<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.713677,1.44301,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.27.193.100" dst_port="80" proto="tcp" src_ip="61.176.229.30" src_port="59656"/>
      <from sec="1094706746" usec="0"/>
      <to sec="1094706750" usec="0"/>
    </slice>
    <from sec="1094706744" usec="0"/>
    <to sec="1094706750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="53" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <from sec="1094706130" usec="0"/>
      <to sec="1094706887" usec="0"/>
    </slice>
    <from sec="1094706129" usec="0"/>
    <to sec="1094706887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="88.214.32.205" dst_port="1023" proto="tcp" src_port="4899"/>
      <filter dst_ip="88.214.32.205" dst_port="1023" proto="tcp" src_port="4899"/>
      <filter dst_ip="88.214.32.205" dst_port="1023" proto="tcp" src_port="4899"/>
      <filter dst_ip="88.214.32.205" dst_port="1023" proto="tcp" src_port="4899"/>
      <from sec="1094706435" usec="0"/>
      <to sec="1094706445" usec="0"/>
    </slice>
    <from sec="1094706435" usec="0"/>
    <to sec="1094706445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="1023"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="1023"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="1023"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="1023"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="5554"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="5554"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="5554"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="5554"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="9898"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="9898"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="9898"/>
      <filter dst_ip="198.171.102.134" proto="tcp" src_ip="198.171.102.134" src_port="9898"/>
      <from sec="1094706487" usec="0"/>
      <to sec="1094706495" usec="0"/>
    </slice>
    <from sec="1094706487" usec="0"/>
    <to sec="1094706495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.176.30.57" src_port="59339"/>
      <from sec="1094706022" usec="0"/>
      <to sec="1094706034" usec="0"/>
    </slice>
    <from sec="1094706022" usec="0"/>
    <to sec="1094706034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_5{
style=filled;
color=gray75;
108[label="194.221.181.72s;254pkt 254fpkt", shape=rectangle, color=red];
stat5[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.221.181.72:1031, *:137}[97.6378%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (48.8189%)&lt;BR/&gt; 137: (48.8189%)&lt;BR/&gt; 53: (2.3622%)&gt;];
}
108--1263[label="0.00393701;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.221.181.72" src_port="1031"/>
    </slice>
    <from sec="1094706852" usec="0"/>
    <to sec="1094706867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="tcp" src_ip="196.0.34.76" src_port="1033"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="udp" src_ip="196.0.34.76" src_port="1033"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="tcp" src_ip="196.0.34.76" src_port="80"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="udp" src_ip="196.0.34.76" src_port="80"/>
      <from sec="1094706882" usec="0"/>
      <to sec="1094706889" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="tcp" src_ip="218.114.82.76" src_port="1033"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="udp" src_ip="218.114.82.76" src_port="1033"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="tcp" src_ip="218.114.82.76" src_port="80"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="udp" src_ip="218.114.82.76" src_port="80"/>
      <from sec="1094706883" usec="0"/>
      <to sec="1094706889" usec="0"/>
    </slice>
    <from sec="1094706882" usec="0"/>
    <to sec="1094706889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="195.86.188.102" src_port="1035"/>
      <from sec="1094706151" usec="0"/>
      <to sec="1094706162" usec="0"/>
    </slice>
    <from sec="1094706151" usec="0"/>
    <to sec="1094706162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="58.143.53.104" src_port="19015"/>
      <from sec="1094706744" usec="0"/>
      <to sec="1094706755" usec="0"/>
    </slice>
    <from sec="1094706744" usec="0"/>
    <to sec="1094706755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.85.229.138" dst_port="137" proto="tcp" src_ip="61.61.50.134" src_port="1030"/>
      <filter dst_ip="136.85.229.138" dst_port="137" proto="udp" src_ip="61.61.50.134" src_port="1030"/>
      <from sec="1094706022" usec="0"/>
      <to sec="1094706028" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="136.85.229.138" dst_port="137" proto="tcp" src_ip="194.194.10.134" src_port="1030"/>
      <filter dst_ip="136.85.229.138" dst_port="137" proto="udp" src_ip="194.194.10.134" src_port="1030"/>
      <from sec="1094706023" usec="0"/>
      <to sec="1094706024" usec="0"/>
    </slice>
    <from sec="1094706022" usec="0"/>
    <to sec="1094706028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="62.201.19.146" src_port="1032"/>
      <from sec="1094706073" usec="0"/>
      <to sec="1094706078" usec="0"/>
    </slice>
    <from sec="1094706073" usec="0"/>
    <to sec="1094706078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="197.250.8.182" src_port="15962"/>
      <filter dst_port="137" proto="udp" src_ip="197.250.8.182" src_port="15962"/>
      <filter dst_port="80" proto="tcp" src_ip="197.250.8.182" src_port="15962"/>
      <filter dst_port="80" proto="udp" src_ip="197.250.8.182" src_port="15962"/>
      <from sec="1094706235" usec="0"/>
      <to sec="1094706255" usec="0"/>
    </slice>
    <from sec="1094706235" usec="0"/>
    <to sec="1094706255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.211.81.230" src_port="1028"/>
      <from sec="1094706736" usec="0"/>
      <to sec="1094706741" usec="0"/>
    </slice>
    <from sec="1094706736" usec="0"/>
    <to sec="1094706741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="194.220.135.61" src_port="80"/>
      <from sec="1094706711" usec="0"/>
      <to sec="1094706713" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="192.231.27.61" src_port="80"/>
      <from sec="1094706711" usec="0"/>
      <to sec="1094706715" usec="0"/>
    </slice>
    <from sec="1094706711" usec="0"/>
    <to sec="1094706715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="194.187.181.125"/>
      <from sec="1094706080" usec="0"/>
      <to sec="1094706082" usec="0"/>
    </slice>
    <from sec="1094706080" usec="0"/>
    <to sec="1094706083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="5554" proto="tcp" src_ip="217.77.139.150"/>
      <filter dst_port="9898" proto="tcp" src_ip="217.77.139.150"/>
      <from sec="1094706195" usec="0"/>
      <to sec="1094706197" usec="0"/>
    </slice>
    <from sec="1094706194" usec="0"/>
    <to sec="1094706197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="196.26.150.220" src_port="6667"/>
      <from sec="1094706861" usec="0"/>
      <to sec="1094706863" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="202.158.234.220" src_port="6667"/>
      <from sec="1094706859" usec="0"/>
      <to sec="1094706863" usec="0"/>
    </slice>
    <from sec="1094706859" usec="0"/>
    <to sec="1094706863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="5554"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="5554"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="5554"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="5554"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="9898"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="9898"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="9898"/>
      <filter dst_ip="197.58.152.161" dst_port="1023" proto="tcp" src_port="9898"/>
      <from sec="1094706484" usec="0"/>
      <to sec="1094706491" usec="0"/>
    </slice>
    <from sec="1094706484" usec="0"/>
    <to sec="1094706492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.38.164.224" dst_port="5554" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.38.164.224" dst_port="5554" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.38.164.224" dst_port="5554" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.38.164.224" dst_port="5554" proto="tcp" src_port="1023"/>
      <from sec="1094706333" usec="0"/>
      <to sec="1094706337" usec="0"/>
    </slice>
    <from sec="1094706331" usec="0"/>
    <to sec="1094706337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.173.146.123" proto="icmp"/>
      <filter dst_ip="194.173.146.123" proto="icmp"/>
      <filter dst_ip="194.173.146.123" proto="icmp"/>
      <filter dst_ip="194.173.146.123" proto="icmp"/>
      <from sec="1094706402" usec="0"/>
      <to sec="1094706406" usec="0"/>
    </slice>
    <from sec="1094706402" usec="0"/>
    <to sec="1094706406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713677,1.44301,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="59.235.129.211" proto="icmp"/>
      <filter dst_ip="59.235.129.211" proto="icmp"/>
      <filter dst_ip="59.235.129.211" proto="icmp"/>
      <filter dst_ip="59.235.129.211" proto="icmp"/>
      <from sec="1094706386" usec="0"/>
      <to sec="1094706391" usec="0"/>
    </slice>
    <from sec="1094706386" usec="0"/>
    <to sec="1094706391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782584,1.46934,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.27.240.140" dst_port="137" proto="tcp" src_ip="192.144.218.113" src_port="80"/>
      <filter dst_ip="213.27.240.140" dst_port="137" proto="udp" src_ip="192.144.218.113" src_port="80"/>
      <filter dst_ip="213.27.240.140" dst_port="137" proto="tcp" src_ip="192.144.218.113" src_port="3682"/>
      <filter dst_ip="213.27.240.140" dst_port="137" proto="udp" src_ip="192.144.218.113" src_port="3682"/>
      <filter dst_ip="160.161.33.27" dst_port="137" proto="tcp" src_ip="192.144.218.113" src_port="80"/>
      <filter dst_ip="160.161.33.27" dst_port="137" proto="udp" src_ip="192.144.218.113" src_port="80"/>
      <filter dst_ip="160.161.33.27" dst_port="137" proto="tcp" src_ip="192.144.218.113" src_port="3682"/>
      <filter dst_ip="160.161.33.27" dst_port="137" proto="udp" src_ip="192.144.218.113" src_port="3682"/>
      <filter dst_ip="213.27.240.212" dst_port="137" proto="tcp" src_ip="192.144.218.113" src_port="80"/>
      <filter dst_ip="213.27.240.212" dst_port="137" proto="udp" src_ip="192.144.218.113" src_port="80"/>
      <filter dst_ip="213.27.240.212" dst_port="137" proto="tcp" src_ip="192.144.218.113" src_port="3682"/>
      <filter dst_ip="213.27.240.212" dst_port="137" proto="udp" src_ip="192.144.218.113" src_port="3682"/>
      <from sec="1094706006" usec="0"/>
      <to sec="1094706812" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="213.27.240.140" dst_port="137" proto="tcp" src_ip="35.95.198.113" src_port="80"/>
      <filter dst_ip="213.27.240.140" dst_port="137" proto="udp" src_ip="35.95.198.113" src_port="80"/>
      <filter dst_ip="213.27.240.140" dst_port="137" proto="tcp" src_ip="35.95.198.113" src_port="3682"/>
      <filter dst_ip="213.27.240.140" dst_port="137" proto="udp" src_ip="35.95.198.113" src_port="3682"/>
      <filter dst_ip="160.161.33.27" dst_port="137" proto="tcp" src_ip="35.95.198.113" src_port="80"/>
      <filter dst_ip="160.161.33.27" dst_port="137" proto="udp" src_ip="35.95.198.113" src_port="80"/>
      <filter dst_ip="160.161.33.27" dst_port="137" proto="tcp" src_ip="35.95.198.113" src_port="3682"/>
      <filter dst_ip="160.161.33.27" dst_port="137" proto="udp" src_ip="35.95.198.113" src_port="3682"/>
      <filter dst_ip="213.27.240.212" dst_port="137" proto="tcp" src_ip="35.95.198.113" src_port="80"/>
      <filter dst_ip="213.27.240.212" dst_port="137" proto="udp" src_ip="35.95.198.113" src_port="80"/>
      <filter dst_ip="213.27.240.212" dst_port="137" proto="tcp" src_ip="35.95.198.113" src_port="3682"/>
      <filter dst_ip="213.27.240.212" dst_port="137" proto="udp" src_ip="35.95.198.113" src_port="3682"/>
      <from sec="1094706006" usec="0"/>
      <to sec="1094706812" usec="0"/>
    </slice>
    <from sec="1094706006" usec="0"/>
    <to sec="1094706812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782584,1.46934,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="142.242.195.206" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="142.242.195.206" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <from sec="1094706075" usec="0"/>
      <to sec="1094706870" usec="0"/>
    </slice>
    <from sec="1094706073" usec="0"/>
    <to sec="1094706870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782584,1.46934,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="tcp" src_ip="136.85.186.14" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="udp" src_ip="136.85.186.14" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="tcp" src_ip="136.85.186.14" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="udp" src_ip="136.85.186.14" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="tcp" src_ip="136.85.186.14" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="udp" src_ip="136.85.186.14" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="tcp" src_ip="136.85.186.14" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="udp" src_ip="136.85.186.14" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="tcp" src_ip="136.85.186.14" src_port="1024"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="udp" src_ip="136.85.186.14" src_port="1024"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="tcp" src_ip="136.85.186.14" src_port="1024"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="udp" src_ip="136.85.186.14" src_port="1024"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="tcp" src_ip="136.85.186.14" src_port="1024"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="udp" src_ip="136.85.186.14" src_port="1024"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="tcp" src_ip="136.85.186.14" src_port="1024"/>
      <filter dst_ip="136.85.186.14" dst_port="4337" proto="udp" src_ip="136.85.186.14" src_port="1024"/>
      <from sec="1094706134" usec="0"/>
      <to sec="1094706887" usec="0"/>
    </slice>
    <from sec="1094706134" usec="0"/>
    <to sec="1094706887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782584,1.46934,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="tcp" src_ip="61.70.123.76" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="4337" proto="udp" src_ip="61.70.123.76" src_port="1028"/>
      <from sec="1094706134" usec="0"/>
      <to sec="1094706887" usec="0"/>
    </slice>
    <from sec="1094706134" usec="0"/>
    <to sec="1094706887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.883383,1.34613,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
101[label="195.89.204.27s;248pkt 248fpkt", shape=rectangle, color=red];
422[label="195.89.204.27s;120pkt 120fpkt", shape=ellipse, color=green];
5103[label="195.89.204.27;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.204.27:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
101--422[label="1;120pkt 120fpkt"];
101--5103[label="0.995968;247pkt 247fpkt"];
422--5103[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.89.204.27" src_port="1033"/>
    </slice>
    <from sec="1094706390" usec="0"/>
    <to sec="1094706408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914125,1.4184,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
106[label="215.26.164.64s;255pkt 255fpkt", shape=rectangle, color=red];
424[label="215.26.164.64s;110pkt 110fpkt", shape=ellipse, color=green];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.26.164.64:1046, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1046: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
106--424[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.26.164.64" src_port="1046"/>
    </slice>
    <from sec="1094706824" usec="0"/>
    <to sec="1094706837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782584,1.46934,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="tcp" src_ip="196.0.34.76" src_port="1033"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="udp" src_ip="196.0.34.76" src_port="1033"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="tcp" src_ip="196.0.34.76" src_port="80"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="udp" src_ip="196.0.34.76" src_port="80"/>
      <from sec="1094706882" usec="0"/>
      <to sec="1094706887" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="tcp" src_ip="218.114.82.76" src_port="1033"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="udp" src_ip="218.114.82.76" src_port="1033"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="tcp" src_ip="218.114.82.76" src_port="80"/>
      <filter dst_ip="213.27.240.216" dst_port="137" proto="udp" src_ip="218.114.82.76" src_port="80"/>
      <from sec="1094706883" usec="0"/>
      <to sec="1094706886" usec="0"/>
    </slice>
    <from sec="1094706882" usec="0"/>
    <to sec="1094706887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914125,1.4184,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
114[label="197.205.4.107s;204pkt 204fpkt", shape=rectangle, color=red];
428[label="197.205.4.107s;92pkt 92fpkt", shape=ellipse, color=green];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.205.4.107:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
114--428[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.205.4.107" src_port="1032"/>
    </slice>
    <from sec="1094706876" usec="0"/>
    <to sec="1094706887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914125,1.4184,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
122[label="195.80.9.139s;247pkt 247fpkt", shape=rectangle, color=red];
432[label="195.80.9.139s;247pkt 247fpkt", shape=ellipse, color=green];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.9.139:64487, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64487: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
122--432[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.80.9.139" src_port="64487"/>
    </slice>
    <from sec="1094706061" usec="0"/>
    <to sec="1094706075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.883383,1.34613,001,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
185[label="197.2.149.41s;224pkt 224fpkt", shape=rectangle, color=red];
485[label="197.2.149.41s;224pkt 224fpkt", shape=ellipse, color=green];
5167[label="197.2.149.41;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.2.149.41:*, *:1023}[34.252%]&lt;BR/&gt;{197.2.149.41:*, *:9898}[33.8583%]&lt;BR/&gt;{197.2.149.41:*, *:5554}[31.8898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (17.1897%)&lt;BR/&gt; 9898: (16.9757%)&lt;BR/&gt; 5554: (15.8345%)&lt;BR/&gt; 4450: (0.21398%)&lt;BR/&gt; 4295: (0.21398%)&gt;];
}
185--485[label="1;224pkt 224fpkt"];
185--5167[label="0.995536;223pkt 223fpkt"];
485--5167[label="0.995536;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="197.2.149.41"/>
      <filter dst_port="9898" src_ip="197.2.149.41"/>
      <filter dst_port="5554" src_ip="197.2.149.41"/>
    </slice>
    <from sec="1094706626" usec="0"/>
    <to sec="1094706767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782584,1.46934,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="194.220.135.61" src_port="80"/>
      <from sec="1094706711" usec="0"/>
      <to sec="1094706713" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="192.231.27.61" src_port="80"/>
      <from sec="1094706711" usec="0"/>
      <to sec="1094706715" usec="0"/>
    </slice>
    <from sec="1094706711" usec="0"/>
    <to sec="1094706715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.883383,1.34613,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
251[label="194.173.146.123s;236pkt 236fpkt", shape=rectangle, color=red];
549[label="194.173.146.123s;17pkt 17fpkt", shape=ellipse, color=green];
5483[label="194.173.146.123;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.146.123:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63335: (5.07968%)&lt;BR/&gt; 62330: (1.39442%)&lt;BR/&gt; 63330: (0.59761%)&lt;BR/&gt; 63225: (0.59761%)&gt;];
}
251--549[label="1;17pkt 17fpkt"];
251--5483[label="1;236pkt 236fpkt"];
549--5483[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.173.146.123"/>
    </slice>
    <from sec="1094706393" usec="0"/>
    <to sec="1094706408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.883383,1.34613,001,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
283[label="198.141.107.158s;246pkt 246fpkt", shape=rectangle, color=red];
582[label="198.141.107.158s;246pkt 246fpkt", shape=ellipse, color=green];
5617[label="198.141.107.158;246pkt 246fpkt", shape=pentagon, color=darkviolet];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.141.107.158:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4545: (0.203252%)&lt;BR/&gt; 4519: (0.203252%)&lt;BR/&gt; 4510: (0.203252%)&lt;BR/&gt; 4509: (0.203252%)&gt;];
}
283--582[label="1;246pkt 246fpkt"];
283--5617[label="1;246pkt 246fpkt"];
582--5617[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="198.141.107.158"/>
    </slice>
    <from sec="1094706065" usec="0"/>
    <to sec="1094706072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914125,1.4184,001,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
287[label="195.76.181.160s;242pkt 242fpkt", shape=rectangle, color=red];
585[label="195.76.181.160s;242pkt 242fpkt", shape=ellipse, color=green];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.76.181.160:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4983: (0.206612%)&lt;BR/&gt; 4972: (0.206612%)&lt;BR/&gt; 4971: (0.206612%)&lt;BR/&gt; 4970: (0.206612%)&gt;];
}
287--585[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="195.76.181.160"/>
    </slice>
    <from sec="1094706765" usec="0"/>
    <to sec="1094706770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782584,1.46934,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.38.164.224" dst_port="5554" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.38.164.224" dst_port="5554" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.38.164.224" dst_port="5554" proto="tcp" src_port="1023"/>
      <filter dst_ip="197.38.164.224" dst_port="5554" proto="tcp" src_port="1023"/>
      <from sec="1094706333" usec="0"/>
      <to sec="1094706337" usec="0"/>
    </slice>
    <from sec="1094706331" usec="0"/>
    <to sec="1094706337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.842997,1.50178,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="193.187.123.108" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <from sec="1094706152" usec="0"/>
      <to sec="1094706857" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1028"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="137" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="tcp" src_ip="164.27.139.131" src_port="1027"/>
      <filter dst_ip="136.85.186.14" dst_port="6667" proto="udp" src_ip="164.27.139.131" src_port="1027"/>
      <from sec="1094706151" usec="0"/>
      <to sec="1094706857" usec="0"/>
    </slice>
    <from sec="1094706151" usec="0"/>
    <to sec="1094706857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.842997,1.50178,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="5554" proto="tcp" src_ip="196.0.128.67" src_port="80"/>
      <filter dst_port="9898" proto="tcp" src_ip="196.0.128.67" src_port="80"/>
      <from sec="1094706734" usec="0"/>
      <to sec="1094706738" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="5554" proto="tcp" src_ip="208.75.4.67" src_port="80"/>
      <filter dst_port="9898" proto="tcp" src_ip="208.75.4.67" src_port="80"/>
      <from sec="1094706733" usec="0"/>
      <to sec="1094706737" usec="0"/>
    </slice>
    <from sec="1094706733" usec="0"/>
    <to sec="1094706738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
948[label="68.184.217.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
949[label="164.23.73.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
3325[label="68.184.217.90;d;1pkt 1fpkt", shape=hexagon, color=black];
3460[label="164.23.73.211;s;1pkt 1fpkt", shape=hexagon, color=black];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.73.211:32768, 68.184.217.90:32769}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32769: (50%)&lt;BR/&gt; 32768: (50%)&gt;];
}
948--949[label="1;1pkt 1fpkt"];
948--3325[label="1;1pkt 1fpkt"];
948--3460[label="1;1pkt 1fpkt"];
949--3325[label="1;1pkt 1fpkt"];
949--3460[label="1;1pkt 1fpkt"];
3325--3460[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="68.184.217.90" dst_port="32769" src_ip="164.23.73.211" src_port="32768"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
1022[label="145.89.193.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
1024[label="203.141.29.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
4024[label="145.89.193.232;d;1pkt 1fpkt", shape=hexagon, color=black];
4283[label="203.141.29.37;s;1pkt 1fpkt", shape=hexagon, color=black];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.141.29.37:6891, 145.89.193.232:2510}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6891: (50%)&lt;BR/&gt; 2510: (50%)&gt;];
}
1022--1024[label="1;1pkt 1fpkt"];
1022--4024[label="1;1pkt 1fpkt"];
1022--4283[label="1;1pkt 1fpkt"];
1024--4024[label="1;1pkt 1fpkt"];
1024--4283[label="1;1pkt 1fpkt"];
4024--4283[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.89.193.232" dst_port="2510" src_ip="203.141.29.37" src_port="6891"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1052[label="142.205.163.53;s;3pkt 3fpkt", shape=diamond, color=yellow];
1053[label="114.88.51.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
2944[label="213.137.189.155;d;2pkt 2fpkt", shape=diamond, color=yellow];
3889[label="142.205.163.53;s;3pkt 3fpkt", shape=hexagon, color=black];
5204[label="142.205.163.53;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6092[label="142.205.163.53;3pkt 3fpkt", shape=invtriangle, color=brown];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.205.163.53:31105, 114.88.51.108:4389}[33.3333%]&lt;BR/&gt;{142.205.163.53:21, 213.137.189.155:35578}[33.3333%]&lt;BR/&gt;{142.205.163.53:58815, 213.137.189.155:35717}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58815: (16.6667%)&lt;BR/&gt; 35717: (16.6667%)&lt;BR/&gt; 35578: (16.6667%)&lt;BR/&gt; 31105: (16.6667%)&lt;BR/&gt; 4389: (16.6667%)&gt;];
}
1052--1053[label="1;1pkt 1fpkt"];
1052--2944[label="1;2pkt 2fpkt"];
1052--3889[label="1;3pkt 3fpkt"];
1052--5204[label="1;3pkt 3fpkt"];
1052--6092[label="1;3pkt 3fpkt"];
1053--3889[label="1;1pkt 1fpkt"];
1053--5204[label="1;1pkt 1fpkt"];
1053--6092[label="1;1pkt 1fpkt"];
2944--3889[label="1;2pkt 2fpkt"];
2944--5204[label="1;2pkt 2fpkt"];
2944--6092[label="1;2pkt 2fpkt"];
3889--5204[label="1;3pkt 3fpkt"];
3889--6092[label="1;3pkt 3fpkt"];
5204--6092[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.137.189.155" dst_port="35717" src_ip="142.205.163.53" src_port="58815"/>
      <filter dst_ip="213.137.189.155" dst_port="35578" src_ip="142.205.163.53" src_port="21"/>
      <filter dst_ip="114.88.51.108" dst_port="4389" src_ip="142.205.163.53" src_port="31105"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
1055[label="145.89.34.3;s;2pkt 2fpkt", shape=diamond, color=yellow];
1056[label="62.179.178.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
4034[label="145.89.34.3;s;1pkt 1fpkt", shape=hexagon, color=black];
4035[label="62.179.178.11;d;1pkt 1fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.34.3:37244, 62.179.178.11:873}[50%]&lt;BR/&gt;{145.89.34.3:60610, 61.188.82.78:873}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 873: (50%)&lt;BR/&gt; 37244: (40%)&lt;BR/&gt; 60610: (10%)&gt;];
}
1055--1056[label="1;1pkt 1fpkt"];
1055--4034[label="1;1pkt 1fpkt"];
1055--4035[label="1;1pkt 1fpkt"];
1056--4034[label="1;1pkt 1fpkt"];
1056--4035[label="1;1pkt 1fpkt"];
4034--4035[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="61.188.82.78" dst_port="873" src_ip="145.89.34.3" src_port="60610"/>
      <filter dst_ip="62.179.178.11" dst_port="873" src_ip="145.89.34.3" src_port="37244"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
1120[label="164.23.9.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
1121[label="192.225.49.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
3184[label="192.225.49.148;s;1pkt 1fpkt", shape=hexagon, color=black];
3367[label="164.23.9.52;d;1pkt 1fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.225.49.148:20476, 164.23.9.52:51411}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51411: (50%)&lt;BR/&gt; 20476: (50%)&gt;];
}
1120--1121[label="1;1pkt 1fpkt"];
1120--3184[label="1;1pkt 1fpkt"];
1120--3367[label="1;1pkt 1fpkt"];
1121--3184[label="1;1pkt 1fpkt"];
1121--3367[label="1;1pkt 1fpkt"];
3184--3367[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.9.52" dst_port="51411" src_ip="192.225.49.148" src_port="20476"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
1124[label="166.52.184.99;d;2pkt 2fpkt", shape=diamond, color=yellow];
1125[label="192.225.49.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
3185[label="166.52.184.99;d;1pkt 1fpkt", shape=hexagon, color=black];
4072[label="192.225.49.154;s;1pkt 1fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.246.172.33:22906, 166.52.184.99:139}[50%]&lt;BR/&gt;{192.225.49.154:20298, 166.52.184.99:1030}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20298: (40%)&lt;BR/&gt; 1030: (40%)&lt;BR/&gt; 22906: (10%)&lt;BR/&gt; 139: (10%)&gt;];
}
1124--1125[label="1;1pkt 1fpkt"];
1124--3185[label="1;1pkt 1fpkt"];
1124--4072[label="1;1pkt 1fpkt"];
1125--3185[label="1;1pkt 1fpkt"];
1125--4072[label="1;1pkt 1fpkt"];
3185--4072[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.52.184.99" dst_port="1030" src_ip="192.225.49.154" src_port="20298"/>
      <filter dst_ip="166.52.184.99" dst_port="139" src_ip="90.246.172.33" src_port="22906"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1122[label="145.89.153.120;s;5pkt 5fpkt", shape=diamond, color=yellow];
1209[label="88.56.177.223;d;4pkt 4fpkt", shape=diamond, color=yellow];
3532[label="145.89.153.120;s;5pkt 5fpkt", shape=hexagon, color=black];
3642[label="88.56.177.223;d;4pkt 4fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.153.120:1567, 213.196.113.106:21}[20%]&lt;BR/&gt;{145.89.153.120:1854, 88.56.177.223:21}[20%]&lt;BR/&gt;{145.89.153.120:1855, 88.56.177.223:20}[20%]&lt;BR/&gt;{145.89.153.120:1874, 88.56.177.223:21}[20%]&lt;BR/&gt;{145.89.153.120:1875, 88.56.177.223:20}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (27.7778%)&lt;BR/&gt; 20: (22.2222%)&lt;BR/&gt; 1875: (11.1111%)&lt;BR/&gt; 1874: (11.1111%)&lt;BR/&gt; 1855: (11.1111%)&gt;];
}
1122--1209[label="1;4pkt 4fpkt"];
1122--3532[label="1;5pkt 5fpkt"];
1122--3642[label="1;4pkt 4fpkt"];
1209--3532[label="1;4pkt 4fpkt"];
1209--3642[label="1;4pkt 4fpkt"];
3532--3642[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="88.56.177.223" dst_port="20" src_ip="145.89.153.120" src_port="1875"/>
      <filter dst_ip="88.56.177.223" dst_port="21" src_ip="145.89.153.120" src_port="1874"/>
      <filter dst_ip="88.56.177.223" dst_port="20" src_ip="145.89.153.120" src_port="1855"/>
      <filter dst_ip="88.56.177.223" dst_port="21" src_ip="145.89.153.120" src_port="1854"/>
      <filter dst_ip="213.196.113.106" dst_port="21" src_ip="145.89.153.120" src_port="1567"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
1023[label="203.141.29.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1279[label="145.89.193.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
3478[label="145.89.193.232;s;1pkt 1fpkt", shape=hexagon, color=black];
4025[label="203.141.29.37;d;1pkt 1fpkt", shape=hexagon, color=black];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.193.232:2510, 203.141.29.37:6891}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6891: (50%)&lt;BR/&gt; 2510: (50%)&gt;];
}
1023--1279[label="1;1pkt 1fpkt"];
1023--3478[label="1;1pkt 1fpkt"];
1023--4025[label="1;1pkt 1fpkt"];
1279--3478[label="1;1pkt 1fpkt"];
1279--4025[label="1;1pkt 1fpkt"];
3478--4025[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.141.29.37" dst_port="6891" src_ip="145.89.193.232" src_port="2510"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
1116[label="136.84.108.28;s;334pkt 334fpkt", shape=diamond, color=yellow];
1348[label="204.48.248.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.108.28:*, *:8074}[50.8982%]&lt;BR/&gt;{136.84.108.28:*, *:443}[42.515%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8074: (25.3731%)&lt;BR/&gt; 443: (21.194%)&lt;BR/&gt; 80: (2.23881%)&lt;BR/&gt; 1437: (0.447761%)&lt;BR/&gt; 35332: (0.298507%)&gt;];
}
1116--1348[label="1;1pkt 1fpkt"];
1116--2050[label="0.00952381;1pkt 1fpkt"];
1116--2317[label="0.0135135;2pkt 2fpkt"];
1116--2389[label="0.00961538;1pkt 1fpkt"];
1116--2626[label="0.0222222;1pkt 1fpkt"];
1116--3893[label="0.00970874;1pkt 1fpkt"];
1116--4139[label="0.0119048;1pkt 1fpkt"];
1116--4273[label="0.00952381;1pkt 1fpkt"];
1116--4834[label="0.00598802;2pkt 2fpkt"];
1116--4864[label="0.011976;4pkt 4fpkt"];
1116--4945[label="0.011976;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="8074" src_ip="136.84.108.28"/>
      <filter dst_port="443" src_ip="136.84.108.28"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.88466,1.35085,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
41[label="194.229.87.133s;1pkt 1fpkt", shape=rectangle, color=red];
1123[label="194.229.87.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
1210[label="88.56.177.223;s;4pkt 4fpkt", shape=diamond, color=yellow];
1356[label="145.89.153.120;d;6pkt 6fpkt", shape=diamond, color=yellow];
3302[label="88.56.177.223;s;4pkt 4fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.56.177.223:20, 145.89.153.120:*}[33.3333%]&lt;BR/&gt;{88.56.177.223:21, 145.89.153.120:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (21.875%)&lt;BR/&gt; 20: (18.75%)&lt;BR/&gt; 50042: (9.375%)&lt;BR/&gt; 1875: (9.375%)&lt;BR/&gt; 1874: (9.375%)&gt;];
}
41--1123[label="1;1pkt 1fpkt"];
41--1356[label="1;1pkt 1fpkt"];
1123--1356[label="1;1pkt 1fpkt"];
1210--1356[label="1;4pkt 4fpkt"];
1210--3302[label="1;4pkt 4fpkt"];
1356--3302[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.89.153.120" src_ip="88.56.177.223" src_port="21"/>
      <filter dst_ip="145.89.153.120" src_ip="88.56.177.223" src_port="20"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
1385[label="193.36.205.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
1388[label="213.16.13.27;s;3pkt 3fpkt", shape=diamond, color=yellow];
3379[label="213.16.13.27;s;2pkt 2fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.16.13.27:1219, 108.180.157.14:6699}[33.3333%]&lt;BR/&gt;{213.16.13.27:2142, 91.20.235.16:80}[33.3333%]&lt;BR/&gt;{213.16.13.27:1540, 193.36.205.51:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 1540: (25%)&lt;BR/&gt; 1219: (16.6667%)&lt;BR/&gt; 2142: (8.33333%)&lt;BR/&gt; 80: (8.33333%)&gt;];
}
1385--1388[label="1;1pkt 1fpkt"];
1385--3379[label="1;1pkt 1fpkt"];
1388--3379[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.36.205.51" dst_port="6699" src_ip="213.16.13.27" src_port="1540"/>
      <filter dst_ip="91.20.235.16" dst_port="80" src_ip="213.16.13.27" src_port="2142"/>
      <filter dst_ip="108.180.157.14" dst_port="6699" src_ip="213.16.13.27" src_port="1219"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663375,1.32592,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
1389[label="202.85.147.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
1390[label="136.84.180.88;s;113pkt 113fpkt", shape=diamond, color=yellow];
5344[label="136.84.180.88;119pkt 119fpkt", shape=pentagon, color=darkviolet];
6167[label="136.84.180.88;119pkt 119fpkt", shape=invtriangle, color=brown];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.180.88:4672, *:4672}[63.8655%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4672: (72.7273%)&lt;BR/&gt; 1027: (5.11364%)&lt;BR/&gt; 0: (3.97727%)&lt;BR/&gt; 4246: (3.83523%)&lt;BR/&gt; 80: (1.70455%)&gt;];
}
1389--1390[label="1;1pkt 1fpkt"];
1389--5344[label="1;1pkt 1fpkt"];
1389--6167[label="1;1pkt 1fpkt"];
1390--2672[label="0.0434783;2pkt 2fpkt"];
1390--2972[label="0.0666667;1pkt 1fpkt"];
1390--4746[label="0.00884956;1pkt 1fpkt"];
1390--4834[label="0.00884956;1pkt 1fpkt"];
1390--4858[label="0.00884956;1pkt 1fpkt"];
1390--4864[label="0.00884956;1pkt 1fpkt"];
1390--4940[label="0.00884956;1pkt 1fpkt"];
1390--4945[label="0.00884956;1pkt 1fpkt"];
1390--5344[label="1;113pkt 113fpkt"];
1390--6167[label="1;113pkt 113fpkt"];
5344--6167[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="4672" src_ip="136.84.180.88" src_port="4672"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
1406[label="90.137.231.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
1407[label="212.82.225.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
3581[label="212.82.225.45;s;1pkt 1fpkt", shape=hexagon, color=black];
3791[label="90.137.231.43;d;1pkt 1fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.225.45:3701, 90.137.231.43:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3701: (50%)&gt;];
}
1406--1407[label="1;1pkt 1fpkt"];
1406--3581[label="1;1pkt 1fpkt"];
1406--3791[label="1;1pkt 1fpkt"];
1407--3581[label="1;1pkt 1fpkt"];
1407--3791[label="1;1pkt 1fpkt"];
3581--3791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="90.137.231.43" dst_port="8080" src_ip="212.82.225.45" src_port="3701"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
1446[label="160.161.36.199;d;3pkt 3fpkt", shape=diamond, color=yellow];
1477[label="209.28.210.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
3809[label="160.161.36.199;d;2pkt 2fpkt", shape=hexagon, color=black];
3825[label="209.28.210.20;s;1pkt 1fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.22.181.16:46883, 160.161.36.199:25}[33.3333%]&lt;BR/&gt;{209.28.210.20:44276, 160.161.36.199:25}[33.3333%]&lt;BR/&gt;{114.64.17.184:2999, 160.161.36.199:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44276: (28.5714%)&lt;BR/&gt; 2999: (14.2857%)&lt;BR/&gt; 46883: (7.14286%)&gt;];
}
1446--1477[label="1;1pkt 1fpkt"];
1446--3809[label="1;2pkt 2fpkt"];
1446--3825[label="1;1pkt 1fpkt"];
1477--3809[label="1;1pkt 1fpkt"];
1477--3825[label="1;1pkt 1fpkt"];
3809--3825[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.161.36.199" dst_port="25" src_ip="114.64.17.184" src_port="2999"/>
      <filter dst_ip="160.161.36.199" dst_port="25" src_ip="209.28.210.20" src_port="44276"/>
      <filter dst_ip="160.161.36.199" dst_port="25" src_ip="200.22.181.16" src_port="46883"/>
    </slice>
    <from sec="1094706008" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
1511[label="198.168.2.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
1514[label="136.85.180.69;s;4pkt 4fpkt", shape=diamond, color=yellow];
3433[label="136.85.180.69;s;4pkt 4fpkt", shape=hexagon, color=black];
5257[label="136.85.180.69;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6122[label="136.85.180.69;4pkt 4fpkt", shape=invtriangle, color=brown];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.180.69:2902, 198.168.2.9:80}[25%]&lt;BR/&gt;{136.85.180.69:2924, 198.168.2.9:80}[25%]&lt;BR/&gt;{136.85.180.69:2931, 198.168.2.148:80}[25%]&lt;BR/&gt;{136.85.180.69:2938, 198.168.2.148:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2924: (13.8889%)&lt;BR/&gt; 2902: (13.8889%)&lt;BR/&gt; 2938: (11.1111%)&lt;BR/&gt; 2931: (11.1111%)&gt;];
}
1511--1514[label="1;2pkt 2fpkt"];
1511--3433[label="1;2pkt 2fpkt"];
1511--5257[label="1;2pkt 2fpkt"];
1511--6122[label="1;2pkt 2fpkt"];
1514--3433[label="1;4pkt 4fpkt"];
1514--5257[label="1;4pkt 4fpkt"];
1514--6122[label="1;4pkt 4fpkt"];
3433--5257[label="1;4pkt 4fpkt"];
3433--6122[label="1;4pkt 4fpkt"];
5257--6122[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="198.168.2.148" dst_port="80" src_ip="136.85.180.69" src_port="2938"/>
      <filter dst_ip="198.168.2.148" dst_port="80" src_ip="136.85.180.69" src_port="2931"/>
      <filter dst_ip="198.168.2.9" dst_port="80" src_ip="136.85.180.69" src_port="2924"/>
      <filter dst_ip="198.168.2.9" dst_port="80" src_ip="136.85.180.69" src_port="2902"/>
    </slice>
    <from sec="1094706128" usec="0"/>
    <to sec="1094706175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813975,1.35764,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
1515[label="164.23.88.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
1516[label="61.176.229.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
3434[label="164.23.88.74;d;1pkt 1fpkt", shape=hexagon, color=black];
6031[label="61.176.229.27;1pkt 1fpkt", shape=invtriangle, color=brown];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.176.229.27:59371, 164.23.88.74:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59371: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1515--1516[label="1;1pkt 1fpkt"];
1515--3434[label="1;1pkt 1fpkt"];
1515--6031[label="1;1pkt 1fpkt"];
1516--3434[label="1;1pkt 1fpkt"];
1516--6031[label="1;1pkt 1fpkt"];
3434--6031[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.88.74" dst_port="80" src_ip="61.176.229.27" src_port="59371"/>
    </slice>
    <from sec="1094706129" usec="0"/>
    <to sec="1094706176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
1512[label="198.168.2.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
1513[label="136.85.180.69;d;4pkt 4fpkt", shape=diamond, color=yellow];
1526[label="198.168.2.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
3432[label="136.85.180.69;d;4pkt 4fpkt", shape=hexagon, color=black];
5017[label="198.168.2.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.168.2.9:80, 136.85.180.69:2902}[25%]&lt;BR/&gt;{198.168.2.9:80, 136.85.180.69:2924}[25%]&lt;BR/&gt;{198.168.2.148:80, 136.85.180.69:2931}[25%]&lt;BR/&gt;{198.168.2.148:80, 136.85.180.69:2938}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2924: (14.2857%)&lt;BR/&gt; 2902: (14.2857%)&lt;BR/&gt; 2938: (10.7143%)&lt;BR/&gt; 2931: (10.7143%)&gt;];
}
1512--1513[label="1;2pkt 2fpkt"];
1512--3432[label="1;2pkt 2fpkt"];
1512--5017[label="1;2pkt 2fpkt"];
1513--1526[label="1;2pkt 2fpkt"];
1513--3432[label="1;4pkt 4fpkt"];
1513--5017[label="1;2pkt 2fpkt"];
1526--3432[label="1;2pkt 2fpkt"];
3432--5017[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.180.69" dst_port="2938" src_ip="198.168.2.148" src_port="80"/>
      <filter dst_ip="136.85.180.69" dst_port="2931" src_ip="198.168.2.148" src_port="80"/>
      <filter dst_ip="136.85.180.69" dst_port="2924" src_ip="198.168.2.9" src_port="80"/>
      <filter dst_ip="136.85.180.69" dst_port="2902" src_ip="198.168.2.9" src_port="80"/>
    </slice>
    <from sec="1094706128" usec="0"/>
    <to sec="1094706174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
1539[label="216.175.234.19;d;2pkt 2fpkt", shape=diamond, color=yellow];
1540[label="136.85.171.212;s;2pkt 2fpkt", shape=diamond, color=yellow];
3481[label="136.85.171.212;s;2pkt 2fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.171.212:500, 216.175.234.19:500}[50%]&lt;BR/&gt;{136.85.171.212:2746, 216.175.234.19:2746}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2746: (50%)&lt;BR/&gt; 500: (50%)&gt;];
}
1539--1540[label="1;2pkt 2fpkt"];
1539--3481[label="1;2pkt 2fpkt"];
1540--3481[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.175.234.19" dst_port="2746" src_ip="136.85.171.212" src_port="2746"/>
      <filter dst_ip="216.175.234.19" dst_port="500" src_ip="136.85.171.212" src_port="500"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
1327[label="136.85.165.180;s;5pkt 5fpkt", shape=diamond, color=yellow];
1576[label="209.44.27.201;d;2pkt 2fpkt", shape=diamond, color=yellow];
1777[label="210.153.57.120;d;2pkt 2fpkt", shape=diamond, color=yellow];
2987[label="136.85.171.74;s;3pkt 3fpkt", shape=diamond, color=yellow];
3751[label="136.85.165.180;s;5pkt 5fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8277, 210.153.57.120:8292}[25%]&lt;BR/&gt;{136.85.171.74:139, 168.165.82.51:*}[25%]&lt;BR/&gt;{136.85.165.180:*, *:8195}[25%]&lt;BR/&gt;{136.85.165.180:*, *:8196}[25%]&lt;BR/&gt;{136.85.165.180:*, 201.90.168.190:*}[25%]&lt;BR/&gt;{136.85.165.180:*, 209.44.27.201:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (14.7059%)&lt;BR/&gt; 8277: (14.7059%)&lt;BR/&gt; 8196: (14.7059%)&lt;BR/&gt; 8195: (14.7059%)&lt;BR/&gt; 8202: (8.82353%)&gt;];
}
1327--1576[label="1;2pkt 2fpkt"];
1327--1777[label="0.5;1pkt 1fpkt"];
1327--3751[label="1;5pkt 5fpkt"];
1576--3751[label="1;2pkt 2fpkt"];
1777--2987[label="0.5;1pkt 1fpkt"];
1777--3751[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.44.27.201" src_ip="136.85.165.180"/>
      <filter dst_ip="201.90.168.190" src_ip="136.85.165.180"/>
      <filter dst_port="8196" src_ip="136.85.165.180"/>
      <filter dst_port="8195" src_ip="136.85.165.180"/>
      <filter dst_ip="168.165.82.51" src_ip="136.85.171.74" src_port="139"/>
      <filter dst_ip="210.153.57.120" dst_port="8292" src_port="8277"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
1587[label="204.87.55.63;d;2pkt 2fpkt", shape=diamond, color=yellow];
1588[label="160.161.37.159;s;3pkt 3fpkt", shape=diamond, color=yellow];
3904[label="160.161.37.159;s;3pkt 3fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.161.37.159:2542, 192.144.216.250:5050}[33.3333%]&lt;BR/&gt;{160.161.37.159:5002, 204.87.55.63:20}[33.3333%]&lt;BR/&gt;{160.161.37.159:5004, 204.87.55.63:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (37.5%)&lt;BR/&gt; 5004: (18.75%)&lt;BR/&gt; 5002: (18.75%)&lt;BR/&gt; 5050: (12.5%)&lt;BR/&gt; 2542: (12.5%)&gt;];
}
1587--1588[label="1;2pkt 2fpkt"];
1587--3904[label="1;2pkt 2fpkt"];
1588--3904[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="204.87.55.63" dst_port="20" src_ip="160.161.37.159" src_port="5004"/>
      <filter dst_ip="204.87.55.63" dst_port="20" src_ip="160.161.37.159" src_port="5002"/>
      <filter dst_ip="192.144.216.250" dst_port="5050" src_ip="160.161.37.159" src_port="2542"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
1633[label="136.84.149.128;s;14pkt 14fpkt", shape=diamond, color=yellow];
1676[label="218.102.233.172;d;14pkt 14fpkt", shape=diamond, color=yellow];
3798[label="136.84.149.128;s;14pkt 14fpkt", shape=hexagon, color=black];
4559[label="218.102.233.172;d;14pkt 14fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.149.128:*, 218.102.233.172:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3781: (3.57143%)&lt;BR/&gt; 3780: (3.57143%)&lt;BR/&gt; 3779: (3.57143%)&lt;BR/&gt; 3778: (3.57143%)&gt;];
}
1633--1676[label="1;14pkt 14fpkt"];
1633--3798[label="1;14pkt 14fpkt"];
1633--4559[label="1;14pkt 14fpkt"];
1676--3798[label="1;14pkt 14fpkt"];
1676--4559[label="1;14pkt 14fpkt"];
3798--4559[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="218.102.233.172" dst_port="80" src_ip="136.84.149.128"/>
    </slice>
    <from sec="1094706481" usec="0"/>
    <to sec="1094706660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
1486[label="145.89.230.202;s;3pkt 3fpkt", shape=diamond, color=yellow];
1700[label="210.234.197.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
3663[label="145.89.230.202;s;3pkt 3fpkt", shape=hexagon, color=black];
3672[label="210.234.197.1;d;1pkt 1fpkt", shape=hexagon, color=black];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.230.202:1119, 210.234.197.1:8072}[33.3333%]&lt;BR/&gt;{145.89.230.202:1070, 210.234.197.26:80}[33.3333%]&lt;BR/&gt;{145.89.230.202:1077, 210.234.197.26:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8072: (25%)&lt;BR/&gt; 1119: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1077: (12.5%)&lt;BR/&gt; 1070: (12.5%)&gt;];
}
1486--1700[label="1;1pkt 1fpkt"];
1486--3663[label="1;3pkt 3fpkt"];
1486--3672[label="1;1pkt 1fpkt"];
1700--3663[label="1;1pkt 1fpkt"];
1700--3672[label="1;1pkt 1fpkt"];
3663--3672[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.234.197.26" dst_port="80" src_ip="145.89.230.202" src_port="1077"/>
      <filter dst_ip="210.234.197.26" dst_port="80" src_ip="145.89.230.202" src_port="1070"/>
      <filter dst_ip="210.234.197.1" dst_port="8072" src_ip="145.89.230.202" src_port="1119"/>
    </slice>
    <from sec="1094706079" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
1721[label="62.8.58.130;s;9pkt 9fpkt", shape=diamond, color=yellow];
1722[label="164.23.100.226;d;9pkt 9fpkt", shape=diamond, color=yellow];
3444[label="62.8.58.130;s;9pkt 9fpkt", shape=hexagon, color=black];
3445[label="164.23.100.226;d;12pkt 12fpkt", shape=hexagon, color=black];
5506[label="62.8.58.130;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.8.58.130:80, 164.23.100.226:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4217: (3.38983%)&lt;BR/&gt; 4215: (3.38983%)&lt;BR/&gt; 4213: (3.38983%)&lt;BR/&gt; 4211: (3.38983%)&gt;];
}
1721--1722[label="1;9pkt 9fpkt"];
1721--3444[label="1;9pkt 9fpkt"];
1721--5506[label="1;9pkt 9fpkt"];
1722--3444[label="1;9pkt 9fpkt"];
1722--5506[label="1;9pkt 9fpkt"];
3444--5506[label="1;9pkt 9fpkt"];
3445--4862[label="0.5;6pkt 6fpkt"];
3445--4943[label="0.5;6pkt 6fpkt"];
3445--5506[label="0.916667;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.100.226" src_ip="62.8.58.130" src_port="80"/>
    </slice>
    <from sec="1094706224" usec="0"/>
    <to sec="1094706734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
1562[label="61.208.228.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
1788[label="136.85.210.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
4059[label="61.208.228.127;d;1pkt 1fpkt", shape=hexagon, color=black];
4306[label="136.85.210.72;s;1pkt 1fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.210.72:49335, 61.208.228.127:5262}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49335: (50%)&lt;BR/&gt; 5262: (50%)&gt;];
}
1562--1788[label="1;1pkt 1fpkt"];
1562--4059[label="1;1pkt 1fpkt"];
1562--4306[label="1;1pkt 1fpkt"];
1788--4059[label="1;1pkt 1fpkt"];
1788--4306[label="1;1pkt 1fpkt"];
4059--4306[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="61.208.228.127" dst_port="5262" src_ip="136.85.210.72" src_port="49335"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
1597[label="136.84.16.87;s;2pkt 2fpkt", shape=diamond, color=yellow];
1820[label="193.180.44.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
3561[label="136.84.16.87;s;2pkt 2fpkt", shape=hexagon, color=black];
3777[label="193.180.44.108;d;1pkt 1fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.16.87:62427, 193.180.44.108:554}[50%]&lt;BR/&gt;{136.84.16.87:62442, 61.224.33.113:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62427: (33.3333%)&lt;BR/&gt; 554: (33.3333%)&lt;BR/&gt; 62442: (16.6667%)&lt;BR/&gt; 443: (16.6667%)&gt;];
}
1597--1820[label="1;1pkt 1fpkt"];
1597--3561[label="1;2pkt 2fpkt"];
1597--3777[label="1;1pkt 1fpkt"];
1820--3561[label="1;1pkt 1fpkt"];
1820--3777[label="1;1pkt 1fpkt"];
3561--3777[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="61.224.33.113" dst_port="443" src_ip="136.84.16.87" src_port="62442"/>
      <filter dst_ip="193.180.44.108" dst_port="554" src_ip="136.84.16.87" src_port="62427"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
1881[label="61.233.54.79;s;223pkt 223fpkt", shape=diamond, color=yellow];
1882[label="164.23.125.123;d;223pkt 223fpkt", shape=diamond, color=yellow];
3617[label="61.233.54.79;s;209pkt 209fpkt", shape=hexagon, color=black];
3618[label="164.23.125.123;d;209pkt 209fpkt", shape=hexagon, color=black];
5311[label="61.233.54.79;223pkt 223fpkt", shape=pentagon, color=darkviolet];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.233.54.79:4103, 164.23.125.123:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4103: (50%)&lt;BR/&gt; 2781: (0.229991%)&lt;BR/&gt; 2780: (0.229991%)&lt;BR/&gt; 2779: (0.229991%)&lt;BR/&gt; 2774: (0.229991%)&gt;];
}
1881--1882[label="1;223pkt 223fpkt"];
1881--3617[label="1;209pkt 209fpkt"];
1881--3618[label="1;209pkt 209fpkt"];
1881--5311[label="1;223pkt 223fpkt"];
1882--3617[label="1;209pkt 209fpkt"];
1882--3618[label="1;209pkt 209fpkt"];
1882--5311[label="1;223pkt 223fpkt"];
3617--3618[label="1;209pkt 209fpkt"];
3617--5311[label="1;209pkt 209fpkt"];
3618--5311[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.125.123" src_ip="61.233.54.79" src_port="4103"/>
    </slice>
    <from sec="1094706007" usec="0"/>
    <to sec="1094706521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
1920[label="91.44.227.179;s;2pkt 2fpkt", shape=diamond, color=yellow];
1921[label="213.16.18.227;d;4pkt 4fpkt", shape=diamond, color=yellow];
3652[label="213.16.18.227;d;3pkt 3fpkt", shape=hexagon, color=black];
4165[label="91.44.227.179;s;2pkt 2fpkt", shape=hexagon, color=black];
5702[label="91.44.227.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.195.112.62:16698, 213.16.18.227:3022}[25%]&lt;BR/&gt;{202.195.112.62:16698, 213.16.18.227:4920}[25%]&lt;BR/&gt;{91.44.227.179:23771, 213.16.18.227:4876}[25%]&lt;BR/&gt;{91.44.227.179:23771, 213.16.18.227:4981}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23771: (37.5%)&lt;BR/&gt; 4981: (20.8333%)&lt;BR/&gt; 4876: (16.6667%)&lt;BR/&gt; 16698: (12.5%)&lt;BR/&gt; 4920: (8.33333%)&gt;];
}
1920--1921[label="1;2pkt 2fpkt"];
1920--3652[label="1;2pkt 2fpkt"];
1920--4165[label="1;2pkt 2fpkt"];
1920--5702[label="1;1pkt 1fpkt"];
1921--3652[label="1;3pkt 3fpkt"];
1921--4165[label="1;2pkt 2fpkt"];
1921--5702[label="1;1pkt 1fpkt"];
3652--4165[label="1;2pkt 2fpkt"];
3652--5702[label="1;1pkt 1fpkt"];
4165--5702[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.16.18.227" dst_port="4981" src_ip="91.44.227.179" src_port="23771"/>
      <filter dst_ip="213.16.18.227" dst_port="4876" src_ip="91.44.227.179" src_port="23771"/>
      <filter dst_ip="213.16.18.227" dst_port="4920" src_ip="202.195.112.62" src_port="16698"/>
      <filter dst_ip="213.16.18.227" dst_port="3022" src_ip="202.195.112.62" src_port="16698"/>
    </slice>
    <from sec="1094706039" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1919[label="91.44.227.179;d;2pkt 2fpkt", shape=diamond, color=yellow];
1922[label="213.16.18.227;s;4pkt 4fpkt", shape=diamond, color=yellow];
4166[label="213.16.18.227;s;3pkt 3fpkt", shape=hexagon, color=black];
5871[label="213.16.18.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.16.18.227:3022, 202.195.112.62:16698}[25%]&lt;BR/&gt;{213.16.18.227:4920, 202.195.112.62:16698}[25%]&lt;BR/&gt;{213.16.18.227:4876, 91.44.227.179:23771}[25%]&lt;BR/&gt;{213.16.18.227:4981, 91.44.227.179:23771}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23771: (35%)&lt;BR/&gt; 4981: (20%)&lt;BR/&gt; 16698: (15%)&lt;BR/&gt; 4876: (15%)&lt;BR/&gt; 4920: (10%)&gt;];
}
1919--1922[label="1;2pkt 2fpkt"];
1919--4166[label="1;2pkt 2fpkt"];
1919--5871[label="1;1pkt 1fpkt"];
1922--4166[label="1;3pkt 3fpkt"];
1922--5871[label="1;1pkt 1fpkt"];
4166--5871[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="91.44.227.179" dst_port="23771" src_ip="213.16.18.227" src_port="4981"/>
      <filter dst_ip="91.44.227.179" dst_port="23771" src_ip="213.16.18.227" src_port="4876"/>
      <filter dst_ip="202.195.112.62" dst_port="16698" src_ip="213.16.18.227" src_port="4920"/>
      <filter dst_ip="202.195.112.62" dst_port="16698" src_ip="213.16.18.227" src_port="3022"/>
    </slice>
    <from sec="1094706039" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
2012[label="114.17.179.15;d;2pkt 2fpkt", shape=diamond, color=yellow];
2013[label="164.23.142.209;s;2pkt 2fpkt", shape=diamond, color=yellow];
3719[label="114.17.179.15;d;2pkt 2fpkt", shape=hexagon, color=black];
3948[label="164.23.142.209;s;2pkt 2fpkt", shape=hexagon, color=black];
5806[label="164.23.142.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.142.209:21, 114.17.179.15:39120}[50%]&lt;BR/&gt;{164.23.142.209:8789, 114.17.179.15:39121}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39121: (27.7778%)&lt;BR/&gt; 8789: (27.7778%)&lt;BR/&gt; 39120: (22.2222%)&lt;BR/&gt; 21: (22.2222%)&gt;];
}
2012--2013[label="1;2pkt 2fpkt"];
2012--3719[label="1;2pkt 2fpkt"];
2012--3948[label="1;2pkt 2fpkt"];
2012--5806[label="1;1pkt 1fpkt"];
2013--3719[label="1;2pkt 2fpkt"];
2013--3948[label="1;2pkt 2fpkt"];
2013--5806[label="1;1pkt 1fpkt"];
3719--3948[label="1;2pkt 2fpkt"];
3719--5806[label="1;1pkt 1fpkt"];
3948--5806[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="114.17.179.15" dst_port="39121" src_ip="164.23.142.209" src_port="8789"/>
      <filter dst_ip="114.17.179.15" dst_port="39120" src_ip="164.23.142.209" src_port="21"/>
    </slice>
    <from sec="1094706316" usec="0"/>
    <to sec="1094706786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
2035[label="88.44.20.223;d;458pkt 458fpkt", shape=diamond, color=yellow];
2036[label="142.8.0.147;s;458pkt 458fpkt", shape=diamond, color=yellow];
3853[label="88.44.20.223;d;458pkt 458fpkt", shape=hexagon, color=black];
3955[label="142.8.0.147;s;458pkt 458fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.8.0.147:*, 88.44.20.223:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 4655: (0.10917%)&lt;BR/&gt; 4647: (0.10917%)&lt;BR/&gt; 4646: (0.10917%)&lt;BR/&gt; 4643: (0.10917%)&gt;];
}
2035--2036[label="1;458pkt 458fpkt"];
2035--3853[label="1;458pkt 458fpkt"];
2035--3955[label="1;458pkt 458fpkt"];
2036--3853[label="1;458pkt 458fpkt"];
2036--3955[label="1;458pkt 458fpkt"];
3853--3955[label="1;458pkt 458fpkt"];
</description>
    <slice>
      <filter dst_ip="88.44.20.223" dst_port="1755" src_ip="142.8.0.147"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,053,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
2039[label="88.2.116.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
2040[label="213.59.103.177;s;21pkt 21fpkt", shape=diamond, color=yellow];
3728[label="213.59.103.177;s;21pkt 21fpkt", shape=hexagon, color=black];
5690[label="213.59.103.177;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6379[label="213.59.103.177;21pkt 21fpkt", shape=invtriangle, color=brown];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.59.103.177:*, 88.17.98.28:7070}[52.381%]&lt;BR/&gt;{213.59.103.177:*, *:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (26.1905%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 52755: (2.38095%)&lt;BR/&gt; 51482: (2.38095%)&lt;BR/&gt; 41394: (2.38095%)&gt;];
}
2039--2040[label="1;1pkt 1fpkt"];
2039--3728[label="1;1pkt 1fpkt"];
2039--6379[label="1;1pkt 1fpkt"];
2040--3728[label="1;21pkt 21fpkt"];
2040--4834[label="0.333333;7pkt 7fpkt"];
2040--5690[label="1;20pkt 20fpkt"];
2040--6379[label="1;21pkt 21fpkt"];
3728--4834[label="0.333333;7pkt 7fpkt"];
3728--5690[label="1;20pkt 20fpkt"];
3728--6379[label="1;21pkt 21fpkt"];
5690--6379[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="213.59.103.177"/>
      <filter dst_ip="88.17.98.28" dst_port="7070" src_ip="213.59.103.177"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.82.226.94"/>
      <from sec="1094706001" usec="0"/>
      <to sec="1094706828" usec="0"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
2127[label="145.89.149.16;s;4pkt 4fpkt", shape=diamond, color=yellow];
2128[label="88.33.92.130;d;4pkt 4fpkt", shape=diamond, color=yellow];
4109[label="145.89.149.16;s;4pkt 4fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.149.16:4294, 88.33.92.130:3400}[25%]&lt;BR/&gt;{145.89.149.16:4296, 88.33.92.130:2002}[25%]&lt;BR/&gt;{145.89.149.16:4297, 88.33.92.130:3400}[25%]&lt;BR/&gt;{145.89.149.16:4298, 88.33.92.130:2002}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3400: (25%)&lt;BR/&gt; 2002: (25%)&lt;BR/&gt; 4298: (12.5%)&lt;BR/&gt; 4297: (12.5%)&lt;BR/&gt; 4296: (12.5%)&gt;];
}
2127--2128[label="1;4pkt 4fpkt"];
2127--4109[label="1;4pkt 4fpkt"];
2128--4109[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="88.33.92.130" dst_port="2002" src_ip="145.89.149.16" src_port="4298"/>
      <filter dst_ip="88.33.92.130" dst_port="3400" src_ip="145.89.149.16" src_port="4297"/>
      <filter dst_ip="88.33.92.130" dst_port="2002" src_ip="145.89.149.16" src_port="4296"/>
      <filter dst_ip="88.33.92.130" dst_port="3400" src_ip="145.89.149.16" src_port="4294"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
2126[label="145.89.149.16;d;4pkt 4fpkt", shape=diamond, color=yellow];
2129[label="88.33.92.130;s;4pkt 4fpkt", shape=diamond, color=yellow];
4108[label="145.89.149.16;d;4pkt 4fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.33.92.130:2002, 145.89.149.16:4296}[25%]&lt;BR/&gt;{88.33.92.130:2002, 145.89.149.16:4298}[25%]&lt;BR/&gt;{88.33.92.130:3400, 145.89.149.16:4294}[25%]&lt;BR/&gt;{88.33.92.130:3400, 145.89.149.16:4297}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3400: (25%)&lt;BR/&gt; 2002: (25%)&lt;BR/&gt; 4298: (12.5%)&lt;BR/&gt; 4297: (12.5%)&lt;BR/&gt; 4296: (12.5%)&gt;];
}
2126--2129[label="1;4pkt 4fpkt"];
2126--4108[label="1;4pkt 4fpkt"];
2129--4108[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.89.149.16" dst_port="4297" src_ip="88.33.92.130" src_port="3400"/>
      <filter dst_ip="145.89.149.16" dst_port="4294" src_ip="88.33.92.130" src_port="3400"/>
      <filter dst_ip="145.89.149.16" dst_port="4298" src_ip="88.33.92.130" src_port="2002"/>
      <filter dst_ip="145.89.149.16" dst_port="4296" src_ip="88.33.92.130" src_port="2002"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.144.216.232"/>
      <from sec="1094706001" usec="0"/>
      <to sec="1094706829" usec="0"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
2324[label="212.82.230.241;d;137pkt 137fpkt", shape=diamond, color=yellow];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 212.82.230.241:0}[99.2701%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2701%)&lt;BR/&gt; 4396: (0.364964%)&lt;BR/&gt; 3389: (0.364964%)&gt;];
}
2324--4017[label="0.00729927;1pkt 1fpkt"];
2324--5220[label="0.00729927;1pkt 1fpkt"];
2324--6100[label="0.00729927;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.82.230.241"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78447,1.39264,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
14[label="213.27.214.45s;1pkt 1fpkt", shape=rectangle, color=red];
2392[label="213.27.214.45;s;191pkt 191fpkt", shape=diamond, color=yellow];
2543[label="220.11.128.59;d;116pkt 116fpkt", shape=diamond, color=yellow];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.27.214.45:*, 220.11.128.59:*}[85.3403%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46754: (5.51948%)&lt;BR/&gt; 46455: (5.51948%)&lt;BR/&gt; 45606: (5.51948%)&lt;BR/&gt; 47502: (5.19481%)&lt;BR/&gt; 47180: (5.19481%)&gt;];
}
14--2392[label="1;1pkt 1fpkt"];
14--2543[label="1;1pkt 1fpkt"];
2392--2543[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="220.11.128.59" src_ip="213.27.214.45"/>
    </slice>
    <from sec="1094706011" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
2440[label="145.89.23.137;s;242pkt 242fpkt", shape=diamond, color=yellow];
2448[label="62.224.145.140;d;231pkt 231fpkt", shape=diamond, color=yellow];
3954[label="145.89.23.137;s;242pkt 242fpkt", shape=hexagon, color=black];
4210[label="62.224.145.140;d;231pkt 231fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.23.137:*, 62.224.145.140:9000}[51.2397%]&lt;BR/&gt;{145.89.23.137:*, 62.224.145.140:8000}[44.2149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9000: (26.2156%)&lt;BR/&gt; 8000: (22.6216%)&lt;BR/&gt; 8020: (0.634249%)&lt;BR/&gt; 80: (0.422833%)&lt;BR/&gt; 1481: (0.211416%)&gt;];
}
2440--2448[label="1;231pkt 231fpkt"];
2440--3954[label="1;242pkt 242fpkt"];
2440--4210[label="1;231pkt 231fpkt"];
2448--3954[label="1;231pkt 231fpkt"];
2448--4210[label="1;231pkt 231fpkt"];
3954--4210[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_ip="62.224.145.140" dst_port="9000" src_ip="145.89.23.137"/>
      <filter dst_ip="62.224.145.140" dst_port="8000" src_ip="145.89.23.137"/>
    </slice>
    <from sec="1094706349" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
2631[label="212.82.230.137;s;77pkt 77fpkt", shape=diamond, color=yellow];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.230.137:22, *:*}[98.7013%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.3506%)&lt;BR/&gt; 10029: (2.5974%)&lt;BR/&gt; 10028: (2.5974%)&lt;BR/&gt; 10027: (2.5974%)&lt;BR/&gt; 10005: (2.5974%)&gt;];
}
</description>
    <slice>
      <filter src_ip="212.82.230.137" src_port="22"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
2707[label="61.22.230.154;d;20pkt 20fpkt", shape=diamond, color=yellow];
2708[label="136.84.180.145;s;20pkt 20fpkt", shape=diamond, color=yellow];
4208[label="136.84.180.145;s;20pkt 20fpkt", shape=hexagon, color=black];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.180.145:*, 61.22.230.154:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33715: (2.5%)&lt;BR/&gt; 33712: (2.5%)&lt;BR/&gt; 33694: (2.5%)&lt;BR/&gt; 33632: (2.5%)&gt;];
}
2707--2708[label="1;20pkt 20fpkt"];
2707--4208[label="1;20pkt 20fpkt"];
2707--4834[label="0.15;3pkt 3fpkt"];
2708--4208[label="1;20pkt 20fpkt"];
2708--4834[label="0.15;3pkt 3fpkt"];
4208--4834[label="0.15;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="61.22.230.154" dst_port="80" src_ip="136.84.180.145"/>
    </slice>
    <from sec="1094706363" usec="0"/>
    <to sec="1094706665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
2719[label="196.3.32.173;s;117pkt 117fpkt", shape=diamond, color=yellow];
2737[label="142.48.67.16;d;114pkt 114fpkt", shape=diamond, color=yellow];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.3.32.173:*, 142.48.67.16:80}[95.7627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9177%)&lt;BR/&gt; 65433: (0.4329%)&lt;BR/&gt; 65397: (0.4329%)&lt;BR/&gt; 65367: (0.4329%)&lt;BR/&gt; 65345: (0.4329%)&gt;];
}
2719--2737[label="0.991228;113pkt 113fpkt"];
2719--3782[label="0.00854701;1pkt 1fpkt"];
2737--3864[label="0.00877193;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.48.67.16" dst_port="80" src_ip="196.3.32.173"/>
    </slice>
    <from sec="1094706419" usec="0"/>
    <to sec="1094706750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
2720[label="213.16.160.188;s;19pkt 19fpkt", shape=diamond, color=yellow];
2741[label="201.103.83.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
2950[label="201.103.83.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.16.160.188:*, *:1935}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 4250: (4.7619%)&lt;BR/&gt; 4172: (4.7619%)&lt;BR/&gt; 4274: (2.38095%)&lt;BR/&gt; 4259: (2.38095%)&gt;];
}
2720--2741[label="1;1pkt 1fpkt"];
2720--2950[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1935" src_ip="213.16.160.188"/>
    </slice>
    <from sec="1094706422" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.89.137.188"/>
      <from sec="1094706001" usec="0"/>
      <to sec="1094706829" usec="0"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
2849[label="212.82.251.20;s;161pkt 161fpkt", shape=diamond, color=yellow];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.251.20:46648, *:*}[82.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46648: (41.3043%)&lt;BR/&gt; 80: (8.69565%)&lt;BR/&gt; 65068: (0.310559%)&lt;BR/&gt; 64943: (0.310559%)&lt;BR/&gt; 64791: (0.310559%)&gt;];
}
2849--4746[label="0.0124224;2pkt 2fpkt"];
2849--4834[label="0.0124224;2pkt 2fpkt"];
2849--4858[label="0.0124224;2pkt 2fpkt"];
2849--4864[label="0.0124224;2pkt 2fpkt"];
2849--4940[label="0.0124224;2pkt 2fpkt"];
2849--4945[label="0.0124224;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="212.82.251.20" src_port="46648"/>
    </slice>
    <from sec="1094706004" usec="0"/>
    <to sec="1094706816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
2929[label="212.105.117.91;d;2pkt 2fpkt", shape=diamond, color=yellow];
2930[label="203.61.241.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.26.188.1:0, 212.105.117.91:0}[50%]&lt;BR/&gt;{203.61.241.221:39804, 212.105.117.91:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39804: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
2929--2930[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.105.117.91" dst_port="80" src_ip="203.61.241.221" src_port="39804"/>
      <filter dst_ip="212.105.117.91" src_ip="212.26.188.1"/>
    </slice>
    <from sec="1094706513" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
2931[label="192.252.15.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
2936[label="212.82.231.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
4467[label="212.82.231.82;s;1pkt 1fpkt", shape=hexagon, color=black];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.231.82:23, 192.252.15.33:63681}[50%]&lt;BR/&gt;{213.27.239.212:23, 192.252.15.33:63667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 63681: (37.5%)&lt;BR/&gt; 63667: (12.5%)&gt;];
}
2931--2936[label="1;1pkt 1fpkt"];
2931--4467[label="1;1pkt 1fpkt"];
2936--4467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.252.15.33" dst_port="63667" src_ip="213.27.239.212" src_port="23"/>
      <filter dst_ip="192.252.15.33" dst_port="63681" src_ip="212.82.231.82" src_port="23"/>
    </slice>
    <from sec="1094706513" usec="0"/>
    <to sec="1094706675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580473,1.3736,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
2945[label="144.148.193.134;d;25pkt 25fpkt", shape=diamond, color=yellow];
2946[label="136.84.4.11;s;38pkt 38fpkt", shape=diamond, color=yellow];
5027[label="136.84.4.11;126pkt 126fpkt", shape=pentagon, color=darkviolet];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.4.11:*, 144.148.193.134:443}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (38.8889%)&lt;BR/&gt; 80: (11.1111%)&lt;BR/&gt; 21219: (0.793651%)&lt;BR/&gt; 21218: (0.793651%)&lt;BR/&gt; 21209: (0.793651%)&gt;];
}
2945--2946[label="1;25pkt 25fpkt"];
2945--5027[label="1;25pkt 25fpkt"];
2946--5027[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="144.148.193.134" dst_port="443" src_ip="136.84.4.11"/>
    </slice>
    <from sec="1094706031" usec="0"/>
    <to sec="1094706827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.144.216.248"/>
      <from sec="1094706001" usec="0"/>
      <to sec="1094706829" usec="0"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
989[label="202.158.234.220;s;2355pkt 2355fpkt", shape=diamond, color=yellow];
2978[label="212.105.70.74;d;179pkt 179fpkt", shape=diamond, color=yellow];
2983[label="212.105.70.80;d;177pkt 177fpkt", shape=diamond, color=yellow];
2991[label="212.105.64.235;d;175pkt 175fpkt", shape=diamond, color=yellow];
3026[label="212.105.70.101;d;172pkt 172fpkt", shape=diamond, color=yellow];
3028[label="212.105.64.7;d;184pkt 184fpkt", shape=diamond, color=yellow];
3033[label="212.105.106.166;d;183pkt 183fpkt", shape=diamond, color=yellow];
3157[label="202.158.234.220;s;1846pkt 1846fpkt", shape=hexagon, color=black];
4499[label="212.105.70.80;d;177pkt 177fpkt", shape=hexagon, color=black];
5853[label="202.158.234.220;2567pkt 2567fpkt", shape=pentagon, color=darkviolet];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.158.234.220:6667, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 4828: (0.062383%)&lt;BR/&gt; 3844: (0.062383%)&lt;BR/&gt; 3841: (0.062383%)&lt;BR/&gt; 3836: (0.062383%)&gt;];
}
989--2978[label="1;179pkt 179fpkt"];
989--2983[label="1;177pkt 177fpkt"];
989--2991[label="1;175pkt 175fpkt"];
989--3026[label="1;172pkt 172fpkt"];
989--3028[label="1;184pkt 184fpkt"];
989--3033[label="1;183pkt 183fpkt"];
989--3157[label="1;1846pkt 1846fpkt"];
989--4499[label="1;177pkt 177fpkt"];
989--5853[label="0.999575;2354pkt 2354fpkt"];
2978--3157[label="0.77095;138pkt 138fpkt"];
2978--5853[label="1;179pkt 179fpkt"];
2983--3157[label="0.785311;139pkt 139fpkt"];
2983--4499[label="1;177pkt 177fpkt"];
2983--5853[label="1;177pkt 177fpkt"];
2991--3157[label="0.771429;135pkt 135fpkt"];
2991--5853[label="1;175pkt 175fpkt"];
3026--3157[label="0.773256;133pkt 133fpkt"];
3026--5853[label="1;172pkt 172fpkt"];
3028--3157[label="0.782609;144pkt 144fpkt"];
3028--5853[label="1;184pkt 184fpkt"];
3033--3157[label="0.765027;140pkt 140fpkt"];
3033--5853[label="1;183pkt 183fpkt"];
3157--4499[label="0.785311;139pkt 139fpkt"];
3157--5853[label="0.999458;1845pkt 1845fpkt"];
4499--5853[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter src_ip="202.158.234.220" src_port="6667"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
3061[label="136.85.159.207;s;96pkt 96fpkt", shape=diamond, color=yellow];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.159.207:*, 194.32.106.168:80}[35.4167%]&lt;BR/&gt;{136.85.159.207:*, 212.43.18.102:25}[26.0417%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (29.6875%)&lt;BR/&gt; 80: (17.7083%)&lt;BR/&gt; 1024: (2.60417%)&lt;BR/&gt; 53: (2.60417%)&lt;BR/&gt; 24877: (0.520833%)&gt;];
}
3061--4750[label="0.0104167;1pkt 1fpkt"];
3061--4863[label="0.0104167;1pkt 1fpkt"];
3061--4864[label="0.0104167;1pkt 1fpkt"];
3061--4944[label="0.0104167;1pkt 1fpkt"];
3061--4945[label="0.0104167;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.32.106.168" dst_port="80" src_ip="136.85.159.207"/>
      <filter dst_ip="212.43.18.102" dst_port="25" src_ip="136.85.159.207"/>
    </slice>
    <from sec="1094706013" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="142.205.132.116"/>
      <from sec="1094706044" usec="0"/>
      <to sec="1094706829" usec="0"/>
    </slice>
    <from sec="1094706044" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="142.48.53.98"/>
      <from sec="1094706765" usec="0"/>
      <to sec="1094706816" usec="0"/>
    </slice>
    <from sec="1094706765" usec="0"/>
    <to sec="1094706816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.88466,1.35085,010,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
88[label="35.0.53.108s;463pkt 463fpkt", shape=rectangle, color=red];
938[label="35.0.53.108;s;4263pkt 4263fpkt", shape=diamond, color=yellow];
3222[label="35.0.53.108;s;3780pkt 3780fpkt", shape=hexagon, color=black];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.0.53.108:*, *:3128}[33.5484%]&lt;BR/&gt;{35.0.53.108:*, *:3127}[33.2488%]&lt;BR/&gt;{35.0.53.108:*, *:1080}[33.2028%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (16.8058%)&lt;BR/&gt; 3128: (16.7352%)&lt;BR/&gt; 3127: (16.4707%)&lt;BR/&gt; 3632: (0.0470256%)&lt;BR/&gt; 3373: (0.0470256%)&gt;];
}
88--938[label="0.833693;386pkt 386fpkt"];
88--3222[label="0.606911;281pkt 281fpkt"];
938--3222[label="1;3780pkt 3780fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="35.0.53.108"/>
      <filter dst_port="3127" src_ip="35.0.53.108"/>
      <filter dst_port="1080" src_ip="35.0.53.108"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
991[label="212.82.229.212;s;22pkt 22fpkt", shape=diamond, color=yellow];
1020[label="197.174.26.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
2576[label="214.250.151.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
3236[label="197.174.26.0;d;1pkt 1fpkt", shape=hexagon, color=black];
3470[label="212.82.229.212;s;22pkt 22fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.229.212:*, 114.92.243.247:*}[36.3636%]&lt;BR/&gt;{212.82.229.212:21, *:*}[31.8182%]&lt;BR/&gt;{212.82.229.212:*, 212.0.247.58:*}[31.8182%]&lt;BR/&gt;{212.82.229.212:20, *:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (14.8936%)&lt;BR/&gt; 0: (12.766%)&lt;BR/&gt; 20: (11.7021%)&lt;BR/&gt; 21817: (4.25532%)&lt;BR/&gt; 873: (4.25532%)&gt;];
}
991--1020[label="1;1pkt 1fpkt"];
991--2576[label="1;1pkt 1fpkt"];
991--3236[label="1;1pkt 1fpkt"];
991--3470[label="1;22pkt 22fpkt"];
1020--3236[label="1;1pkt 1fpkt"];
1020--3470[label="1;1pkt 1fpkt"];
2576--3470[label="1;1pkt 1fpkt"];
3236--3470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="114.92.243.247" src_ip="212.82.229.212"/>
      <filter dst_ip="212.0.247.58" src_ip="212.82.229.212"/>
      <filter src_ip="212.82.229.212" src_port="21"/>
      <filter src_ip="212.82.229.212" src_port="20"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
940[label="194.176.105.138;s;14pkt 14fpkt", shape=diamond, color=yellow];
941[label="145.89.21.46;d;17pkt 17fpkt", shape=diamond, color=yellow];
3323[label="145.89.21.46;d;11pkt 11fpkt", shape=hexagon, color=black];
3457[label="194.176.105.138;s;10pkt 10fpkt", shape=hexagon, color=black];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.176.105.138:8083, 145.89.21.46:*}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8083: (45.1923%)&lt;BR/&gt; 8000: (4.80769%)&lt;BR/&gt; 1167: (3.84615%)&lt;BR/&gt; 1166: (3.84615%)&lt;BR/&gt; 1165: (3.84615%)&gt;];
}
940--941[label="1;14pkt 14fpkt"];
940--3323[label="0.818182;9pkt 9fpkt"];
940--3457[label="1;10pkt 10fpkt"];
941--3323[label="1;11pkt 11fpkt"];
941--3457[label="1;10pkt 10fpkt"];
3323--3457[label="0.9;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="145.89.21.46" src_ip="194.176.105.138" src_port="8083"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1551[label="212.82.224.132;s;294pkt 294fpkt", shape=diamond, color=yellow];
3353[label="212.82.224.132;s;277pkt 277fpkt", shape=hexagon, color=black];
5516[label="212.82.224.132;296pkt 296fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.224.132:0, *:0}[99.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5386%)&lt;BR/&gt; 3925: (0.17301%)&lt;BR/&gt; 3389: (0.17301%)&lt;BR/&gt; 3198: (0.0576701%)&lt;BR/&gt; 445: (0.0576701%)&gt;];
}
1551--3353[label="1;277pkt 277fpkt"];
1551--5516[label="1;294pkt 294fpkt"];
3353--5516[label="1;277pkt 277fpkt"];
</description>
    <slice>
      <filter src_ip="212.82.224.132"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1453[label="145.89.61.84;s;215pkt 215fpkt", shape=diamond, color=yellow];
3411[label="145.89.61.84;s;215pkt 215fpkt", shape=hexagon, color=black];
5328[label="145.89.61.84;215pkt 215fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.61.84:*, *:80}[91.1628%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5814%)&lt;BR/&gt; 8080: (4.4186%)&lt;BR/&gt; 3533: (0.232558%)&lt;BR/&gt; 3504: (0.232558%)&lt;BR/&gt; 3501: (0.232558%)&gt;];
}
1453--3411[label="1;215pkt 215fpkt"];
1453--4746[label="0.0186047;4pkt 4fpkt"];
1453--4858[label="0.0186047;4pkt 4fpkt"];
1453--4864[label="0.209302;45pkt 45fpkt"];
1453--4940[label="0.0186047;4pkt 4fpkt"];
1453--4945[label="0.209302;45pkt 45fpkt"];
1453--5328[label="1;215pkt 215fpkt"];
3411--4746[label="0.0186047;4pkt 4fpkt"];
3411--4858[label="0.0186047;4pkt 4fpkt"];
3411--4864[label="0.209302;45pkt 45fpkt"];
3411--4940[label="0.0186047;4pkt 4fpkt"];
3411--4945[label="0.209302;45pkt 45fpkt"];
3411--5328[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.89.61.84"/>
    </slice>
    <from sec="1094706011" usec="0"/>
    <to sec="1094706823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1704[label="145.89.101.130;s;253pkt 253fpkt", shape=diamond, color=yellow];
1705[label="198.135.172.209;d;158pkt 158fpkt", shape=diamond, color=yellow];
2422[label="217.155.180.24;d;11pkt 11fpkt", shape=diamond, color=yellow];
3437[label="145.89.101.130;s;116pkt 116fpkt", shape=hexagon, color=black];
3438[label="198.135.172.209;d;99pkt 99fpkt", shape=hexagon, color=black];
4181[label="217.155.180.24;d;11pkt 11fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.101.130:*, 198.135.172.209:80}[62.4506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7654%)&lt;BR/&gt; 8000: (0.771605%)&lt;BR/&gt; 4000: (0.308642%)&lt;BR/&gt; 1565: (0.308642%)&lt;BR/&gt; 1564: (0.308642%)&gt;];
}
1704--1705[label="1;158pkt 158fpkt"];
1704--2422[label="1;11pkt 11fpkt"];
1704--3437[label="1;116pkt 116fpkt"];
1704--3438[label="1;99pkt 99fpkt"];
1704--4181[label="1;11pkt 11fpkt"];
1704--4834[label="0.110672;28pkt 28fpkt"];
1704--4864[label="0.158103;40pkt 40fpkt"];
1704--4945[label="0.158103;40pkt 40fpkt"];
1705--3437[label="0.853448;99pkt 99fpkt"];
1705--3438[label="1;99pkt 99fpkt"];
1705--4834[label="0.132911;21pkt 21fpkt"];
1705--4864[label="0.151899;24pkt 24fpkt"];
1705--4945[label="0.151899;24pkt 24fpkt"];
2422--3437[label="1;11pkt 11fpkt"];
2422--4181[label="1;11pkt 11fpkt"];
2422--4834[label="0.0909091;1pkt 1fpkt"];
2422--4864[label="0.0909091;1pkt 1fpkt"];
2422--4945[label="0.0909091;1pkt 1fpkt"];
3437--3438[label="1;99pkt 99fpkt"];
3437--4181[label="1;11pkt 11fpkt"];
3437--4834[label="0.0258621;3pkt 3fpkt"];
3437--4864[label="0.112069;13pkt 13fpkt"];
3437--4945[label="0.112069;13pkt 13fpkt"];
3438--4834[label="0.020202;2pkt 2fpkt"];
3438--4864[label="0.111111;11pkt 11fpkt"];
3438--4945[label="0.111111;11pkt 11fpkt"];
4181--4834[label="0.0909091;1pkt 1fpkt"];
4181--4864[label="0.0909091;1pkt 1fpkt"];
4181--4945[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.135.172.209" dst_port="80" src_ip="145.89.101.130"/>
    </slice>
    <from sec="1094706157" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,001,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1528[label="88.215.88.243;s;2622pkt 2622fpkt", shape=diamond, color=yellow];
3441[label="88.215.88.243;s;2622pkt 2622fpkt", shape=hexagon, color=black];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.215.88.243:*, *:1023}[35.2403%]&lt;BR/&gt;{88.215.88.243:*, *:5554}[32.5324%]&lt;BR/&gt;{88.215.88.243:*, *:9898}[32.0366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (17.6201%)&lt;BR/&gt; 5554: (16.2662%)&lt;BR/&gt; 9898: (16.0183%)&lt;BR/&gt; 4482: (1.10603%)&lt;BR/&gt; 3658: (1.04882%)&gt;];
}
1528--3441[label="1;2622pkt 2622fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="88.215.88.243"/>
      <filter dst_port="5554" src_ip="88.215.88.243"/>
      <filter dst_port="9898" src_ip="88.215.88.243"/>
    </slice>
    <from sec="1094706179" usec="0"/>
    <to sec="1094706262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
1745[label="192.144.216.221;s;13pkt 13fpkt", shape=diamond, color=yellow];
2962[label="160.161.52.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
3455[label="192.144.216.221;s;13pkt 13fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.144.216.221:5050, *:*}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (42.8571%)&lt;BR/&gt; 1355: (5.35714%)&lt;BR/&gt; 3098: (3.57143%)&lt;BR/&gt; 3014: (3.57143%)&lt;BR/&gt; 2355: (3.57143%)&gt;];
}
1745--2962[label="0.5;1pkt 1fpkt"];
1745--3455[label="1;13pkt 13fpkt"];
2962--3455[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.144.216.221" src_port="5050"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
965[label="164.94.104.211;s;2279pkt 2279fpkt", shape=diamond, color=yellow];
3464[label="164.94.104.211;s;2134pkt 2134fpkt", shape=hexagon, color=black];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.94.104.211:24410, *:*}[98.1132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24410: (49.1276%)&lt;BR/&gt; 443: (0.498527%)&lt;BR/&gt; 80: (0.373895%)&lt;BR/&gt; 1025: (0.135962%)&lt;BR/&gt; 1029: (0.113302%)&gt;];
}
965--3464[label="1;2134pkt 2134fpkt"];
965--4744[label="0.00131637;3pkt 3fpkt"];
965--4857[label="0.00131637;3pkt 3fpkt"];
965--4862[label="0.000438789;1pkt 1fpkt"];
965--4943[label="0.000438789;1pkt 1fpkt"];
3464--4744[label="0.00140581;3pkt 3fpkt"];
3464--4857[label="0.00140581;3pkt 3fpkt"];
3464--4862[label="0.000468604;1pkt 1fpkt"];
3464--4943[label="0.000468604;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="164.94.104.211" src_port="24410"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1262[label="212.82.225.220;s;5142pkt 5142fpkt", shape=diamond, color=yellow];
3466[label="212.82.225.220;s;3135pkt 3135fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.225.220:1810, *:*}[96.8106%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1810: (48.3327%)&lt;BR/&gt; 443: (0.881962%)&lt;BR/&gt; 80: (0.803431%)&lt;BR/&gt; 1025: (0.247674%)&lt;BR/&gt; 54045: (0.0785309%)&gt;];
}
1262--3466[label="1;3135pkt 3135fpkt"];
1262--4744[label="0.00589035;26pkt 26fpkt"];
1262--4830[label="0.00719564;37pkt 37fpkt"];
1262--4834[label="0.000388954;2pkt 2fpkt"];
1262--4845[label="0.0083625;43pkt 43fpkt"];
1262--4857[label="0.00589035;26pkt 26fpkt"];
1262--4862[label="0.0075846;39pkt 39fpkt"];
1262--4864[label="0.000388954;2pkt 2fpkt"];
1262--4924[label="0.00719564;37pkt 37fpkt"];
1262--4938[label="0.0083625;43pkt 43fpkt"];
1262--4943[label="0.0075846;39pkt 39fpkt"];
1262--4945[label="0.000388954;2pkt 2fpkt"];
1262--4956[label="0.00719564;37pkt 37fpkt"];
1262--4967[label="0.0083625;43pkt 43fpkt"];
3466--4744[label="0.00829346;26pkt 26fpkt"];
3466--4830[label="0.0118022;37pkt 37fpkt"];
3466--4834[label="0.000637959;2pkt 2fpkt"];
3466--4845[label="0.0118022;37pkt 37fpkt"];
3466--4857[label="0.00829346;26pkt 26fpkt"];
3466--4862[label="0.0124402;39pkt 39fpkt"];
3466--4864[label="0.000637959;2pkt 2fpkt"];
3466--4924[label="0.0118022;37pkt 37fpkt"];
3466--4938[label="0.0118022;37pkt 37fpkt"];
3466--4943[label="0.0124402;39pkt 39fpkt"];
3466--4945[label="0.000637959;2pkt 2fpkt"];
3466--4956[label="0.0118022;37pkt 37fpkt"];
3466--4967[label="0.0118022;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="212.82.225.220" src_port="1810"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1769[label="136.85.92.77;s;147pkt 147fpkt", shape=diamond, color=yellow];
3501[label="136.85.92.77;s;131pkt 131fpkt", shape=hexagon, color=black];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.92.77:25, *:*}[99.3197%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65068: (0.359712%)&lt;BR/&gt; 64012: (0.359712%)&lt;BR/&gt; 63777: (0.359712%)&lt;BR/&gt; 63265: (0.359712%)&gt;];
}
1769--3501[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter src_ip="136.85.92.77" src_port="25"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
986[label="213.27.240.193;s;66pkt 66fpkt", shape=diamond, color=yellow];
1581[label="59.32.247.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
1942[label="209.28.219.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
2143[label="193.242.116.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
2917[label="209.28.219.206;d;2pkt 2fpkt", shape=diamond, color=yellow];
3537[label="59.32.247.171;d;1pkt 1fpkt", shape=hexagon, color=black];
3676[label="209.28.219.241;d;1pkt 1fpkt", shape=hexagon, color=black];
3802[label="193.242.116.85;d;1pkt 1fpkt", shape=hexagon, color=black];
4555[label="209.28.219.206;d;2pkt 2fpkt", shape=hexagon, color=black];
5760[label="213.27.240.193;90pkt 90fpkt", shape=pentagon, color=darkviolet];
6418[label="213.27.240.193;89pkt 89fpkt", shape=invtriangle, color=brown];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.27.240.193:*, *:6346}[34.4444%]&lt;BR/&gt;{213.27.240.193:*, *:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (25.2941%)&lt;BR/&gt; 80: (16.2745%)&lt;BR/&gt; 6348: (7.64706%)&lt;BR/&gt; 36141: (2.35294%)&lt;BR/&gt; 6349: (1.56863%)&gt;];
}
986--1028[label="0.0454545;3pkt 3fpkt"];
986--1581[label="1;1pkt 1fpkt"];
986--1942[label="1;1pkt 1fpkt"];
986--2143[label="1;1pkt 1fpkt"];
986--2917[label="1;2pkt 2fpkt"];
986--3240[label="0.0454545;3pkt 3fpkt"];
986--3537[label="1;1pkt 1fpkt"];
986--3676[label="1;1pkt 1fpkt"];
986--3802[label="1;1pkt 1fpkt"];
986--4555[label="1;2pkt 2fpkt"];
986--4746[label="0.0151515;1pkt 1fpkt"];
986--4834[label="0.030303;2pkt 2fpkt"];
986--4858[label="0.0151515;1pkt 1fpkt"];
986--4864[label="0.0151515;1pkt 1fpkt"];
986--4940[label="0.0151515;1pkt 1fpkt"];
986--4945[label="0.0151515;1pkt 1fpkt"];
986--5760[label="1;66pkt 66fpkt"];
986--6418[label="0.984848;65pkt 65fpkt"];
1581--3537[label="1;1pkt 1fpkt"];
1581--5760[label="1;1pkt 1fpkt"];
1581--6418[label="1;1pkt 1fpkt"];
1942--3676[label="1;1pkt 1fpkt"];
1942--4834[label="1;1pkt 1fpkt"];
1942--4864[label="1;1pkt 1fpkt"];
1942--4945[label="1;1pkt 1fpkt"];
1942--5760[label="1;1pkt 1fpkt"];
1942--6418[label="1;1pkt 1fpkt"];
2143--3802[label="1;1pkt 1fpkt"];
2143--5760[label="1;1pkt 1fpkt"];
2143--6418[label="1;1pkt 1fpkt"];
2917--4555[label="1;2pkt 2fpkt"];
2917--5760[label="1;2pkt 2fpkt"];
2917--6418[label="1;2pkt 2fpkt"];
3537--5760[label="1;1pkt 1fpkt"];
3537--6418[label="1;1pkt 1fpkt"];
3676--4834[label="1;1pkt 1fpkt"];
3676--4864[label="1;1pkt 1fpkt"];
3676--4945[label="1;1pkt 1fpkt"];
3676--5760[label="1;1pkt 1fpkt"];
3676--6418[label="1;1pkt 1fpkt"];
3802--5760[label="1;1pkt 1fpkt"];
3802--6418[label="1;1pkt 1fpkt"];
4555--5760[label="1;2pkt 2fpkt"];
4555--6418[label="1;2pkt 2fpkt"];
5760--6418[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="213.27.240.193"/>
      <filter dst_port="80" src_ip="213.27.240.193"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580473,1.3736,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
2753[label="209.34.98.6;s;12pkt 12fpkt", shape=diamond, color=yellow];
2754[label="136.85.141.115;d;25pkt 25fpkt", shape=diamond, color=yellow];
5000[label="209.34.98.6;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.34.98.6:80, 136.85.141.115:*}[48%]&lt;BR/&gt;{91.109.120.181:80, 136.85.141.115:*}[48%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4463: (3.06122%)&lt;BR/&gt; 4462: (3.06122%)&lt;BR/&gt; 4459: (3.06122%)&lt;BR/&gt; 4458: (3.06122%)&gt;];
}
2753--2754[label="1;12pkt 12fpkt"];
2753--5000[label="1;12pkt 12fpkt"];
2754--3570[label="0.04;1pkt 1fpkt"];
2754--5000[label="1;12pkt 12fpkt"];
2754--5237[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.141.115" src_ip="91.109.120.181" src_port="80"/>
      <filter dst_ip="136.85.141.115" src_ip="209.34.98.6" src_port="80"/>
    </slice>
    <from sec="1094706556" usec="0"/>
    <to sec="1094706691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1880[label="61.233.54.79;d;223pkt 223fpkt", shape=diamond, color=yellow];
1883[label="164.23.125.123;s;223pkt 223fpkt", shape=diamond, color=yellow];
3619[label="164.23.125.123;s;210pkt 210fpkt", shape=hexagon, color=black];
5482[label="164.23.125.123;222pkt 222fpkt", shape=pentagon, color=darkviolet];
6257[label="164.23.125.123;223pkt 223fpkt", shape=invtriangle, color=brown];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.125.123:*, 61.233.54.79:4103}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4103: (50%)&lt;BR/&gt; 2782: (0.227066%)&lt;BR/&gt; 2781: (0.227066%)&lt;BR/&gt; 2780: (0.227066%)&lt;BR/&gt; 2779: (0.227066%)&gt;];
}
1880--1883[label="1;223pkt 223fpkt"];
1880--3619[label="1;210pkt 210fpkt"];
1880--5482[label="1;222pkt 222fpkt"];
1880--6257[label="1;223pkt 223fpkt"];
1883--3619[label="1;210pkt 210fpkt"];
1883--5482[label="1;222pkt 222fpkt"];
1883--6257[label="1;223pkt 223fpkt"];
3619--5482[label="0.995238;209pkt 209fpkt"];
3619--6257[label="1;210pkt 210fpkt"];
5482--6257[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_ip="61.233.54.79" dst_port="4103" src_ip="164.23.125.123"/>
    </slice>
    <from sec="1094706007" usec="0"/>
    <to sec="1094706521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
1658[label="136.84.138.125;s;166pkt 166fpkt", shape=diamond, color=yellow];
3625[label="136.84.138.125;s;159pkt 159fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.138.125:*, *:80}[63.253%]&lt;BR/&gt;{136.84.138.125:8000, *:*}[35.5422%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.1538%)&lt;BR/&gt; 8000: (17.5385%)&lt;BR/&gt; 58474: (0.307692%)&lt;BR/&gt; 58473: (0.307692%)&lt;BR/&gt; 58472: (0.307692%)&gt;];
}
1658--2157[label="0.0133333;1pkt 1fpkt"];
1658--3232[label="0.0120482;2pkt 2fpkt"];
1658--3625[label="1;159pkt 159fpkt"];
1658--4746[label="0.060241;10pkt 10fpkt"];
1658--4834[label="0.0120482;2pkt 2fpkt"];
1658--4858[label="0.060241;10pkt 10fpkt"];
1658--4864[label="0.0120482;2pkt 2fpkt"];
1658--4940[label="0.060241;10pkt 10fpkt"];
1658--4945[label="0.0120482;2pkt 2fpkt"];
3625--4746[label="0.0628931;10pkt 10fpkt"];
3625--4834[label="0.0125786;2pkt 2fpkt"];
3625--4858[label="0.0628931;10pkt 10fpkt"];
3625--4864[label="0.0125786;2pkt 2fpkt"];
3625--4940[label="0.0628931;10pkt 10fpkt"];
3625--4945[label="0.0125786;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="136.84.138.125" src_port="8000"/>
      <filter dst_port="80" src_ip="136.84.138.125"/>
    </slice>
    <from sec="1094706009" usec="0"/>
    <to sec="1094706823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
1916[label="212.82.227.49;s;101pkt 101fpkt", shape=diamond, color=yellow];
3648[label="212.82.227.49;s;101pkt 101fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.227.49:25, *:*}[50.495%]&lt;BR/&gt;{212.82.227.49:*, *:113}[48.5149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.2475%)&lt;BR/&gt; 113: (24.2574%)&lt;BR/&gt; 4776: (0.990099%)&lt;BR/&gt; 65247: (0.49505%)&lt;BR/&gt; 64999: (0.49505%)&gt;];
}
1916--3648[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="212.82.227.49" src_port="25"/>
      <filter dst_port="113" src_ip="212.82.227.49"/>
    </slice>
    <from sec="1094706030" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78447,1.39264,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
84[label="136.85.179.64s;1pkt 1fpkt", shape=rectangle, color=red];
3085[label="136.85.180.40;s;72pkt 72fpkt", shape=diamond, color=yellow];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.180.40:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2111: (1.36986%)&lt;BR/&gt; 2173: (0.684932%)&lt;BR/&gt; 2172: (0.684932%)&lt;BR/&gt; 2171: (0.684932%)&gt;];
}
84--3085[label="1;1pkt 1fpkt"];
3085--3363[label="0.0606061;2pkt 2fpkt"];
3085--4834[label="0.0694444;5pkt 5fpkt"];
3085--4864[label="0.0555556;4pkt 4fpkt"];
3085--4945[label="0.0555556;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.85.180.40"/>
    </slice>
    <from sec="1094706083" usec="0"/>
    <to sec="1094706827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
2033[label="142.44.164.13;s;14pkt 14fpkt", shape=diamond, color=yellow];
3726[label="142.44.164.13;s;14pkt 14fpkt", shape=hexagon, color=black];
5041[label="142.44.164.13;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.44.164.13:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (7.14286%)&lt;BR/&gt; 29470: (3.57143%)&lt;BR/&gt; 23495: (3.57143%)&lt;BR/&gt; 16685: (3.57143%)&lt;BR/&gt; 16623: (3.57143%)&gt;];
}
2033--3726[label="1;14pkt 14fpkt"];
2033--5041[label="1;14pkt 14fpkt"];
3726--5041[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="142.44.164.13"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
1790[label="136.85.99.75;s;555pkt 555fpkt", shape=diamond, color=yellow];
3100[label="198.179.75.97;d;65pkt 65fpkt", shape=diamond, color=yellow];
3758[label="136.85.99.75;s;555pkt 555fpkt", shape=hexagon, color=black];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.99.75:0, *:0}[89.6607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.0638%)&lt;BR/&gt; 4899: (2.46809%)&lt;BR/&gt; 3859: (0.0425532%)&lt;BR/&gt; 3711: (0.0425532%)&lt;BR/&gt; 3710: (0.0425532%)&gt;];
}
1790--2054[label="0.0025974;1pkt 1fpkt"];
1790--2092[label="0.00285714;1pkt 1fpkt"];
1790--2969[label="0.00478469;1pkt 1fpkt"];
1790--3100[label="0.0153846;1pkt 1fpkt"];
1790--3734[label="0.00444444;1pkt 1fpkt"];
1790--3758[label="1;555pkt 555fpkt"];
3100--3758[label="0.0153846;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.85.99.75"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
1834[label="164.94.104.82;s;711pkt 711fpkt", shape=diamond, color=yellow];
3789[label="164.94.104.82;s;711pkt 711fpkt", shape=hexagon, color=black];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.94.104.82:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1834--2054[label="0.0025974;1pkt 1fpkt"];
1834--2092[label="0.00285714;1pkt 1fpkt"];
1834--2969[label="0.00478469;1pkt 1fpkt"];
1834--3734[label="0.00444444;1pkt 1fpkt"];
1834--3789[label="1;711pkt 711fpkt"];
</description>
    <slice>
      <filter src_ip="164.94.104.82"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
2131[label="213.27.242.195;s;41pkt 41fpkt", shape=diamond, color=yellow];
3797[label="213.27.242.195;s;41pkt 41fpkt", shape=hexagon, color=black];
5765[label="213.27.242.195;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.27.242.195:18717, 34.130.161.16:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18717: (41.5323%)&lt;BR/&gt; 6879: (4.83871%)&lt;BR/&gt; 53002: (1.20968%)&lt;BR/&gt; 36322: (1.20968%)&lt;BR/&gt; 34593: (1.20968%)&gt;];
}
2131--3797[label="1;41pkt 41fpkt"];
2131--5765[label="1;41pkt 41fpkt"];
3797--5765[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="34.130.161.16" src_ip="213.27.242.195" src_port="18717"/>
    </slice>
    <from sec="1094706003" usec="0"/>
    <to sec="1094706873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
2106[label="145.89.137.188;s;227pkt 227fpkt", shape=diamond, color=yellow];
3909[label="145.89.137.188;s;217pkt 217fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.137.188:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2106--3909[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter src_ip="145.89.137.188"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
1840[label="166.52.48.92;s;744pkt 744fpkt", shape=diamond, color=yellow];
3912[label="166.52.48.92;s;531pkt 531fpkt", shape=hexagon, color=black];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.52.48.92:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1840--2054[label="0.0025974;1pkt 1fpkt"];
1840--2092[label="0.00285714;1pkt 1fpkt"];
1840--2969[label="0.00478469;1pkt 1fpkt"];
1840--3734[label="0.00444444;1pkt 1fpkt"];
1840--3912[label="1;531pkt 531fpkt"];
</description>
    <slice>
      <filter src_ip="166.52.48.92"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
1693[label="136.85.162.130;s;61pkt 61fpkt", shape=diamond, color=yellow];
2202[label="61.113.202.166;d;15pkt 15fpkt", shape=diamond, color=yellow];
3941[label="136.85.162.130;s;46pkt 46fpkt", shape=hexagon, color=black];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.162.130:*, 61.113.202.166:80}[31.1475%]&lt;BR/&gt;{136.85.162.130:*, 62.30.197.103:80}[24.5902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.8525%)&lt;BR/&gt; 443: (3.27869%)&lt;BR/&gt; 0: (2.45902%)&lt;BR/&gt; 1205: (1.22951%)&lt;BR/&gt; 1204: (1.22951%)&gt;];
}
1693--2202[label="1;15pkt 15fpkt"];
1693--3941[label="1;46pkt 46fpkt"];
1693--4834[label="0.0491803;3pkt 3fpkt"];
1693--4864[label="0.0819672;5pkt 5fpkt"];
1693--4945[label="0.0819672;5pkt 5fpkt"];
2202--3941[label="1;15pkt 15fpkt"];
2202--4834[label="0.133333;2pkt 2fpkt"];
2202--4864[label="0.133333;2pkt 2fpkt"];
2202--4945[label="0.133333;2pkt 2fpkt"];
3941--4834[label="0.0652174;3pkt 3fpkt"];
3941--4864[label="0.108696;5pkt 5fpkt"];
3941--4945[label="0.108696;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="61.113.202.166" dst_port="80" src_ip="136.85.162.130"/>
      <filter dst_ip="62.30.197.103" dst_port="80" src_ip="136.85.162.130"/>
    </slice>
    <from sec="1094706091" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
2420[label="142.205.215.136;s;51pkt 51fpkt", shape=diamond, color=yellow];
3943[label="142.205.215.136;s;49pkt 49fpkt", shape=hexagon, color=black];
5531[label="142.205.215.136;50pkt 50fpkt", shape=pentagon, color=darkviolet];
6283[label="142.205.215.136;50pkt 50fpkt", shape=invtriangle, color=brown];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.205.215.136:*, 61.89.134.147:80}[49.0196%]&lt;BR/&gt;{142.205.215.136:*, 61.41.2.81:80}[25.4902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58824: (1%)&lt;BR/&gt; 58823: (1%)&lt;BR/&gt; 58822: (1%)&lt;BR/&gt; 58821: (1%)&gt;];
}
2420--3943[label="1;49pkt 49fpkt"];
2420--4834[label="0.137255;7pkt 7fpkt"];
2420--4864[label="0.0784314;4pkt 4fpkt"];
2420--4945[label="0.0784314;4pkt 4fpkt"];
2420--5531[label="1;50pkt 50fpkt"];
2420--6283[label="1;50pkt 50fpkt"];
3943--4834[label="0.142857;7pkt 7fpkt"];
3943--4864[label="0.0816327;4pkt 4fpkt"];
3943--4945[label="0.0816327;4pkt 4fpkt"];
3943--5531[label="1;49pkt 49fpkt"];
3943--6283[label="1;49pkt 49fpkt"];
5531--6283[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="61.89.134.147" dst_port="80" src_ip="142.205.215.136"/>
      <filter dst_ip="61.41.2.81" dst_port="80" src_ip="142.205.215.136"/>
    </slice>
    <from sec="1094706131" usec="0"/>
    <to sec="1094706820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
2438[label="88.173.41.5;s;467pkt 467fpkt", shape=diamond, color=yellow];
3952[label="88.173.41.5;s;215pkt 215fpkt", shape=hexagon, color=black];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.173.41.5:0, *:0}[84.3683%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (85.1906%)&lt;BR/&gt; 1433: (7.33138%)&lt;BR/&gt; 1699: (0.146628%)&lt;BR/&gt; 1690: (0.146628%)&lt;BR/&gt; 1675: (0.146628%)&gt;];
}
2438--3952[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter src_ip="88.173.41.5"/>
    </slice>
    <from sec="1094706347" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
1404[label="88.11.222.13;s;2095pkt 2095fpkt", shape=diamond, color=yellow];
1716[label="164.23.216.96;d;3pkt 3fpkt", shape=diamond, color=yellow];
3128[label="33.20.228.96;s;3pkt 3fpkt", shape=diamond, color=yellow];
3578[label="88.11.222.13;s;1887pkt 1887fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.11.222.13:7000, *:*}[20.7242%]&lt;BR/&gt;{88.11.222.13:3389, *:*}[20.0572%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (10.4188%)&lt;BR/&gt; 80: (9.99248%)&lt;BR/&gt; 7200: (9.91725%)&lt;BR/&gt; 3389: (9.90471%)&lt;BR/&gt; 7100: (9.7668%)&gt;];
}
1404--1716[label="0.333333;1pkt 1fpkt"];
1404--3578[label="1;1887pkt 1887fpkt"];
1404--4744[label="0.00954654;20pkt 20fpkt"];
1404--4830[label="0.0133652;28pkt 28fpkt"];
1404--4845[label="0.0128878;27pkt 27fpkt"];
1404--4857[label="0.00954654;20pkt 20fpkt"];
1404--4862[label="0.0114558;24pkt 24fpkt"];
1404--4924[label="0.0133652;28pkt 28fpkt"];
1404--4938[label="0.0128878;27pkt 27fpkt"];
1404--4943[label="0.0114558;24pkt 24fpkt"];
1404--4956[label="0.0133652;28pkt 28fpkt"];
1404--4967[label="0.0128878;27pkt 27fpkt"];
1716--2461[label="0.333333;1pkt 1fpkt"];
1716--3128[label="0.333333;1pkt 1fpkt"];
1716--3578[label="0.333333;1pkt 1fpkt"];
1716--3963[label="0.333333;1pkt 1fpkt"];
3578--4744[label="0.0105988;20pkt 20fpkt"];
3578--4830[label="0.0148384;28pkt 28fpkt"];
3578--4845[label="0.0143084;27pkt 27fpkt"];
3578--4857[label="0.0105988;20pkt 20fpkt"];
3578--4862[label="0.0127186;24pkt 24fpkt"];
3578--4924[label="0.0148384;28pkt 28fpkt"];
3578--4938[label="0.0143084;27pkt 27fpkt"];
3578--4943[label="0.0127186;24pkt 24fpkt"];
3578--4956[label="0.0148384;28pkt 28fpkt"];
3578--4967[label="0.0143084;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="88.11.222.13" src_port="7000"/>
      <filter src_ip="88.11.222.13" src_port="3389"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
2482[label="221.216.201.57;s;508pkt 508fpkt", shape=diamond, color=yellow];
3975[label="221.216.201.57;s;300pkt 300fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.216.201.57:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 41212: (0.123762%)&lt;BR/&gt; 41200: (0.123762%)&lt;BR/&gt; 41186: (0.123762%)&lt;BR/&gt; 41174: (0.123762%)&gt;];
}
2482--3975[label="1;300pkt 300fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="221.216.201.57"/>
    </slice>
    <from sec="1094706474" usec="0"/>
    <to sec="1094706648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1768[label="145.89.34.137;d;75pkt 75fpkt", shape=diamond, color=yellow];
4038[label="145.89.34.137;d;60pkt 60fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.89.34.137:25}[98.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2593%)&lt;BR/&gt; 53987: (0.740741%)&lt;BR/&gt; 53278: (0.740741%)&lt;BR/&gt; 49303: (0.740741%)&lt;BR/&gt; 49192: (0.740741%)&gt;];
}
1768--4038[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="145.89.34.137" dst_port="25"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626265,1.44449,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
2920[label="164.23.240.169;s;54pkt 54fpkt", shape=diamond, color=yellow];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.240.169:*, 62.88.158.51:80}[37.037%]&lt;BR/&gt;{164.23.240.169:*, 91.13.95.183:80}[29.6296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1422: (0.925926%)&lt;BR/&gt; 1421: (0.925926%)&lt;BR/&gt; 1420: (0.925926%)&lt;BR/&gt; 1419: (0.925926%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="62.88.158.51" dst_port="80" src_ip="164.23.240.169"/>
      <filter dst_ip="91.13.95.183" dst_port="80" src_ip="164.23.240.169"/>
    </slice>
    <from sec="1094706450" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
2316[label="203.151.197.189;s;997pkt 997fpkt", shape=diamond, color=yellow];
4041[label="203.151.197.189;s;997pkt 997fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.151.197.189:7000, *:*}[20.662%]&lt;BR/&gt;{203.151.197.189:7200, *:*}[20.3611%]&lt;BR/&gt;{203.151.197.189:80, *:*}[20.2608%]&lt;BR/&gt;{203.151.197.189:7100, *:*}[20.0602%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (10.331%)&lt;BR/&gt; 7200: (10.1805%)&lt;BR/&gt; 80: (10.1304%)&lt;BR/&gt; 7100: (10.0301%)&lt;BR/&gt; 3389: (9.32798%)&gt;];
}
2316--4041[label="1;997pkt 997fpkt"];
2316--4744[label="0.0150451;15pkt 15fpkt"];
2316--4830[label="0.00902708;9pkt 9fpkt"];
2316--4845[label="0.0140421;14pkt 14fpkt"];
2316--4857[label="0.0150451;15pkt 15fpkt"];
2316--4862[label="0.0130391;13pkt 13fpkt"];
2316--4924[label="0.00902708;9pkt 9fpkt"];
2316--4938[label="0.0140421;14pkt 14fpkt"];
2316--4943[label="0.0130391;13pkt 13fpkt"];
2316--4956[label="0.00902708;9pkt 9fpkt"];
2316--4967[label="0.0140421;14pkt 14fpkt"];
4041--4744[label="0.0150451;15pkt 15fpkt"];
4041--4830[label="0.00902708;9pkt 9fpkt"];
4041--4845[label="0.0140421;14pkt 14fpkt"];
4041--4857[label="0.0150451;15pkt 15fpkt"];
4041--4862[label="0.0130391;13pkt 13fpkt"];
4041--4924[label="0.00902708;9pkt 9fpkt"];
4041--4938[label="0.0140421;14pkt 14fpkt"];
4041--4943[label="0.0130391;13pkt 13fpkt"];
4041--4956[label="0.00902708;9pkt 9fpkt"];
4041--4967[label="0.0140421;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="203.151.197.189" src_port="7000"/>
      <filter src_ip="203.151.197.189" src_port="7200"/>
      <filter src_ip="203.151.197.189" src_port="80"/>
      <filter src_ip="203.151.197.189" src_port="7100"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
2067[label="212.82.224.132;d;136pkt 136fpkt", shape=diamond, color=yellow];
4046[label="212.82.224.132;d;135pkt 135fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 212.82.224.132:0}[99.2647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.262%)&lt;BR/&gt; 3925: (0.369004%)&lt;BR/&gt; 3389: (0.369004%)&gt;];
}
2067--4017[label="0.00735294;1pkt 1fpkt"];
2067--4046[label="1;135pkt 135fpkt"];
2067--5220[label="0.00735294;1pkt 1fpkt"];
2067--6100[label="0.00735294;1pkt 1fpkt"];
4046--5220[label="0.00740741;1pkt 1fpkt"];
4046--6100[label="0.00740741;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.82.224.132"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
2593[label="194.228.242.179;s;259pkt 259fpkt", shape=diamond, color=yellow];
4053[label="194.228.242.179;s;203pkt 203fpkt", shape=hexagon, color=black];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.228.242.179:*, *:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 48177: (0.4329%)&lt;BR/&gt; 30052: (0.4329%)&lt;BR/&gt; 41643: (0.324675%)&lt;BR/&gt; 31286: (0.324675%)&gt;];
}
2593--4053[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="194.228.242.179"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
2338[label="213.27.243.134;d;131pkt 131fpkt", shape=diamond, color=yellow];
4076[label="213.27.243.134;d;131pkt 131fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.27.243.134:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2338--4076[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_ip="213.27.243.134"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
2345[label="212.82.226.102;s;505pkt 505fpkt", shape=diamond, color=yellow];
4080[label="212.82.226.102;s;455pkt 455fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.226.102:0, *:0}[98.8119%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.75%)&lt;BR/&gt; 6129: (0.104167%)&lt;BR/&gt; 3893: (0.104167%)&lt;BR/&gt; 3891: (0.104167%)&lt;BR/&gt; 3890: (0.104167%)&gt;];
}
2345--2363[label="0.00558659;1pkt 1fpkt"];
2345--2969[label="0.00478469;1pkt 1fpkt"];
2345--3734[label="0.00444444;1pkt 1fpkt"];
2345--4080[label="1;455pkt 455fpkt"];
2345--4351[label="0.00613497;1pkt 1fpkt"];
4080--4351[label="0.00613497;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="212.82.226.102"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
2607[label="213.27.243.0;d;45pkt 45fpkt", shape=diamond, color=yellow];
4081[label="213.27.243.0;d;45pkt 45fpkt", shape=hexagon, color=black];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.27.243.0:25}[97.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.8889%)&lt;BR/&gt; 62911: (1.11111%)&lt;BR/&gt; 60176: (1.11111%)&lt;BR/&gt; 60028: (1.11111%)&lt;BR/&gt; 60003: (1.11111%)&gt;];
}
2607--4081[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="213.27.243.0" dst_port="25"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
1837[label="136.84.164.100;s;89pkt 89fpkt", shape=diamond, color=yellow];
4096[label="136.84.164.100;s;89pkt 89fpkt", shape=hexagon, color=black];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.164.100:25, *:*}[86.5169%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62413: (0.561798%)&lt;BR/&gt; 62374: (0.561798%)&lt;BR/&gt; 61127: (0.561798%)&lt;BR/&gt; 60357: (0.561798%)&gt;];
}
1837--4096[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter src_ip="136.84.164.100" src_port="25"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,004,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
2632[label="212.82.251.10;s;97pkt 97fpkt", shape=diamond, color=yellow];
2633[label="212.40.4.108;d;93pkt 93fpkt", shape=diamond, color=yellow];
4104[label="212.40.4.108;d;71pkt 71fpkt", shape=hexagon, color=black];
4350[label="212.82.251.10;s;89pkt 89fpkt", shape=hexagon, color=black];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.251.10:139, 212.40.4.108:*}[46.9388%]&lt;BR/&gt;{212.82.251.10:445, 212.40.4.108:*}[46.9388%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (24.5714%)&lt;BR/&gt; 139: (24.2857%)&lt;BR/&gt; 4766: (0.857143%)&lt;BR/&gt; 161: (0.857143%)&lt;BR/&gt; 4890: (0.571429%)&gt;];
}
2632--2633[label="0.989247;92pkt 92fpkt"];
2632--4104[label="1;71pkt 71fpkt"];
2632--4350[label="1;89pkt 89fpkt"];
2633--4104[label="1;71pkt 71fpkt"];
2633--4350[label="0.94382;84pkt 84fpkt"];
4104--4350[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="212.40.4.108" src_ip="212.82.251.10" src_port="445"/>
      <filter dst_ip="212.40.4.108" src_ip="212.82.251.10" src_port="139"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
2435[label="136.85.141.25;s;6pkt 6fpkt", shape=diamond, color=yellow];
4202[label="136.85.141.25;s;6pkt 6fpkt", shape=hexagon, color=black];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.141.25:*, 198.168.2.21:80}[33.3333%]&lt;BR/&gt;{136.85.141.25:*, 198.168.2.198:80}[33.3333%]&lt;BR/&gt;{136.85.141.25:*, 198.168.2.233:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2541: (8.33333%)&lt;BR/&gt; 2536: (8.33333%)&lt;BR/&gt; 2513: (8.33333%)&lt;BR/&gt; 2512: (8.33333%)&gt;];
}
2435--4202[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="198.168.2.233" dst_port="80" src_ip="136.85.141.25"/>
      <filter dst_ip="198.168.2.198" dst_port="80" src_ip="136.85.141.25"/>
      <filter dst_ip="198.168.2.21" dst_port="80" src_ip="136.85.141.25"/>
    </slice>
    <from sec="1094706334" usec="0"/>
    <to sec="1094706555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
964[label="164.94.104.211;d;1513pkt 1513fpkt", shape=diamond, color=yellow];
4275[label="164.94.104.211;d;1432pkt 1432fpkt", shape=hexagon, color=black];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.94.104.211:24410}[98.2155%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24410: (49.1002%)&lt;BR/&gt; 443: (0.40747%)&lt;BR/&gt; 0: (0.339559%)&lt;BR/&gt; 80: (0.322581%)&lt;BR/&gt; 1025: (0.203735%)&gt;];
}
964--4275[label="1;1432pkt 1432fpkt"];
964--4746[label="0.00132188;2pkt 2fpkt"];
964--4749[label="0.0071048;4pkt 4fpkt"];
964--4832[label="0.00369914;3pkt 3fpkt"];
964--4833[label="0.00760456;4pkt 4fpkt"];
964--4846[label="0.00536913;4pkt 4fpkt"];
964--4858[label="0.00132188;2pkt 2fpkt"];
964--4926[label="0.00369914;3pkt 3fpkt"];
964--4927[label="0.00759013;4pkt 4fpkt"];
964--4939[label="0.00536913;4pkt 4fpkt"];
964--4940[label="0.00132188;2pkt 2fpkt"];
964--4959[label="0.00369914;3pkt 3fpkt"];
964--4960[label="0.00760456;4pkt 4fpkt"];
964--4968[label="0.00536913;4pkt 4fpkt"];
4275--4746[label="0.00139665;2pkt 2fpkt"];
4275--4749[label="0.0071048;4pkt 4fpkt"];
4275--4832[label="0.00369914;3pkt 3fpkt"];
4275--4833[label="0.00760456;4pkt 4fpkt"];
4275--4846[label="0.00536913;4pkt 4fpkt"];
4275--4858[label="0.00139665;2pkt 2fpkt"];
4275--4926[label="0.00369914;3pkt 3fpkt"];
4275--4927[label="0.00759013;4pkt 4fpkt"];
4275--4939[label="0.00536913;4pkt 4fpkt"];
4275--4940[label="0.00139665;2pkt 2fpkt"];
4275--4959[label="0.00369914;3pkt 3fpkt"];
4275--4960[label="0.00760456;4pkt 4fpkt"];
4275--4968[label="0.00536913;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="164.94.104.211" dst_port="24410"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
1550[label="192.240.69.50;d;5pkt 5fpkt", shape=diamond, color=yellow];
2323[label="145.89.244.36;s;2pkt 2fpkt", shape=diamond, color=yellow];
2328[label="145.89.20.179;s;3pkt 3fpkt", shape=diamond, color=yellow];
4299[label="145.89.244.36;s;2pkt 2fpkt", shape=hexagon, color=black];
4304[label="145.89.20.179;s;3pkt 3fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.244.36:3371, 192.240.69.50:8204}[20%]&lt;BR/&gt;{145.89.244.36:3462, 192.240.69.50:8204}[20%]&lt;BR/&gt;{145.89.20.179:3188, 192.240.69.50:8204}[20%]&lt;BR/&gt;{145.89.20.179:3991, 192.240.69.50:8204}[20%]&lt;BR/&gt;{145.89.20.179:3995, 192.240.69.50:8204}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8204: (50%)&lt;BR/&gt; 3995: (10%)&lt;BR/&gt; 3991: (10%)&lt;BR/&gt; 3462: (10%)&lt;BR/&gt; 3371: (10%)&gt;];
}
1550--2323[label="1;2pkt 2fpkt"];
1550--2328[label="1;3pkt 3fpkt"];
1550--4299[label="1;2pkt 2fpkt"];
1550--4304[label="1;3pkt 3fpkt"];
2323--4299[label="1;2pkt 2fpkt"];
2328--4304[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.240.69.50" dst_port="8204" src_ip="145.89.20.179" src_port="3995"/>
      <filter dst_ip="192.240.69.50" dst_port="8204" src_ip="145.89.20.179" src_port="3991"/>
      <filter dst_ip="192.240.69.50" dst_port="8204" src_ip="145.89.20.179" src_port="3188"/>
      <filter dst_ip="192.240.69.50" dst_port="8204" src_ip="145.89.244.36" src_port="3462"/>
      <filter dst_ip="192.240.69.50" dst_port="8204" src_ip="145.89.244.36" src_port="3371"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
2337[label="192.144.216.197;s;9pkt 9fpkt", shape=diamond, color=yellow];
4326[label="192.144.216.197;s;9pkt 9fpkt", shape=hexagon, color=black];
5769[label="192.144.216.197;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6421[label="192.144.216.197;9pkt 9fpkt", shape=invtriangle, color=brown];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.144.216.197:5050, *:*}[55.5556%]&lt;BR/&gt;{192.144.216.197:23, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (27.7778%)&lt;BR/&gt; 23: (11.1111%)&lt;BR/&gt; 63468: (5.55556%)&lt;BR/&gt; 3013: (5.55556%)&lt;BR/&gt; 3012: (5.55556%)&gt;];
}
2337--3234[label="0.111111;1pkt 1fpkt"];
2337--4326[label="1;9pkt 9fpkt"];
2337--5769[label="1;9pkt 9fpkt"];
2337--6421[label="1;9pkt 9fpkt"];
4326--5769[label="1;9pkt 9fpkt"];
4326--6421[label="1;9pkt 9fpkt"];
5769--6421[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="192.144.216.197" src_port="5050"/>
      <filter src_ip="192.144.216.197" src_port="23"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
2833[label="194.162.230.48;s;507pkt 507fpkt", shape=diamond, color=yellow];
4346[label="194.162.230.48;s;507pkt 507fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.162.230.48:7200, *:*}[35.3057%]&lt;BR/&gt;{194.162.230.48:7100, *:*}[34.1223%]&lt;BR/&gt;{194.162.230.48:7000, *:*}[30.572%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7200: (17.6529%)&lt;BR/&gt; 7100: (17.0611%)&lt;BR/&gt; 7000: (15.286%)&lt;BR/&gt; 28900: (0.197239%)&lt;BR/&gt; 24164: (0.197239%)&gt;];
}
2833--4346[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter src_ip="194.162.230.48" src_port="7200"/>
      <filter src_ip="194.162.230.48" src_port="7100"/>
      <filter src_ip="194.162.230.48" src_port="7000"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813975,1.35764,002,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
2363[label="202.53.148.2;d;179pkt 179fpkt", shape=diamond, color=yellow];
2364[label="216.230.226.38;s;183pkt 183fpkt", shape=diamond, color=yellow];
4106[label="216.230.226.38;s;148pkt 148fpkt", shape=hexagon, color=black];
4351[label="202.53.148.2;d;163pkt 163fpkt", shape=hexagon, color=black];
6052[label="216.230.226.38;190pkt 190fpkt", shape=invtriangle, color=brown];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.230.226.38:139, 202.53.148.2:*}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.0151%)&lt;BR/&gt; 4987: (0.289687%)&lt;BR/&gt; 4908: (0.289687%)&lt;BR/&gt; 4886: (0.289687%)&lt;BR/&gt; 4845: (0.289687%)&gt;];
}
2363--2364[label="0.994413;178pkt 178fpkt"];
2363--4080[label="0.00558659;1pkt 1fpkt"];
2363--4106[label="0.966216;143pkt 143fpkt"];
2363--4351[label="1;163pkt 163fpkt"];
2363--6052[label="0.988827;177pkt 177fpkt"];
2364--4106[label="1;148pkt 148fpkt"];
2364--4351[label="0.993865;162pkt 162fpkt"];
2364--6052[label="0.994536;182pkt 182fpkt"];
4106--4351[label="0.966216;143pkt 143fpkt"];
4106--6052[label="0.993243;147pkt 147fpkt"];
4351--6052[label="0.98773;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_ip="202.53.148.2" src_ip="216.230.226.38" src_port="139"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
2375[label="164.23.145.109;s;531pkt 531fpkt", shape=diamond, color=yellow];
4363[label="164.23.145.109;s;472pkt 472fpkt", shape=hexagon, color=black];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.145.109:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2375--2969[label="0.00478469;1pkt 1fpkt"];
2375--3734[label="0.00444444;1pkt 1fpkt"];
2375--4363[label="1;472pkt 472fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.145.109"/>
    </slice>
    <from sec="1094706003" usec="0"/>
    <to sec="1094706825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
2147[label="136.85.173.217;s;87pkt 87fpkt", shape=diamond, color=yellow];
4364[label="136.85.173.217;s;73pkt 73fpkt", shape=hexagon, color=black];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.173.217:*, *:113}[37.931%]&lt;BR/&gt;{136.85.173.217:25, *:*}[37.931%]&lt;BR/&gt;{136.85.173.217:*, *:25}[22.9885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30.3125%)&lt;BR/&gt; 113: (19.0625%)&lt;BR/&gt; 61831: (0.625%)&lt;BR/&gt; 57899: (0.625%)&lt;BR/&gt; 46170: (0.625%)&gt;];
}
2147--4364[label="1;73pkt 73fpkt"];
2147--4845[label="0.0114943;1pkt 1fpkt"];
2147--4938[label="0.0114943;1pkt 1fpkt"];
2147--4967[label="0.0114943;1pkt 1fpkt"];
4364--4845[label="0.0136986;1pkt 1fpkt"];
4364--4938[label="0.0136986;1pkt 1fpkt"];
4364--4967[label="0.0136986;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.85.173.217" src_port="25"/>
      <filter dst_port="113" src_ip="136.85.173.217"/>
      <filter dst_port="25" src_ip="136.85.173.217"/>
    </slice>
    <from sec="1094706004" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1833[label="213.27.233.85;s;363pkt 363fpkt", shape=diamond, color=yellow];
2704[label="63.141.78.46;d;4pkt 4fpkt", shape=diamond, color=yellow];
4206[label="63.141.78.46;d;4pkt 4fpkt", shape=hexagon, color=black];
4341[label="213.27.233.85;s;322pkt 322fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.27.233.85:53, 217.88.100.167:*}[55.3719%]&lt;BR/&gt;{213.27.233.85:53, 217.88.100.160:*}[23.1405%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.557%)&lt;BR/&gt; 1026: (8.08081%)&lt;BR/&gt; 25: (1.2987%)&lt;BR/&gt; 3451: (0.2886%)&lt;BR/&gt; 3314: (0.2886%)&gt;];
}
1833--2059[label="0.00943396;1pkt 1fpkt"];
1833--2068[label="0.00869565;1pkt 1fpkt"];
1833--2071[label="0.00877193;1pkt 1fpkt"];
1833--2113[label="0.0078125;1pkt 1fpkt"];
1833--2164[label="0.0133333;1pkt 1fpkt"];
1833--2165[label="0.0119048;1pkt 1fpkt"];
1833--2655[label="0.00909091;1pkt 1fpkt"];
1833--2704[label="1;4pkt 4fpkt"];
1833--3752[label="0.00980392;1pkt 1fpkt"];
1833--3792[label="0.00909091;1pkt 1fpkt"];
1833--4206[label="1;4pkt 4fpkt"];
1833--4341[label="1;322pkt 322fpkt"];
1833--4372[label="0.0133333;1pkt 1fpkt"];
1833--4529[label="0.0119048;1pkt 1fpkt"];
1833--4743[label="0.0413223;15pkt 15fpkt"];
1833--4745[label="0.0137741;5pkt 5fpkt"];
1833--4750[label="0.0247934;9pkt 9fpkt"];
1833--4829[label="0.0358127;13pkt 13fpkt"];
1833--4832[label="0.0165289;6pkt 6fpkt"];
1833--4844[label="0.0413223;15pkt 15fpkt"];
1833--4856[label="0.0413223;15pkt 15fpkt"];
1833--4861[label="0.046832;17pkt 17fpkt"];
1833--4863[label="0.0247934;9pkt 9fpkt"];
1833--4923[label="0.0358127;13pkt 13fpkt"];
1833--4926[label="0.0165289;6pkt 6fpkt"];
1833--4937[label="0.0413223;15pkt 15fpkt"];
1833--4942[label="0.046832;17pkt 17fpkt"];
1833--4944[label="0.0247934;9pkt 9fpkt"];
1833--4955[label="0.0358127;13pkt 13fpkt"];
1833--4959[label="0.0165289;6pkt 6fpkt"];
1833--4966[label="0.0413223;15pkt 15fpkt"];
2704--4206[label="1;4pkt 4fpkt"];
2704--4341[label="1;4pkt 4fpkt"];
4206--4341[label="1;4pkt 4fpkt"];
4341--4372[label="0.0133333;1pkt 1fpkt"];
4341--4529[label="0.0119048;1pkt 1fpkt"];
4341--4743[label="0.0465839;15pkt 15fpkt"];
4341--4745[label="0.015528;5pkt 5fpkt"];
4341--4750[label="0.0279503;9pkt 9fpkt"];
4341--4829[label="0.0403727;13pkt 13fpkt"];
4341--4832[label="0.0186335;6pkt 6fpkt"];
4341--4844[label="0.0465839;15pkt 15fpkt"];
4341--4856[label="0.0465839;15pkt 15fpkt"];
4341--4861[label="0.052795;17pkt 17fpkt"];
4341--4863[label="0.0279503;9pkt 9fpkt"];
4341--4923[label="0.0403727;13pkt 13fpkt"];
4341--4926[label="0.0186335;6pkt 6fpkt"];
4341--4937[label="0.0465839;15pkt 15fpkt"];
4341--4942[label="0.052795;17pkt 17fpkt"];
4341--4944[label="0.0279503;9pkt 9fpkt"];
4341--4955[label="0.0403727;13pkt 13fpkt"];
4341--4959[label="0.0186335;6pkt 6fpkt"];
4341--4966[label="0.0465839;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="217.88.100.167" src_ip="213.27.233.85" src_port="53"/>
      <filter dst_ip="217.88.100.160" src_ip="213.27.233.85" src_port="53"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
2871[label="212.82.251.89;s;111pkt 111fpkt", shape=diamond, color=yellow];
4391[label="212.82.251.89;s;101pkt 101fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.251.89:54290, *:*}[66.6667%]&lt;BR/&gt;{212.82.251.89:139, 201.108.251.201:*}[30.6306%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54290: (33.0189%)&lt;BR/&gt; 139: (15.566%)&lt;BR/&gt; 61819: (0.943396%)&lt;BR/&gt; 64951: (0.471698%)&lt;BR/&gt; 64097: (0.471698%)&gt;];
}
2871--4391[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="212.82.251.89" src_port="54290"/>
      <filter dst_ip="201.108.251.201" src_ip="212.82.251.89" src_port="139"/>
    </slice>
    <from sec="1094706017" usec="0"/>
    <to sec="1094706827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
2676[label="194.194.10.134;s;273pkt 273fpkt", shape=diamond, color=yellow];
4392[label="194.194.10.134;s;243pkt 243fpkt", shape=hexagon, color=black];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.194.10.134:*, *:2745}[21.6117%]&lt;BR/&gt;{194.194.10.134:*, *:1025}[20.1465%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (10.8527%)&lt;BR/&gt; 1025: (10.0775%)&lt;BR/&gt; 3127: (9.88372%)&lt;BR/&gt; 6129: (9.68992%)&lt;BR/&gt; 80: (9.49612%)&gt;];
}
2676--4392[label="1;243pkt 243fpkt"];
2676--4746[label="0.018315;5pkt 5fpkt"];
2676--4834[label="0.014652;4pkt 4fpkt"];
2676--4858[label="0.018315;5pkt 5fpkt"];
2676--4864[label="0.018315;5pkt 5fpkt"];
2676--4940[label="0.018315;5pkt 5fpkt"];
2676--4945[label="0.018315;5pkt 5fpkt"];
4392--4746[label="0.0205761;5pkt 5fpkt"];
4392--4834[label="0.0164609;4pkt 4fpkt"];
4392--4858[label="0.0205761;5pkt 5fpkt"];
4392--4864[label="0.0205761;5pkt 5fpkt"];
4392--4940[label="0.0205761;5pkt 5fpkt"];
4392--4945[label="0.0205761;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="194.194.10.134"/>
      <filter dst_port="1025" src_ip="194.194.10.134"/>
    </slice>
    <from sec="1094706018" usec="0"/>
    <to sec="1094706828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
2200[label="145.89.126.221;s;124pkt 124fpkt", shape=diamond, color=yellow];
2413[label="58.20.108.16;d;110pkt 110fpkt", shape=diamond, color=yellow];
3829[label="145.89.126.221;s;72pkt 72fpkt", shape=hexagon, color=black];
4410[label="58.20.108.16;d;103pkt 103fpkt", shape=hexagon, color=black];
5856[label="145.89.126.221;124pkt 124fpkt", shape=pentagon, color=darkviolet];
6469[label="145.89.126.221;124pkt 124fpkt", shape=invtriangle, color=brown];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.126.221:*, 58.20.108.16:80}[88.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2324: (0.456621%)&lt;BR/&gt; 2323: (0.456621%)&lt;BR/&gt; 2322: (0.456621%)&lt;BR/&gt; 2321: (0.456621%)&gt;];
}
2200--2413[label="1;110pkt 110fpkt"];
2200--3829[label="1;72pkt 72fpkt"];
2200--4410[label="1;103pkt 103fpkt"];
2200--4834[label="0.0887097;11pkt 11fpkt"];
2200--4864[label="0.0967742;12pkt 12fpkt"];
2200--4945[label="0.0967742;12pkt 12fpkt"];
2200--5856[label="1;124pkt 124fpkt"];
2200--6469[label="1;124pkt 124fpkt"];
2413--3829[label="0.916667;66pkt 66fpkt"];
2413--4410[label="1;103pkt 103fpkt"];
2413--4834[label="0.0818182;9pkt 9fpkt"];
2413--4864[label="0.109091;12pkt 12fpkt"];
2413--4945[label="0.109091;12pkt 12fpkt"];
2413--5856[label="1;110pkt 110fpkt"];
2413--6469[label="1;110pkt 110fpkt"];
3829--4410[label="0.916667;66pkt 66fpkt"];
3829--4834[label="0.152778;11pkt 11fpkt"];
3829--4864[label="0.166667;12pkt 12fpkt"];
3829--4945[label="0.166667;12pkt 12fpkt"];
3829--5856[label="1;72pkt 72fpkt"];
3829--6469[label="1;72pkt 72fpkt"];
4410--4834[label="0.0873786;9pkt 9fpkt"];
4410--4864[label="0.116505;12pkt 12fpkt"];
4410--4945[label="0.116505;12pkt 12fpkt"];
4410--5856[label="1;103pkt 103fpkt"];
4410--6469[label="1;103pkt 103fpkt"];
5856--6469[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_ip="58.20.108.16" dst_port="80" src_ip="145.89.126.221"/>
    </slice>
    <from sec="1094706107" usec="0"/>
    <to sec="1094706775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1038[label="142.242.194.85;s;3780pkt 3780fpkt", shape=diamond, color=yellow];
1999[label="197.59.48.174;d;1pkt 1fpkt", shape=diamond, color=yellow];
2283[label="196.70.136.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
2495[label="197.49.114.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
2547[label="194.36.12.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
2728[label="196.100.109.20;d;45pkt 45fpkt", shape=diamond, color=yellow];
2734[label="198.186.47.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
2736[label="197.57.66.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
2739[label="196.101.199.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
2740[label="198.161.154.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
3486[label="142.242.194.85;s;3335pkt 3335fpkt", shape=hexagon, color=black];
3875[label="196.70.136.53;d;1pkt 1fpkt", shape=hexagon, color=black];
3993[label="194.36.12.235;d;1pkt 1fpkt", shape=hexagon, color=black];
4437[label="196.100.109.20;d;45pkt 45fpkt", shape=hexagon, color=black];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.242.194.85:0, *:0}[97.9079%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.9349%)&lt;BR/&gt; 1023: (0.2772%)&lt;BR/&gt; 9898: (0.26334%)&lt;BR/&gt; 5554: (0.23562%)&lt;BR/&gt; 65530: (0.22869%)&gt;];
}
1038--1999[label="1;1pkt 1fpkt"];
1038--2029[label="0.00253325;4pkt 4fpkt"];
1038--2054[label="0.0025974;1pkt 1fpkt"];
1038--2068[label="0.00869565;1pkt 1fpkt"];
1038--2092[label="0.00285714;1pkt 1fpkt"];
1038--2113[label="0.0078125;1pkt 1fpkt"];
1038--2283[label="1;1pkt 1fpkt"];
1038--2299[label="0.0025413;4pkt 4fpkt"];
1038--2443[label="0.0031746;3pkt 3fpkt"];
1038--2472[label="0.0019595;3pkt 3fpkt"];
1038--2495[label="1;1pkt 1fpkt"];
1038--2524[label="0.00253968;4pkt 4fpkt"];
1038--2538[label="0.000648508;1pkt 1fpkt"];
1038--2547[label="1;1pkt 1fpkt"];
1038--2655[label="0.00909091;1pkt 1fpkt"];
1038--2728[label="0.0222222;1pkt 1fpkt"];
1038--2734[label="1;1pkt 1fpkt"];
1038--2736[label="1;1pkt 1fpkt"];
1038--2739[label="1;1pkt 1fpkt"];
1038--2740[label="1;1pkt 1fpkt"];
1038--2858[label="0.0140845;1pkt 1fpkt"];
1038--2969[label="0.00478469;1pkt 1fpkt"];
1038--3486[label="1;3335pkt 3335fpkt"];
1038--3734[label="0.00444444;1pkt 1fpkt"];
1038--3792[label="0.00909091;1pkt 1fpkt"];
1038--3850[label="0.00253325;4pkt 4fpkt"];
1038--3875[label="1;1pkt 1fpkt"];
1038--3971[label="0.0025413;4pkt 4fpkt"];
1038--3973[label="0.0019595;3pkt 3fpkt"];
1038--3985[label="0.00253968;4pkt 4fpkt"];
1038--3988[label="0.000648508;1pkt 1fpkt"];
1038--3993[label="1;1pkt 1fpkt"];
1038--4437[label="0.0222222;1pkt 1fpkt"];
1038--4648[label="0.00253325;4pkt 4fpkt"];
1038--4663[label="0.00254291;4pkt 4fpkt"];
1038--4664[label="0.0019595;3pkt 3fpkt"];
1038--4666[label="0.00253968;4pkt 4fpkt"];
1038--4750[label="0.00132275;5pkt 5fpkt"];
1038--4863[label="0.00132275;5pkt 5fpkt"];
1038--4944[label="0.00132275;5pkt 5fpkt"];
1999--3486[label="1;1pkt 1fpkt"];
2283--3486[label="1;1pkt 1fpkt"];
2283--3875[label="1;1pkt 1fpkt"];
2495--3486[label="1;1pkt 1fpkt"];
2547--3486[label="1;1pkt 1fpkt"];
2547--3993[label="1;1pkt 1fpkt"];
2728--3486[label="0.0222222;1pkt 1fpkt"];
2728--4437[label="1;45pkt 45fpkt"];
2734--3486[label="1;1pkt 1fpkt"];
2736--3486[label="1;1pkt 1fpkt"];
2739--3486[label="1;1pkt 1fpkt"];
2740--3486[label="1;1pkt 1fpkt"];
3486--3734[label="0.00444444;1pkt 1fpkt"];
3486--3792[label="0.00909091;1pkt 1fpkt"];
3486--3850[label="0.00253325;4pkt 4fpkt"];
3486--3875[label="1;1pkt 1fpkt"];
3486--3971[label="0.0025413;4pkt 4fpkt"];
3486--3973[label="0.0019595;3pkt 3fpkt"];
3486--3985[label="0.00253968;4pkt 4fpkt"];
3486--3988[label="0.000648508;1pkt 1fpkt"];
3486--3993[label="1;1pkt 1fpkt"];
3486--4437[label="0.0222222;1pkt 1fpkt"];
3486--4648[label="0.00253325;4pkt 4fpkt"];
3486--4663[label="0.00254291;4pkt 4fpkt"];
3486--4664[label="0.0019595;3pkt 3fpkt"];
3486--4666[label="0.00253968;4pkt 4fpkt"];
3486--4750[label="0.00149925;5pkt 5fpkt"];
3486--4863[label="0.00149925;5pkt 5fpkt"];
3486--4944[label="0.00149925;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="142.242.194.85"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
2943[label="164.23.16.142;s;124pkt 124fpkt", shape=diamond, color=yellow];
4475[label="164.23.16.142;s;95pkt 95fpkt", shape=hexagon, color=black];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.16.142:*, 201.103.83.125:80}[34.6774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51884: (1.36986%)&lt;BR/&gt; 51910: (0.913242%)&lt;BR/&gt; 51909: (0.913242%)&lt;BR/&gt; 51861: (0.913242%)&gt;];
}
2943--4475[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="201.103.83.125" dst_port="80" src_ip="164.23.16.142"/>
    </slice>
    <from sec="1094706606" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
3048[label="192.144.216.251;s;13pkt 13fpkt", shape=diamond, color=yellow];
4525[label="192.144.216.251;s;13pkt 13fpkt", shape=hexagon, color=black];
5947[label="192.144.216.251;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.144.216.251:5050, *:*}[69.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (34.2105%)&lt;BR/&gt; 23: (7.89474%)&lt;BR/&gt; 20: (7.89474%)&lt;BR/&gt; 3508: (3.94737%)&lt;BR/&gt; 3045: (3.94737%)&gt;];
}
3048--4525[label="1;13pkt 13fpkt"];
3048--5947[label="1;12pkt 12fpkt"];
4525--5947[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="192.144.216.251" src_port="5050"/>
    </slice>
    <from sec="1094706005" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
2596[label="160.161.32.198;d;16pkt 16fpkt", shape=diamond, color=yellow];
3066[label="195.146.117.37;s;3pkt 3fpkt", shape=diamond, color=yellow];
4536[label="195.146.117.37;s;3pkt 3fpkt", shape=hexagon, color=black];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 160.161.32.198:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6001: (13.6364%)&lt;BR/&gt; 6881: (9.09091%)&lt;BR/&gt; 0: (9.09091%)&lt;BR/&gt; 49272: (6.81818%)&lt;BR/&gt; 15561: (6.81818%)&gt;];
}
2596--3066[label="0.666667;2pkt 2fpkt"];
2596--4536[label="0.666667;2pkt 2fpkt"];
3066--4536[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.161.32.198" src_port="6881"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
3067[label="222.183.150.213;d;2pkt 2fpkt", shape=diamond, color=yellow];
4537[label="222.183.150.213;d;2pkt 2fpkt", shape=hexagon, color=black];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.33.138:0, 222.183.150.213:0}[50%]&lt;BR/&gt;{136.84.108.144:0, 222.183.150.213:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3067--4537[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="222.183.150.213" src_ip="136.84.108.144"/>
      <filter dst_ip="222.183.150.213" src_ip="136.85.33.138"/>
    </slice>
    <from sec="1094706018" usec="0"/>
    <to sec="1094706826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747956,1.40425,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
2215[label="136.85.92.109;s;104pkt 104fpkt", shape=diamond, color=yellow];
2706[label="220.209.230.227;d;82pkt 82fpkt", shape=diamond, color=yellow];
4548[label="136.85.92.109;s;105pkt 105fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.92.109:*, 220.209.230.227:80}[89.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2818%)&lt;BR/&gt; 443: (1.37457%)&lt;BR/&gt; 0: (0.687285%)&lt;BR/&gt; 4448: (0.515464%)&lt;BR/&gt; 4446: (0.515464%)&gt;];
}
2215--2706[label="1;82pkt 82fpkt"];
2215--4548[label="1;104pkt 104fpkt"];
2215--4834[label="0.182692;19pkt 19fpkt"];
2215--4864[label="0.0192308;2pkt 2fpkt"];
2215--4945[label="0.0192308;2pkt 2fpkt"];
2706--4548[label="1;82pkt 82fpkt"];
2706--4834[label="0.231707;19pkt 19fpkt"];
4548--4746[label="0.00952381;1pkt 1fpkt"];
4548--4834[label="0.180952;19pkt 19fpkt"];
4548--4858[label="0.00952381;1pkt 1fpkt"];
4548--4864[label="0.0190476;2pkt 2fpkt"];
4548--4940[label="0.00952381;1pkt 1fpkt"];
4548--4945[label="0.0190476;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="220.209.230.227" dst_port="80" src_ip="136.85.92.109"/>
    </slice>
    <from sec="1094706231" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710055,1.33121,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
2935[label="205.160.20.43;d;20pkt 20fpkt", shape=diamond, color=yellow];
4560[label="205.160.20.43;d;20pkt 20fpkt", shape=hexagon, color=black];
5753[label="160.161.33.193;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.161.33.193:*, 205.160.20.43:21}[60%]&lt;BR/&gt;{160.161.33.193:*, 205.160.20.43:20}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (34.2105%)&lt;BR/&gt; 20: (15.7895%)&lt;BR/&gt; 2245: (2.63158%)&lt;BR/&gt; 2244: (2.63158%)&lt;BR/&gt; 2243: (2.63158%)&gt;];
}
2935--4560[label="1;20pkt 20fpkt"];
2935--5753[label="1;17pkt 17fpkt"];
4560--5753[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="205.160.20.43" dst_port="21" src_ip="160.161.33.193"/>
      <filter dst_ip="205.160.20.43" dst_port="20" src_ip="160.161.33.193"/>
    </slice>
    <from sec="1094706574" usec="0"/>
    <to sec="1094706734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.212.225.0"/>
    </slice>
    <from sec="1094706103" usec="0"/>
    <to sec="1094706875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.52.53.2"/>
    </slice>
    <from sec="1094706598" usec="0"/>
    <to sec="1094706609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.85.54.6"/>
    </slice>
    <from sec="1094706158" usec="0"/>
    <to sec="1094706878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.52.144.6"/>
    </slice>
    <from sec="1094706052" usec="0"/>
    <to sec="1094706590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.89.1.8"/>
    </slice>
    <from sec="1094706850" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
2942[label="164.23.16.142;d;63pkt 63fpkt", shape=diamond, color=yellow];
3124[label="58.71.69.11;s;19pkt 19fpkt", shape=diamond, color=yellow];
4474[label="164.23.16.142;d;44pkt 44fpkt", shape=hexagon, color=black];
5029[label="58.71.69.11;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5045[label="58.71.69.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5066[label="61.106.34.18;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5884[label="62.168.104.232;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6486[label="62.168.104.232;5pkt 5fpkt", shape=invtriangle, color=brown];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.71.69.11:80, 164.23.16.142:*}[30.1587%]&lt;BR/&gt;{61.106.34.18:80, 164.23.16.142:*}[20.6349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51953: (1.15607%)&lt;BR/&gt; 51952: (1.15607%)&lt;BR/&gt; 51951: (1.15607%)&lt;BR/&gt; 51943: (1.15607%)&gt;];
}
2942--3124[label="1;19pkt 19fpkt"];
2942--4474[label="1;44pkt 44fpkt"];
2942--5029[label="1;18pkt 18fpkt"];
2942--5045[label="1;5pkt 5fpkt"];
2942--5066[label="1;13pkt 13fpkt"];
2942--5884[label="1;6pkt 6fpkt"];
2942--6486[label="1;5pkt 5fpkt"];
3124--4474[label="0.736842;14pkt 14fpkt"];
3124--5029[label="1;18pkt 18fpkt"];
4474--5029[label="0.722222;13pkt 13fpkt"];
4474--5066[label="1;13pkt 13fpkt"];
4474--5884[label="1;6pkt 6fpkt"];
4474--6486[label="1;5pkt 5fpkt"];
5884--6486[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.16.142" src_ip="58.71.69.11" src_port="80"/>
      <filter dst_ip="164.23.16.142" src_ip="61.106.34.18" src_port="80"/>
    </slice>
    <from sec="1094706606" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.7.71.11"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.28.219.11"/>
    </slice>
    <from sec="1094706237" usec="0"/>
    <to sec="1094706466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.13.13"/>
    </slice>
    <from sec="1094706023" usec="0"/>
    <to sec="1094706891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.64.98.14"/>
    </slice>
    <from sec="1094706004" usec="0"/>
    <to sec="1094706798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.195.99.14"/>
    </slice>
    <from sec="1094706119" usec="0"/>
    <to sec="1094706638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663375,1.32592,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
2662[label="212.82.226.18;s;475pkt 475fpkt", shape=diamond, color=yellow];
5069[label="212.82.226.18;509pkt 509fpkt", shape=pentagon, color=darkviolet];
6008[label="212.82.226.18;509pkt 509fpkt", shape=invtriangle, color=brown];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.226.18:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2662--2969[label="0.00478469;1pkt 1fpkt"];
2662--3734[label="0.00444444;1pkt 1fpkt"];
2662--5069[label="0.997895;474pkt 474fpkt"];
2662--6008[label="0.997895;474pkt 474fpkt"];
5069--6008[label="1;509pkt 509fpkt"];
</description>
    <slice>
      <filter src_ip="212.82.226.18"/>
    </slice>
    <from sec="1094706010" usec="0"/>
    <to sec="1094706889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.82.250.19"/>
    </slice>
    <from sec="1094706012" usec="0"/>
    <to sec="1094706897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.192.49.20"/>
    </slice>
    <from sec="1094706589" usec="0"/>
    <to sec="1094706617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.176.148.20"/>
    </slice>
    <from sec="1094706731" usec="0"/>
    <to sec="1094706769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.165.79.22"/>
    </slice>
    <from sec="1094706005" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852889,1.32484,001,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
2466[label="197.44.99.27;s;983pkt 983fpkt", shape=diamond, color=yellow];
5102[label="197.44.99.27;982pkt 982fpkt", shape=pentagon, color=darkviolet];
6029[label="197.44.99.27;983pkt 983fpkt", shape=invtriangle, color=brown];
6574[label="197.44.99.27;982pkt 982fpkt", shape=invhouse, color=bisque];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.44.99.27:*, *:1023}[33.6724%]&lt;BR/&gt;{197.44.99.27:*, *:9898}[33.3672%]&lt;BR/&gt;{197.44.99.27:*, *:5554}[32.9603%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (16.8448%)&lt;BR/&gt; 9898: (16.6921%)&lt;BR/&gt; 5554: (16.4631%)&lt;BR/&gt; 4390: (4.37659%)&lt;BR/&gt; 4434: (4.27481%)&gt;];
}
2466--5102[label="1;982pkt 982fpkt"];
2466--6029[label="1;983pkt 983fpkt"];
2466--6574[label="1;982pkt 982fpkt"];
5102--6029[label="1;982pkt 982fpkt"];
5102--6574[label="1;982pkt 982fpkt"];
6029--6574[label="1;982pkt 982fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="197.44.99.27"/>
      <filter dst_port="9898" src_ip="197.44.99.27"/>
      <filter dst_port="5554" src_ip="197.44.99.27"/>
    </slice>
    <from sec="1094706453" usec="0"/>
    <to sec="1094706550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.176.229.27"/>
    </slice>
    <from sec="1094706129" usec="0"/>
    <to sec="1094706176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.29.167.29"/>
    </slice>
    <from sec="1094706460" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.117.70.30"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.163.87.33"/>
    </slice>
    <from sec="1094706094" usec="0"/>
    <to sec="1094706889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.149.8.36"/>
    </slice>
    <from sec="1094706149" usec="0"/>
    <to sec="1094706617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.74.26.36"/>
    </slice>
    <from sec="1094706425" usec="0"/>
    <to sec="1094706895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.82.226.37"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.144.68.39"/>
    </slice>
    <from sec="1094706534" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.3.1.40"/>
    </slice>
    <from sec="1094706090" usec="0"/>
    <to sec="1094706236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.84.24.45"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
5181[label="198.49.157.45;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.49.157.45:*, *:2745}[24.6753%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (12.3377%)&lt;BR/&gt; 3127: (9.74026%)&lt;BR/&gt; 1025: (9.74026%)&lt;BR/&gt; 6129: (9.09091%)&lt;BR/&gt; 80: (9.09091%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="198.49.157.45"/>
    </slice>
    <from sec="1094706012" usec="0"/>
    <to sec="1094706877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.82.225.45"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.9.52"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.12.52"/>
    </slice>
    <from sec="1094706155" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.146.202.57"/>
    </slice>
    <from sec="1094706832" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.150.181.58"/>
    </slice>
    <from sec="1094706840" usec="0"/>
    <to sec="1094706860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.25.66.60"/>
    </slice>
    <from sec="1094706607" usec="0"/>
    <to sec="1094706621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.80.63"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.58.64"/>
    </slice>
    <from sec="1094706040" usec="0"/>
    <to sec="1094706850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.178.64"/>
    </slice>
    <from sec="1094706018" usec="0"/>
    <to sec="1094706877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.233.156.66"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.5.68"/>
    </slice>
    <from sec="1094706836" usec="0"/>
    <to sec="1094706843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.85.90.68"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
5262[label="213.193.215.70;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.193.215.70:*, *:1025}[22.0339%]&lt;BR/&gt;{213.193.215.70:*, *:2745}[22.0339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (11.0169%)&lt;BR/&gt; 1025: (11.0169%)&lt;BR/&gt; 6129: (9.32203%)&lt;BR/&gt; 3127: (9.32203%)&lt;BR/&gt; 80: (9.32203%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="213.193.215.70"/>
      <filter dst_port="1025" src_ip="213.193.215.70"/>
    </slice>
    <from sec="1094706242" usec="0"/>
    <to sec="1094706891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663375,1.32592,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
1441[label="136.85.68.60;d;62pkt 62fpkt", shape=diamond, color=yellow];
5267[label="129.151.206.71;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6128[label="129.151.206.71;10pkt 10fpkt", shape=invtriangle, color=brown];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.236.173.217:80, 136.85.68.60:*}[54.8387%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.0988%)&lt;BR/&gt; 443: (17.9012%)&lt;BR/&gt; 3423: (1.85185%)&lt;BR/&gt; 3422: (1.85185%)&lt;BR/&gt; 3421: (1.85185%)&gt;];
}
1441--1605[label="0.0322581;2pkt 2fpkt"];
1441--1616[label="0.0645161;4pkt 4fpkt"];
1441--1645[label="0.0645161;4pkt 4fpkt"];
1441--3049[label="0.0392157;2pkt 2fpkt"];
1441--3274[label="0.016129;1pkt 1fpkt"];
1441--3391[label="0.0645161;4pkt 4fpkt"];
1441--3393[label="0.016129;1pkt 1fpkt"];
1441--3570[label="0.0322581;2pkt 2fpkt"];
1441--3589[label="0.0208333;1pkt 1fpkt"];
1441--4125[label="0.0645161;4pkt 4fpkt"];
1441--4491[label="0.0483871;3pkt 3fpkt"];
1441--4744[label="0.016129;1pkt 1fpkt"];
1441--4857[label="0.016129;1pkt 1fpkt"];
1441--4862[label="0.274194;17pkt 17fpkt"];
1441--4943[label="0.274194;17pkt 17fpkt"];
1441--5237[label="0.0322581;2pkt 2fpkt"];
1441--5267[label="1;9pkt 9fpkt"];
1441--6128[label="1;10pkt 10fpkt"];
5267--6128[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.68.60" src_ip="192.236.173.217" src_port="80"/>
    </slice>
    <from sec="1094706006" usec="0"/>
    <to sec="1094706732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.73.90.75"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.1.154.82"/>
    </slice>
    <from sec="1094706008" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.199.186.82"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.161.177.85"/>
    </slice>
    <from sec="1094706735" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.14.88"/>
    </slice>
    <from sec="1094706003" usec="0"/>
    <to sec="1094706890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.169.47.88"/>
    </slice>
    <from sec="1094706015" usec="0"/>
    <to sec="1094706860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.40.164.88"/>
    </slice>
    <from sec="1094706005" usec="0"/>
    <to sec="1094706886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663375,1.32592,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
2847[label="136.85.181.46;d;82pkt 82fpkt", shape=diamond, color=yellow];
5080[label="193.176.27.21;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6015[label="193.176.27.21;13pkt 13fpkt", shape=invtriangle, color=brown];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.85.181.46:*}[95.122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1308%)&lt;BR/&gt; 3833: (1.40187%)&lt;BR/&gt; 3831: (1.40187%)&lt;BR/&gt; 3830: (1.40187%)&lt;BR/&gt; 3828: (1.40187%)&gt;];
}
2847--3021[label="0.0363636;2pkt 2fpkt"];
2847--3049[label="0.0196078;1pkt 1fpkt"];
2847--3171[label="0.0121951;1pkt 1fpkt"];
2847--3274[label="0.097561;8pkt 8fpkt"];
2847--3513[label="0.109756;9pkt 9fpkt"];
2847--3570[label="0.0277778;2pkt 2fpkt"];
2847--3611[label="0.0243902;2pkt 2fpkt"];
2847--3761[label="0.0121951;1pkt 1fpkt"];
2847--4092[label="0.0365854;3pkt 3fpkt"];
2847--4154[label="0.0121951;1pkt 1fpkt"];
2847--4395[label="0.0149254;1pkt 1fpkt"];
2847--4491[label="0.0853659;7pkt 7fpkt"];
2847--4744[label="0.0243902;2pkt 2fpkt"];
2847--4830[label="0.0487805;4pkt 4fpkt"];
2847--4845[label="0.109756;9pkt 9fpkt"];
2847--4857[label="0.0243902;2pkt 2fpkt"];
2847--4862[label="0.0365854;3pkt 3fpkt"];
2847--4924[label="0.0487805;4pkt 4fpkt"];
2847--4938[label="0.109756;9pkt 9fpkt"];
2847--4943[label="0.0365854;3pkt 3fpkt"];
2847--4956[label="0.0487805;4pkt 4fpkt"];
2847--4967[label="0.109756;9pkt 9fpkt"];
2847--5080[label="1;12pkt 12fpkt"];
2847--5237[label="0.0263158;2pkt 2fpkt"];
2847--5294[label="0.028169;2pkt 2fpkt"];
2847--5345[label="0.109756;9pkt 9fpkt"];
2847--5443[label="0.0121951;1pkt 1fpkt"];
2847--6015[label="1;13pkt 13fpkt"];
2847--6143[label="0.0285714;2pkt 2fpkt"];
2847--6168[label="0.109756;9pkt 9fpkt"];
5080--6015[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.181.46" src_port="80"/>
    </slice>
    <from sec="1094706004" usec="0"/>
    <to sec="1094706829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.137.20.91"/>
    </slice>
    <from sec="1094706050" usec="0"/>
    <to sec="1094706889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.14.92"/>
    </slice>
    <from sec="1094706024" usec="0"/>
    <to sec="1094706885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.118.48.94"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.196.116.96"/>
    </slice>
    <from sec="1094706048" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.124.1.100"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.52.204.106"/>
    </slice>
    <from sec="1094706835" usec="0"/>
    <to sec="1094706885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.24.240.107"/>
    </slice>
    <from sec="1094706097" usec="0"/>
    <to sec="1094706894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.28.77.109"/>
    </slice>
    <from sec="1094706018" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.20.228.109"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.2.110"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.85.141.112"/>
    </slice>
    <from sec="1094706529" usec="0"/>
    <to sec="1094706552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.84.113"/>
    </slice>
    <from sec="1094706006" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.25.153.114"/>
    </slice>
    <from sec="1094706026" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.197.203.116"/>
    </slice>
    <from sec="1094706027" usec="0"/>
    <to sec="1094706855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.90.136.117"/>
    </slice>
    <from sec="1094706112" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.211.212.118"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.241.24.119"/>
    </slice>
    <from sec="1094706234" usec="0"/>
    <to sec="1094706832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.24.217.121"/>
    </slice>
    <from sec="1094706378" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.92.96.126"/>
    </slice>
    <from sec="1094706231" usec="0"/>
    <to sec="1094706893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580473,1.3736,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
2843[label="32.135.2.127;s;16pkt 16fpkt", shape=diamond, color=yellow];
5491[label="32.135.2.127;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.135.2.127:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2843--5491[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="32.135.2.127"/>
    </slice>
    <from sec="1094706003" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.22.192.128"/>
    </slice>
    <from sec="1094706633" usec="0"/>
    <to sec="1094706673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.192.93.129"/>
    </slice>
    <from sec="1094706319" usec="0"/>
    <to sec="1094706353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.96.106.133"/>
    </slice>
    <from sec="1094706018" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.134.105.136"/>
    </slice>
    <from sec="1094706113" usec="0"/>
    <to sec="1094706140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.154.198.137"/>
    </slice>
    <from sec="1094706046" usec="0"/>
    <to sec="1094706888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.240.23.139"/>
    </slice>
    <from sec="1094706043" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.5.140"/>
    </slice>
    <from sec="1094706697" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.224.151.142"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.84.108.144"/>
    </slice>
    <from sec="1094706018" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.6.219.149"/>
    </slice>
    <from sec="1094706760" usec="0"/>
    <to sec="1094706771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.82.250.149"/>
    </slice>
    <from sec="1094706068" usec="0"/>
    <to sec="1094706825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.229.96.150"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.148.190.150"/>
    </slice>
    <from sec="1094706355" usec="0"/>
    <to sec="1094706634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.142.54.154"/>
    </slice>
    <from sec="1094706008" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580473,1.3736,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
1681[label="136.85.56.27;d;128pkt 128fpkt", shape=diamond, color=yellow];
5600[label="58.55.124.154;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.85.56.27:*}[45.3125%]&lt;BR/&gt;{*:554, 136.85.56.27:*}[25%]&lt;BR/&gt;{*:1755, 136.85.56.27:*}[20.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.5882%)&lt;BR/&gt; 554: (13.7255%)&lt;BR/&gt; 1755: (9.80392%)&lt;BR/&gt; 5004: (5.88235%)&lt;BR/&gt; 1834: (0.980392%)&gt;];
}
1681--2612[label="0.02;1pkt 1fpkt"];
1681--3274[label="0.0234375;3pkt 3fpkt"];
1681--3611[label="0.0208333;2pkt 2fpkt"];
1681--4085[label="0.02;1pkt 1fpkt"];
1681--4395[label="0.0298507;2pkt 2fpkt"];
1681--4630[label="0.0434783;2pkt 2fpkt"];
1681--4744[label="0.0078125;1pkt 1fpkt"];
1681--4830[label="0.0078125;1pkt 1fpkt"];
1681--4857[label="0.0078125;1pkt 1fpkt"];
1681--4924[label="0.0078125;1pkt 1fpkt"];
1681--4956[label="0.0078125;1pkt 1fpkt"];
1681--5294[label="0.028169;2pkt 2fpkt"];
1681--5600[label="1;25pkt 25fpkt"];
1681--6143[label="0.0285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.56.27" src_port="80"/>
      <filter dst_ip="136.85.56.27" src_port="554"/>
      <filter dst_ip="136.85.56.27" src_port="1755"/>
    </slice>
    <from sec="1094706044" usec="0"/>
    <to sec="1094706446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.176.229.154"/>
    </slice>
    <from sec="1094706049" usec="0"/>
    <to sec="1094706826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.211.9.156"/>
    </slice>
    <from sec="1094706407" usec="0"/>
    <to sec="1094706638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.79.57.160"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.173.45.163"/>
    </slice>
    <from sec="1094706088" usec="0"/>
    <to sec="1094706885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.212.1.165"/>
    </slice>
    <from sec="1094706006" usec="0"/>
    <to sec="1094706772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.100.165"/>
    </slice>
    <from sec="1094706079" usec="0"/>
    <to sec="1094706853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
958[label="136.85.179.70;d;923pkt 923fpkt", shape=diamond, color=yellow];
1213[label="205.245.132.64;s;38pkt 38fpkt", shape=diamond, color=yellow];
2229[label="34.44.232.167;s;150pkt 150fpkt", shape=diamond, color=yellow];
2465[label="202.233.184.193;s;67pkt 67fpkt", shape=diamond, color=yellow];
2652[label="62.214.50.251;s;87pkt 87fpkt", shape=diamond, color=yellow];
2875[label="213.27.229.174;d;68pkt 68fpkt", shape=diamond, color=yellow];
3849[label="34.44.232.167;s;150pkt 150fpkt", shape=hexagon, color=black];
3966[label="202.233.184.193;s;67pkt 67fpkt", shape=hexagon, color=black];
4010[label="136.85.179.70;d;879pkt 879fpkt", shape=hexagon, color=black];
4368[label="62.214.50.251;s;68pkt 68fpkt", shape=hexagon, color=black];
4541[label="213.27.229.174;d;68pkt 68fpkt", shape=hexagon, color=black];
5213[label="218.100.128.56;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5653[label="34.44.232.167;300pkt 300fpkt", shape=pentagon, color=darkviolet];
5945[label="62.214.50.251;96pkt 96fpkt", shape=pentagon, color=darkviolet];
6357[label="34.44.232.167;300pkt 300fpkt", shape=invtriangle, color=brown];
6525[label="62.214.50.251;95pkt 95fpkt", shape=invtriangle, color=brown];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.85.179.70:*}[42.9767%]&lt;BR/&gt;{34.44.232.167:*, 136.85.179.70:*}[25.3023%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.4096%)&lt;BR/&gt; 53: (4.19144%)&lt;BR/&gt; 1026: (3.59691%)&lt;BR/&gt; 9876: (0.980975%)&lt;BR/&gt; 3128: (0.713436%)&gt;];
}
958--1005[label="0.00486618;2pkt 2fpkt"];
958--1068[label="0.00108342;1pkt 1fpkt"];
958--1157[label="0.0705882;6pkt 6fpkt"];
958--1168[label="0.00282486;1pkt 1fpkt"];
958--1184[label="0.0144928;2pkt 2fpkt"];
958--1213[label="1;38pkt 38fpkt"];
958--1307[label="0.0078125;1pkt 1fpkt"];
958--1395[label="0.0486322;16pkt 16fpkt"];
958--1413[label="0.0190476;2pkt 2fpkt"];
958--1414[label="0.00763359;1pkt 1fpkt"];
958--1429[label="0.00917431;2pkt 2fpkt"];
958--1456[label="0.0138889;1pkt 1fpkt"];
958--1463[label="0.0133333;2pkt 2fpkt"];
958--1549[label="0.00503778;2pkt 2fpkt"];
958--1616[label="0.0472441;6pkt 6fpkt"];
958--1646[label="0.020202;2pkt 2fpkt"];
958--1827[label="0.0119048;1pkt 1fpkt"];
958--1846[label="0.0508475;3pkt 3fpkt"];
958--2136[label="0.0280374;6pkt 6fpkt"];
958--2175[label="0.0238095;1pkt 1fpkt"];
958--2225[label="0.037037;2pkt 2fpkt"];
958--2229[label="1;150pkt 150fpkt"];
958--2311[label="0.0105263;1pkt 1fpkt"];
958--2384[label="0.0172414;1pkt 1fpkt"];
958--2465[label="1;67pkt 67fpkt"];
958--2612[label="0.14;7pkt 7fpkt"];
958--2652[label="0.0574713;5pkt 5fpkt"];
958--3021[label="0.109091;6pkt 6fpkt"];
958--3024[label="0.0140845;1pkt 1fpkt"];
958--3049[label="0.0392157;2pkt 2fpkt"];
958--3171[label="0.00108342;1pkt 1fpkt"];
958--3274[label="0.0503145;16pkt 16fpkt"];
958--3278[label="0.0190476;2pkt 2fpkt"];
958--3391[label="0.075;6pkt 6fpkt"];
958--3393[label="0.0714286;6pkt 6fpkt"];
958--3395[label="0.00961538;1pkt 1fpkt"];
958--3513[label="0.00503778;2pkt 2fpkt"];
958--3571[label="0.0128205;1pkt 1fpkt"];
958--3584[label="0.06;3pkt 3fpkt"];
958--3603[label="0.00515464;1pkt 1fpkt"];
958--3611[label="0.0208333;2pkt 2fpkt"];
958--3637[label="0.00757576;1pkt 1fpkt"];
958--3744[label="0.0108696;1pkt 1fpkt"];
958--3814[label="0.0138889;1pkt 1fpkt"];
958--3849[label="1;150pkt 150fpkt"];
958--3920[label="0.0545455;6pkt 6fpkt"];
958--3966[label="1;67pkt 67fpkt"];
958--4010[label="1;879pkt 879fpkt"];
958--4085[label="0.14;7pkt 7fpkt"];
958--4131[label="0.0181818;1pkt 1fpkt"];
958--4286[label="0.0111111;1pkt 1fpkt"];
958--4368[label="0.0588235;4pkt 4fpkt"];
958--4422[label="0.037037;2pkt 2fpkt"];
958--4491[label="0.00486618;2pkt 2fpkt"];
958--4743[label="0.0303359;28pkt 28fpkt"];
958--4744[label="0.0812568;75pkt 75fpkt"];
958--4829[label="0.0260022;24pkt 24fpkt"];
958--4830[label="0.0314193;29pkt 29fpkt"];
958--4834[label="0.00433369;4pkt 4fpkt"];
958--4844[label="0.0292524;27pkt 27fpkt"];
958--4845[label="0.0487541;45pkt 45fpkt"];
958--4856[label="0.0303359;28pkt 28fpkt"];
958--4857[label="0.0812568;75pkt 75fpkt"];
958--4861[label="0.0238353;22pkt 22fpkt"];
958--4862[label="0.0314193;29pkt 29fpkt"];
958--4923[label="0.0260022;24pkt 24fpkt"];
958--4924[label="0.0314193;29pkt 29fpkt"];
958--4937[label="0.0292524;27pkt 27fpkt"];
958--4938[label="0.0487541;45pkt 45fpkt"];
958--4942[label="0.0238353;22pkt 22fpkt"];
958--4943[label="0.0314193;29pkt 29fpkt"];
958--4955[label="0.0260022;24pkt 24fpkt"];
958--4956[label="0.0314193;29pkt 29fpkt"];
958--4966[label="0.0292524;27pkt 27fpkt"];
958--4967[label="0.0487541;45pkt 45fpkt"];
958--5015[label="0.0140845;1pkt 1fpkt"];
958--5213[label="1;8pkt 8fpkt"];
958--5345[label="0.00444444;2pkt 2fpkt"];
958--5378[label="0.010101;1pkt 1fpkt"];
958--5443[label="0.00108342;1pkt 1fpkt"];
958--5510[label="0.0416667;1pkt 1fpkt"];
958--5653[label="0.906667;272pkt 272fpkt"];
958--5733[label="0.0377358;2pkt 2fpkt"];
958--5763[label="0.0208333;1pkt 1fpkt"];
958--5945[label="0.0520833;5pkt 5fpkt"];
958--5977[label="0.0142857;1pkt 1fpkt"];
958--6168[label="0.00444444;2pkt 2fpkt"];
958--6270[label="0.0434783;1pkt 1fpkt"];
958--6357[label="0.906667;272pkt 272fpkt"];
958--6401[label="0.0377358;2pkt 2fpkt"];
958--6420[label="0.0204082;1pkt 1fpkt"];
958--6525[label="0.0526316;5pkt 5fpkt"];
958--6789[label="0.0208333;1pkt 1fpkt"];
1213--4010[label="1;38pkt 38fpkt"];
1213--4744[label="0.868421;33pkt 33fpkt"];
1213--4857[label="0.868421;33pkt 33fpkt"];
2229--3849[label="1;150pkt 150fpkt"];
2229--4010[label="1;150pkt 150fpkt"];
2229--4834[label="0.0266667;4pkt 4fpkt"];
2229--5653[label="1;150pkt 150fpkt"];
2229--6357[label="1;150pkt 150fpkt"];
2465--3966[label="1;67pkt 67fpkt"];
2465--4010[label="1;67pkt 67fpkt"];
2465--4845[label="0.0597015;4pkt 4fpkt"];
2465--4938[label="0.0597015;4pkt 4fpkt"];
2465--4967[label="0.0597015;4pkt 4fpkt"];
2652--2846[label="0.0952381;4pkt 4fpkt"];
2652--2875[label="0.514706;35pkt 35fpkt"];
2652--3060[label="0.015625;1pkt 1fpkt"];
2652--3736[label="0.045977;4pkt 4fpkt"];
2652--4010[label="0.045977;4pkt 4fpkt"];
2652--4368[label="1;68pkt 68fpkt"];
2652--4522[label="0.0952381;4pkt 4fpkt"];
2652--4541[label="0.514706;35pkt 35fpkt"];
2652--4642[label="0.0114943;1pkt 1fpkt"];
2652--4744[label="0.0344828;3pkt 3fpkt"];
2652--4830[label="0.045977;4pkt 4fpkt"];
2652--4845[label="0.0229885;2pkt 2fpkt"];
2652--4857[label="0.0344828;3pkt 3fpkt"];
2652--4862[label="0.0229885;2pkt 2fpkt"];
2652--4924[label="0.045977;4pkt 4fpkt"];
2652--4938[label="0.0229885;2pkt 2fpkt"];
2652--4943[label="0.0229885;2pkt 2fpkt"];
2652--4956[label="0.045977;4pkt 4fpkt"];
2652--4967[label="0.0229885;2pkt 2fpkt"];
2652--5945[label="1;87pkt 87fpkt"];
2652--6525[label="0.988506;86pkt 86fpkt"];
2875--4125[label="0.0294118;2pkt 2fpkt"];
2875--4368[label="0.308824;21pkt 21fpkt"];
2875--4541[label="1;68pkt 68fpkt"];
2875--4783[label="0.0147059;1pkt 1fpkt"];
2875--4830[label="0.0147059;1pkt 1fpkt"];
2875--4845[label="0.0147059;1pkt 1fpkt"];
2875--4862[label="0.0147059;1pkt 1fpkt"];
2875--4924[label="0.0147059;1pkt 1fpkt"];
2875--4938[label="0.0147059;1pkt 1fpkt"];
2875--4943[label="0.0147059;1pkt 1fpkt"];
2875--4956[label="0.0147059;1pkt 1fpkt"];
2875--4967[label="0.0147059;1pkt 1fpkt"];
2875--5453[label="0.0147059;1pkt 1fpkt"];
2875--5945[label="0.514706;35pkt 35fpkt"];
2875--6241[label="0.0147059;1pkt 1fpkt"];
2875--6525[label="0.514706;35pkt 35fpkt"];
2875--6689[label="0.0147059;1pkt 1fpkt"];
3849--4010[label="1;150pkt 150fpkt"];
3849--4834[label="0.0266667;4pkt 4fpkt"];
3849--5653[label="1;150pkt 150fpkt"];
3849--6357[label="1;150pkt 150fpkt"];
3966--4010[label="1;67pkt 67fpkt"];
3966--4845[label="0.0597015;4pkt 4fpkt"];
3966--4938[label="0.0597015;4pkt 4fpkt"];
3966--4967[label="0.0597015;4pkt 4fpkt"];
4010--4085[label="0.14;7pkt 7fpkt"];
4010--4131[label="0.0181818;1pkt 1fpkt"];
4010--4286[label="0.0111111;1pkt 1fpkt"];
4010--4368[label="0.0588235;4pkt 4fpkt"];
4010--4422[label="0.037037;2pkt 2fpkt"];
4010--4491[label="0.00486618;2pkt 2fpkt"];
4010--4743[label="0.0318544;28pkt 28fpkt"];
4010--4744[label="0.0853242;75pkt 75fpkt"];
4010--4829[label="0.0273038;24pkt 24fpkt"];
4010--4830[label="0.032992;29pkt 29fpkt"];
4010--4834[label="0.00455063;4pkt 4fpkt"];
4010--4844[label="0.0307167;27pkt 27fpkt"];
4010--4845[label="0.0511945;45pkt 45fpkt"];
4010--4856[label="0.0318544;28pkt 28fpkt"];
4010--4857[label="0.0853242;75pkt 75fpkt"];
4010--4861[label="0.0250284;22pkt 22fpkt"];
4010--4862[label="0.032992;29pkt 29fpkt"];
4010--4923[label="0.0273038;24pkt 24fpkt"];
4010--4924[label="0.032992;29pkt 29fpkt"];
4010--4937[label="0.0307167;27pkt 27fpkt"];
4010--4938[label="0.0511945;45pkt 45fpkt"];
4010--4942[label="0.0250284;22pkt 22fpkt"];
4010--4943[label="0.032992;29pkt 29fpkt"];
4010--4955[label="0.0273038;24pkt 24fpkt"];
4010--4956[label="0.032992;29pkt 29fpkt"];
4010--4966[label="0.0307167;27pkt 27fpkt"];
4010--4967[label="0.0511945;45pkt 45fpkt"];
4010--5015[label="0.0140845;1pkt 1fpkt"];
4010--5213[label="1;8pkt 8fpkt"];
4010--5345[label="0.00444444;2pkt 2fpkt"];
4010--5378[label="0.010101;1pkt 1fpkt"];
4010--5443[label="0.00113766;1pkt 1fpkt"];
4010--5510[label="0.0416667;1pkt 1fpkt"];
4010--5653[label="0.906667;272pkt 272fpkt"];
4010--5733[label="0.0377358;2pkt 2fpkt"];
4010--5763[label="0.0208333;1pkt 1fpkt"];
4010--5945[label="0.0416667;4pkt 4fpkt"];
4010--5977[label="0.0142857;1pkt 1fpkt"];
4010--6168[label="0.00444444;2pkt 2fpkt"];
4010--6270[label="0.0434783;1pkt 1fpkt"];
4010--6357[label="0.906667;272pkt 272fpkt"];
4010--6401[label="0.0377358;2pkt 2fpkt"];
4010--6420[label="0.0204082;1pkt 1fpkt"];
4010--6525[label="0.0421053;4pkt 4fpkt"];
4010--6789[label="0.0208333;1pkt 1fpkt"];
4368--4522[label="0.0714286;3pkt 3fpkt"];
4368--4541[label="0.308824;21pkt 21fpkt"];
4368--4642[label="0.0147059;1pkt 1fpkt"];
4368--4744[label="0.0441176;3pkt 3fpkt"];
4368--4830[label="0.0588235;4pkt 4fpkt"];
4368--4845[label="0.0294118;2pkt 2fpkt"];
4368--4857[label="0.0441176;3pkt 3fpkt"];
4368--4862[label="0.0294118;2pkt 2fpkt"];
4368--4924[label="0.0588235;4pkt 4fpkt"];
4368--4938[label="0.0294118;2pkt 2fpkt"];
4368--4943[label="0.0294118;2pkt 2fpkt"];
4368--4956[label="0.0588235;4pkt 4fpkt"];
4368--4967[label="0.0294118;2pkt 2fpkt"];
4368--5945[label="1;68pkt 68fpkt"];
4368--6525[label="0.985294;67pkt 67fpkt"];
4541--4783[label="0.0147059;1pkt 1fpkt"];
4541--4830[label="0.0147059;1pkt 1fpkt"];
4541--4845[label="0.0147059;1pkt 1fpkt"];
4541--4862[label="0.0147059;1pkt 1fpkt"];
4541--4924[label="0.0147059;1pkt 1fpkt"];
4541--4938[label="0.0147059;1pkt 1fpkt"];
4541--4943[label="0.0147059;1pkt 1fpkt"];
4541--4956[label="0.0147059;1pkt 1fpkt"];
4541--4967[label="0.0147059;1pkt 1fpkt"];
4541--5453[label="0.0147059;1pkt 1fpkt"];
4541--5945[label="0.514706;35pkt 35fpkt"];
4541--6241[label="0.0147059;1pkt 1fpkt"];
4541--6525[label="0.514706;35pkt 35fpkt"];
4541--6689[label="0.0147059;1pkt 1fpkt"];
5653--6357[label="1;300pkt 300fpkt"];
5945--6525[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.179.70" src_ip="34.44.232.167"/>
      <filter dst_ip="136.85.179.70" src_port="80"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.84.46.171"/>
    </slice>
    <from sec="1094706290" usec="0"/>
    <to sec="1094706311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.72.171"/>
    </slice>
    <from sec="1094706022" usec="0"/>
    <to sec="1094706897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.94.33.172"/>
    </slice>
    <from sec="1094706858" usec="0"/>
    <to sec="1094706866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.44.4.174"/>
    </slice>
    <from sec="1094706341" usec="0"/>
    <to sec="1094706398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.192.93.176"/>
    </slice>
    <from sec="1094706510" usec="0"/>
    <to sec="1094706832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663375,1.32592,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
2032[label="145.16.96.176;s;10pkt 10fpkt", shape=diamond, color=yellow];
5687[label="145.16.96.176;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6377[label="145.16.96.176;9pkt 9fpkt", shape=invtriangle, color=brown];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.16.96.176:9910, *:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9910: (26.7857%)&lt;BR/&gt; 26295: (5.35714%)&lt;BR/&gt; 9797: (5.35714%)&lt;BR/&gt; 8881: (5.35714%)&lt;BR/&gt; 4776: (5.35714%)&gt;];
}
2032--5687[label="1;9pkt 9fpkt"];
2032--6377[label="1;9pkt 9fpkt"];
5687--6377[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="145.16.96.176" src_port="9910"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.252.105.177"/>
    </slice>
    <from sec="1094706650" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.96.178"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
5703[label="212.41.37.180;74pkt 74fpkt", shape=pentagon, color=darkviolet];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.41.37.180:*, *:2745}[35.1351%]&lt;BR/&gt;{212.41.37.180:*, *:1025}[28.3784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (17.5676%)&lt;BR/&gt; 1025: (14.1892%)&lt;BR/&gt; 6129: (9.45946%)&lt;BR/&gt; 80: (8.78378%)&lt;BR/&gt; 4950: (0.675676%)&gt;];
}
</description>
    <slice>
      <filter dst_port="2745" src_ip="212.41.37.180"/>
      <filter dst_port="1025" src_ip="212.41.37.180"/>
    </slice>
    <from sec="1094706018" usec="0"/>
    <to sec="1094706875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.121.41.183"/>
    </slice>
    <from sec="1094706164" usec="0"/>
    <to sec="1094706887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.47.74.183"/>
    </slice>
    <from sec="1094706577" usec="0"/>
    <to sec="1094706608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.176.228.183"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746455,1.32431,001,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
312[label="88.48.33.187s;232pkt 232fpkt", shape=rectangle, color=red];
5732[label="88.48.33.187;232pkt 232fpkt", shape=pentagon, color=darkviolet];
6400[label="88.48.33.187;231pkt 231fpkt", shape=invtriangle, color=brown];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.48.33.187:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 1743: (0.215827%)&lt;BR/&gt; 1742: (0.215827%)&lt;BR/&gt; 1741: (0.215827%)&lt;BR/&gt; 1740: (0.215827%)&gt;];
}
312--2846[label="0.0238095;1pkt 1fpkt"];
312--4522[label="0.0238095;1pkt 1fpkt"];
312--5732[label="1;232pkt 232fpkt"];
312--6400[label="1;231pkt 231fpkt"];
5732--6400[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="88.48.33.187"/>
    </slice>
    <from sec="1094706675" usec="0"/>
    <to sec="1094706677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.37.18.190"/>
    </slice>
    <from sec="1094706891" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
2260[label="136.85.141.117;d;76pkt 76fpkt", shape=diamond, color=yellow];
2460[label="194.206.174.157;s;16pkt 16fpkt", shape=diamond, color=yellow];
3962[label="194.206.174.157;s;13pkt 13fpkt", shape=hexagon, color=black];
4221[label="136.85.141.117;d;52pkt 52fpkt", shape=hexagon, color=black];
5331[label="88.29.169.84;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6164[label="88.29.169.84;9pkt 9fpkt", shape=invtriangle, color=brown];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.85.141.117:*}[98.7013%]&lt;BR/&gt;{194.206.174.157:80, *:*}[20.7792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1390: (1.14286%)&lt;BR/&gt; 1388: (1.14286%)&lt;BR/&gt; 1387: (1.14286%)&lt;BR/&gt; 1386: (1.14286%)&gt;];
}
2260--2460[label="0.9375;15pkt 15fpkt"];
2260--3962[label="1;13pkt 13fpkt"];
2260--4221[label="1;52pkt 52fpkt"];
2260--4845[label="0.223684;17pkt 17fpkt"];
2260--4938[label="0.223684;17pkt 17fpkt"];
2260--4967[label="0.223684;17pkt 17fpkt"];
2260--5331[label="1;9pkt 9fpkt"];
2260--6164[label="1;9pkt 9fpkt"];
2460--3962[label="1;13pkt 13fpkt"];
2460--4221[label="0.5625;9pkt 9fpkt"];
2460--4845[label="0.25;4pkt 4fpkt"];
2460--4938[label="0.25;4pkt 4fpkt"];
2460--4967[label="0.25;4pkt 4fpkt"];
3962--4221[label="0.692308;9pkt 9fpkt"];
3962--4845[label="0.307692;4pkt 4fpkt"];
3962--4938[label="0.307692;4pkt 4fpkt"];
3962--4967[label="0.307692;4pkt 4fpkt"];
4221--4845[label="0.326923;17pkt 17fpkt"];
4221--4938[label="0.326923;17pkt 17fpkt"];
4221--4967[label="0.326923;17pkt 17fpkt"];
4221--5331[label="0.555556;5pkt 5fpkt"];
4221--6164[label="0.555556;5pkt 5fpkt"];
5331--6164[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="194.206.174.157" src_port="80"/>
      <filter dst_ip="136.85.141.117" src_port="80"/>
    </slice>
    <from sec="1094706425" usec="0"/>
    <to sec="1094706820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.59.192"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.62.64.192"/>
    </slice>
    <from sec="1094706090" usec="0"/>
    <to sec="1094706891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.238.150.200"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852889,1.32484,001,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
2490[label="194.40.205.200;s;4053pkt 4053fpkt", shape=diamond, color=yellow];
5779[label="194.40.205.200;4053pkt 4053fpkt", shape=pentagon, color=darkviolet];
6430[label="194.40.205.200;4052pkt 4052fpkt", shape=invtriangle, color=brown];
6794[label="194.40.205.200;4052pkt 4052fpkt", shape=invhouse, color=bisque];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.40.205.200:*, *:1023}[37.281%]&lt;BR/&gt;{194.40.205.200:*, *:5554}[33.2593%]&lt;BR/&gt;{194.40.205.200:*, *:9898}[29.4597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (18.6428%)&lt;BR/&gt; 5554: (16.6255%)&lt;BR/&gt; 9898: (14.7316%)&lt;BR/&gt; 65306: (0.160395%)&lt;BR/&gt; 65079: (0.160395%)&gt;];
}
2490--5779[label="1;4053pkt 4053fpkt"];
2490--6430[label="1;4052pkt 4052fpkt"];
2490--6794[label="1;4052pkt 4052fpkt"];
5779--6430[label="1;4052pkt 4052fpkt"];
5779--6794[label="1;4052pkt 4052fpkt"];
6430--6794[label="1;4052pkt 4052fpkt"];
</description>
    <slice>
      <filter dst_port="1023" src_ip="194.40.205.200"/>
      <filter dst_port="5554" src_ip="194.40.205.200"/>
      <filter dst_port="9898" src_ip="194.40.205.200"/>
    </slice>
    <from sec="1094706480" usec="0"/>
    <to sec="1094706598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.216.202"/>
    </slice>
    <from sec="1094706013" usec="0"/>
    <to sec="1094706890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.189.205"/>
    </slice>
    <from sec="1094706246" usec="0"/>
    <to sec="1094706704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.71.142.207"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.82.41.208"/>
    </slice>
    <from sec="1094706690" usec="0"/>
    <to sec="1094706719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.216.209"/>
    </slice>
    <from sec="1094706013" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.189.214"/>
    </slice>
    <from sec="1094706005" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.216.214"/>
    </slice>
    <from sec="1094706009" usec="0"/>
    <to sec="1094706895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.104.225.214"/>
    </slice>
    <from sec="1094706017" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.16.8.216"/>
    </slice>
    <from sec="1094706005" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.20.216"/>
    </slice>
    <from sec="1094706066" usec="0"/>
    <to sec="1094706858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.37.93.216"/>
    </slice>
    <from sec="1094706031" usec="0"/>
    <to sec="1094706889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.216.216"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.237.216"/>
    </slice>
    <from sec="1094706445" usec="0"/>
    <to sec="1094706516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.36.244.216"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.16.8.217"/>
    </slice>
    <from sec="1094706005" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.208.75.218"/>
    </slice>
    <from sec="1094706009" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.216.218"/>
    </slice>
    <from sec="1094706009" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.26.150.220"/>
    </slice>
    <from sec="1094706861" usec="0"/>
    <to sec="1094706863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
1405[label="136.84.42.221;s;55pkt 55fpkt", shape=diamond, color=yellow];
3580[label="136.84.42.221;s;52pkt 52fpkt", shape=hexagon, color=black];
5854[label="136.84.42.221;58pkt 58fpkt", shape=pentagon, color=darkviolet];
6468[label="136.84.42.221;57pkt 57fpkt", shape=invtriangle, color=brown];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.42.221:*, *:80}[82.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.991%)&lt;BR/&gt; 5050: (3.6036%)&lt;BR/&gt; 60558: (2.7027%)&lt;BR/&gt; 53: (2.7027%)&lt;BR/&gt; 63910: (0.900901%)&gt;];
}
1405--1602[label="0.0181818;1pkt 1fpkt"];
1405--2113[label="0.0181818;1pkt 1fpkt"];
1405--2389[label="0.0727273;4pkt 4fpkt"];
1405--3580[label="1;52pkt 52fpkt"];
1405--3792[label="0.0181818;1pkt 1fpkt"];
1405--4139[label="0.0545455;3pkt 3fpkt"];
1405--4746[label="0.145455;8pkt 8fpkt"];
1405--4834[label="0.0363636;2pkt 2fpkt"];
1405--4858[label="0.145455;8pkt 8fpkt"];
1405--4864[label="0.0545455;3pkt 3fpkt"];
1405--4940[label="0.145455;8pkt 8fpkt"];
1405--4945[label="0.0545455;3pkt 3fpkt"];
1405--5854[label="1;55pkt 55fpkt"];
1405--6468[label="0.981818;54pkt 54fpkt"];
3580--3792[label="0.0192308;1pkt 1fpkt"];
3580--4139[label="0.0576923;3pkt 3fpkt"];
3580--4746[label="0.153846;8pkt 8fpkt"];
3580--4834[label="0.0384615;2pkt 2fpkt"];
3580--4858[label="0.153846;8pkt 8fpkt"];
3580--4864[label="0.0576923;3pkt 3fpkt"];
3580--4940[label="0.153846;8pkt 8fpkt"];
3580--4945[label="0.0576923;3pkt 3fpkt"];
3580--5854[label="1;52pkt 52fpkt"];
3580--6468[label="0.980769;51pkt 51fpkt"];
5854--6468[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.84.42.221"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.216.225"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663375,1.32592,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
2047[label="136.85.84.227;s;60pkt 60fpkt", shape=diamond, color=yellow];
5872[label="136.85.84.227;74pkt 74fpkt", shape=pentagon, color=darkviolet];
6478[label="136.85.84.227;74pkt 74fpkt", shape=invtriangle, color=brown];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.84.227:25, *:*}[62.1622%]&lt;BR/&gt;{136.85.84.227:53, *:*}[31.0811%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (31.9712%)&lt;BR/&gt; 53: (15.1442%)&lt;BR/&gt; 80: (2.88462%)&lt;BR/&gt; 32769: (0.961538%)&lt;BR/&gt; 65243: (0.721154%)&gt;];
}
2047--4844[label="0.0333333;2pkt 2fpkt"];
2047--4937[label="0.0333333;2pkt 2fpkt"];
2047--4966[label="0.0333333;2pkt 2fpkt"];
2047--5872[label="1;60pkt 60fpkt"];
2047--6478[label="1;60pkt 60fpkt"];
5872--6478[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter src_ip="136.85.84.227" src_port="25"/>
      <filter src_ip="136.85.84.227" src_port="53"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.104.227"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.161.52.240"/>
    </slice>
    <from sec="1094706182" usec="0"/>
    <to sec="1094706890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.44.18.241"/>
    </slice>
    <from sec="1094706033" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
1040[label="219.94.69.213;s;114pkt 114fpkt", shape=diamond, color=yellow];
2138[label="160.161.84.121;d;2pkt 2fpkt", shape=diamond, color=yellow];
2330[label="160.161.189.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
2356[label="160.161.70.77;d;8pkt 8fpkt", shape=diamond, color=yellow];
2580[label="160.161.59.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
2623[label="160.161.54.30;d;2pkt 2fpkt", shape=diamond, color=yellow];
2807[label="160.161.70.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
2892[label="160.161.84.112;d;16pkt 16fpkt", shape=diamond, color=yellow];
3013[label="192.144.216.241;s;8pkt 8fpkt", shape=diamond, color=yellow];
3040[label="160.161.65.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
3042[label="160.161.65.71;d;3pkt 3fpkt", shape=diamond, color=yellow];
3887[label="219.94.69.213;s;107pkt 107fpkt", shape=hexagon, color=black];
3911[label="160.161.70.77;d;8pkt 8fpkt", shape=hexagon, color=black];
4028[label="160.161.59.192;d;1pkt 1fpkt", shape=hexagon, color=black];
4520[label="160.161.65.71;d;3pkt 3fpkt", shape=hexagon, color=black];
5820[label="219.94.69.213;119pkt 119fpkt", shape=pentagon, color=darkviolet];
5857[label="192.144.216.222;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5913[label="192.144.216.241;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6455[label="219.94.69.213;119pkt 119fpkt", shape=invtriangle, color=brown];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.94.69.213:6667, *:*}[23.4043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (15.3846%)&lt;BR/&gt; 113: (9.56848%)&lt;BR/&gt; 8081: (2.90807%)&lt;BR/&gt; 5050: (2.72045%)&lt;BR/&gt; 8080: (2.53283%)&gt;];
}
1040--2138[label="1;2pkt 2fpkt"];
1040--2330[label="1;1pkt 1fpkt"];
1040--2356[label="0.875;7pkt 7fpkt"];
1040--2580[label="1;1pkt 1fpkt"];
1040--2623[label="0.5;1pkt 1fpkt"];
1040--2807[label="1;1pkt 1fpkt"];
1040--2892[label="1;16pkt 16fpkt"];
1040--3040[label="1;1pkt 1fpkt"];
1040--3042[label="0.333333;1pkt 1fpkt"];
1040--3887[label="1;107pkt 107fpkt"];
1040--3911[label="0.875;7pkt 7fpkt"];
1040--4028[label="1;1pkt 1fpkt"];
1040--4520[label="0.333333;1pkt 1fpkt"];
1040--4746[label="0.00877193;1pkt 1fpkt"];
1040--4858[label="0.00877193;1pkt 1fpkt"];
1040--4864[label="0.00877193;1pkt 1fpkt"];
1040--4940[label="0.00877193;1pkt 1fpkt"];
1040--4945[label="0.00877193;1pkt 1fpkt"];
1040--5820[label="1;114pkt 114fpkt"];
1040--6455[label="1;114pkt 114fpkt"];
2138--3887[label="1;2pkt 2fpkt"];
2138--5820[label="1;2pkt 2fpkt"];
2138--6455[label="1;2pkt 2fpkt"];
2330--3887[label="1;1pkt 1fpkt"];
2330--5820[label="1;1pkt 1fpkt"];
2330--6455[label="1;1pkt 1fpkt"];
2356--3013[label="0.125;1pkt 1fpkt"];
2356--3887[label="0.875;7pkt 7fpkt"];
2356--3911[label="1;8pkt 8fpkt"];
2356--5820[label="0.875;7pkt 7fpkt"];
2356--5913[label="0.142857;1pkt 1fpkt"];
2356--6455[label="0.875;7pkt 7fpkt"];
2580--3887[label="1;1pkt 1fpkt"];
2580--4028[label="1;1pkt 1fpkt"];
2580--5820[label="1;1pkt 1fpkt"];
2580--6455[label="1;1pkt 1fpkt"];
2623--3887[label="0.5;1pkt 1fpkt"];
2623--5820[label="0.5;1pkt 1fpkt"];
2623--5857[label="0.5;1pkt 1fpkt"];
2623--6455[label="0.5;1pkt 1fpkt"];
2807--3887[label="1;1pkt 1fpkt"];
2807--5820[label="1;1pkt 1fpkt"];
2807--6455[label="1;1pkt 1fpkt"];
2892--3887[label="0.8125;13pkt 13fpkt"];
2892--5820[label="1;16pkt 16fpkt"];
2892--6455[label="1;16pkt 16fpkt"];
3013--3911[label="0.125;1pkt 1fpkt"];
3013--5913[label="1;7pkt 7fpkt"];
3040--3887[label="1;1pkt 1fpkt"];
3040--5820[label="1;1pkt 1fpkt"];
3040--6455[label="1;1pkt 1fpkt"];
3042--3887[label="0.333333;1pkt 1fpkt"];
3042--4520[label="1;3pkt 3fpkt"];
3042--5820[label="0.333333;1pkt 1fpkt"];
3042--6455[label="0.333333;1pkt 1fpkt"];
3887--3911[label="0.875;7pkt 7fpkt"];
3887--4028[label="1;1pkt 1fpkt"];
3887--4520[label="0.333333;1pkt 1fpkt"];
3887--4746[label="0.00934579;1pkt 1fpkt"];
3887--4858[label="0.00934579;1pkt 1fpkt"];
3887--4864[label="0.00934579;1pkt 1fpkt"];
3887--4940[label="0.00934579;1pkt 1fpkt"];
3887--4945[label="0.00934579;1pkt 1fpkt"];
3887--5820[label="1;107pkt 107fpkt"];
3887--6455[label="1;107pkt 107fpkt"];
3911--5820[label="0.875;7pkt 7fpkt"];
3911--5913[label="0.142857;1pkt 1fpkt"];
3911--6455[label="0.875;7pkt 7fpkt"];
4028--5820[label="1;1pkt 1fpkt"];
4028--6455[label="1;1pkt 1fpkt"];
4520--5820[label="0.333333;1pkt 1fpkt"];
4520--6455[label="0.333333;1pkt 1fpkt"];
5820--6455[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter src_ip="219.94.69.213" src_port="6667"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.178.244.242"/>
    </slice>
    <from sec="1094706427" usec="0"/>
    <to sec="1094706441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.231.224.243"/>
    </slice>
    <from sec="1094706801" usec="0"/>
    <to sec="1094706820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.225.68.247"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480511,1.42464,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.14.7.249"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
4970[label="62.214.57.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5950[label="62.214.57.0;1pkt 1fpkt", shape=invtriangle, color=brown];
6528[label="62.214.57.0;1pkt 1fpkt", shape=invhouse, color=bisque];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.214.57.0:80, 142.205.88.217:37948}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37948: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4970--5950[label="1;1pkt 1fpkt"];
4970--6528[label="1;1pkt 1fpkt"];
5950--6528[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.205.88.217" dst_port="37948" src_ip="62.214.57.0" src_port="80"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
4974[label="88.105.210.0;238pkt 238fpkt", shape=pentagon, color=darkviolet];
5953[label="88.105.210.0;238pkt 238fpkt", shape=invtriangle, color=brown];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.105.210.0:*, *:9898}[60.5042%]&lt;BR/&gt;{88.105.210.0:*, *:5554}[39.4958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (30.2521%)&lt;BR/&gt; 5554: (19.7479%)&lt;BR/&gt; 4995: (0.210084%)&lt;BR/&gt; 4991: (0.210084%)&lt;BR/&gt; 4990: (0.210084%)&gt;];
}
4974--5953[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="88.105.210.0"/>
      <filter dst_port="5554" src_ip="88.105.210.0"/>
    </slice>
    <from sec="1094706092" usec="0"/>
    <to sec="1094706094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
4978[label="63.12.33.1;468pkt 468fpkt", shape=pentagon, color=darkviolet];
5955[label="63.12.33.1;467pkt 467fpkt", shape=invtriangle, color=brown];
6531[label="63.12.33.1;467pkt 467fpkt", shape=invhouse, color=bisque];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.12.33.1:*, *:5554}[52.7778%]&lt;BR/&gt;{63.12.33.1:*, *:9898}[47.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (26.3552%)&lt;BR/&gt; 9898: (23.6448%)&lt;BR/&gt; 2849: (0.10699%)&lt;BR/&gt; 2780: (0.10699%)&lt;BR/&gt; 2772: (0.10699%)&gt;];
}
4978--5955[label="1;467pkt 467fpkt"];
4978--6531[label="1;467pkt 467fpkt"];
5955--6531[label="1;467pkt 467fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="63.12.33.1"/>
      <filter dst_port="9898" src_ip="63.12.33.1"/>
    </slice>
    <from sec="1094706574" usec="0"/>
    <to sec="1094706580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.52.53.2"/>
    </slice>
    <from sec="1094706598" usec="0"/>
    <to sec="1094706609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
4987[label="59.90.138.3;252pkt 252fpkt", shape=pentagon, color=darkviolet];
5961[label="59.90.138.3;252pkt 252fpkt", shape=invtriangle, color=brown];
6537[label="59.90.138.3;251pkt 251fpkt", shape=invhouse, color=bisque];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.90.138.3:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4987--5961[label="1;252pkt 252fpkt"];
4987--6537[label="1;251pkt 251fpkt"];
5961--6537[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="59.90.138.3" src_port="1027"/>
    </slice>
    <from sec="1094706589" usec="0"/>
    <to sec="1094706604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
4994[label="142.205.27.5;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5967[label="142.205.27.5;8pkt 8fpkt", shape=invtriangle, color=brown];
6540[label="142.205.27.5;7pkt 7fpkt", shape=invhouse, color=bisque];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.205.27.5:*, 201.222.181.57:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35022: (6.52174%)&lt;BR/&gt; 35021: (6.52174%)&lt;BR/&gt; 35020: (6.52174%)&lt;BR/&gt; 35018: (6.52174%)&gt;];
}
4994--5967[label="1;8pkt 8fpkt"];
4994--6540[label="1;7pkt 7fpkt"];
5967--6540[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="201.222.181.57" dst_port="80" src_ip="142.205.27.5"/>
    </slice>
    <from sec="1094706353" usec="0"/>
    <to sec="1094706368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
5011[label="59.70.32.8;94pkt 94fpkt", shape=pentagon, color=darkviolet];
5974[label="59.70.32.8;94pkt 94fpkt", shape=invtriangle, color=brown];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.70.32.8:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1408: (1.06383%)&lt;BR/&gt; 4946: (0.531915%)&lt;BR/&gt; 4888: (0.531915%)&lt;BR/&gt; 4830: (0.531915%)&gt;];
}
5011--5974[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="59.70.32.8"/>
    </slice>
    <from sec="1094706007" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
5022[label="195.82.49.10;294pkt 294fpkt", shape=pentagon, color=darkviolet];
5981[label="195.82.49.10;293pkt 293fpkt", shape=invtriangle, color=brown];
6549[label="195.82.49.10;294pkt 294fpkt", shape=invhouse, color=bisque];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.82.49.10:*, *:9898}[58.8435%]&lt;BR/&gt;{195.82.49.10:*, *:5554}[41.1565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (29.3984%)&lt;BR/&gt; 5554: (20.6016%)&lt;BR/&gt; 4998: (0.170261%)&lt;BR/&gt; 4991: (0.170261%)&lt;BR/&gt; 4989: (0.170261%)&gt;];
}
5022--5981[label="1;293pkt 293fpkt"];
5022--6549[label="1;294pkt 294fpkt"];
5981--6549[label="1;293pkt 293fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="195.82.49.10"/>
      <filter dst_port="5554" src_ip="195.82.49.10"/>
    </slice>
    <from sec="1094706502" usec="0"/>
    <to sec="1094706504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
5031[label="211.103.118.11;250pkt 250fpkt", shape=pentagon, color=darkviolet];
5983[label="211.103.118.11;250pkt 250fpkt", shape=invtriangle, color=brown];
6551[label="211.103.118.11;251pkt 251fpkt", shape=invhouse, color=bisque];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.103.118.11:1053, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1053: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5031--5983[label="1;250pkt 250fpkt"];
5031--6551[label="1;250pkt 250fpkt"];
5983--6551[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.103.118.11" src_port="1053"/>
    </slice>
    <from sec="1094706614" usec="0"/>
    <to sec="1094706641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.161.13.13"/>
    </slice>
    <from sec="1094706023" usec="0"/>
    <to sec="1094706891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
5061[label="198.152.52.17;139pkt 139fpkt", shape=pentagon, color=darkviolet];
6003[label="198.152.52.17;140pkt 140fpkt", shape=invtriangle, color=brown];
6563[label="198.152.52.17;139pkt 139fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.152.52.17:10421, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10421: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5061--6003[label="1;139pkt 139fpkt"];
5061--6563[label="1;139pkt 139fpkt"];
6003--6563[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.152.52.17" src_port="10421"/>
    </slice>
    <from sec="1094706621" usec="0"/>
    <to sec="1094706654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
5095[label="114.24.75.24;238pkt 238fpkt", shape=pentagon, color=darkviolet];
6026[label="114.24.75.24;239pkt 239fpkt", shape=invtriangle, color=brown];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{114.24.75.24:*, *:1080}[33.4728%]&lt;BR/&gt;{114.24.75.24:*, *:3128}[33.4728%]&lt;BR/&gt;{114.24.75.24:*, *:3127}[33.0544%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (16.7715%)&lt;BR/&gt; 1080: (16.7715%)&lt;BR/&gt; 3127: (16.457%)&lt;BR/&gt; 4451: (0.419287%)&lt;BR/&gt; 4186: (0.419287%)&gt;];
}
5095--6026[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="114.24.75.24"/>
      <filter dst_port="1080" src_ip="114.24.75.24"/>
      <filter dst_port="3127" src_ip="114.24.75.24"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
5110[label="145.96.16.30;316pkt 316fpkt", shape=pentagon, color=darkviolet];
6033[label="145.96.16.30;315pkt 315fpkt", shape=invtriangle, color=brown];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.96.16.30:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5110--6033[label="1;315pkt 315fpkt"];
</description>
    <slice>
      <filter src_ip="145.96.16.30"/>
    </slice>
    <from sec="1094706003" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
5155[label="61.72.42.40;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6057[label="61.72.42.40;3pkt 3fpkt", shape=invtriangle, color=brown];
6592[label="61.72.42.40;4pkt 4fpkt", shape=invhouse, color=bisque];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.72.42.40:80, 136.85.64.86:39126}[25%]&lt;BR/&gt;{61.72.42.40:80, 136.85.64.86:39128}[25%]&lt;BR/&gt;{61.72.42.40:80, 136.85.64.86:39130}[25%]&lt;BR/&gt;{61.72.42.40:80, 136.85.64.86:39132}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39132: (15%)&lt;BR/&gt; 39130: (15%)&lt;BR/&gt; 39128: (15%)&lt;BR/&gt; 39126: (5%)&gt;];
}
5155--6057[label="1;3pkt 3fpkt"];
5155--6592[label="1;3pkt 3fpkt"];
6057--6592[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.64.86" dst_port="39132" src_ip="61.72.42.40" src_port="80"/>
      <filter dst_ip="136.85.64.86" dst_port="39130" src_ip="61.72.42.40" src_port="80"/>
      <filter dst_ip="136.85.64.86" dst_port="39128" src_ip="61.72.42.40" src_port="80"/>
      <filter dst_ip="136.85.64.86" dst_port="39126" src_ip="61.72.42.40" src_port="80"/>
    </slice>
    <from sec="1094706543" usec="0"/>
    <to sec="1094706570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
5158[label="136.85.180.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6060[label="136.85.180.40;2pkt 2fpkt", shape=invtriangle, color=brown];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.180.40:2176, 219.47.136.189:80}[50%]&lt;BR/&gt;{136.85.180.40:2177, 219.47.136.189:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2177: (25%)&lt;BR/&gt; 2176: (25%)&gt;];
}
5158--6060[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.47.136.189" dst_port="80" src_ip="136.85.180.40" src_port="2177"/>
      <filter dst_ip="219.47.136.189" dst_port="80" src_ip="136.85.180.40" src_port="2176"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
5159[label="205.148.198.40;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6061[label="205.148.198.40;8pkt 8fpkt", shape=invtriangle, color=brown];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.148.198.40:80, 136.85.141.112:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2012: (5.88235%)&lt;BR/&gt; 1958: (5.88235%)&lt;BR/&gt; 1957: (5.88235%)&lt;BR/&gt; 1956: (5.88235%)&gt;];
}
5159--6061[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.141.112" src_ip="205.148.198.40" src_port="80"/>
    </slice>
    <from sec="1094706167" usec="0"/>
    <to sec="1094706207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
5168[label="136.85.162.41;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6067[label="136.85.162.41;7pkt 7fpkt", shape=invtriangle, color=brown];
6595[label="136.85.162.41;6pkt 6fpkt", shape=invhouse, color=bisque];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.162.41:*, 92.168.181.184:80}[42.8571%]&lt;BR/&gt;{136.85.162.41:*, 92.168.115.56:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.1053%)&lt;BR/&gt; 9898: (7.89474%)&lt;BR/&gt; 1420: (7.89474%)&lt;BR/&gt; 1419: (7.89474%)&lt;BR/&gt; 1417: (7.89474%)&gt;];
}
5168--6067[label="1;6pkt 6fpkt"];
5168--6595[label="1;6pkt 6fpkt"];
6067--6595[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="92.168.181.184" dst_port="80" src_ip="136.85.162.41"/>
      <filter dst_ip="92.168.115.56" dst_port="80" src_ip="136.85.162.41"/>
    </slice>
    <from sec="1094706629" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
5169[label="88.29.167.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6068[label="88.29.167.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.29.167.41:80, 136.85.180.231:1348}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1348: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5169--6068[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.180.231" dst_port="1348" src_ip="88.29.167.41" src_port="80"/>
    </slice>
    <from sec="1094706859" usec="0"/>
    <to sec="1094706874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.82.225.45"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
5183[label="194.169.84.46;209pkt 209fpkt", shape=pentagon, color=darkviolet];
6077[label="194.169.84.46;209pkt 209fpkt", shape=invtriangle, color=brown];
6601[label="194.169.84.46;210pkt 210fpkt", shape=invhouse, color=bisque];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.169.84.46:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5183--6077[label="1;209pkt 209fpkt"];
5183--6601[label="1;209pkt 209fpkt"];
6077--6601[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.169.84.46" src_port="1026"/>
    </slice>
    <from sec="1094706332" usec="0"/>
    <to sec="1094706346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.89.1.49"/>
    </slice>
    <from sec="1094706626" usec="0"/>
    <to sec="1094706881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.192.93.49"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
5193[label="202.37.75.50;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6086[label="202.37.75.50;7pkt 7fpkt", shape=invtriangle, color=brown];
6607[label="202.37.75.50;8pkt 8fpkt", shape=invhouse, color=bisque];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.37.75.50:80, 164.23.171.153:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52155: (6.52174%)&lt;BR/&gt; 52154: (6.52174%)&lt;BR/&gt; 52153: (6.52174%)&lt;BR/&gt; 52152: (6.52174%)&gt;];
}
5193--6086[label="1;7pkt 7fpkt"];
5193--6607[label="1;8pkt 8fpkt"];
6086--6607[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.171.153" src_ip="202.37.75.50" src_port="80"/>
    </slice>
    <from sec="1094706728" usec="0"/>
    <to sec="1094706842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.161.12.52"/>
    </slice>
    <from sec="1094706155" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
5219[label="34.172.231.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6099[label="34.172.231.58;1pkt 1fpkt", shape=invtriangle, color=brown];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.172.231.58:4016, 142.205.76.121:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4016: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5219--6099[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.205.76.121" dst_port="137" src_ip="34.172.231.58" src_port="4016"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
5222[label="136.85.68.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6102[label="136.85.68.60;1pkt 1fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.68.60:1774, 192.236.173.217:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1774: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5222--6102[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.236.173.217" dst_port="80" src_ip="136.85.68.60" src_port="1774"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
5224[label="194.220.135.61;236pkt 236fpkt", shape=pentagon, color=darkviolet];
6103[label="194.220.135.61;237pkt 237fpkt", shape=invtriangle, color=brown];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.220.135.61:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 4178: (0.211416%)&lt;BR/&gt; 4177: (0.211416%)&lt;BR/&gt; 4176: (0.211416%)&lt;BR/&gt; 4175: (0.211416%)&gt;];
}
5224--6103[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="194.220.135.61"/>
    </slice>
    <from sec="1094706711" usec="0"/>
    <to sec="1094706713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.30.80.63"/>
    </slice>
    <from sec="1094706004" usec="0"/>
    <to sec="1094706643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.233.156.66"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.146.59.67"/>
    </slice>
    <from sec="1094706024" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
5256[label="192.32.68.69;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6121[label="192.32.68.69;27pkt 27fpkt", shape=invtriangle, color=brown];
6623[label="192.32.68.69;28pkt 28fpkt", shape=invhouse, color=bisque];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.32.68.69:80, 213.16.14.112:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49425: (1.82927%)&lt;BR/&gt; 49424: (1.82927%)&lt;BR/&gt; 49423: (1.82927%)&lt;BR/&gt; 49422: (1.82927%)&gt;];
}
5256--6121[label="1;27pkt 27fpkt"];
5256--6623[label="1;27pkt 27fpkt"];
6121--6623[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="213.16.14.112" src_ip="192.32.68.69" src_port="80"/>
    </slice>
    <from sec="1094706651" usec="0"/>
    <to sec="1094706661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
5270[label="160.161.75.72;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6130[label="160.161.75.72;11pkt 11fpkt", shape=invtriangle, color=brown];
6626[label="160.161.75.72;12pkt 12fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.161.75.72:*, 210.168.191.14:20}[50%]&lt;BR/&gt;{160.161.75.72:*, 210.168.191.14:21}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (26.4706%)&lt;BR/&gt; 21: (23.5294%)&lt;BR/&gt; 1212: (4.41176%)&lt;BR/&gt; 1211: (4.41176%)&lt;BR/&gt; 1209: (4.41176%)&gt;];
}
5270--6130[label="1;11pkt 11fpkt"];
5270--6626[label="1;11pkt 11fpkt"];
6130--6626[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="210.168.191.14" dst_port="21" src_ip="160.161.75.72"/>
      <filter dst_ip="210.168.191.14" dst_port="20" src_ip="160.161.75.72"/>
    </slice>
    <from sec="1094706270" usec="0"/>
    <to sec="1094706441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
5277[label="142.48.45.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6133[label="142.48.45.73;2pkt 2fpkt", shape=invtriangle, color=brown];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.48.45.73:25, 210.135.151.16:40950}[50%]&lt;BR/&gt;{142.48.45.73:65049, 215.91.132.114:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65049: (25%)&lt;BR/&gt; 40950: (25%)&gt;];
}
5277--6133[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.91.132.114" dst_port="25" src_ip="142.48.45.73" src_port="65049"/>
      <filter dst_ip="210.135.151.16" dst_port="40950" src_ip="142.48.45.73" src_port="25"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.104.31.75"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.73.90.75"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
5289[label="136.85.99.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6139[label="136.85.99.75;2pkt 2fpkt", shape=invtriangle, color=brown];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.99.75:0, 114.89.92.2:0}[50%]&lt;BR/&gt;{136.85.99.75:0, 204.225.197.199:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5289--6139[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.225.197.199" src_ip="136.85.99.75"/>
      <filter dst_ip="114.89.92.2" src_ip="136.85.99.75"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
5306[label="88.18.206.77;129pkt 129fpkt", shape=pentagon, color=darkviolet];
6151[label="88.18.206.77;129pkt 129fpkt", shape=invtriangle, color=brown];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.18.206.77:6999, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6999: (50%)&lt;BR/&gt; 63179: (0.387597%)&lt;BR/&gt; 60421: (0.387597%)&lt;BR/&gt; 59224: (0.387597%)&lt;BR/&gt; 54721: (0.387597%)&gt;];
}
5306--6151[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter src_ip="88.18.206.77" src_port="6999"/>
    </slice>
    <from sec="1094706023" usec="0"/>
    <to sec="1094706893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.3.1.80"/>
    </slice>
    <from sec="1094706315" usec="0"/>
    <to sec="1094706329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
5314[label="197.250.12.80;184pkt 184fpkt", shape=pentagon, color=darkviolet];
6156[label="197.250.12.80;183pkt 183fpkt", shape=invtriangle, color=brown];
6638[label="197.250.12.80;184pkt 184fpkt", shape=invhouse, color=bisque];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.250.12.80:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51016: (0.544465%)&lt;BR/&gt; 50970: (0.544465%)&lt;BR/&gt; 50959: (0.544465%)&lt;BR/&gt; 50922: (0.544465%)&gt;];
}
5314--6156[label="1;183pkt 183fpkt"];
5314--6638[label="1;184pkt 184fpkt"];
6156--6638[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.250.12.80"/>
    </slice>
    <from sec="1094706349" usec="0"/>
    <to sec="1094706379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
5323[label="212.82.250.82;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6160[label="212.82.250.82;17pkt 17fpkt", shape=invtriangle, color=brown];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.250.82:*, 60.78.67.101:80}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3471: (2.94118%)&lt;BR/&gt; 3470: (2.94118%)&lt;BR/&gt; 3469: (2.94118%)&lt;BR/&gt; 3468: (2.94118%)&gt;];
}
5323--6160[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="60.78.67.101" dst_port="80" src_ip="212.82.250.82"/>
    </slice>
    <from sec="1094706328" usec="0"/>
    <to sec="1094706693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.137.20.91"/>
    </slice>
    <from sec="1094706050" usec="0"/>
    <to sec="1094706889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
5354[label="164.23.216.91;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6174[label="164.23.216.91;2pkt 2fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.216.91:60045, 150.90.163.104:80}[50%]&lt;BR/&gt;{164.23.216.91:60047, 150.90.163.104:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60047: (25%)&lt;BR/&gt; 60045: (25%)&gt;];
}
5354--6174[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.90.163.104" dst_port="80" src_ip="164.23.216.91" src_port="60047"/>
      <filter dst_ip="150.90.163.104" dst_port="80" src_ip="164.23.216.91" src_port="60045"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.161.14.92"/>
    </slice>
    <from sec="1094706024" usec="0"/>
    <to sec="1094706885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
5361[label="164.23.18.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6180[label="164.23.18.94;1pkt 1fpkt", shape=invtriangle, color=brown];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.18.94:2838, 61.224.37.214:5190}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 2838: (50%)&gt;];
}
5361--6180[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="61.224.37.214" dst_port="5190" src_ip="164.23.18.94" src_port="2838"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
5371[label="142.33.145.96;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6186[label="142.33.145.96;22pkt 22fpkt", shape=invtriangle, color=brown];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.33.145.96:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (9.30233%)&lt;BR/&gt; 8881: (4.65116%)&lt;BR/&gt; 8117: (4.65116%)&lt;BR/&gt; 1882: (4.65116%)&lt;BR/&gt; 18060: (2.32558%)&gt;];
}
5371--6186[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="142.33.145.96"/>
    </slice>
    <from sec="1094706368" usec="0"/>
    <to sec="1094706383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
5383[label="195.87.77.100;236pkt 236fpkt", shape=pentagon, color=darkviolet];
6195[label="195.87.77.100;236pkt 236fpkt", shape=invtriangle, color=brown];
6661[label="195.87.77.100;237pkt 237fpkt", shape=invhouse, color=bisque];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.87.77.100:4293, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4293: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5383--6195[label="1;236pkt 236fpkt"];
5383--6661[label="1;236pkt 236fpkt"];
6195--6661[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.87.77.100" src_port="4293"/>
    </slice>
    <from sec="1094706527" usec="0"/>
    <to sec="1094706544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
5386[label="142.205.146.101;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6198[label="142.205.146.101;18pkt 18fpkt", shape=invtriangle, color=brown];
6664[label="142.205.146.101;19pkt 19fpkt", shape=invhouse, color=bisque];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.205.146.101:*, 90.130.105.247:80}[42.1053%]&lt;BR/&gt;{142.205.146.101:*, 90.164.13.53:80}[21.0526%]&lt;BR/&gt;{142.205.146.101:*, 197.35.179.85:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2040: (2.72727%)&lt;BR/&gt; 2031: (2.72727%)&lt;BR/&gt; 2030: (2.72727%)&lt;BR/&gt; 2029: (2.72727%)&gt;];
}
5386--6198[label="1;18pkt 18fpkt"];
5386--6664[label="1;18pkt 18fpkt"];
6198--6664[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="90.130.105.247" dst_port="80" src_ip="142.205.146.101"/>
      <filter dst_ip="197.35.179.85" dst_port="80" src_ip="142.205.146.101"/>
      <filter dst_ip="90.164.13.53" dst_port="80" src_ip="142.205.146.101"/>
    </slice>
    <from sec="1094706462" usec="0"/>
    <to sec="1094706582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="142.205.194.101"/>
    </slice>
    <from sec="1094706470" usec="0"/>
    <to sec="1094706887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.212.70.103"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
5402[label="202.178.128.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6209[label="202.178.128.106;3pkt 3fpkt", shape=invtriangle, color=brown];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.178.128.106:80, 213.27.240.212:53877}[33.3333%]&lt;BR/&gt;{202.178.128.106:80, 213.27.240.212:53975}[33.3333%]&lt;BR/&gt;{202.178.128.106:80, 213.27.240.212:54019}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54019: (16.6667%)&lt;BR/&gt; 53975: (16.6667%)&lt;BR/&gt; 53877: (16.6667%)&gt;];
}
5402--6209[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.27.240.212" dst_port="54019" src_ip="202.178.128.106" src_port="80"/>
      <filter dst_ip="213.27.240.212" dst_port="53975" src_ip="202.178.128.106" src_port="80"/>
      <filter dst_ip="213.27.240.212" dst_port="53877" src_ip="202.178.128.106" src_port="80"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
5404[label="215.53.201.106;128pkt 128fpkt", shape=pentagon, color=darkviolet];
6211[label="215.53.201.106;128pkt 128fpkt", shape=invtriangle, color=brown];
6673[label="215.53.201.106;129pkt 129fpkt", shape=invhouse, color=bisque];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.53.201.106:*, *:9898}[69.7674%]&lt;BR/&gt;{215.53.201.106:*, *:5554}[30.2326%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (35.0649%)&lt;BR/&gt; 5554: (14.9351%)&lt;BR/&gt; 4998: (0.38961%)&lt;BR/&gt; 4972: (0.38961%)&lt;BR/&gt; 4927: (0.38961%)&gt;];
}
5404--6211[label="1;128pkt 128fpkt"];
5404--6673[label="1;128pkt 128fpkt"];
6211--6673[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="215.53.201.106"/>
      <filter dst_port="5554" src_ip="215.53.201.106"/>
    </slice>
    <from sec="1094706736" usec="0"/>
    <to sec="1094706739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.3.1.108"/>
    </slice>
    <from sec="1094706768" usec="0"/>
    <to sec="1094706867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.20.228.109"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.161.2.110"/>
    </slice>
    <from sec="1094706002" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
5422[label="214.248.68.110;130pkt 130fpkt", shape=pentagon, color=darkviolet];
6220[label="214.248.68.110;130pkt 130fpkt", shape=invtriangle, color=brown];
6677[label="214.248.68.110;130pkt 130fpkt", shape=invhouse, color=bisque];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.248.68.110:*, *:9898}[62.3077%]&lt;BR/&gt;{214.248.68.110:*, *:5554}[37.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (31.1538%)&lt;BR/&gt; 5554: (18.8462%)&lt;BR/&gt; 4007: (0.384615%)&lt;BR/&gt; 3994: (0.384615%)&lt;BR/&gt; 3983: (0.384615%)&gt;];
}
5422--6220[label="1;130pkt 130fpkt"];
5422--6677[label="1;130pkt 130fpkt"];
6220--6677[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="214.248.68.110"/>
      <filter dst_port="5554" src_ip="214.248.68.110"/>
    </slice>
    <from sec="1094706317" usec="0"/>
    <to sec="1094706319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
5424[label="63.10.144.110;136pkt 136fpkt", shape=pentagon, color=darkviolet];
6222[label="63.10.144.110;136pkt 136fpkt", shape=invtriangle, color=brown];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.10.144.110:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5424--6222[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="63.10.144.110" src_port="1026"/>
    </slice>
    <from sec="1094706633" usec="0"/>
    <to sec="1094706655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
5425[label="164.23.178.110;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6223[label="164.23.178.110;2pkt 2fpkt", shape=invtriangle, color=brown];
6679[label="164.23.178.110;2pkt 2fpkt", shape=invhouse, color=bisque];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.178.110:80, 62.80.82.32:48236}[50%]&lt;BR/&gt;{164.23.178.110:80, 203.37.32.215:25971}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48236: (25%)&lt;BR/&gt; 25971: (25%)&gt;];
}
5425--6223[label="1;2pkt 2fpkt"];
5425--6679[label="1;2pkt 2fpkt"];
6223--6679[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.37.32.215" dst_port="25971" src_ip="164.23.178.110" src_port="80"/>
      <filter dst_ip="62.80.82.32" dst_port="48236" src_ip="164.23.178.110" src_port="80"/>
    </slice>
    <from sec="1094706454" usec="0"/>
    <to sec="1094706563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
5436[label="213.24.43.113;121pkt 121fpkt", shape=pentagon, color=darkviolet];
6232[label="213.24.43.113;121pkt 121fpkt", shape=invtriangle, color=brown];
6684[label="213.24.43.113;122pkt 122fpkt", shape=invhouse, color=bisque];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.24.43.113:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (9.89011%)&lt;BR/&gt; 0: (9.89011%)&lt;BR/&gt; 16881: (3.70879%)&lt;BR/&gt; 23999: (1.64835%)&lt;BR/&gt; 20602: (1.64835%)&gt;];
}
5436--6232[label="1;121pkt 121fpkt"];
5436--6684[label="1;121pkt 121fpkt"];
6232--6684[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="213.24.43.113"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
5437[label="212.26.43.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6233[label="212.26.43.113;1pkt 1fpkt", shape=invtriangle, color=brown];
6685[label="212.26.43.113;1pkt 1fpkt", shape=invhouse, color=bisque];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.26.43.113:80, 212.105.122.224:35128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35128: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5437--6233[label="1;1pkt 1fpkt"];
5437--6685[label="1;1pkt 1fpkt"];
6233--6685[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.105.122.224" dst_port="35128" src_ip="212.26.43.113" src_port="80"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
5446[label="33.54.26.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6237[label="33.54.26.114;1pkt 1fpkt", shape=invtriangle, color=brown];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.54.26.114:2201, 212.82.234.34:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2201: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
5446--6237[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.82.234.34" dst_port="445" src_ip="33.54.26.114" src_port="2201"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.25.153.114"/>
    </slice>
    <from sec="1094706026" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
5451[label="203.165.214.114;231pkt 231fpkt", shape=pentagon, color=darkviolet];
6239[label="203.165.214.114;232pkt 232fpkt", shape=invtriangle, color=brown];
6688[label="203.165.214.114;232pkt 232fpkt", shape=invhouse, color=bisque];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.165.214.114:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5451--6239[label="1;231pkt 231fpkt"];
5451--6688[label="1;231pkt 231fpkt"];
6239--6688[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.165.214.114" src_port="1025"/>
    </slice>
    <from sec="1094706523" usec="0"/>
    <to sec="1094706537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
5454[label="142.34.192.115;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6242[label="142.34.192.115;11pkt 11fpkt", shape=invtriangle, color=brown];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.34.192.115:16881, *:*}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (45.4545%)&lt;BR/&gt; 65343: (4.54545%)&lt;BR/&gt; 64601: (4.54545%)&lt;BR/&gt; 64541: (4.54545%)&lt;BR/&gt; 53020: (4.54545%)&gt;];
}
5454--6242[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="142.34.192.115" src_port="16881"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
5465[label="215.89.17.118;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6248[label="215.89.17.118;117pkt 117fpkt", shape=invtriangle, color=brown];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.89.17.118:*, *:5554}[68.3761%]&lt;BR/&gt;{215.89.17.118:*, *:9898}[31.6239%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (34.3348%)&lt;BR/&gt; 9898: (15.6652%)&lt;BR/&gt; 4995: (0.429185%)&lt;BR/&gt; 4994: (0.429185%)&lt;BR/&gt; 4990: (0.429185%)&gt;];
}
5465--6248[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="215.89.17.118"/>
      <filter dst_port="9898" src_ip="215.89.17.118"/>
    </slice>
    <from sec="1094706444" usec="0"/>
    <to sec="1094706448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
5466[label="142.205.170.118;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6249[label="142.205.170.118;52pkt 52fpkt", shape=invtriangle, color=brown];
6692[label="142.205.170.118;52pkt 52fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.205.170.118:*, 192.14.142.233:80}[90.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2879: (0.967742%)&lt;BR/&gt; 2878: (0.967742%)&lt;BR/&gt; 2877: (0.967742%)&lt;BR/&gt; 2876: (0.967742%)&gt;];
}
5466--6249[label="1;51pkt 51fpkt"];
5466--6692[label="1;51pkt 51fpkt"];
6249--6692[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="192.14.142.233" dst_port="80" src_ip="142.205.170.118"/>
    </slice>
    <from sec="1094706641" usec="0"/>
    <to sec="1094706767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.241.24.119"/>
    </slice>
    <from sec="1094706234" usec="0"/>
    <to sec="1094706832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
5481[label="192.130.24.123;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6256[label="192.130.24.123;2pkt 2fpkt", shape=invtriangle, color=brown];
6697[label="192.130.24.123;2pkt 2fpkt", shape=invhouse, color=bisque];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.130.24.123:80, 213.27.240.137:4638}[50%]&lt;BR/&gt;{192.130.24.123:80, 213.27.240.212:53863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53863: (25%)&lt;BR/&gt; 4638: (25%)&gt;];
}
5481--6256[label="1;2pkt 2fpkt"];
5481--6697[label="1;2pkt 2fpkt"];
6256--6697[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.27.240.212" dst_port="53863" src_ip="192.130.24.123" src_port="80"/>
      <filter dst_ip="213.27.240.137" dst_port="4638" src_ip="192.130.24.123" src_port="80"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
5487[label="136.84.138.125;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6259[label="136.84.138.125;3pkt 3fpkt", shape=invtriangle, color=brown];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.138.125:58567, 192.111.195.104:80}[33.3333%]&lt;BR/&gt;{136.84.138.125:8000, 193.154.7.30:1642}[33.3333%]&lt;BR/&gt;{136.84.138.125:8000, 193.154.7.30:1725}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (33.3333%)&lt;BR/&gt; 58567: (16.6667%)&lt;BR/&gt; 1725: (16.6667%)&lt;BR/&gt; 1642: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
5487--6259[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.154.7.30" dst_port="1725" src_ip="136.84.138.125" src_port="8000"/>
      <filter dst_ip="193.154.7.30" dst_port="1642" src_ip="136.84.138.125" src_port="8000"/>
      <filter dst_ip="192.111.195.104" dst_port="80" src_ip="136.84.138.125" src_port="58567"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
5488[label="145.28.253.125;55pkt 55fpkt", shape=pentagon, color=darkviolet];
6260[label="145.28.253.125;56pkt 56fpkt", shape=invtriangle, color=brown];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.28.253.125:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5488--6260[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="145.28.253.125"/>
    </slice>
    <from sec="1094706010" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
5501[label="194.192.1.129;252pkt 252fpkt", shape=pentagon, color=darkviolet];
6267[label="194.192.1.129;251pkt 251fpkt", shape=invtriangle, color=brown];
6703[label="194.192.1.129;251pkt 251fpkt", shape=invhouse, color=bisque];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.192.1.129:*, *:9898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (50%)&lt;BR/&gt; 3841: (0.198939%)&lt;BR/&gt; 3829: (0.198939%)&lt;BR/&gt; 3827: (0.198939%)&lt;BR/&gt; 3824: (0.198939%)&gt;];
}
5501--6267[label="1;251pkt 251fpkt"];
5501--6703[label="1;251pkt 251fpkt"];
6267--6703[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="194.192.1.129"/>
    </slice>
    <from sec="1094706337" usec="0"/>
    <to sec="1094706340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.96.106.133"/>
    </slice>
    <from sec="1094706018" usec="0"/>
    <to sec="1094706898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
5526[label="160.161.65.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6280[label="160.161.65.135;1pkt 1fpkt", shape=invtriangle, color=brown];
6710[label="160.161.65.135;1pkt 1fpkt", shape=invhouse, color=bisque];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.161.65.135:4412, 204.168.177.30:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4412: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
5526--6280[label="1;1pkt 1fpkt"];
5526--6710[label="1;1pkt 1fpkt"];
6280--6710[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.168.177.30" dst_port="443" src_ip="160.161.65.135" src_port="4412"/>
    </slice>
    <from sec="1094706026" usec="0"/>
    <to sec="1094706762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.779292,1.28195,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
1006[label="194.166.126.59;d;947pkt 947fpkt", shape=diamond, color=yellow];
1816[label="212.82.237.228;s;3pkt 3fpkt", shape=diamond, color=yellow];
1817[label="209.245.230.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
1902[label="212.82.228.86;s;90pkt 90fpkt", shape=diamond, color=yellow];
2967[label="212.82.251.33;s;6pkt 6fpkt", shape=diamond, color=yellow];
3557[label="212.82.237.228;s;3pkt 3fpkt", shape=hexagon, color=black];
3639[label="212.82.228.86;s;72pkt 72fpkt", shape=hexagon, color=black];
3772[label="209.245.230.9;d;1pkt 1fpkt", shape=hexagon, color=black];
5540[label="212.82.251.137;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6287[label="212.82.251.137;27pkt 27fpkt", shape=invtriangle, color=brown];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:3389, 194.166.126.59:*}[84.1908%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3389: (38.6151%)&lt;BR/&gt; 25: (6.6695%)&lt;BR/&gt; 0: (4.24809%)&lt;BR/&gt; 32928: (1.95412%)&lt;BR/&gt; 4774: (0.169924%)&gt;];
}
1006--1033[label="0.0333333;1pkt 1fpkt"];
1006--1045[label="0.0116279;1pkt 1fpkt"];
1006--1101[label="0.00110497;1pkt 1fpkt"];
1006--1109[label="0.00105597;1pkt 1fpkt"];
1006--1355[label="0.00105597;1pkt 1fpkt"];
1006--1551[label="0.00680272;2pkt 2fpkt"];
1006--1776[label="0.00689655;2pkt 2fpkt"];
1006--1785[label="0.0185185;1pkt 1fpkt"];
1006--1816[label="0.333333;1pkt 1fpkt"];
1006--1841[label="0.00249377;1pkt 1fpkt"];
1006--1868[label="0.00162338;1pkt 1fpkt"];
1006--1885[label="0.004329;1pkt 1fpkt"];
1006--1902[label="0.0111111;1pkt 1fpkt"];
1006--1916[label="0.00990099;1pkt 1fpkt"];
1006--2058[label="0.00729927;1pkt 1fpkt"];
1006--2334[label="0.015625;1pkt 1fpkt"];
1006--2345[label="0.0039604;2pkt 2fpkt"];
1006--2584[label="0.00318471;1pkt 1fpkt"];
1006--2631[label="0.012987;1pkt 1fpkt"];
1006--2632[label="0.0103093;1pkt 1fpkt"];
1006--2871[label="0.00900901;1pkt 1fpkt"];
1006--2967[label="0.166667;1pkt 1fpkt"];
1006--3257[label="0.00136986;1pkt 1fpkt"];
1006--3353[label="0.00722022;2pkt 2fpkt"];
1006--3483[label="0.04;1pkt 1fpkt"];
1006--3488[label="0.0140845;1pkt 1fpkt"];
1006--3557[label="0.333333;1pkt 1fpkt"];
1006--3608[label="0.00162338;1pkt 1fpkt"];
1006--3623[label="0.0049505;1pkt 1fpkt"];
1006--3639[label="0.0138889;1pkt 1fpkt"];
1006--3648[label="0.00990099;1pkt 1fpkt"];
1006--3757[label="0.00105597;1pkt 1fpkt"];
1006--3793[label="0.00274725;1pkt 1fpkt"];
1006--3895[label="0.00732601;2pkt 2fpkt"];
1006--4023[label="0.00729927;1pkt 1fpkt"];
1006--4074[label="0.015625;1pkt 1fpkt"];
1006--4080[label="0.0043956;2pkt 2fpkt"];
1006--4291[label="0.00318471;1pkt 1fpkt"];
1006--4302[label="0.0192308;1pkt 1fpkt"];
1006--4350[label="0.011236;1pkt 1fpkt"];
1006--4391[label="0.00990099;1pkt 1fpkt"];
1006--4643[label="0.00176991;1pkt 1fpkt"];
1006--4951[label="0.00105597;1pkt 1fpkt"];
1006--5009[label="0.0106383;1pkt 1fpkt"];
1006--5118[label="0.00105597;1pkt 1fpkt"];
1006--5131[label="0.0555556;1pkt 1fpkt"];
1006--5144[label="0.00105597;1pkt 1fpkt"];
1006--5308[label="0.015625;1pkt 1fpkt"];
1006--5516[label="0.00675676;2pkt 2fpkt"];
1006--5540[label="0.037037;1pkt 1fpkt"];
1006--5598[label="0.0277778;1pkt 1fpkt"];
1006--5688[label="0.012987;1pkt 1fpkt"];
1006--6038[label="0.00105597;1pkt 1fpkt"];
1006--6051[label="0.00105597;1pkt 1fpkt"];
1006--6189[label="0.0588235;1pkt 1fpkt"];
1006--6287[label="0.037037;1pkt 1fpkt"];
1006--6588[label="0.00105597;1pkt 1fpkt"];
1816--1817[label="1;1pkt 1fpkt"];
1816--3557[label="1;3pkt 3fpkt"];
1816--3772[label="1;1pkt 1fpkt"];
1816--4830[label="0.333333;1pkt 1fpkt"];
1816--4845[label="0.333333;1pkt 1fpkt"];
1816--4924[label="0.333333;1pkt 1fpkt"];
1816--4938[label="0.333333;1pkt 1fpkt"];
1816--4956[label="0.333333;1pkt 1fpkt"];
1816--4967[label="0.333333;1pkt 1fpkt"];
1817--3557[label="1;1pkt 1fpkt"];
1817--3772[label="1;1pkt 1fpkt"];
1902--3639[label="1;72pkt 72fpkt"];
3557--3772[label="1;1pkt 1fpkt"];
3557--4830[label="0.333333;1pkt 1fpkt"];
3557--4845[label="0.333333;1pkt 1fpkt"];
3557--4924[label="0.333333;1pkt 1fpkt"];
3557--4938[label="0.333333;1pkt 1fpkt"];
3557--4956[label="0.333333;1pkt 1fpkt"];
3557--4967[label="0.333333;1pkt 1fpkt"];
5540--6287[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="194.166.126.59" src_port="3389"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.161.5.140"/>
    </slice>
    <from sec="1094706697" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.224.151.142"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
5568[label="212.82.248.145;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6304[label="212.82.248.145;2pkt 2fpkt", shape=invtriangle, color=brown];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.248.145:61364, 216.10.180.4:53}[33.3333%]&lt;BR/&gt;{212.82.248.145:61364, 216.10.176.143:53}[33.3333%]&lt;BR/&gt;{212.82.248.145:61364, 129.107.10.179:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61364: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
5568--6304[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.107.10.179" dst_port="53" src_ip="212.82.248.145" src_port="61364"/>
      <filter dst_ip="216.10.176.143" dst_port="53" src_ip="212.82.248.145" src_port="61364"/>
      <filter dst_ip="216.10.180.4" dst_port="53" src_ip="212.82.248.145" src_port="61364"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
5578[label="136.85.1.148;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6312[label="136.85.1.148;4pkt 4fpkt", shape=invtriangle, color=brown];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.1.148:2326, 129.151.206.166:80}[25%]&lt;BR/&gt;{136.85.1.148:2328, 129.151.206.166:80}[25%]&lt;BR/&gt;{136.85.1.148:2330, 129.151.206.166:80}[25%]&lt;BR/&gt;{136.85.1.148:2332, 129.151.206.166:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2332: (12.5%)&lt;BR/&gt; 2330: (12.5%)&lt;BR/&gt; 2328: (12.5%)&lt;BR/&gt; 2326: (12.5%)&gt;];
}
5578--6312[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="129.151.206.166" dst_port="80" src_ip="136.85.1.148" src_port="2332"/>
      <filter dst_ip="129.151.206.166" dst_port="80" src_ip="136.85.1.148" src_port="2330"/>
      <filter dst_ip="129.151.206.166" dst_port="80" src_ip="136.85.1.148" src_port="2328"/>
      <filter dst_ip="129.151.206.166" dst_port="80" src_ip="136.85.1.148" src_port="2326"/>
    </slice>
    <from sec="1094706857" usec="0"/>
    <to sec="1094706884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
5581[label="61.0.128.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6315[label="61.0.128.148;1pkt 1fpkt", shape=invtriangle, color=brown];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.0.128.148:25, 136.85.176.81:57615}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57615: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5581--6315[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.176.81" dst_port="57615" src_ip="61.0.128.148" src_port="25"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
5593[label="62.214.57.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6324[label="62.214.57.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.214.57.151:80, 213.27.240.212:53559}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53559: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5593--6324[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.27.240.212" dst_port="53559" src_ip="62.214.57.151" src_port="80"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
5620[label="208.62.137.159;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6339[label="208.62.137.159;11pkt 11fpkt", shape=invtriangle, color=brown];
6745[label="208.62.137.159;12pkt 12fpkt", shape=invhouse, color=bisque];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.62.137.159:20, 136.85.35.97:*}[50%]&lt;BR/&gt;{208.62.137.159:21, 136.85.35.97:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (26.4706%)&lt;BR/&gt; 21: (23.5294%)&lt;BR/&gt; 1208: (4.41176%)&lt;BR/&gt; 1207: (4.41176%)&lt;BR/&gt; 1206: (4.41176%)&gt;];
}
5620--6339[label="1;11pkt 11fpkt"];
5620--6745[label="1;11pkt 11fpkt"];
6339--6745[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.35.97" src_ip="208.62.137.159" src_port="21"/>
      <filter dst_ip="136.85.35.97" src_ip="208.62.137.159" src_port="20"/>
    </slice>
    <from sec="1094706521" usec="0"/>
    <to sec="1094706546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.176.229.161"/>
    </slice>
    <from sec="1094706061" usec="0"/>
    <to sec="1094706487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.173.45.163"/>
    </slice>
    <from sec="1094706088" usec="0"/>
    <to sec="1094706885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
5648[label="61.176.228.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6353[label="61.176.228.165;1pkt 1fpkt", shape=invtriangle, color=brown];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.176.228.165:61152, 136.85.38.88:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61152: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5648--6353[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.38.88" dst_port="80" src_ip="61.176.228.165" src_port="61152"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
5651[label="196.124.195.166;187pkt 187fpkt", shape=pentagon, color=darkviolet];
6355[label="196.124.195.166;187pkt 187fpkt", shape=invtriangle, color=brown];
6754[label="196.124.195.166;187pkt 187fpkt", shape=invhouse, color=bisque];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.124.195.166:*, *:5554}[61.4973%]&lt;BR/&gt;{196.124.195.166:*, *:9898}[38.5027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5554: (30.7487%)&lt;BR/&gt; 9898: (19.2513%)&lt;BR/&gt; 3293: (0.26738%)&lt;BR/&gt; 3292: (0.26738%)&lt;BR/&gt; 3291: (0.26738%)&gt;];
}
5651--6355[label="1;187pkt 187fpkt"];
5651--6754[label="1;187pkt 187fpkt"];
6355--6754[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter dst_port="5554" src_ip="196.124.195.166"/>
      <filter dst_port="9898" src_ip="196.124.195.166"/>
    </slice>
    <from sec="1094706162" usec="0"/>
    <to sec="1094706164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
5652[label="61.176.229.167;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6356[label="61.176.229.167;12pkt 12fpkt", shape=invtriangle, color=brown];
6755[label="61.176.229.167;11pkt 11fpkt", shape=invhouse, color=bisque];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.176.229.167:*, 142.48.242.154:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58437: (4.41176%)&lt;BR/&gt; 56128: (4.41176%)&lt;BR/&gt; 56127: (4.41176%)&lt;BR/&gt; 56008: (4.41176%)&gt;];
}
5652--6356[label="1;11pkt 11fpkt"];
5652--6755[label="1;11pkt 11fpkt"];
6356--6755[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="142.48.242.154" dst_port="80" src_ip="61.176.229.167"/>
    </slice>
    <from sec="1094706183" usec="0"/>
    <to sec="1094706846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
5662[label="213.16.8.170;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6362[label="213.16.8.170;5pkt 5fpkt", shape=invtriangle, color=brown];
6758[label="213.16.8.170;5pkt 5fpkt", shape=invhouse, color=bisque];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.16.8.170:1084, 211.192.38.131:80}[20%]&lt;BR/&gt;{213.16.8.170:1085, 211.192.38.131:80}[20%]&lt;BR/&gt;{213.16.8.170:1086, 211.192.38.131:80}[20%]&lt;BR/&gt;{213.16.8.170:1087, 211.192.38.131:80}[20%]&lt;BR/&gt;{213.16.8.170:1088, 211.192.38.131:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1088: (10%)&lt;BR/&gt; 1087: (10%)&lt;BR/&gt; 1086: (10%)&lt;BR/&gt; 1085: (10%)&gt;];
}
5662--6362[label="1;5pkt 5fpkt"];
5662--6758[label="1;5pkt 5fpkt"];
6362--6758[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="211.192.38.131" dst_port="80" src_ip="213.16.8.170" src_port="1088"/>
      <filter dst_ip="211.192.38.131" dst_port="80" src_ip="213.16.8.170" src_port="1087"/>
      <filter dst_ip="211.192.38.131" dst_port="80" src_ip="213.16.8.170" src_port="1086"/>
      <filter dst_ip="211.192.38.131" dst_port="80" src_ip="213.16.8.170" src_port="1085"/>
      <filter dst_ip="211.192.38.131" dst_port="80" src_ip="213.16.8.170" src_port="1084"/>
    </slice>
    <from sec="1094706825" usec="0"/>
    <to sec="1094706857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
5671[label="212.113.96.172;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6366[label="212.113.96.172;80pkt 80fpkt", shape=invtriangle, color=brown];
6761[label="212.113.96.172;80pkt 80fpkt", shape=invhouse, color=bisque];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.113.96.172:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2784: (1.86722%)&lt;BR/&gt; 4960: (0.622407%)&lt;BR/&gt; 4885: (0.622407%)&lt;BR/&gt; 4884: (0.622407%)&gt;];
}
5671--6366[label="1;80pkt 80fpkt"];
5671--6761[label="1;80pkt 80fpkt"];
6366--6761[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="212.113.96.172"/>
    </slice>
    <from sec="1094706029" usec="0"/>
    <to sec="1094706891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.44.4.174"/>
    </slice>
    <from sec="1094706341" usec="0"/>
    <to sec="1094706398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
5677[label="164.23.18.174;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6370[label="164.23.18.174;16pkt 16fpkt", shape=invtriangle, color=brown];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.18.174:*, 62.179.178.171:80}[56.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33555: (3.125%)&lt;BR/&gt; 33554: (3.125%)&lt;BR/&gt; 33553: (3.125%)&lt;BR/&gt; 33552: (3.125%)&gt;];
}
5677--6370[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="62.179.178.171" dst_port="80" src_ip="164.23.18.174"/>
    </slice>
    <from sec="1094706010" usec="0"/>
    <to sec="1094706436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_553{
style=filled;
color=gray75;
5683[label="136.84.3.176;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6374[label="136.84.3.176;30pkt 30fpkt", shape=invtriangle, color=brown];
stat553[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.3.176:*, 192.144.218.6:80}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50576: (1.66667%)&lt;BR/&gt; 50574: (1.66667%)&lt;BR/&gt; 50573: (1.66667%)&lt;BR/&gt; 50572: (1.66667%)&gt;];
}
5683--6374[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="192.144.218.6" dst_port="80" src_ip="136.84.3.176"/>
    </slice>
    <from sec="1094706680" usec="0"/>
    <to sec="1094706760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_554{
style=filled;
color=gray75;
5685[label="136.85.56.176;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6376[label="136.85.56.176;3pkt 3fpkt", shape=invtriangle, color=brown];
6765[label="136.85.56.176;4pkt 4fpkt", shape=invhouse, color=bisque];
stat554[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.56.176:2443, 200.104.160.200:80}[25%]&lt;BR/&gt;{136.85.56.176:2444, 200.104.160.200:80}[25%]&lt;BR/&gt;{136.85.56.176:2445, 200.104.160.200:80}[25%]&lt;BR/&gt;{136.85.56.176:2446, 200.104.160.200:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2446: (15%)&lt;BR/&gt; 2445: (15%)&lt;BR/&gt; 2444: (15%)&lt;BR/&gt; 2443: (5%)&gt;];
}
5685--6376[label="1;3pkt 3fpkt"];
5685--6765[label="1;3pkt 3fpkt"];
6376--6765[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.104.160.200" dst_port="80" src_ip="136.85.56.176" src_port="2446"/>
      <filter dst_ip="200.104.160.200" dst_port="80" src_ip="136.85.56.176" src_port="2445"/>
      <filter dst_ip="200.104.160.200" dst_port="80" src_ip="136.85.56.176" src_port="2444"/>
      <filter dst_ip="200.104.160.200" dst_port="80" src_ip="136.85.56.176" src_port="2443"/>
    </slice>
    <from sec="1094706511" usec="0"/>
    <to sec="1094706546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.3.1.177"/>
    </slice>
    <from sec="1094706689" usec="0"/>
    <to sec="1094706768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.252.105.177"/>
    </slice>
    <from sec="1094706650" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
5694[label="215.108.2.178;233pkt 233fpkt", shape=pentagon, color=darkviolet];
6383[label="215.108.2.178;233pkt 233fpkt", shape=invtriangle, color=brown];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.108.2.178:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5694--6383[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.108.2.178" src_port="1030"/>
    </slice>
    <from sec="1094706506" usec="0"/>
    <to sec="1094706537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
5707[label="197.165.64.181;240pkt 240fpkt", shape=pentagon, color=darkviolet];
6389[label="197.165.64.181;240pkt 240fpkt", shape=invtriangle, color=brown];
6770[label="197.165.64.181;240pkt 240fpkt", shape=invhouse, color=bisque];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.165.64.181:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4980: (0.208333%)&lt;BR/&gt; 4979: (0.208333%)&lt;BR/&gt; 4978: (0.208333%)&lt;BR/&gt; 4977: (0.208333%)&gt;];
}
5707--6389[label="1;240pkt 240fpkt"];
5707--6770[label="1;240pkt 240fpkt"];
6389--6770[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="197.165.64.181"/>
    </slice>
    <from sec="1094706579" usec="0"/>
    <to sec="1094706604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
5740[label="192.138.8.189;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6407[label="192.138.8.189;9pkt 9fpkt", shape=invtriangle, color=brown];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.138.8.189:80, 213.27.240.216:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33763: (5.26316%)&lt;BR/&gt; 33760: (5.26316%)&lt;BR/&gt; 33757: (5.26316%)&lt;BR/&gt; 33755: (5.26316%)&gt;];
}
5740--6407[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="213.27.240.216" src_ip="192.138.8.189" src_port="80"/>
    </slice>
    <from sec="1094706852" usec="0"/>
    <to sec="1094706890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
5741[label="219.47.136.189;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6408[label="219.47.136.189;1pkt 1fpkt", shape=invtriangle, color=brown];
6782[label="219.47.136.189;1pkt 1fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.47.136.189:80, 136.85.180.40:2176}[50%]&lt;BR/&gt;{219.47.136.189:80, 136.85.180.40:2177}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2177: (37.5%)&lt;BR/&gt; 2176: (12.5%)&gt;];
}
5741--6408[label="1;1pkt 1fpkt"];
5741--6782[label="1;1pkt 1fpkt"];
6408--6782[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.85.180.40" dst_port="2177" src_ip="219.47.136.189" src_port="80"/>
      <filter dst_ip="136.85.180.40" dst_port="2176" src_ip="219.47.136.189" src_port="80"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
5744[label="136.84.46.192;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6409[label="136.84.46.192;27pkt 27fpkt", shape=invtriangle, color=brown];
6783[label="136.84.46.192;26pkt 26fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.84.46.192:*, 63.101.132.63:80}[62.963%]&lt;BR/&gt;{136.84.46.192:*, 63.101.132.37:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1897: (1.875%)&lt;BR/&gt; 1896: (1.875%)&lt;BR/&gt; 1895: (1.875%)&lt;BR/&gt; 1894: (1.875%)&gt;];
}
5744--6409[label="1;27pkt 27fpkt"];
5744--6783[label="1;26pkt 26fpkt"];
6409--6783[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="63.101.132.63" dst_port="80" src_ip="136.84.46.192"/>
      <filter dst_ip="63.101.132.37" dst_port="80" src_ip="136.84.46.192"/>
    </slice>
    <from sec="1094706050" usec="0"/>
    <to sec="1094706630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
5751[label="192.144.216.192;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6411[label="192.144.216.192;10pkt 10fpkt", shape=invtriangle, color=brown];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.144.216.192:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 52819: (5.26316%)&lt;BR/&gt; 32789: (5.26316%)&lt;BR/&gt; 17709: (5.26316%)&lt;BR/&gt; 4869: (5.26316%)&gt;];
}
5751--6411[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="192.144.216.192" src_port="5050"/>
    </slice>
    <from sec="1094706007" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
5755[label="142.106.76.193;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6414[label="142.106.76.193;31pkt 31fpkt", shape=invtriangle, color=brown];
6787[label="142.106.76.193;30pkt 30fpkt", shape=invhouse, color=bisque];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.106.76.193:28154, *:*}[96.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28154: (48.3516%)&lt;BR/&gt; 64181: (1.64835%)&lt;BR/&gt; 63793: (1.64835%)&lt;BR/&gt; 63672: (1.64835%)&lt;BR/&gt; 55537: (1.64835%)&gt;];
}
5755--6414[label="1;30pkt 30fpkt"];
5755--6787[label="1;30pkt 30fpkt"];
6414--6787[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="142.106.76.193" src_port="28154"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.238.150.200"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
5780[label="145.89.228.201;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6431[label="145.89.228.201;16pkt 16fpkt", shape=invtriangle, color=brown];
6795[label="145.89.228.201;15pkt 15fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.89.228.201:*, 205.0.202.178:80}[31.25%]&lt;BR/&gt;{145.89.228.201:*, 205.0.202.177:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42710: (3.19149%)&lt;BR/&gt; 42709: (3.19149%)&lt;BR/&gt; 42708: (3.19149%)&lt;BR/&gt; 42707: (3.19149%)&gt;];
}
5780--6431[label="1;16pkt 16fpkt"];
5780--6795[label="1;15pkt 15fpkt"];
6431--6795[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="205.0.202.178" dst_port="80" src_ip="145.89.228.201"/>
      <filter dst_ip="205.0.202.177" dst_port="80" src_ip="145.89.228.201"/>
    </slice>
    <from sec="1094706542" usec="0"/>
    <to sec="1094706555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
5781[label="212.43.19.202;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6432[label="212.43.19.202;81pkt 81fpkt", shape=invtriangle, color=brown];
6796[label="212.43.19.202;80pkt 80fpkt", shape=invhouse, color=bisque];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.43.19.202:*, *:2745}[40.7407%]&lt;BR/&gt;{212.43.19.202:*, *:1025}[27.1605%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (20.2479%)&lt;BR/&gt; 1025: (13.6364%)&lt;BR/&gt; 6129: (9.29752%)&lt;BR/&gt; 80: (6.81818%)&lt;BR/&gt; 4101: (1.23967%)&gt;];
}
5781--6432[label="1;81pkt 81fpkt"];
5781--6796[label="1;80pkt 80fpkt"];
6432--6796[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="2745" src_ip="212.43.19.202"/>
      <filter dst_port="1025" src_ip="212.43.19.202"/>
    </slice>
    <from sec="1094706013" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
5782[label="142.99.24.202;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6433[label="142.99.24.202;4pkt 4fpkt", shape=invtriangle, color=brown];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.99.24.202:4941, 88.170.74.45:8884}[25%]&lt;BR/&gt;{142.99.24.202:4932, 88.104.225.74:15514}[25%]&lt;BR/&gt;{142.99.24.202:2819, 88.38.226.85:16567}[25%]&lt;BR/&gt;{142.99.24.202:4931, 88.6.24.189:9434}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16567: (12.5%)&lt;BR/&gt; 15514: (12.5%)&lt;BR/&gt; 9434: (12.5%)&lt;BR/&gt; 8884: (12.5%)&lt;BR/&gt; 4941: (12.5%)&gt;];
}
5782--6433[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="88.6.24.189" dst_port="9434" src_ip="142.99.24.202" src_port="4931"/>
      <filter dst_ip="88.38.226.85" dst_port="16567" src_ip="142.99.24.202" src_port="2819"/>
      <filter dst_ip="88.104.225.74" dst_port="15514" src_ip="142.99.24.202" src_port="4932"/>
      <filter dst_ip="88.170.74.45" dst_port="8884" src_ip="142.99.24.202" src_port="4941"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
5814[label="88.171.196.211;242pkt 242fpkt", shape=pentagon, color=darkviolet];
6451[label="88.171.196.211;242pkt 242fpkt", shape=invtriangle, color=brown];
6804[label="88.171.196.211;241pkt 241fpkt", shape=invhouse, color=bisque];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.171.196.211:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5814--6451[label="1;242pkt 242fpkt"];
5814--6804[label="1;241pkt 241fpkt"];
6451--6804[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="88.171.196.211" src_port="1026"/>
    </slice>
    <from sec="1094706512" usec="0"/>
    <to sec="1094706527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
5819[label="196.96.41.213;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6454[label="196.96.41.213;4pkt 4fpkt", shape=invtriangle, color=brown];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.96.41.213:1606, 142.240.111.168:1023}[25%]&lt;BR/&gt;{196.96.41.213:1598, 142.240.111.169:1023}[25%]&lt;BR/&gt;{196.96.41.213:1600, 142.240.111.170:1023}[25%]&lt;BR/&gt;{196.96.41.213:1607, 142.240.111.176:1023}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1023: (50%)&lt;BR/&gt; 1607: (12.5%)&lt;BR/&gt; 1606: (12.5%)&lt;BR/&gt; 1600: (12.5%)&lt;BR/&gt; 1598: (12.5%)&gt;];
}
5819--6454[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="142.240.111.176" dst_port="1023" src_ip="196.96.41.213" src_port="1607"/>
      <filter dst_ip="142.240.111.170" dst_port="1023" src_ip="196.96.41.213" src_port="1600"/>
      <filter dst_ip="142.240.111.169" dst_port="1023" src_ip="196.96.41.213" src_port="1598"/>
      <filter dst_ip="142.240.111.168" dst_port="1023" src_ip="196.96.41.213" src_port="1606"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
5827[label="194.25.59.215;119pkt 119fpkt", shape=pentagon, color=darkviolet];
6456[label="194.25.59.215;120pkt 120fpkt", shape=invtriangle, color=brown];
6807[label="194.25.59.215;119pkt 119fpkt", shape=invhouse, color=bisque];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.25.59.215:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5827--6456[label="1;119pkt 119fpkt"];
5827--6807[label="1;119pkt 119fpkt"];
6456--6807[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.25.59.215" src_port="1029"/>
    </slice>
    <from sec="1094706418" usec="0"/>
    <to sec="1094706440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
5837[label="193.107.67.217;248pkt 248fpkt", shape=pentagon, color=darkviolet];
6459[label="193.107.67.217;249pkt 249fpkt", shape=invtriangle, color=brown];
6810[label="193.107.67.217;248pkt 248fpkt", shape=invhouse, color=bisque];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.107.67.217:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5837--6459[label="1;248pkt 248fpkt"];
5837--6810[label="1;248pkt 248fpkt"];
6459--6810[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.107.67.217" src_port="1031"/>
    </slice>
    <from sec="1094706581" usec="0"/>
    <to sec="1094706604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,001,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
5838[label="60.199.131.217;119pkt 119fpkt", shape=pentagon, color=darkviolet];
6460[label="60.199.131.217;119pkt 119fpkt", shape=invtriangle, color=brown];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.199.131.217:*, *:9898}[51.2605%]&lt;BR/&gt;{60.199.131.217:*, *:5554}[48.7395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (25.6303%)&lt;BR/&gt; 5554: (24.3697%)&lt;BR/&gt; 2619: (0.420168%)&lt;BR/&gt; 2613: (0.420168%)&lt;BR/&gt; 2608: (0.420168%)&gt;];
}
5838--6460[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="60.199.131.217"/>
      <filter dst_port="5554" src_ip="60.199.131.217"/>
    </slice>
    <from sec="1094706709" usec="0"/>
    <to sec="1094706711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
5876[label="194.180.10.228;95pkt 95fpkt", shape=pentagon, color=darkviolet];
6480[label="194.180.10.228;94pkt 94fpkt", shape=invtriangle, color=brown];
6821[label="194.180.10.228;94pkt 94fpkt", shape=invhouse, color=bisque];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.180.10.228:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 3248: (1.06007%)&lt;BR/&gt; 4950: (0.530035%)&lt;BR/&gt; 4894: (0.530035%)&lt;BR/&gt; 4830: (0.530035%)&gt;];
}
5876--6480[label="1;94pkt 94fpkt"];
5876--6821[label="1;94pkt 94fpkt"];
6480--6821[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="194.180.10.228"/>
    </slice>
    <from sec="1094706004" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
5885[label="142.205.218.232;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6488[label="142.205.218.232;22pkt 22fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.205.218.232:*, 62.49.170.230:80}[52.1739%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1847: (2.27273%)&lt;BR/&gt; 1846: (2.27273%)&lt;BR/&gt; 1845: (2.27273%)&lt;BR/&gt; 1843: (2.27273%)&gt;];
}
5885--6488[label="0.954545;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="62.49.170.230" dst_port="80" src_ip="142.205.218.232"/>
    </slice>
    <from sec="1094706151" usec="0"/>
    <to sec="1094706775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_580{
style=filled;
color=gray75;
5894[label="137.12.6.235;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6492[label="137.12.6.235;4pkt 4fpkt", shape=invtriangle, color=brown];
6828[label="137.12.6.235;5pkt 5fpkt", shape=invhouse, color=bisque];
stat580[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.12.6.235:4904, 88.204.4.3:4662}[20%]&lt;BR/&gt;{137.12.6.235:4662, 88.104.235.19:3986}[20%]&lt;BR/&gt;{137.12.6.235:3784, 88.104.53.89:4662}[20%]&lt;BR/&gt;{137.12.6.235:4662, 88.104.182.166:4220}[20%]&lt;BR/&gt;{137.12.6.235:4662, 88.221.43.182:4407}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4904: (10.7143%)&lt;BR/&gt; 4407: (10.7143%)&lt;BR/&gt; 4220: (10.7143%)&lt;BR/&gt; 3784: (10.7143%)&gt;];
}
5894--6492[label="1;4pkt 4fpkt"];
5894--6828[label="1;5pkt 5fpkt"];
6492--6828[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="88.221.43.182" dst_port="4407" src_ip="137.12.6.235" src_port="4662"/>
      <filter dst_ip="88.104.182.166" dst_port="4220" src_ip="137.12.6.235" src_port="4662"/>
      <filter dst_ip="88.104.53.89" dst_port="4662" src_ip="137.12.6.235" src_port="3784"/>
      <filter dst_ip="88.104.235.19" dst_port="3986" src_ip="137.12.6.235" src_port="4662"/>
      <filter dst_ip="88.204.4.3" dst_port="4662" src_ip="137.12.6.235" src_port="4904"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
5904[label="196.152.139.239;251pkt 251fpkt", shape=pentagon, color=darkviolet];
6498[label="196.152.139.239;251pkt 251fpkt", shape=invtriangle, color=brown];
6836[label="196.152.139.239;250pkt 250fpkt", shape=invhouse, color=bisque];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.152.139.239:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5904--6498[label="1;251pkt 251fpkt"];
5904--6836[label="1;250pkt 250fpkt"];
6498--6836[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.152.139.239" src_port="1029"/>
    </slice>
    <from sec="1094706605" usec="0"/>
    <to sec="1094706626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
5918[label="164.23.53.243;43pkt 43fpkt", shape=pentagon, color=darkviolet];
6506[label="164.23.53.243;43pkt 43fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.53.243:*, 97.225.116.242:80}[58.1395%]&lt;BR/&gt;{164.23.53.243:*, 62.38.253.212:80}[27.907%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2369: (1.16279%)&lt;BR/&gt; 2367: (1.16279%)&lt;BR/&gt; 2365: (1.16279%)&lt;BR/&gt; 2363: (1.16279%)&gt;];
}
5918--6506[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="97.225.116.242" dst_port="80" src_ip="164.23.53.243"/>
      <filter dst_ip="62.38.253.212" dst_port="80" src_ip="164.23.53.243"/>
    </slice>
    <from sec="1094706710" usec="0"/>
    <to sec="1094706870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.225.68.247"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623913,1.44937,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.14.7.249"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
5935[label="160.161.110.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6519[label="160.161.110.249;1pkt 1fpkt", shape=invtriangle, color=brown];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.161.110.249:1036, 192.144.216.247:5050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1036: (50%)&gt;];
}
5935--6519[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.144.216.247" dst_port="5050" src_ip="160.161.110.249" src_port="1036"/>
    </slice>
    <from sec="1094706006" usec="0"/>
    <to sec="1094706888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
5936[label="136.85.180.249;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6520[label="136.85.180.249;2pkt 2fpkt", shape=invtriangle, color=brown];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.180.249:1273, 216.10.164.28:80}[33.3333%]&lt;BR/&gt;{136.85.180.249:1274, 216.10.164.28:80}[33.3333%]&lt;BR/&gt;{136.85.180.249:1275, 216.10.164.28:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1275: (20%)&lt;BR/&gt; 1274: (20%)&lt;BR/&gt; 1273: (10%)&gt;];
}
5936--6520[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.10.164.28" dst_port="80" src_ip="136.85.180.249" src_port="1275"/>
      <filter dst_ip="216.10.164.28" dst_port="80" src_ip="136.85.180.249" src_port="1274"/>
      <filter dst_ip="216.10.164.28" dst_port="80" src_ip="136.85.180.249" src_port="1273"/>
    </slice>
    <from sec="1094706555" usec="0"/>
    <to sec="1094706573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
5939[label="192.144.216.249;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6522[label="192.144.216.249;11pkt 11fpkt", shape=invtriangle, color=brown];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.144.216.249:5050, *:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (40.9091%)&lt;BR/&gt; 20: (9.09091%)&lt;BR/&gt; 3021: (4.54545%)&lt;BR/&gt; 1640: (4.54545%)&lt;BR/&gt; 1634: (4.54545%)&gt;];
}
5939--6522[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="192.144.216.249" src_port="5050"/>
    </slice>
    <from sec="1094706001" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.577935,1.37873,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_589{
style=filled;
color=gray75;
5941[label="212.4.161.250;120pkt 120fpkt", shape=pentagon, color=darkviolet];
6523[label="212.4.161.250;119pkt 119fpkt", shape=invtriangle, color=brown];
stat589[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.4.161.250:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5941--6523[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.4.161.250" src_port="1027"/>
    </slice>
    <from sec="1094706112" usec="0"/>
    <to sec="1094706133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788265,1.37769,001,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
5944[label="194.92.11.251;108pkt 108fpkt", shape=pentagon, color=darkviolet];
6524[label="194.92.11.251;107pkt 107fpkt", shape=invtriangle, color=brown];
6846[label="194.92.11.251;108pkt 108fpkt", shape=invhouse, color=bisque];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.92.11.251:*, *:9898}[62.037%]&lt;BR/&gt;{194.92.11.251:*, *:5554}[37.963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9898: (31.1146%)&lt;BR/&gt; 5554: (18.8854%)&lt;BR/&gt; 2111: (0.464396%)&lt;BR/&gt; 2106: (0.464396%)&lt;BR/&gt; 2092: (0.464396%)&gt;];
}
5944--6524[label="1;107pkt 107fpkt"];
5944--6846[label="1;108pkt 108fpkt"];
6524--6846[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="9898" src_ip="194.92.11.251"/>
      <filter dst_port="5554" src_ip="194.92.11.251"/>
    </slice>
    <from sec="1094706623" usec="0"/>
    <to sec="1094706625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.52.53.2"/>
    </slice>
    <from sec="1094706598" usec="0"/>
    <to sec="1094706609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.176.229.27"/>
    </slice>
    <from sec="1094706129" usec="0"/>
    <to sec="1094706176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="160.161.12.52"/>
    </slice>
    <from sec="1094706155" usec="0"/>
    <to sec="1094706900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.233.156.66"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="114.137.20.91"/>
    </slice>
    <from sec="1094706050" usec="0"/>
    <to sec="1094706889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.212.70.103"/>
    </slice>
    <from sec="1094706900" usec="0"/>
    <to sec="1094706901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.25.153.114"/>
    </slice>
    <from sec="1094706026" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.241.24.119"/>
    </slice>
    <from sec="1094706234" usec="0"/>
    <to sec="1094706832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
6696[label="136.85.141.120;14pkt 14fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.85.141.120:*, 61.3.10.116:80}[50%]&lt;BR/&gt;{136.85.141.120:*, 205.0.162.170:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2685: (3.57143%)&lt;BR/&gt; 2684: (3.57143%)&lt;BR/&gt; 2683: (3.57143%)&lt;BR/&gt; 2682: (3.57143%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="61.3.10.116" dst_port="80" src_ip="136.85.141.120"/>
      <filter dst_ip="205.0.162.170" dst_port="80" src_ip="136.85.141.120"/>
    </slice>
    <from sec="1094706338" usec="0"/>
    <to sec="1094706491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="160.161.5.140"/>
    </slice>
    <from sec="1094706697" usec="0"/>
    <to sec="1094706899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.252.105.177"/>
    </slice>
    <from sec="1094706650" usec="0"/>
    <to sec="1094706896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7573,1.49216,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="142.36.244.216"/>
    </slice>
    <from sec="1094706364" usec="0"/>
    <to sec="1094706383" usec="0"/>
  </anomaly>

</admd:annotation>
