3fpkt"];
350--4318[label="0.0131579;1pkt 1fpkt"];
350--4666[label="0.0555556;1pkt 1fpkt"];
350--4680[label="0.0416667;1pkt 1fpkt"];
350--4704[label="0.0344828;1pkt 1fpkt"];
350--4745[label="0.111111;1pkt 1fpkt"];
350--4843[label="0.25;1pkt 1fpkt"];
350--4883[label="0.0333333;1pkt 1fpkt"];
350--5343[label="0.1;1pkt 1fpkt"];
350--5415[label="0.0322581;1pkt 1fpkt"];
350--5508[label="0.0714286;1pkt 1fpkt"];
350--5875[label="0.037037;1pkt 1fpkt"];
350--6334[label="0.025;1pkt 1fpkt"];
350--6681[label="0.047619;1pkt 1fpkt"];
350--7111[label="0.047619;1pkt 1fpkt"];
350--7115[label="0.166667;1pkt 1fpkt"];
350--7232[label="0.0555556;1pkt 1fpkt"];
350--7474[label="0.0227273;1pkt 1fpkt"];
350--7810[label="0.0555556;1pkt 1fpkt"];
350--8011[label="0.214286;3pkt 3fpkt"];
350--8029[label="0.0131579;1pkt 1fpkt"];
350--8269[label="0.0588235;1pkt 1fpkt"];
350--8279[label="0.0416667;1pkt 1fpkt"];
350--8323[label="0.111111;1pkt 1fpkt"];
350--9385[label="0.0243902;1pkt 1fpkt"];
350--9904[label="0.0555556;1pkt 1fpkt"];
350--10059[label="0.0222222;1pkt 1fpkt"];
350--10260[label="0.0555556;1pkt 1fpkt"];
350--10386[label="0.230769;3pkt 3fpkt"];
350--10401[label="0.0131579;1pkt 1fpkt"];
350--10574[label="0.111111;1pkt 1fpkt"];
356--1803[label="0.166667;1pkt 1fpkt"];
356--4126[label="1;1pkt 1fpkt"];
356--4690[label="0.181818;2pkt 2fpkt"];
356--4753[label="0.363636;4pkt 4fpkt"];
356--5458[label="0.5;2pkt 2fpkt"];
356--7886[label="1;1pkt 1fpkt"];
356--8286[label="0.181818;2pkt 2fpkt"];
452--591[label="0.0350877;2pkt 2fpkt"];
452--613[label="0.0273973;2pkt 2fpkt"];
452--713[label="0.0493827;4pkt 4fpkt"];
452--726[label="0.0204082;1pkt 1fpkt"];
452--787[label="0.0140845;1pkt 1fpkt"];
452--850[label="0.0140845;1pkt 1fpkt"];
452--892[label="0.0151515;1pkt 1fpkt"];
452--899[label="0.0166667;1pkt 1fpkt"];
452--978[label="0.00374532;2pkt 2fpkt"];
452--979[label="0.00207469;1pkt 1fpkt"];
452--1328[label="0.2;1pkt 1fpkt"];
452--1403[label="0.0149254;1pkt 1fpkt"];
452--1545[label="0.0666667;8pkt 8fpkt"];
452--1721[label="0.063893;43pkt 43fpkt"];
452--1919[label="0.0243902;1pkt 1fpkt"];
452--2089[label="0.2;1pkt 1fpkt"];
452--2311[label="0.0322581;1pkt 1fpkt"];
452--2422[label="0.0454545;1pkt 1fpkt"];
452--2590[label="0.0263158;1pkt 1fpkt"];
452--2717[label="0.0149254;1pkt 1fpkt"];
452--3166[label="0.0481928;4pkt 4fpkt"];
452--3222[label="0.0280374;3pkt 3fpkt"];
452--3454[label="0.0222222;1pkt 1fpkt"];
452--3575[label="0.0126582;1pkt 1fpkt"];
452--3590[label="0.0333333;2pkt 2fpkt"];
452--3636[label="0.2;1pkt 1fpkt"];
452--3835[label="0.2;1pkt 1fpkt"];
452--3838[label="0.0147059;1pkt 1fpkt"];
452--3853[label="0.111111;1pkt 1fpkt"];
452--3987[label="0.0133333;1pkt 1fpkt"];
452--3997[label="0.015873;1pkt 1fpkt"];
452--4069[label="0.025;1pkt 1fpkt"];
452--4204[label="0.0465116;4pkt 4fpkt"];
452--4318[label="0.0131579;1pkt 1fpkt"];
452--4330[label="0.04;1pkt 1fpkt"];
452--4518[label="0.0294118;1pkt 1fpkt"];
452--4960[label="0.0769231;1pkt 1fpkt"];
452--4984[label="0.025;2pkt 2fpkt"];
452--5024[label="0.030303;1pkt 1fpkt"];
452--5130[label="0.0128205;1pkt 1fpkt"];
452--5379[label="0.04;1pkt 1fpkt"];
452--5401[label="0.025;1pkt 1fpkt"];
452--5643[label="0.0810811;3pkt 3fpkt"];
452--5937[label="0.2;1pkt 1fpkt"];
452--5990[label="0.0147059;1pkt 1fpkt"];
452--6082[label="0.0666667;8pkt 8fpkt"];
452--6198[label="0.063893;43pkt 43fpkt"];
452--6334[label="0.025;1pkt 1fpkt"];
452--6450[label="0.2;1pkt 1fpkt"];
452--6681[label="0.047619;1pkt 1fpkt"];
452--6803[label="0.027027;1pkt 1fpkt"];
452--7216[label="0.0481928;4pkt 4fpkt"];
452--7249[label="0.0283019;3pkt 3fpkt"];
452--7415[label="0.0227273;1pkt 1fpkt"];
452--7501[label="0.0128205;1pkt 1fpkt"];
452--7511[label="0.0333333;2pkt 2fpkt"];
452--7549[label="0.2;1pkt 1fpkt"];
452--7793[label="0.0135135;1pkt 1fpkt"];
452--7944[label="0.0465116;4pkt 4fpkt"];
452--8029[label="0.0131579;1pkt 1fpkt"];
452--8463[label="0.0769231;1pkt 1fpkt"];
452--8503[label="0.03125;1pkt 1fpkt"];
452--8760[label="0.0416667;1pkt 1fpkt"];
452--8946[label="0.0833333;3pkt 3fpkt"];
452--9143[label="0.2;1pkt 1fpkt"];
452--9176[label="0.0147059;1pkt 1fpkt"];
452--9230[label="0.0666667;8pkt 8fpkt"];
452--9304[label="0.0639881;43pkt 43fpkt"];
452--9385[label="0.0243902;1pkt 1fpkt"];
452--9458[label="0.25;1pkt 1fpkt"];
452--9649[label="0.0263158;1pkt 1fpkt"];
452--9917[label="0.0280374;3pkt 3fpkt"];
452--10018[label="0.0227273;1pkt 1fpkt"];
452--10076[label="0.0126582;1pkt 1fpkt"];
452--10103[label="0.25;1pkt 1fpkt"];
452--10344[label="0.0465116;4pkt 4fpkt"];
452--10401[label="0.0131579;1pkt 1fpkt"];
452--10695[label="0.03125;1pkt 1fpkt"];
452--10846[label="0.0416667;1pkt 1fpkt"];
457--591[label="0.0701754;4pkt 4fpkt"];
457--641[label="0.105263;4pkt 4fpkt"];
457--786[label="0.142857;7pkt 7fpkt"];
457--789[label="0.0123457;1pkt 1fpkt"];
457--802[label="0.0545455;3pkt 3fpkt"];
457--982[label="0.314607;28pkt 28fpkt"];
457--1000[label="0.106061;7pkt 7fpkt"];
457--1316[label="0.0294118;1pkt 1fpkt"];
457--1600[label="0.0697674;3pkt 3fpkt"];
457--2057[label="0.0943396;5pkt 5fpkt"];
457--2152[label="0.0113636;1pkt 1fpkt"];
457--2212[label="0.011236;1pkt 1fpkt"];
457--2265[label="0.130435;6pkt 6fpkt"];
457--2632[label="0.157895;6pkt 6fpkt"];
457--3590[label="0.0666667;4pkt 4fpkt"];
457--3653[label="0.0985915;7pkt 7fpkt"];
457--3838[label="0.0294118;2pkt 2fpkt"];
457--4329[label="0.0869565;6pkt 6fpkt"];
457--4488[label="0.05;2pkt 2fpkt"];
457--4518[label="0.117647;4pkt 4fpkt"];
457--4634[label="0.571429;4pkt 4fpkt"];
457--4650[label="0.0138889;1pkt 1fpkt"];
457--4663[label="0.15625;5pkt 5fpkt"];
457--5038[label="0.0172414;1pkt 1fpkt"];
457--5692[label="0.106061;7pkt 7fpkt"];
457--5927[label="0.0285714;1pkt 1fpkt"];
457--6117[label="0.0697674;3pkt 3fpkt"];
457--6427[label="0.0961538;5pkt 5fpkt"];
457--6494[label="0.0114943;1pkt 1fpkt"];
457--6534[label="0.011236;1pkt 1fpkt"];
457--6569[label="0.133333;6pkt 6fpkt"];
457--6832[label="0.157895;6pkt 6fpkt"];
457--7511[label="0.0666667;4pkt 4fpkt"];
457--7563[label="0.0985915;7pkt 7fpkt"];
457--8037[label="0.0869565;6pkt 6fpkt"];
457--8150[label="0.0512821;2pkt 2fpkt"];
457--8248[label="0.666667;4pkt 4fpkt"];
457--8267[label="0.16129;5pkt 5fpkt"];
457--8517[label="0.0175439;1pkt 1fpkt"];
457--8978[label="0.104478;7pkt 7fpkt"];
457--9135[label="0.0285714;1pkt 1fpkt"];
457--9247[label="0.0697674;3pkt 3fpkt"];
457--9443[label="0.0943396;5pkt 5fpkt"];
457--9489[label="0.0113636;1pkt 1fpkt"];
457--9525[label="0.130435;6pkt 6fpkt"];
457--10112[label="0.0985915;7pkt 7fpkt"];
457--10543[label="0.16129;5pkt 5fpkt"];
457--10703[label="0.0175439;1pkt 1fpkt"];
490--2829[label="0.2;1pkt 1fpkt"];
490--3760[label="0.740385;77pkt 77fpkt"];
490--4350[label="1;1pkt 1fpkt"];
490--7637[label="0.740385;77pkt 77fpkt"];
490--8055[label="1;1pkt 1fpkt"];
490--10155[label="0.740385;77pkt 77fpkt"];
591--900[label="0.0943396;5pkt 5fpkt"];
591--982[label="0.122807;7pkt 7fpkt"];
591--3590[label="1;57pkt 57fpkt"];
591--7511[label="1;57pkt 57fpkt"];
637--2147[label="1;9pkt 9fpkt"];
661--713[label="0.0246914;2pkt 2fpkt"];
661--780[label="0.0138889;1pkt 1fpkt"];
661--802[label="0.0181818;1pkt 1fpkt"];
661--850[label="0.0140845;1pkt 1fpkt"];
661--878[label="0.0149254;1pkt 1fpkt"];
661--892[label="0.0151515;1pkt 1fpkt"];
661--893[label="0.0140845;1pkt 1fpkt"];
661--979[label="0.0025974;1pkt 1fpkt"];
661--1023[label="0.0117647;1pkt 1fpkt"];
661--1173[label="0.0126582;1pkt 1fpkt"];
661--1250[label="0.037037;1pkt 1fpkt"];
661--1403[label="0.0149254;1pkt 1fpkt"];
661--1450[label="0.047619;1pkt 1fpkt"];
661--1545[label="0.0166667;2pkt 2fpkt"];
661--1620[label="0.0588235;1pkt 1fpkt"];
661--1919[label="0.0243902;1pkt 1fpkt"];
661--2212[label="0.0111111;1pkt 1fpkt"];
661--2311[label="0.0322581;1pkt 1fpkt"];
661--2590[label="0.0263158;1pkt 1fpkt"];
661--2632[label="0.0263158;1pkt 1fpkt"];
661--2973[label="0.00934579;1pkt 1fpkt"];
661--3454[label="0.0222222;1pkt 1fpkt"];
661--3538[label="0.0222222;1pkt 1fpkt"];
661--4069[label="0.025;1pkt 1fpkt"];
661--4204[label="0.0232558;2pkt 2fpkt"];
661--4318[label="0.0131579;1pkt 1fpkt"];
661--4330[label="0.04;1pkt 1fpkt"];
661--4458[label="0.0120482;1pkt 1fpkt"];
661--4632[label="0.0121951;1pkt 1fpkt"];
661--4666[label="0.0555556;1pkt 1fpkt"];
661--4680[label="0.0416667;1pkt 1fpkt"];
661--4704[label="0.0344828;1pkt 1fpkt"];
661--5024[label="0.030303;1pkt 1fpkt"];
661--5379[label="0.04;1pkt 1fpkt"];
661--5415[label="0.0322581;1pkt 1fpkt"];
661--5508[label="0.0714286;1pkt 1fpkt"];
661--5713[label="0.0117647;1pkt 1fpkt"];
661--5821[label="0.0126582;1pkt 1fpkt"];
661--5875[label="0.037037;1pkt 1fpkt"];
661--5990[label="0.0147059;1pkt 1fpkt"];
661--6082[label="0.0166667;2pkt 2fpkt"];
661--6334[label="0.025;1pkt 1fpkt"];
661--6534[label="0.011236;1pkt 1fpkt"];
661--6803[label="0.027027;1pkt 1fpkt"];
661--6832[label="0.0263158;1pkt 1fpkt"];
661--7400[label="0.2;1pkt 1fpkt"];
661--7415[label="0.0227273;1pkt 1fpkt"];
661--7474[label="0.0227273;1pkt 1fpkt"];
661--7944[label="0.0232558;2pkt 2fpkt"];
661--8029[label="0.0131579;1pkt 1fpkt"];
661--8246[label="0.0123457;1pkt 1fpkt"];
661--8269[label="0.0588235;1pkt 1fpkt"];
661--8279[label="0.0416667;1pkt 1fpkt"];
661--8503[label="0.03125;1pkt 1fpkt"];
661--8760[label="0.0416667;1pkt 1fpkt"];
661--8994[label="0.0117647;1pkt 1fpkt"];
661--9064[label="0.0125;1pkt 1fpkt"];
661--9176[label="0.0147059;1pkt 1fpkt"];
661--9230[label="0.0166667;2pkt 2fpkt"];
661--9385[label="0.0243902;1pkt 1fpkt"];
661--9649[label="0.0263158;1pkt 1fpkt"];
661--10010[label="0.2;1pkt 1fpkt"];
661--10018[label="0.0227273;1pkt 1fpkt"];
661--10059[label="0.0222222;1pkt 1fpkt"];
661--10344[label="0.0232558;2pkt 2fpkt"];
661--10401[label="0.0131579;1pkt 1fpkt"];
661--10532[label="0.0121951;1pkt 1fpkt"];
661--10695[label="0.03125;1pkt 1fpkt"];
661--10846[label="0.0416667;1pkt 1fpkt"];
666--1159[label="0.0307692;2pkt 2fpkt"];
666--1627[label="1;2pkt 2fpkt"];
666--2422[label="0.0454545;1pkt 1fpkt"];
666--2717[label="0.0153846;1pkt 1fpkt"];
666--3538[label="0.0222222;1pkt 1fpkt"];
666--4069[label="0.025;1pkt 1fpkt"];
666--5415[label="0.0322581;1pkt 1fpkt"];
666--6681[label="0.047619;1pkt 1fpkt"];
666--7474[label="0.0227273;1pkt 1fpkt"];
666--7579[label="1;4pkt 4fpkt"];
666--10059[label="0.0222222;1pkt 1fpkt"];
666--10122[label="1;4pkt 4fpkt"];
683--787[label="0.0140845;1pkt 1fpkt"];
683--850[label="0.0140845;1pkt 1fpkt"];
683--1545[label="0.00833333;1pkt 1fpkt"];
683--2269[label="0.142857;1pkt 1fpkt"];
683--3222[label="0.0186916;2pkt 2fpkt"];
683--3575[label="0.0126582;1pkt 1fpkt"];
683--3668[label="0.02;1pkt 1fpkt"];
683--4318[label="0.0131579;1pkt 1fpkt"];
683--5024[label="0.030303;1pkt 1fpkt"];
683--5379[label="0.04;1pkt 1fpkt"];
683--6082[label="0.00833333;1pkt 1fpkt"];
683--7249[label="0.0188679;2pkt 2fpkt"];
683--7501[label="0.0128205;1pkt 1fpkt"];
683--8029[label="0.0131579;1pkt 1fpkt"];
683--8503[label="0.03125;1pkt 1fpkt"];
683--8760[label="0.0416667;1pkt 1fpkt"];
683--9230[label="0.00833333;1pkt 1fpkt"];
683--9917[label="0.0186916;2pkt 2fpkt"];
683--10076[label="0.0126582;1pkt 1fpkt"];
683--10401[label="0.0131579;1pkt 1fpkt"];
683--10695[label="0.03125;1pkt 1fpkt"];
683--10846[label="0.0416667;1pkt 1fpkt"];
684--977[label="0.00162602;1pkt 1fpkt"];
684--1316[label="0.0294118;1pkt 1fpkt"];
684--1721[label="0.00162602;1pkt 1fpkt"];
684--2057[label="0.0188679;1pkt 1fpkt"];
684--5476[label="0.0769231;1pkt 1fpkt"];
684--5927[label="0.0285714;1pkt 1fpkt"];
684--6198[label="0.00162602;1pkt 1fpkt"];
684--6427[label="0.0192308;1pkt 1fpkt"];
684--8825[label="0.0833333;1pkt 1fpkt"];
684--9135[label="0.0285714;1pkt 1fpkt"];
684--9304[label="0.00162602;1pkt 1fpkt"];
684--9443[label="0.0188679;1pkt 1fpkt"];
697--2311[label="0.0322581;1pkt 1fpkt"];
697--2590[label="0.0263158;1pkt 1fpkt"];
697--3454[label="0.0222222;1pkt 1fpkt"];
697--3538[label="0.0222222;1pkt 1fpkt"];
697--4666[label="0.0555556;1pkt 1fpkt"];
697--4680[label="0.0416667;1pkt 1fpkt"];
697--4704[label="0.0344828;1pkt 1fpkt"];
697--5265[label="0.00925926;1pkt 1fpkt"];
697--5379[label="0.04;1pkt 1fpkt"];
697--6803[label="0.027027;1pkt 1fpkt"];
697--7415[label="0.0227273;1pkt 1fpkt"];
697--7474[label="0.0227273;1pkt 1fpkt"];
697--8269[label="0.0588235;1pkt 1fpkt"];
697--8279[label="0.0416667;1pkt 1fpkt"];
697--8760[label="0.0416667;1pkt 1fpkt"];
697--9649[label="0.0263158;1pkt 1fpkt"];
697--10018[label="0.0227273;1pkt 1fpkt"];
697--10059[label="0.0222222;1pkt 1fpkt"];
697--10846[label="0.0416667;1pkt 1fpkt"];
786--880[label="0.0204082;1pkt 1fpkt"];
786--900[label="0.0204082;1pkt 1fpkt"];
786--982[label="0.183673;9pkt 9fpkt"];
786--1000[label="0.979592;48pkt 48fpkt"];
786--5692[label="0.979592;48pkt 48fpkt"];
786--8978[label="1;49pkt 49fpkt"];
850--4318[label="1;71pkt 71fpkt"];
850--8029[label="1;71pkt 71fpkt"];
850--10401[label="1;71pkt 71fpkt"];
861--878[label="0.0149254;1pkt 1fpkt"];
861--1316[label="0.0294118;1pkt 1fpkt"];
861--1620[label="0.0588235;1pkt 1fpkt"];
861--1749[label="0.0135135;1pkt 1fpkt"];
861--2079[label="0.125;1pkt 1fpkt"];
861--2311[label="0.0322581;1pkt 1fpkt"];
861--2717[label="0.0149254;1pkt 1fpkt"];
861--2973[label="0.0280374;3pkt 3fpkt"];
861--3222[label="0.00934579;1pkt 1fpkt"];
861--3835[label="0.2;1pkt 1fpkt"];
861--3853[label="0.111111;1pkt 1fpkt"];
861--4329[label="0.0144928;1pkt 1fpkt"];
861--4666[label="0.0555556;1pkt 1fpkt"];
861--4690[label="0.0909091;1pkt 1fpkt"];
861--5401[label="0.05;2pkt 2fpkt"];
861--5927[label="0.0285714;1pkt 1fpkt"];
861--6223[label="0.0136986;1pkt 1fpkt"];
861--6443[label="0.125;1pkt 1fpkt"];
861--7249[label="0.00943396;1pkt 1fpkt"];
861--8037[label="0.0144928;1pkt 1fpkt"];
861--8269[label="0.0588235;1pkt 1fpkt"];
861--8286[label="0.0909091;1pkt 1fpkt"];
861--9135[label="0.0285714;1pkt 1fpkt"];
861--9453[label="0.142857;1pkt 1fpkt"];
861--9917[label="0.00934579;1pkt 1fpkt"];
878--982[label="0.149254;10pkt 10fpkt"];
878--1749[label="0.985075;66pkt 66fpkt"];
878--6223[label="0.970149;65pkt 65fpkt"];
880--893[label="0.0140845;1pkt 1fpkt"];
880--979[label="0.0026738;1pkt 1fpkt"];
880--1000[label="0.0151515;1pkt 1fpkt"];
880--1023[label="0.0117647;1pkt 1fpkt"];
880--1545[label="0.0333333;4pkt 4fpkt"];
880--1600[label="0.0232558;1pkt 1fpkt"];
880--1919[label="0.0243902;1pkt 1fpkt"];
880--2057[label="0.0188679;1pkt 1fpkt"];
880--2632[label="0.0263158;1pkt 1fpkt"];
880--3166[label="0.060241;5pkt 5fpkt"];
880--3222[label="0.0747664;8pkt 8fpkt"];
880--3454[label="0.0222222;1pkt 1fpkt"];
880--3668[label="0.02;1pkt 1fpkt"];
880--3838[label="0.0147059;1pkt 1fpkt"];
880--5024[label="0.030303;1pkt 1fpkt"];
880--5692[label="0.0151515;1pkt 1fpkt"];
880--5713[label="0.0117647;1pkt 1fpkt"];
880--6082[label="0.0333333;4pkt 4fpkt"];
880--6117[label="0.0232558;1pkt 1fpkt"];
880--6334[label="0.025;1pkt 1fpkt"];
880--6427[label="0.0192308;1pkt 1fpkt"];
880--6832[label="0.0263158;1pkt 1fpkt"];
880--7216[label="0.060241;5pkt 5fpkt"];
880--7249[label="0.0754717;8pkt 8fpkt"];
880--7415[label="0.0227273;1pkt 1fpkt"];
880--8503[label="0.03125;1pkt 1fpkt"];
880--8978[label="0.0149254;1pkt 1fpkt"];
880--8994[label="0.0117647;1pkt 1fpkt"];
880--9230[label="0.0333333;4pkt 4fpkt"];
880--9247[label="0.0232558;1pkt 1fpkt"];
880--9385[label="0.0243902;1pkt 1fpkt"];
880--9443[label="0.0188679;1pkt 1fpkt"];
880--9917[label="0.0747664;8pkt 8fpkt"];
880--10018[label="0.0227273;1pkt 1fpkt"];
880--10695[label="0.03125;1pkt 1fpkt"];
892--982[label="0.0606061;4pkt 4fpkt"];
892--1403[label="0.984848;65pkt 65fpkt"];
892--5990[label="1;66pkt 66fpkt"];
892--9176[label="1;66pkt 66fpkt"];
900--982[label="0.132075;7pkt 7fpkt"];
900--1000[label="0.0188679;1pkt 1fpkt"];
900--1316[label="0.0294118;1pkt 1fpkt"];
900--1383[label="0.0188679;1pkt 1fpkt"];
900--1600[label="0.0465116;2pkt 2fpkt"];
900--2265[label="0.0652174;3pkt 3fpkt"];
900--2632[label="0.0789474;3pkt 3fpkt"];
900--3590[label="0.0943396;5pkt 5fpkt"];
900--3653[label="0.0566038;3pkt 3fpkt"];
900--3838[label="0.0566038;3pkt 3fpkt"];
900--4329[label="0.0754717;4pkt 4fpkt"];
900--4663[label="0.03125;1pkt 1fpkt"];
900--4984[label="0.0188679;1pkt 1fpkt"];
900--5038[label="0.0188679;1pkt 1fpkt"];
900--5692[label="0.0188679;1pkt 1fpkt"];
900--5927[label="0.0285714;1pkt 1fpkt"];
900--5974[label="0.0188679;1pkt 1fpkt"];
900--6117[label="0.0465116;2pkt 2fpkt"];
900--6569[label="0.0666667;3pkt 3fpkt"];
900--6832[label="0.0789474;3pkt 3fpkt"];
900--7511[label="0.0943396;5pkt 5fpkt"];
900--7563[label="0.0566038;3pkt 3fpkt"];
900--8037[label="0.0754717;4pkt 4fpkt"];
900--8267[label="0.0322581;1pkt 1fpkt"];
900--8517[label="0.0188679;1pkt 1fpkt"];
900--8978[label="0.0188679;1pkt 1fpkt"];
900--9135[label="0.0285714;1pkt 1fpkt"];
900--9247[label="0.0465116;2pkt 2fpkt"];
900--9525[label="0.0652174;3pkt 3fpkt"];
900--10112[label="0.0566038;3pkt 3fpkt"];
900--10543[label="0.0322581;1pkt 1fpkt"];
900--10703[label="0.0188679;1pkt 1fpkt"];
1000--5692[label="1;66pkt 66fpkt"];
1000--8978[label="1;66pkt 66fpkt"];
1250--5875[label="1;27pkt 27fpkt"];
1316--5927[label="1;34pkt 34fpkt"];
1316--9135[label="1;34pkt 34fpkt"];
1328--5937[label="1;5pkt 5fpkt"];
1328--9143[label="1;5pkt 5fpkt"];
1403--5990[label="1;67pkt 67fpkt"];
1403--9176[label="1;67pkt 67fpkt"];
1545--6082[label="1;120pkt 120fpkt"];
1545--9230[label="1;120pkt 120fpkt"];
1600--6117[label="1;43pkt 43fpkt"];
1600--9247[label="1;43pkt 43fpkt"];
1721--6198[label="1;673pkt 673fpkt"];
1721--9304[label="1;672pkt 672fpkt"];
1749--6223[label="1;73pkt 73fpkt"];
1919--6334[label="1;40pkt 40fpkt"];
1919--9385[label="1;41pkt 41fpkt"];
2057--6427[label="1;52pkt 52fpkt"];
2057--9443[label="1;53pkt 53fpkt"];
2079--6443[label="1;8pkt 8fpkt"];
2079--9453[label="1;7pkt 7fpkt"];
2265--6569[label="1;45pkt 45fpkt"];
2265--9525[label="1;46pkt 46fpkt"];
2269--6573[label="1;6pkt 6fpkt"];
2422--6681[label="1;21pkt 21fpkt"];
2590--6803[label="1;37pkt 37fpkt"];
2590--9649[label="1;38pkt 38fpkt"];
2632--6832[label="1;38pkt 38fpkt"];
3021--7111[label="1;21pkt 21fpkt"];
3025--7115[label="1;6pkt 6fpkt"];
3126--7183[label="1;10pkt 10fpkt"];
3166--7216[label="1;83pkt 83fpkt"];
3190--7232[label="1;18pkt 18fpkt"];
3190--9904[label="1;18pkt 18fpkt"];
3222--7249[label="1;106pkt 106fpkt"];
3222--9917[label="1;107pkt 107fpkt"];
3454--7415[label="1;44pkt 44fpkt"];
3454--10018[label="1;44pkt 44fpkt"];
3538--7474[label="1;44pkt 44fpkt"];
3538--10059[label="1;45pkt 45fpkt"];
3590--7511[label="1;60pkt 60fpkt"];
3636--7549[label="1;5pkt 5fpkt"];
3636--10103[label="1;4pkt 4fpkt"];
3653--7563[label="1;71pkt 71fpkt"];
3653--10112[label="1;71pkt 71fpkt"];
3760--7637[label="1;104pkt 104fpkt"];
3760--10155[label="1;104pkt 104fpkt"];
3987--7793[label="1;74pkt 74fpkt"];
4013--7810[label="1;18pkt 18fpkt"];
4013--10260[label="1;18pkt 18fpkt"];
4126--7886[label="1;1pkt 1fpkt"];
4293--8011[label="1;14pkt 14fpkt"];
4293--10386[label="1;13pkt 13fpkt"];
4318--8029[label="1;76pkt 76fpkt"];
4318--10401[label="1;76pkt 76fpkt"];
4329--8037[label="1;69pkt 69fpkt"];
4350--8055[label="1;1pkt 1fpkt"];
4488--8150[label="1;39pkt 39fpkt"];
4634--8248[label="1;6pkt 6fpkt"];
4663--8267[label="1;31pkt 31fpkt"];
4663--10543[label="1;31pkt 31fpkt"];
4666--8269[label="1;17pkt 17fpkt"];
4680--8279[label="1;24pkt 24fpkt"];
4690--8286[label="1;11pkt 11fpkt"];
4745--8323[label="1;9pkt 9fpkt"];
4745--10574[label="1;9pkt 9fpkt"];
5024--8503[label="1;32pkt 32fpkt"];
5024--10695[label="1;32pkt 32fpkt"];
5038--8517[label="1;57pkt 57fpkt"];
5038--10703[label="1;57pkt 57fpkt"];
5379--8760[label="1;24pkt 24fpkt"];
5379--10846[label="1;24pkt 24fpkt"];
5476--8825[label="1;12pkt 12fpkt"];
5643--8946[label="1;36pkt 36fpkt"];
5692--8978[label="1;66pkt 66fpkt"];
5927--9135[label="1;35pkt 35fpkt"];
5937--9143[label="1;5pkt 5fpkt"];
5990--9176[label="1;68pkt 68fpkt"];
6082--9230[label="1;120pkt 120fpkt"];
6117--9247[label="1;43pkt 43fpkt"];
6198--9304[label="1;672pkt 672fpkt"];
6334--9385[label="1;40pkt 40fpkt"];
6427--9443[label="1;52pkt 52fpkt"];
6443--9453[label="1;7pkt 7fpkt"];
6569--9525[label="1;45pkt 45fpkt"];
6803--9649[label="1;37pkt 37fpkt"];
7232--9904[label="1;18pkt 18fpkt"];
7249--9917[label="1;106pkt 106fpkt"];
7400--10010[label="1;5pkt 5fpkt"];
7415--10018[label="1;44pkt 44fpkt"];
7474--10059[label="1;44pkt 44fpkt"];
7549--10103[label="1;4pkt 4fpkt"];
7563--10112[label="1;71pkt 71fpkt"];
7579--10122[label="1;4pkt 4fpkt"];
7637--10155[label="1;104pkt 104fpkt"];
7810--10260[label="1;18pkt 18fpkt"];
8011--10386[label="1;13pkt 13fpkt"];
8029--10401[label="1;76pkt 76fpkt"];
8267--10543[label="1;31pkt 31fpkt"];
8323--10574[label="1;9pkt 9fpkt"];
8503--10695[label="1;32pkt 32fpkt"];
8517--10703[label="1;57pkt 57fpkt"];
8760--10846[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_port="53"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.237.182.131"/>
    </slice>
    <from sec="1083733684" usec="0"/>
    <to sec="1083733951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.147.23.132"/>
    </slice>
    <from sec="1083733579" usec="0"/>
    <to sec="1083733679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3390{
style=filled;
color=gray75;
7561[label="44.148.38.132;154pkt 154fpkt", shape=invtriangle, color=brown];
10110[label="44.148.38.132;154pkt 154fpkt", shape=invhouse, color=bisque];
stat3390[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.148.38.132:80, 209.29.136.3:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30425: (0.324675%)&lt;BR/&gt; 30420: (0.324675%)&lt;BR/&gt; 30390: (0.324675%)&lt;BR/&gt; 30385: (0.324675%)&gt;];
}
7561--10110[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.3" src_ip="44.148.38.132" src_port="80"/>
    </slice>
    <from sec="1083733457" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.107.53.132"/>
    </slice>
    <from sec="1083733926" usec="0"/>
    <to sec="1083734048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.165.192.132"/>
    </slice>
    <from sec="1083733934" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3393{
style=filled;
color=gray75;
397[label="209.29.137.52;d;35pkt 35fpkt", shape=diamond, color=yellow];
702[label="173.138.156.234;d;42pkt 42fpkt", shape=diamond, color=yellow];
758[label="46.71.197.4;s;13pkt 13fpkt", shape=diamond, color=yellow];
782[label="44.65.117.245;s;33pkt 33fpkt", shape=diamond, color=yellow];
903[label="45.172.177.20;s;24pkt 24fpkt", shape=diamond, color=yellow];
1101[label="46.71.197.4;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1159[label="44.44.49.7;121pkt 121fpkt", shape=pentagon, color=darkviolet];
1468[label="45.172.177.20;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3270[label="45.172.219.109;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3960[label="45.172.218.148;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3997[label="45.36.24.151;63pkt 63fpkt", shape=pentagon, color=darkviolet];
5239[label="45.172.222.224;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5564[label="44.65.117.245;43pkt 43fpkt", shape=pentagon, color=darkviolet];
5628[label="44.65.117.250;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5768[label="46.71.197.4;14pkt 14fpkt", shape=invtriangle, color=brown];
7280[label="45.172.219.109;24pkt 24fpkt", shape=invtriangle, color=brown];
7775[label="45.172.218.148;18pkt 18fpkt", shape=invtriangle, color=brown];
8665[label="45.172.222.224;1pkt 1fpkt", shape=invtriangle, color=brown];
8894[label="44.65.117.245;43pkt 43fpkt", shape=invtriangle, color=brown];
10239[label="45.172.218.148;18pkt 18fpkt", shape=invhouse, color=bisque];
10792[label="45.172.222.224;1pkt 1fpkt", shape=invhouse, color=bisque];
10925[label="44.65.117.245;42pkt 42fpkt", shape=invhouse, color=bisque];
stat3393[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[36.5039%]&lt;BR/&gt;{*:*, *:25}[32.1337%]&lt;BR/&gt;{44.44.49.7:*, *:53}[27.5064%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.3937%)&lt;BR/&gt; 53: (8.74016%)&lt;BR/&gt; 0: (0.944882%)&lt;BR/&gt; 4286: (0.393701%)&lt;BR/&gt; 3975: (0.393701%)&gt;];
}
397--782[label="0.030303;1pkt 1fpkt"];
397--864[label="0.03125;1pkt 1fpkt"];
397--903[label="0.0416667;1pkt 1fpkt"];
397--1159[label="0.0571429;2pkt 2fpkt"];
397--1468[label="0.0434783;1pkt 1fpkt"];
397--3270[label="0.04;1pkt 1fpkt"];
397--3960[label="0.0526316;1pkt 1fpkt"];
397--3997[label="0.0571429;2pkt 2fpkt"];
397--5239[label="0.5;1pkt 1fpkt"];
397--5564[label="0.0285714;1pkt 1fpkt"];
397--5628[label="0.0555556;1pkt 1fpkt"];
397--7280[label="0.0416667;1pkt 1fpkt"];
397--7775[label="0.0555556;1pkt 1fpkt"];
397--8665[label="1;1pkt 1fpkt"];
397--8894[label="0.0285714;1pkt 1fpkt"];
397--10239[label="0.0555556;1pkt 1fpkt"];
397--10792[label="1;1pkt 1fpkt"];
397--10925[label="0.0285714;1pkt 1fpkt"];
702--758[label="0.307692;4pkt 4fpkt"];
702--1101[label="0.307692;4pkt 4fpkt"];
702--3997[label="0.0714286;3pkt 3fpkt"];
702--5768[label="0.285714;4pkt 4fpkt"];
758--1101[label="0.923077;12pkt 12fpkt"];
758--5768[label="1;13pkt 13fpkt"];
782--5564[label="1;33pkt 33fpkt"];
782--8894[label="1;33pkt 33fpkt"];
782--10925[label="0.969697;32pkt 32fpkt"];
903--1468[label="1;23pkt 23fpkt"];
1101--5768[label="1;13pkt 13fpkt"];
3270--7280[label="1;24pkt 24fpkt"];
3960--7775[label="1;18pkt 18fpkt"];
3960--10239[label="1;18pkt 18fpkt"];
5239--8665[label="1;1pkt 1fpkt"];
5239--10792[label="1;1pkt 1fpkt"];
5564--8894[label="1;43pkt 43fpkt"];
5564--10925[label="1;42pkt 42fpkt"];
7775--10239[label="1;18pkt 18fpkt"];
8665--10792[label="1;1pkt 1fpkt"];
8894--10925[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_port="25"/>
      <filter dst_port="53" src_ip="44.44.49.7"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,010,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3394{
style=filled;
color=gray75;
7581[label="196.26.81.133;414pkt 414fpkt", shape=invtriangle, color=brown];
10124[label="196.26.81.133;415pkt 415fpkt", shape=invhouse, color=bisque];
stat3394[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.26.81.133:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28266: (0.241255%)&lt;BR/&gt; 24157: (0.241255%)&lt;BR/&gt; 64253: (0.120627%)&lt;BR/&gt; 61825: (0.120627%)&gt;];
}
7581--10124[label="1;414pkt 414fpkt"];
</description>
    <slice>
      <filter src_ip="196.26.81.133" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.26.66.134"/>
    </slice>
    <from sec="1083733782" usec="0"/>
    <to sec="1083733898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.0.1.135"/>
    </slice>
    <from sec="1083733792" usec="0"/>
    <to sec="1083734058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="94.140.93.135"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.138.163.135"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.34.92.136"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.69.209.136"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083733541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.16.43.138"/>
    </slice>
    <from sec="1083733501" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.195.170.138"/>
    </slice>
    <from sec="1083733579" usec="0"/>
    <to sec="1083733680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.2.200.138"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.30.229.138"/>
    </slice>
    <from sec="1083733238" usec="0"/>
    <to sec="1083733321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.91.0.139"/>
    </slice>
    <from sec="1083733919" usec="0"/>
    <to sec="1083734017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.247.107.139"/>
    </slice>
    <from sec="1083733236" usec="0"/>
    <to sec="1083733403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.138.27.140"/>
    </slice>
    <from sec="1083733997" usec="0"/>
    <to sec="1083734028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.111.33.140"/>
    </slice>
    <from sec="1083733487" usec="0"/>
    <to sec="1083733593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.11.55.140"/>
    </slice>
    <from sec="1083733914" usec="0"/>
    <to sec="1083734060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.14.85.140"/>
    </slice>
    <from sec="1083733718" usec="0"/>
    <to sec="1083733846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.34.92.140"/>
    </slice>
    <from sec="1083733306" usec="0"/>
    <to sec="1083734009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.120.108.140"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.199.108.140"/>
    </slice>
    <from sec="1083733577" usec="0"/>
    <to sec="1083733653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.151.13.141"/>
    </slice>
    <from sec="1083733509" usec="0"/>
    <to sec="1083733625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.48.34.141"/>
    </slice>
    <from sec="1083733779" usec="0"/>
    <to sec="1083733858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.23.124.141"/>
    </slice>
    <from sec="1083733730" usec="0"/>
    <to sec="1083733801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.26.151.141"/>
    </slice>
    <from sec="1083733432" usec="0"/>
    <to sec="1083733568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.41.14.142"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.14.157.142"/>
    </slice>
    <from sec="1083733587" usec="0"/>
    <to sec="1083733956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.221.255.142"/>
    </slice>
    <from sec="1083733481" usec="0"/>
    <to sec="1083733750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.221.166.143"/>
    </slice>
    <from sec="1083733290" usec="0"/>
    <to sec="1083733509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.154.186.143"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,504,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3423{
style=filled;
color=gray75;
7730[label="136.151.106.144;20pkt 20fpkt", shape=invtriangle, color=brown];
10213[label="136.151.106.144;21pkt 21fpkt", shape=invhouse, color=bisque];
stat3423[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.106.144:0, *:0}[42.8571%]&lt;BR/&gt;{136.151.106.144:*, *:80}[28.5714%]&lt;BR/&gt;{136.151.106.144:1024, *:53}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (41.4634%)&lt;BR/&gt; 80: (14.6341%)&lt;BR/&gt; 1024: (12.1951%)&lt;BR/&gt; 53: (12.1951%)&lt;BR/&gt; 62153: (2.43902%)&gt;];
}
7730--10213[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.151.106.144"/>
      <filter src_ip="136.151.106.144"/>
      <filter dst_port="53" src_ip="136.151.106.144" src_port="1024"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07492,5.61833,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3424{
style=filled;
color=gray75;
176[label="209.29.137.84;s;900pkt 900fpkt", shape=diamond, color=yellow];
237[label="173.138.210.83;s;345pkt 345fpkt", shape=diamond, color=yellow];
249[label="173.138.129.159;s;975pkt 975fpkt", shape=diamond, color=yellow];
447[label="209.29.137.50;s;500pkt 500fpkt", shape=diamond, color=yellow];
456[label="173.138.45.176;s;138pkt 138fpkt", shape=diamond, color=yellow];
466[label="209.29.137.86;s;357pkt 357fpkt", shape=diamond, color=yellow];
471[label="198.74.78.167;d;14pkt 14fpkt", shape=diamond, color=yellow];
580[label="136.150.169.122;s;20pkt 20fpkt", shape=diamond, color=yellow];
656[label="173.138.128.122;s;1531pkt 1531fpkt", shape=diamond, color=yellow];
871[label="218.25.92.128;d;7pkt 7fpkt", shape=diamond, color=yellow];
2111[label="209.29.137.50;724pkt 724fpkt", shape=pentagon, color=darkviolet];
2787[label="209.29.137.84;956pkt 956fpkt", shape=pentagon, color=darkviolet];
2830[label="209.29.137.86;607pkt 607fpkt", shape=pentagon, color=darkviolet];
3485[label="173.138.128.122;1792pkt 1792fpkt", shape=pentagon, color=darkviolet];
3489[label="136.150.169.122;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4149[label="173.138.129.159;2227pkt 2227fpkt", shape=pentagon, color=darkviolet];
4457[label="173.138.45.176;141pkt 141fpkt", shape=pentagon, color=darkviolet];
6467[label="209.29.137.50;724pkt 724fpkt", shape=invtriangle, color=brown];
6941[label="209.29.137.84;956pkt 956fpkt", shape=invtriangle, color=brown];
6972[label="209.29.137.86;606pkt 606fpkt", shape=invtriangle, color=brown];
7446[label="136.150.169.122;21pkt 21fpkt", shape=invtriangle, color=brown];
7733[label="173.138.145.144;20pkt 20fpkt", shape=invtriangle, color=brown];
7902[label="173.138.129.159;2227pkt 2227fpkt", shape=invtriangle, color=brown];
9473[label="209.29.137.50;724pkt 724fpkt", shape=invhouse, color=bisque];
9730[label="209.29.137.84;955pkt 955fpkt", shape=invhouse, color=bisque];
9751[label="209.29.137.86;606pkt 606fpkt", shape=invhouse, color=bisque];
10042[label="136.150.169.122;21pkt 21fpkt", shape=invhouse, color=bisque];
10216[label="173.138.145.144;20pkt 20fpkt", shape=invhouse, color=bisque];
10320[label="173.138.129.159;2227pkt 2227fpkt", shape=invhouse, color=bisque];
stat3424[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, *:*}[62.8036%]&lt;BR/&gt;{173.138.128.122:*, *:*}[26.2218%]&lt;BR/&gt;{173.138.129.159:*, *:53}[20.8955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.1707%)&lt;BR/&gt; 2652: (11.5829%)&lt;BR/&gt; 4056: (4.41754%)&lt;BR/&gt; 32768: (1.09763%)&lt;BR/&gt; 1024: (0.827522%)&gt;];
}
176--284[label="0.00546448;1pkt 1fpkt"];
176--471[label="0.0714286;1pkt 1fpkt"];
176--2787[label="1;900pkt 900fpkt"];
176--6941[label="1;900pkt 900fpkt"];
176--9730[label="0.998889;899pkt 899fpkt"];
237--284[label="0.00546448;1pkt 1fpkt"];
237--871[label="0.142857;1pkt 1fpkt"];
249--471[label="0.214286;3pkt 3fpkt"];
249--877[label="0.0166667;1pkt 1fpkt"];
249--881[label="0.0121951;1pkt 1fpkt"];
249--4149[label="1;975pkt 975fpkt"];
249--7902[label="1;975pkt 975fpkt"];
249--10320[label="1;975pkt 975fpkt"];
447--471[label="0.285714;4pkt 4fpkt"];
447--2111[label="1;500pkt 500fpkt"];
447--6467[label="1;500pkt 500fpkt"];
447--9473[label="1;500pkt 500fpkt"];
456--871[label="0.142857;1pkt 1fpkt"];
456--877[label="0.0166667;1pkt 1fpkt"];
456--4457[label="1;138pkt 138fpkt"];
466--471[label="0.214286;3pkt 3fpkt"];
466--2830[label="1;357pkt 357fpkt"];
466--6972[label="0.997199;356pkt 356fpkt"];
466--9751[label="0.997199;356pkt 356fpkt"];
471--656[label="0.214286;3pkt 3fpkt"];
471--2111[label="0.285714;4pkt 4fpkt"];
471--2787[label="0.0714286;1pkt 1fpkt"];
471--2830[label="0.214286;3pkt 3fpkt"];
471--3485[label="0.214286;3pkt 3fpkt"];
471--4149[label="0.214286;3pkt 3fpkt"];
471--6467[label="0.285714;4pkt 4fpkt"];
471--6941[label="0.0714286;1pkt 1fpkt"];
471--6972[label="0.214286;3pkt 3fpkt"];
471--7902[label="0.214286;3pkt 3fpkt"];
471--9473[label="0.285714;4pkt 4fpkt"];
471--9730[label="0.0714286;1pkt 1fpkt"];
471--9751[label="0.214286;3pkt 3fpkt"];
471--10320[label="0.214286;3pkt 3fpkt"];
580--871[label="0.142857;1pkt 1fpkt"];
580--3489[label="0.95;19pkt 19fpkt"];
580--7446[label="0.95;19pkt 19fpkt"];
580--10042[label="0.95;19pkt 19fpkt"];
656--871[label="0.142857;1pkt 1fpkt"];
656--877[label="0.0166667;1pkt 1fpkt"];
656--881[label="0.0121951;1pkt 1fpkt"];
656--3485[label="1;1531pkt 1531fpkt"];
871--3485[label="0.142857;1pkt 1fpkt"];
871--3489[label="0.142857;1pkt 1fpkt"];
871--4149[label="0.142857;1pkt 1fpkt"];
871--4457[label="0.142857;1pkt 1fpkt"];
871--7446[label="0.142857;1pkt 1fpkt"];
871--7733[label="0.285714;2pkt 2fpkt"];
871--7902[label="0.142857;1pkt 1fpkt"];
871--10042[label="0.142857;1pkt 1fpkt"];
871--10216[label="0.285714;2pkt 2fpkt"];
871--10320[label="0.142857;1pkt 1fpkt"];
2111--6467[label="1;724pkt 724fpkt"];
2111--9473[label="1;724pkt 724fpkt"];
2787--6941[label="1;956pkt 956fpkt"];
2787--9730[label="1;955pkt 955fpkt"];
2830--6972[label="1;606pkt 606fpkt"];
2830--9751[label="1;606pkt 606fpkt"];
3489--7446[label="1;21pkt 21fpkt"];
3489--10042[label="1;21pkt 21fpkt"];
4149--7902[label="1;2227pkt 2227fpkt"];
4149--10320[label="1;2227pkt 2227fpkt"];
6467--9473[label="1;724pkt 724fpkt"];
6941--9730[label="1;955pkt 955fpkt"];
6972--9751[label="1;606pkt 606fpkt"];
7446--10042[label="1;21pkt 21fpkt"];
7733--10216[label="1;20pkt 20fpkt"];
7902--10320[label="1;2227pkt 2227fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.128.122"/>
      <filter src_port="53"/>
      <filter dst_port="53" src_ip="173.138.129.159"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.75.149.144"/>
    </slice>
    <from sec="1083733395" usec="0"/>
    <to sec="1083733509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.3.67.146"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.5.185.146"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.35.199.146"/>
    </slice>
    <from sec="1083733441" usec="0"/>
    <to sec="1083733490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.253.34.147"/>
    </slice>
    <from sec="1083733262" usec="0"/>
    <to sec="1083733326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.68.42.147"/>
    </slice>
    <from sec="1083733876" usec="0"/>
    <to sec="1083734053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.69.209.148"/>
    </slice>
    <from sec="1083733405" usec="0"/>
    <to sec="1083733533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.40.244.148"/>
    </slice>
    <from sec="1083733672" usec="0"/>
    <to sec="1083733782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.96.70.149"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.17.68.150"/>
    </slice>
    <from sec="1083733504" usec="0"/>
    <to sec="1083733809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.27.197.150"/>
    </slice>
    <from sec="1083733295" usec="0"/>
    <to sec="1083733390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.69.209.150"/>
    </slice>
    <from sec="1083733407" usec="0"/>
    <to sec="1083733764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.24.143.151"/>
    </slice>
    <from sec="1083733217" usec="0"/>
    <to sec="1083733348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.70.197.151"/>
    </slice>
    <from sec="1083734023" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.208.73.152"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.29.178.152"/>
    </slice>
    <from sec="1083733426" usec="0"/>
    <to sec="1083733518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.164.20.153"/>
    </slice>
    <from sec="1083733828" usec="0"/>
    <to sec="1083733960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.188.193.154"/>
    </slice>
    <from sec="1083733605" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.52.236.154"/>
    </slice>
    <from sec="1083733284" usec="0"/>
    <to sec="1083733747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3444{
style=filled;
color=gray75;
7853[label="136.151.238.154;22pkt 22fpkt", shape=invtriangle, color=brown];
10287[label="136.151.238.154;23pkt 23fpkt", shape=invhouse, color=bisque];
stat3444[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.238.154:*, 213.101.100.91:80}[82.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1403: (2.22222%)&lt;BR/&gt; 1402: (2.22222%)&lt;BR/&gt; 1401: (2.22222%)&lt;BR/&gt; 1400: (2.22222%)&gt;];
}
7853--10287[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="213.101.100.91" dst_port="80" src_ip="136.151.238.154"/>
    </slice>
    <from sec="1083733549" usec="0"/>
    <to sec="1083734086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.18.55.155"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.247.101.155"/>
    </slice>
    <from sec="1083733600" usec="0"/>
    <to sec="1083733694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,011,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3447{
style=filled;
color=gray75;
7859[label="197.16.160.155;1301pkt 1301fpkt", shape=invtriangle, color=brown];
10292[label="197.16.160.155;1302pkt 1302fpkt", shape=invhouse, color=bisque];
stat3447[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.16.160.155:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3854: (0.115252%)&lt;BR/&gt; 65333: (0.0768344%)&lt;BR/&gt; 63237: (0.0768344%)&lt;BR/&gt; 63033: (0.0768344%)&gt;];
}
7859--10292[label="1;1301pkt 1301fpkt"];
</description>
    <slice>
      <filter src_ip="197.16.160.155" src_port="80"/>
    </slice>
    <from sec="1083733224" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.90.32.156"/>
    </slice>
    <from sec="1083733205" usec="0"/>
    <to sec="1083733351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.20.137.156"/>
    </slice>
    <from sec="1083733295" usec="0"/>
    <to sec="1083733358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.98.165.156"/>
    </slice>
    <from sec="1083733384" usec="0"/>
    <to sec="1083733500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.29.194.156"/>
    </slice>
    <from sec="1083733489" usec="0"/>
    <to sec="1083733565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.242.19.157"/>
    </slice>
    <from sec="1083733338" usec="0"/>
    <to sec="1083733455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577427,5.65965,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_3453{
style=filled;
color=gray75;
4114[label="192.209.20.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10307[label="192.209.20.157;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3453[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.209.20.157:80, 155.148.182.202:29487}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29487: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4114--10307[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="155.148.182.202" dst_port="29487" src_ip="192.209.20.157" src_port="80"/>
    </slice>
    <from sec="1083733274" usec="0"/>
    <to sec="1083733486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.121.77.157"/>
    </slice>
    <from sec="1083733424" usec="0"/>
    <to sec="1083733497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.4.147.158"/>
    </slice>
    <from sec="1083733496" usec="0"/>
    <to sec="1083733587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.26.119.159"/>
    </slice>
    <from sec="1083733555" usec="0"/>
    <to sec="1083733656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.11.158.159"/>
    </slice>
    <from sec="1083733714" usec="0"/>
    <to sec="1083733845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.55.194.159"/>
    </slice>
    <from sec="1083733492" usec="0"/>
    <to sec="1083733574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.25.250.160"/>
    </slice>
    <from sec="1083733804" usec="0"/>
    <to sec="1083733852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.116.32.161"/>
    </slice>
    <from sec="1083733573" usec="0"/>
    <to sec="1083733750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.23.86.161"/>
    </slice>
    <from sec="1083733514" usec="0"/>
    <to sec="1083733655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.20.96.161"/>
    </slice>
    <from sec="1083733856" usec="0"/>
    <to sec="1083733945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.169.182.161"/>
    </slice>
    <from sec="1083733379" usec="0"/>
    <to sec="1083733465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.78.78.162"/>
    </slice>
    <from sec="1083733502" usec="0"/>
    <to sec="1083733771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.163.128.162"/>
    </slice>
    <from sec="1083733391" usec="0"/>
    <to sec="1083733470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.120.160.162"/>
    </slice>
    <from sec="1083733814" usec="0"/>
    <to sec="1083733945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.71.53.163"/>
    </slice>
    <from sec="1083733241" usec="0"/>
    <to sec="1083733765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.158.88.163"/>
    </slice>
    <from sec="1083733380" usec="0"/>
    <to sec="1083733499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.18.148.163"/>
    </slice>
    <from sec="1083733340" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.54.173.163"/>
    </slice>
    <from sec="1083733887" usec="0"/>
    <to sec="1083734008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.8.176.163"/>
    </slice>
    <from sec="1083733275" usec="0"/>
    <to sec="1083733557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.100.184.163"/>
    </slice>
    <from sec="1083733309" usec="0"/>
    <to sec="1083733457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.46.227.163"/>
    </slice>
    <from sec="1083733682" usec="0"/>
    <to sec="1083733748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.8.6.164"/>
    </slice>
    <from sec="1083733351" usec="0"/>
    <to sec="1083733416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.220.134.164"/>
    </slice>
    <from sec="1083733486" usec="0"/>
    <to sec="1083733576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.101.198.164"/>
    </slice>
    <from sec="1083733256" usec="0"/>
    <to sec="1083734084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.240.104.165"/>
    </slice>
    <from sec="1083733415" usec="0"/>
    <to sec="1083733544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="155.16.129.165"/>
    </slice>
    <from sec="1083733699" usec="0"/>
    <to sec="1083733906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.118.20.166"/>
    </slice>
    <from sec="1083733715" usec="0"/>
    <to sec="1083733968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.211.90.166"/>
    </slice>
    <from sec="1083733418" usec="0"/>
    <to sec="1083733723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.14.218.166"/>
    </slice>
    <from sec="1083733687" usec="0"/>
    <to sec="1083733796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3482{
style=filled;
color=gray75;
8008[label="52.117.28.167;32pkt 32fpkt", shape=invtriangle, color=brown];
10385[label="52.117.28.167;32pkt 32fpkt", shape=invhouse, color=bisque];
stat3482[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.117.28.167:35951, 209.29.136.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35951: (50%)&lt;BR/&gt; 4774: (1.5625%)&lt;BR/&gt; 4772: (1.5625%)&lt;BR/&gt; 4632: (1.5625%)&lt;BR/&gt; 4310: (1.5625%)&gt;];
}
8008--10385[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.136.89" src_ip="52.117.28.167" src_port="35951"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083734095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.30.16.168"/>
    </slice>
    <from sec="1083733831" usec="0"/>
    <to sec="1083733983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="95.38.136.168"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.31.17.169"/>
    </slice>
    <from sec="1083733352" usec="0"/>
    <to sec="1083733781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.176.68.170"/>
    </slice>
    <from sec="1083733707" usec="0"/>
    <to sec="1083733921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="95.5.12.171"/>
    </slice>
    <from sec="1083733611" usec="0"/>
    <to sec="1083733831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.221.80.171"/>
    </slice>
    <from sec="1083733364" usec="0"/>
    <to sec="1083733798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.107.133.172"/>
    </slice>
    <from sec="1083733437" usec="0"/>
    <to sec="1083733662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.139.176.172"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.32.179.172"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.24.189.173"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.105.212.174"/>
    </slice>
    <from sec="1083733216" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.16.215.174"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.148.156.175"/>
    </slice>
    <from sec="1083733740" usec="0"/>
    <to sec="1083733926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.138.171.175"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.91.224.175"/>
    </slice>
    <from sec="1083733916" usec="0"/>
    <to sec="1083734065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.209.228.175"/>
    </slice>
    <from sec="1083733330" usec="0"/>
    <to sec="1083733398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.24.97.176"/>
    </slice>
    <from sec="1083733449" usec="0"/>
    <to sec="1083733658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.118.137.176"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083733525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.14.208.176"/>
    </slice>
    <from sec="1083733948" usec="0"/>
    <to sec="1083734036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.134.135.177"/>
    </slice>
    <from sec="1083733694" usec="0"/>
    <to sec="1083734000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.187.224.177"/>
    </slice>
    <from sec="1083733461" usec="0"/>
    <to sec="1083733600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.3.40.178"/>
    </slice>
    <from sec="1083733716" usec="0"/>
    <to sec="1083733950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.10.248.178"/>
    </slice>
    <from sec="1083733557" usec="0"/>
    <to sec="1083733694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.24.20.179"/>
    </slice>
    <from sec="1083733339" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.21.99.179"/>
    </slice>
    <from sec="1083733399" usec="0"/>
    <to sec="1083733615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.39.100.179"/>
    </slice>
    <from sec="1083733240" usec="0"/>
    <to sec="1083733310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="95.1.15.180"/>
    </slice>
    <from sec="1083733353" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.21.99.180"/>
    </slice>
    <from sec="1083733417" usec="0"/>
    <to sec="1083733495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,010,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3511{
style=filled;
color=gray75;
8189[label="93.197.43.181;124pkt 124fpkt", shape=invtriangle, color=brown];
10501[label="93.197.43.181;124pkt 124fpkt", shape=invhouse, color=bisque];
stat3511[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.197.43.181:*, *:3127}[54.0323%]&lt;BR/&gt;{93.197.43.181:*, *:445}[35.4839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (27.0161%)&lt;BR/&gt; 445: (17.7419%)&lt;BR/&gt; 80: (5.24194%)&lt;BR/&gt; 13402: (0.806452%)&lt;BR/&gt; 20269: (0.403226%)&gt;];
}
8189--10501[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="93.197.43.181"/>
      <filter dst_port="445" src_ip="93.197.43.181"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.115.171.181"/>
    </slice>
    <from sec="1083733740" usec="0"/>
    <to sec="1083733815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.72.86.182"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083734080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.24.117.183"/>
    </slice>
    <from sec="1083733257" usec="0"/>
    <to sec="1083733601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.240.117.183"/>
    </slice>
    <from sec="1083733714" usec="0"/>
    <to sec="1083733826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.98.135.183"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3517{
style=filled;
color=gray75;
8221[label="46.71.206.183;9pkt 9fpkt", shape=invtriangle, color=brown];
10515[label="46.71.206.183;10pkt 10fpkt", shape=invhouse, color=bisque];
stat3517[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.206.183:80, 209.29.138.127:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4963: (5.26316%)&lt;BR/&gt; 4935: (5.26316%)&lt;BR/&gt; 4609: (5.26316%)&lt;BR/&gt; 4519: (5.26316%)&gt;];
}
8221--10515[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.127" src_ip="46.71.206.183" src_port="80"/>
    </slice>
    <from sec="1083733261" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.121.76.184"/>
    </slice>
    <from sec="1083734011" usec="0"/>
    <to sec="1083734087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.97.5.185"/>
    </slice>
    <from sec="1083733413" usec="0"/>
    <to sec="1083733505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.202.236.187"/>
    </slice>
    <from sec="1083733524" usec="0"/>
    <to sec="1083733623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.107.90.188"/>
    </slice>
    <from sec="1083733780" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.194.124.188"/>
    </slice>
    <from sec="1083733968" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.156.6.189"/>
    </slice>
    <from sec="1083733215" usec="0"/>
    <to sec="1083733291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.19.57.189"/>
    </slice>
    <from sec="1083733567" usec="0"/>
    <to sec="1083733621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.161.160.191"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083733862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.19.236.191"/>
    </slice>
    <from sec="1083733836" usec="0"/>
    <to sec="1083733908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.26.132.192"/>
    </slice>
    <from sec="1083733781" usec="0"/>
    <to sec="1083733919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.105.181.192"/>
    </slice>
    <from sec="1083733605" usec="0"/>
    <to sec="1083733699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.0.200.192"/>
    </slice>
    <from sec="1083733865" usec="0"/>
    <to sec="1083734007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.38.9.193"/>
    </slice>
    <from sec="1083733741" usec="0"/>
    <to sec="1083733917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.82.42.193"/>
    </slice>
    <from sec="1083733541" usec="0"/>
    <to sec="1083733673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.115.173.193"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.177.236.193"/>
    </slice>
    <from sec="1083733836" usec="0"/>
    <to sec="1083733914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.163.94.194"/>
    </slice>
    <from sec="1083733209" usec="0"/>
    <to sec="1083733278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.208.185.194"/>
    </slice>
    <from sec="1083733689" usec="0"/>
    <to sec="1083734091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.194.29.195"/>
    </slice>
    <from sec="1083733220" usec="0"/>
    <to sec="1083733288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.6.158.195"/>
    </slice>
    <from sec="1083733713" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.214.226.195"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.5.26.196"/>
    </slice>
    <from sec="1083733519" usec="0"/>
    <to sec="1083733618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.12.1.197"/>
    </slice>
    <from sec="1083733513" usec="0"/>
    <to sec="1083733581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.176.146.197"/>
    </slice>
    <from sec="1083733381" usec="0"/>
    <to sec="1083733882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.117.241.197"/>
    </slice>
    <from sec="1083733728" usec="0"/>
    <to sec="1083733802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.91.28.198"/>
    </slice>
    <from sec="1083733511" usec="0"/>
    <to sec="1083733710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.151.38.198"/>
    </slice>
    <from sec="1083733671" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.117.162.198"/>
    </slice>
    <from sec="1083733638" usec="0"/>
    <to sec="1083733720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.20.154.202"/>
    </slice>
    <from sec="1083733471" usec="0"/>
    <to sec="1083733560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.225.174.202"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.150.9.203"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.5.80.203"/>
    </slice>
    <from sec="1083733243" usec="0"/>
    <to sec="1083733440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.129.126.203"/>
    </slice>
    <from sec="1083733720" usec="0"/>
    <to sec="1083733854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.29.225.203"/>
    </slice>
    <from sec="1083733420" usec="0"/>
    <to sec="1083733510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.23.16.204"/>
    </slice>
    <from sec="1083733439" usec="0"/>
    <to sec="1083733608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,010,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3553{
style=filled;
color=gray75;
8435[label="199.255.20.204;82pkt 82fpkt", shape=invtriangle, color=brown];
10650[label="199.255.20.204;82pkt 82fpkt", shape=invhouse, color=bisque];
stat3553[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.255.20.204:*, *:139}[50%]&lt;BR/&gt;{199.255.20.204:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 2078: (1.21951%)&lt;BR/&gt; 1377: (1.21951%)&lt;BR/&gt; 1154: (1.21951%)&gt;];
}
8435--10650[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="199.255.20.204"/>
      <filter dst_port="139" src_ip="199.255.20.204"/>
    </slice>
    <from sec="1083733229" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.68.60.204"/>
    </slice>
    <from sec="1083733286" usec="0"/>
    <to sec="1083733346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.218.132.204"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.68.129.205"/>
    </slice>
    <from sec="1083733580" usec="0"/>
    <to sec="1083733775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3557{
style=filled;
color=gray75;
4934[label="93.246.136.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8446[label="93.246.136.205;2pkt 2fpkt", shape=invtriangle, color=brown];
10659[label="93.246.136.205;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3557[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.246.136.205:2484, 136.151.235.67:80}[50%]&lt;BR/&gt;{93.246.136.205:0, 141.145.237.221:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 2484: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
4934--8446[label="1;1pkt 1fpkt"];
4934--10659[label="1;1pkt 1fpkt"];
8446--10659[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.145.237.221" src_ip="93.246.136.205"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.246.136.205" src_port="2484"/>
    </slice>
    <from sec="1083733490" usec="0"/>
    <to sec="1083733616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.45.1.206"/>
    </slice>
    <from sec="1083733482" usec="0"/>
    <to sec="1083733608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.0.193.206"/>
    </slice>
    <from sec="1083733278" usec="0"/>
    <to sec="1083733560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.193.216.206"/>
    </slice>
    <from sec="1083733921" usec="0"/>
    <to sec="1083734009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.51.13.207"/>
    </slice>
    <from sec="1083733765" usec="0"/>
    <to sec="1083733863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.121.132.207"/>
    </slice>
    <from sec="1083733503" usec="0"/>
    <to sec="1083733626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.165.244.208"/>
    </slice>
    <from sec="1083733403" usec="0"/>
    <to sec="1083733698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.49.209.209"/>
    </slice>
    <from sec="1083733255" usec="0"/>
    <to sec="1083733739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.36.228.209"/>
    </slice>
    <from sec="1083733783" usec="0"/>
    <to sec="1083733833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3566{
style=filled;
color=gray75;
8495[label="94.176.249.209;89pkt 89fpkt", shape=invtriangle, color=brown];
10689[label="94.176.249.209;88pkt 88fpkt", shape=invhouse, color=bisque];
stat3566[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.176.249.209:80, 209.29.138.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60639: (0.564972%)&lt;BR/&gt; 59965: (0.564972%)&lt;BR/&gt; 58187: (0.564972%)&lt;BR/&gt; 57685: (0.564972%)&gt;];
}
8495--10689[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.10" src_ip="94.176.249.209" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.231.23.210"/>
    </slice>
    <from sec="1083733434" usec="0"/>
    <to sec="1083733759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.22.2.211"/>
    </slice>
    <from sec="1083733820" usec="0"/>
    <to sec="1083733893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,020,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3569{
style=filled;
color=gray75;
8508[label="136.150.2.211;106pkt 106fpkt", shape=invtriangle, color=brown];
10699[label="136.150.2.211;105pkt 105fpkt", shape=invhouse, color=bisque];
stat3569[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.2.211:0, *:0}[98.1132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.1043%)&lt;BR/&gt; 60115: (0.473934%)&lt;BR/&gt; 54593: (0.473934%)&lt;BR/&gt; 123: (0.473934%)&lt;BR/&gt; 80: (0.473934%)&gt;];
}
8508--10699[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="136.150.2.211"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083734097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.129.130.212"/>
    </slice>
    <from sec="1083733222" usec="0"/>
    <to sec="1083733497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.189.62.213"/>
    </slice>
    <from sec="1083733429" usec="0"/>
    <to sec="1083733529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.197.113.213"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083733437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.140.56.216"/>
    </slice>
    <from sec="1083733354" usec="0"/>
    <to sec="1083733449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.23.108.216"/>
    </slice>
    <from sec="1083733518" usec="0"/>
    <to sec="1083733631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.215.150.216"/>
    </slice>
    <from sec="1083733259" usec="0"/>
    <to sec="1083733409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.124.218.216"/>
    </slice>
    <from sec="1083733787" usec="0"/>
    <to sec="1083733919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.1.6.217"/>
    </slice>
    <from sec="1083733333" usec="0"/>
    <to sec="1083733552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.50.205.217"/>
    </slice>
    <from sec="1083733718" usec="0"/>
    <to sec="1083733891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.600261,5.64616,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3579{
style=filled;
color=gray75;
5170[label="93.205.91.220;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8612[label="93.205.91.220;1pkt 1fpkt", shape=invtriangle, color=brown];
10758[label="93.205.91.220;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3579[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.205.91.220:3061, 136.151.235.67:80}[50%]&lt;BR/&gt;{93.205.91.220:3298, 141.211.139.215:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3298: (37.5%)&lt;BR/&gt; 445: (37.5%)&lt;BR/&gt; 3061: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
5170--8612[label="1;1pkt 1fpkt"];
5170--10758[label="1;1pkt 1fpkt"];
8612--10758[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.211.139.215" dst_port="445" src_ip="93.205.91.220" src_port="3298"/>
      <filter dst_ip="136.151.235.67" dst_port="80" src_ip="93.205.91.220" src_port="3061"/>
    </slice>
    <from sec="1083733313" usec="0"/>
    <to sec="1083733940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.4.156.220"/>
    </slice>
    <from sec="1083733756" usec="0"/>
    <to sec="1083733843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.28.156.220"/>
    </slice>
    <from sec="1083733624" usec="0"/>
    <to sec="1083733702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,020,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3582{
style=filled;
color=gray75;
8624[label="136.151.66.221;50pkt 50fpkt", shape=invtriangle, color=brown];
10768[label="136.151.66.221;50pkt 50fpkt", shape=invhouse, color=bisque];
stat3582[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.151.66.221:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
8624--10768[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="136.151.66.221"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.41.118.221"/>
    </slice>
    <from sec="1083733546" usec="0"/>
    <to sec="1083733644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,010,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3584{
style=filled;
color=gray75;
8627[label="168.76.149.221;201pkt 201fpkt", shape=invtriangle, color=brown];
10771[label="168.76.149.221;202pkt 202fpkt", shape=invhouse, color=bisque];
stat3584[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.76.149.221:*, *:2745}[26.2376%]&lt;BR/&gt;{168.76.149.221:*, *:80}[24.7525%]&lt;BR/&gt;{168.76.149.221:*, *:6129}[24.7525%]&lt;BR/&gt;{168.76.149.221:*, *:1433}[24.2574%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (13.0273%)&lt;BR/&gt; 6129: (12.4069%)&lt;BR/&gt; 80: (12.4069%)&lt;BR/&gt; 1433: (12.1588%)&lt;BR/&gt; 4528: (0.496278%)&gt;];
}
8627--10771[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="168.76.149.221"/>
      <filter dst_port="6129" src_ip="168.76.149.221"/>
      <filter dst_port="80" src_ip="168.76.149.221"/>
      <filter dst_port="1433" src_ip="168.76.149.221"/>
    </slice>
    <from sec="1083733377" usec="0"/>
    <to sec="1083734098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.17.57.222"/>
    </slice>
    <from sec="1083733350" usec="0"/>
    <to sec="1083733826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.81.43.224"/>
    </slice>
    <from sec="1083733929" usec="0"/>
    <to sec="1083734093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.18.193.224"/>
    </slice>
    <from sec="1083734068" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.101.197.224"/>
    </slice>
    <from sec="1083733231" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.107.57.225"/>
    </slice>
    <from sec="1083734010" usec="0"/>
    <to sec="1083734085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.121.96.225"/>
    </slice>
    <from sec="1083733487" usec="0"/>
    <to sec="1083733841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.57.108.225"/>
    </slice>
    <from sec="1083733870" usec="0"/>
    <to sec="1083733973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.71.206.226"/>
    </slice>
    <from sec="1083734101" usec="0"/>
    <to sec="1083734102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.101.197.227"/>
    </slice>
    <from sec="1083733784" usec="0"/>
    <to sec="1083734099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.5.202.227"/>
    </slice>
    <from sec="1083733225" usec="0"/>
    <to sec="1083733556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.28.76.228"/>
    </slice>
    <from sec="1083733478" usec="0"/>
    <to sec="1083733613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3596{
style=filled;
color=gray75;
8714[label="173.138.193.228;1pkt 1fpkt", shape=invtriangle, color=brown];
10819[label="173.138.193.228;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3596[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.193.228:1029, 198.222.100.254:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 23: (50%)&gt;];
}
8714--10819[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.254" dst_port="23" src_ip="173.138.193.228" src_port="1029"/>
    </slice>
    <from sec="1083733317" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.23.16.229"/>
    </slice>
    <from sec="1083733269" usec="0"/>
    <to sec="1083733755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.34.47.229"/>
    </slice>
    <from sec="1083733318" usec="0"/>
    <to sec="1083733406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.176.93.229"/>
    </slice>
    <from sec="1083733579" usec="0"/>
    <to sec="1083734048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.230.11.231"/>
    </slice>
    <from sec="1083733408" usec="0"/>
    <to sec="1083733575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.8.13.232"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.42.50.232"/>
    </slice>
    <from sec="1083733245" usec="0"/>
    <to sec="1083733384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.187.72.232"/>
    </slice>
    <from sec="1083733638" usec="0"/>
    <to sec="1083733734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.185.172.232"/>
    </slice>
    <from sec="1083733790" usec="0"/>
    <to sec="1083734024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.205.193.232"/>
    </slice>
    <from sec="1083733558" usec="0"/>
    <to sec="1083733997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.85.23.233"/>
    </slice>
    <from sec="1083733211" usec="0"/>
    <to sec="1083733428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.18.146.233"/>
    </slice>
    <from sec="1083733821" usec="0"/>
    <to sec="1083733884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.23.78.234"/>
    </slice>
    <from sec="1083733314" usec="0"/>
    <to sec="1083733415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08399,5.64882,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_3609{
style=filled;
color=gray75;
646[label="53.221.105.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
10858[label="53.221.105.234;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3609[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.221.105.234:6881, 168.127.113.129:2728}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2728: (50%)&gt;];
}
646--10858[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.127.113.129" dst_port="2728" src_ip="53.221.105.234" src_port="6881"/>
    </slice>
    <from sec="1083733559" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.22.138.234"/>
    </slice>
    <from sec="1083733608" usec="0"/>
    <to sec="1083733824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.17.227.234"/>
    </slice>
    <from sec="1083733204" usec="0"/>
    <to sec="1083733581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.112.254.234"/>
    </slice>
    <from sec="1083733841" usec="0"/>
    <to sec="1083733923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.163.56.236"/>
    </slice>
    <from sec="1083733556" usec="0"/>
    <to sec="1083733642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.105.76.237"/>
    </slice>
    <from sec="1083733202" usec="0"/>
    <to sec="1083733985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.39.213.238"/>
    </slice>
    <from sec="1083733281" usec="0"/>
    <to sec="1083733521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.2.178.239"/>
    </slice>
    <from sec="1083733553" usec="0"/>
    <to sec="1083733682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.212.245.239"/>
    </slice>
    <from sec="1083733782" usec="0"/>
    <to sec="1083733887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.10.41.241"/>
    </slice>
    <from sec="1083733550" usec="0"/>
    <to sec="1083733627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3619{
style=filled;
color=gray75;
8874[label="136.150.34.243;26pkt 26fpkt", shape=invtriangle, color=brown];
10914[label="136.150.34.243;26pkt 26fpkt", shape=invhouse, color=bisque];
stat3619[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.150.34.243:*, 209.224.162.202:80}[57.6923%]&lt;BR/&gt;{136.150.34.243:*, 198.198.18.25:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1349: (1.92308%)&lt;BR/&gt; 1345: (1.92308%)&lt;BR/&gt; 1343: (1.92308%)&lt;BR/&gt; 1341: (1.92308%)&gt;];
}
8874--10914[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="209.224.162.202" dst_port="80" src_ip="136.150.34.243"/>
      <filter dst_ip="198.198.18.25" dst_port="80" src_ip="136.150.34.243"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.165.118.244"/>
    </slice>
    <from sec="1083733479" usec="0"/>
    <to sec="1083733614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="94.140.88.246"/>
    </slice>
    <from sec="1083733453" usec="0"/>
    <to sec="1083733966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637806,5.66306,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_3622{
style=filled;
color=gray75;
8903[label="155.148.138.246;2pkt 2fpkt", shape=invtriangle, color=brown];
10928[label="155.148.138.246;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3622[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.148.138.246:1070, 213.101.193.229:1863}[50%]&lt;BR/&gt;{155.148.138.246:1104, 198.222.100.254:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (25%)&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 1104: (25%)&lt;BR/&gt; 1070: (25%)&gt;];
}
8903--10928[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.222.100.254" dst_port="5050" src_ip="155.148.138.246" src_port="1104"/>
      <filter dst_ip="213.101.193.229" dst_port="1863" src_ip="155.148.138.246" src_port="1070"/>
    </slice>
    <from sec="1083733221" usec="0"/>
    <to sec="1083734100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.173.8.248"/>
    </slice>
    <from sec="1083733935" usec="0"/>
    <to sec="1083734041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.26.26.248"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577427,5.65965,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_3625{
style=filled;
color=gray75;
5600[label="218.24.114.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10937[label="218.24.114.248;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3625[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.24.114.248:80, 209.29.138.126:4392}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4392: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5600--10937[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.29.138.126" dst_port="4392" src_ip="218.24.114.248" src_port="80"/>
    </slice>
    <from sec="1083733201" usec="0"/>
    <to sec="1083733766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.68.122.248"/>
    </slice>
    <from sec="1083733207" usec="0"/>
    <to sec="1083733296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.20.185.248"/>
    </slice>
    <from sec="1083733983" usec="0"/>
    <to sec="1083734060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.18.236.248"/>
    </slice>
    <from sec="1083733203" usec="0"/>
    <to sec="1083733863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.10.1.250"/>
    </slice>
    <from sec="1083733515" usec="0"/>
    <to sec="1083733579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.4.36.250"/>
    </slice>
    <from sec="1083733200" usec="0"/>
    <to sec="1083733231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.162.161.250"/>
    </slice>
    <from sec="1083733276" usec="0"/>
    <to sec="1083733378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.116.80.254"/>
    </slice>
    <from sec="1083733606" usec="0"/>
    <to sec="1083733654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="159.86.84.254"/>
    </slice>
    <from sec="1083733213" usec="0"/>
    <to sec="1083733411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.616364,5.6765,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.105.196.255"/>
    </slice>
    <from sec="1083733438" usec="0"/>
    <to sec="1083733495" usec="0"/>
  </anomaly>

</admd:annotation>
