<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="205.246.69.31"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="205.246.69.31"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="205.246.69.31"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="205.246.69.31"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="tcp" src_ip="205.246.69.31"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="udp" src_ip="205.246.69.31"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="205.246.69.31"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="205.246.69.31"/>
      <from sec="1165899664" usec="0"/>
      <to sec="1165900421" usec="0"/>
    </slice>
    <from sec="1165899664" usec="0"/>
    <to sec="1165900422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.206.33.1" dst_port="53" proto="tcp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="219.206.33.1" dst_port="53" proto="udp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="219.206.33.1" dst_port="25" proto="tcp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="219.206.33.1" dst_port="25" proto="udp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="219.206.33.1" dst_port="80" proto="tcp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="219.206.33.1" dst_port="80" proto="udp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="205.55.222.77" dst_port="25" proto="tcp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="205.55.222.77" dst_port="25" proto="udp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="151.227.119.40" src_port="2402"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="151.227.119.40" src_port="2402"/>
      <from sec="1165900381" usec="0"/>
      <to sec="1165900385" usec="0"/>
    </slice>
    <from sec="1165900380" usec="0"/>
    <to sec="1165900385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="tcp" src_ip="151.227.69.69"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="udp" src_ip="151.227.69.69"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="151.227.69.69"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="151.227.69.69"/>
      <from sec="1165899648" usec="0"/>
      <to sec="1165900487" usec="0"/>
    </slice>
    <from sec="1165899648" usec="0"/>
    <to sec="1165900487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="145.229.212.96"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="145.229.212.96"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="145.229.212.96"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="145.229.212.96"/>
      <from sec="1165899620" usec="0"/>
      <to sec="1165900495" usec="0"/>
    </slice>
    <from sec="1165899620" usec="0"/>
    <to sec="1165900495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="44.165.160.174" dst_port="80" proto="tcp" src_ip="151.227.110.134" src_port="1037"/>
      <filter dst_ip="44.165.160.174" dst_port="80" proto="udp" src_ip="151.227.110.134" src_port="1037"/>
      <filter dst_ip="44.165.160.174" dst_port="53" proto="tcp" src_ip="151.227.110.134" src_port="1037"/>
      <filter dst_ip="44.165.160.174" dst_port="53" proto="udp" src_ip="151.227.110.134" src_port="1037"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="151.227.110.134" src_port="1037"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="151.227.110.134" src_port="1037"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="151.227.110.134" src_port="1037"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="151.227.110.134" src_port="1037"/>
      <from sec="1165900418" usec="0"/>
      <to sec="1165900491" usec="0"/>
    </slice>
    <from sec="1165900417" usec="0"/>
    <to sec="1165900491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="151.227.82.174"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="151.227.82.174"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="151.227.82.174"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="151.227.82.174"/>
      <from sec="1165899783" usec="0"/>
      <to sec="1165900442" usec="0"/>
    </slice>
    <from sec="1165899783" usec="0"/>
    <to sec="1165900442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.6.71.42" dst_port="80" proto="tcp" src_ip="169.230.21.184" src_port="1154"/>
      <filter dst_ip="214.6.71.42" dst_port="80" proto="udp" src_ip="169.230.21.184" src_port="1154"/>
      <filter dst_ip="214.6.71.42" dst_port="53" proto="tcp" src_ip="169.230.21.184" src_port="1154"/>
      <filter dst_ip="214.6.71.42" dst_port="53" proto="udp" src_ip="169.230.21.184" src_port="1154"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="tcp" src_ip="169.230.21.184" src_port="1154"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="udp" src_ip="169.230.21.184" src_port="1154"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="169.230.21.184" src_port="1154"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="169.230.21.184" src_port="1154"/>
      <from sec="1165900486" usec="0"/>
      <to sec="1165900491" usec="0"/>
    </slice>
    <from sec="1165900486" usec="0"/>
    <to sec="1165900491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="69.170.85.51" dst_port="80" proto="tcp" src_ip="145.248.64.220" src_port="49802"/>
      <filter dst_ip="69.170.85.51" dst_port="80" proto="udp" src_ip="145.248.64.220" src_port="49802"/>
      <filter dst_ip="69.170.85.51" dst_port="53" proto="tcp" src_ip="145.248.64.220" src_port="49802"/>
      <filter dst_ip="69.170.85.51" dst_port="53" proto="udp" src_ip="145.248.64.220" src_port="49802"/>
      <from sec="1165900465" usec="0"/>
      <to sec="1165900470" usec="0"/>
    </slice>
    <from sec="1165900465" usec="0"/>
    <to sec="1165900470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="169.230.158.2" dst_port="25" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="169.230.158.2" dst_port="25" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.222.77" dst_port="25" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.222.77" dst_port="25" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.220.151" dst_port="25" proto="tcp" src_ip="52.36.45.244" src_port="63638"/>
      <filter dst_ip="205.55.220.151" dst_port="25" proto="udp" src_ip="52.36.45.244" src_port="63638"/>
      <from sec="1165900482" usec="0"/>
      <to sec="1165900499" usec="0"/>
    </slice>
    <from sec="1165900482" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="tcp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="udp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="tcp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="udp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="tcp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="udp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="tcp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="53" proto="udp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="tcp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="udp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="tcp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="udp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="tcp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="udp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="tcp" src_ip="169.230.158.2" src_port="56110"/>
      <filter dst_ip="169.230.158.2" dst_port="80" proto="udp" src_ip="169.230.158.2" src_port="56110"/>
      <from sec="1165899852" usec="0"/>
      <to sec="1165900499" usec="0"/>
    </slice>
    <from sec="1165899852" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="205.55.222.67"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="205.55.222.67"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="205.55.222.67"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="205.55.222.67"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="205.55.222.67"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="205.55.222.67"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="205.55.222.67"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="205.55.222.67"/>
      <from sec="1165899600" usec="0"/>
      <to sec="1165900499" usec="0"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="205.55.220.151"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="205.55.220.151"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="205.55.220.151"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="205.55.220.151"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="205.55.220.151"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="205.55.220.151"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="205.55.220.151"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="205.55.220.151"/>
      <from sec="1165899600" usec="0"/>
      <to sec="1165900499" usec="0"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.82.105.138" dst_port="80" proto="tcp" src_ip="169.230.34.47" src_port="8000"/>
      <filter dst_ip="214.82.105.138" dst_port="80" proto="udp" src_ip="169.230.34.47" src_port="8000"/>
      <filter dst_ip="214.82.105.138" dst_port="53" proto="tcp" src_ip="169.230.34.47" src_port="8000"/>
      <filter dst_ip="214.82.105.138" dst_port="53" proto="udp" src_ip="169.230.34.47" src_port="8000"/>
      <filter dst_ip="205.249.153.247" dst_port="80" proto="tcp" src_ip="169.230.34.47" src_port="8000"/>
      <filter dst_ip="205.249.153.247" dst_port="80" proto="udp" src_ip="169.230.34.47" src_port="8000"/>
      <filter dst_ip="205.249.153.247" dst_port="53" proto="tcp" src_ip="169.230.34.47" src_port="8000"/>
      <filter dst_ip="205.249.153.247" dst_port="53" proto="udp" src_ip="169.230.34.47" src_port="8000"/>
      <from sec="1165900118" usec="0"/>
      <to sec="1165900123" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.82.105.138" dst_port="80" proto="tcp" src_ip="210.66.112.95" src_port="8000"/>
      <filter dst_ip="214.82.105.138" dst_port="80" proto="udp" src_ip="210.66.112.95" src_port="8000"/>
      <filter dst_ip="214.82.105.138" dst_port="53" proto="tcp" src_ip="210.66.112.95" src_port="8000"/>
      <filter dst_ip="214.82.105.138" dst_port="53" proto="udp" src_ip="210.66.112.95" src_port="8000"/>
      <filter dst_ip="205.249.153.247" dst_port="80" proto="tcp" src_ip="210.66.112.95" src_port="8000"/>
      <filter dst_ip="205.249.153.247" dst_port="80" proto="udp" src_ip="210.66.112.95" src_port="8000"/>
      <filter dst_ip="205.249.153.247" dst_port="53" proto="tcp" src_ip="210.66.112.95" src_port="8000"/>
      <filter dst_ip="205.249.153.247" dst_port="53" proto="udp" src_ip="210.66.112.95" src_port="8000"/>
      <from sec="1165900118" usec="0"/>
      <to sec="1165900123" usec="0"/>
    </slice>
    <from sec="1165900118" usec="0"/>
    <to sec="1165900123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="tcp" src_ip="151.227.149.105"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="udp" src_ip="151.227.149.105"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="151.227.149.105"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="151.227.149.105"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="tcp" src_ip="151.227.149.105"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="udp" src_ip="151.227.149.105"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="151.227.149.105"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="151.227.149.105"/>
      <from sec="1165900251" usec="0"/>
      <to sec="1165900254" usec="0"/>
    </slice>
    <from sec="1165900251" usec="0"/>
    <to sec="1165900254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="tcp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="udp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="tcp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="udp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="151.227.105.129"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="151.227.105.129"/>
      <from sec="1165900098" usec="0"/>
      <to sec="1165900106" usec="0"/>
    </slice>
    <from sec="1165900098" usec="0"/>
    <to sec="1165900106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="205.246.71.157"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="205.246.71.157"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="205.246.71.157"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="205.246.71.157"/>
      <from sec="1165899651" usec="0"/>
      <to sec="1165900115" usec="0"/>
    </slice>
    <from sec="1165899651" usec="0"/>
    <to sec="1165900115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="151.227.110.196"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="151.227.110.196"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="151.227.110.196"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="151.227.110.196"/>
      <from sec="1165900159" usec="0"/>
      <to sec="1165900482" usec="0"/>
    </slice>
    <from sec="1165900159" usec="0"/>
    <to sec="1165900482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.20.156.99" src_port="1027"/>
      <from sec="1165899944" usec="0"/>
      <to sec="1165899948" usec="0"/>
    </slice>
    <from sec="1165899944" usec="0"/>
    <to sec="1165899948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="45.225.154.22"/>
      <from sec="1165900232" usec="0"/>
      <to sec="1165900233" usec="0"/>
    </slice>
    <from sec="1165900230" usec="0"/>
    <to sec="1165900233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="205.255.88.25"/>
      <from sec="1165900159" usec="0"/>
      <to sec="1165900160" usec="0"/>
    </slice>
    <from sec="1165900159" usec="0"/>
    <to sec="1165900162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1027" proto="udp" src_ip="202.42.2.37"/>
      <filter dst_port="1026" proto="udp" src_ip="202.42.2.37"/>
      <from sec="1165899815" usec="0"/>
      <to sec="1165899816" usec="0"/>
    </slice>
    <from sec="1165899814" usec="0"/>
    <to sec="1165899816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="151.227.105.56"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="151.227.105.56"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="151.227.105.56"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="151.227.105.56"/>
      <filter dst_ip="205.55.222.77" dst_port="25" proto="tcp" src_ip="151.227.105.56"/>
      <filter dst_ip="205.55.222.77" dst_port="25" proto="udp" src_ip="151.227.105.56"/>
      <from sec="1165900180" usec="0"/>
      <to sec="1165900183" usec="0"/>
    </slice>
    <from sec="1165900178" usec="0"/>
    <to sec="1165900183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="69.4.232.126"/>
      <from sec="1165900159" usec="0"/>
      <to sec="1165900160" usec="0"/>
    </slice>
    <from sec="1165900159" usec="0"/>
    <to sec="1165900162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="221.22.131.157"/>
      <from sec="1165899615" usec="0"/>
      <to sec="1165899616" usec="0"/>
    </slice>
    <from sec="1165899615" usec="0"/>
    <to sec="1165899617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="tcp" src_ip="197.91.179.159"/>
      <filter dst_port="1026" proto="udp" src_ip="197.91.179.159"/>
      <from sec="1165900159" usec="0"/>
      <to sec="1165900160" usec="0"/>
    </slice>
    <from sec="1165900159" usec="0"/>
    <to sec="1165900162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="49.142.217.219"/>
      <from sec="1165899615" usec="0"/>
      <to sec="1165899616" usec="0"/>
    </slice>
    <from sec="1165899615" usec="0"/>
    <to sec="1165899617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="160.129.224.229"/>
      <from sec="1165900232" usec="0"/>
      <to sec="1165900233" usec="0"/>
    </slice>
    <from sec="1165900232" usec="0"/>
    <to sec="1165900234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="64.151.139.106" proto="icmp"/>
      <filter dst_ip="64.151.139.106" proto="icmp"/>
      <filter dst_ip="64.151.139.106" proto="icmp"/>
      <filter dst_ip="64.151.139.106" proto="icmp"/>
      <from sec="1165900411" usec="0"/>
      <to sec="1165900424" usec="0"/>
    </slice>
    <from sec="1165900411" usec="0"/>
    <to sec="1165900424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.229.173.28" dst_port="53" proto="tcp" src_ip="219.206.44.39" src_port="80"/>
      <filter dst_ip="145.229.173.28" dst_port="53" proto="udp" src_ip="219.206.44.39" src_port="80"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="219.206.44.39" src_port="80"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="219.206.44.39" src_port="80"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="219.206.44.39" src_port="80"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="219.206.44.39" src_port="80"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="219.206.44.39" src_port="80"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="219.206.44.39" src_port="80"/>
      <from sec="1165899624" usec="0"/>
      <to sec="1165899629" usec="0"/>
    </slice>
    <from sec="1165899624" usec="0"/>
    <to sec="1165899629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="tcp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.222.77" dst_port="53" proto="udp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="tcp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.222.77" dst_port="80" proto="udp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="tcp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="udp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="tcp" src_ip="151.227.130.98"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="udp" src_ip="151.227.130.98"/>
      <from sec="1165899835" usec="0"/>
      <to sec="1165899839" usec="0"/>
    </slice>
    <from sec="1165899835" usec="0"/>
    <to sec="1165899840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03245,2.23882,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="tcp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.220.151" dst_port="53" proto="udp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="tcp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.220.151" dst_port="80" proto="udp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.220.151" dst_port="25" proto="tcp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.220.151" dst_port="25" proto="udp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="tcp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.222.67" dst_port="53" proto="udp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="tcp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.222.67" dst_port="80" proto="udp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.222.67" dst_port="25" proto="tcp" src_ip="145.229.151.152"/>
      <filter dst_ip="205.55.222.67" dst_port="25" proto="udp" src_ip="145.229.151.152"/>
      <from sec="1165899704" usec="0"/>
      <to sec="1165899709" usec="0"/>
    </slice>
    <from sec="1165899704" usec="0"/>
    <to sec="1165899709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14319,2.18538,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
84[label="169.230.37.128s;2pkt 2fpkt", shape=rectangle, color=red];
237[label="145.229.151.153s;1pkt 1fpkt", shape=rectangle, color=red];
5387[label="58.100.249.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.100.249.117:1286, 169.230.158.2:80}[50%]&lt;BR/&gt;{169.230.37.128:1329, 45.115.41.54:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1286: (37.5%)&lt;BR/&gt; 1329: (12.5%)&gt;];
}
84--237[label="1;1pkt 1fpkt"];
84--5387[label="1;1pkt 1fpkt"];
237--5387[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="45.115.41.54" dst_port="80" src_ip="169.230.37.128" src_port="1329"/>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="58.100.249.117" src_port="1286"/>
    </slice>
    <from sec="1165900387" usec="0"/>
    <to sec="1165900470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3091,2.13838,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
217[label="151.227.68.200s;1pkt 1fpkt", shape=rectangle, color=red];
347[label="169.230.102.100;d;5pkt 5fpkt", shape=diamond, color=yellow];
348[label="218.106.119.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
5944[label="169.230.102.100;d;5pkt 5fpkt", shape=hexagon, color=black];
6214[label="218.106.119.205;s;2pkt 2fpkt", shape=hexagon, color=black];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.217.210.50:7000, 169.230.102.100:1418}[20%]&lt;BR/&gt;{218.106.119.200:80, 169.230.102.100:1843}[20%]&lt;BR/&gt;{218.106.119.200:80, 169.230.102.100:1844}[20%]&lt;BR/&gt;{218.106.119.205:1755, 169.230.102.100:1849}[20%]&lt;BR/&gt;{218.106.119.205:2489, 169.230.102.100:1851}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2489: (16.6667%)&lt;BR/&gt; 1851: (16.6667%)&lt;BR/&gt; 1849: (13.3333%)&lt;BR/&gt; 1755: (13.3333%)&lt;BR/&gt; 80: (13.3333%)&gt;];
}
217--347[label="1;1pkt 1fpkt"];
217--348[label="1;1pkt 1fpkt"];
217--5944[label="1;1pkt 1fpkt"];
217--6214[label="1;1pkt 1fpkt"];
347--348[label="1;2pkt 2fpkt"];
347--5944[label="1;5pkt 5fpkt"];
347--6214[label="1;2pkt 2fpkt"];
348--5944[label="1;2pkt 2fpkt"];
348--6214[label="1;2pkt 2fpkt"];
5944--6214[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.102.100" dst_port="1851" src_ip="218.106.119.205" src_port="2489"/>
      <filter dst_ip="169.230.102.100" dst_port="1849" src_ip="218.106.119.205" src_port="1755"/>
      <filter dst_ip="169.230.102.100" dst_port="1844" src_ip="218.106.119.200" src_port="80"/>
      <filter dst_ip="169.230.102.100" dst_port="1843" src_ip="218.106.119.200" src_port="80"/>
      <filter dst_ip="169.230.102.100" dst_port="1418" src_ip="218.217.210.50" src_port="7000"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1165899600" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="46577032" usec="0"/>
    <to sec="46577032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1165899600" usec="0"/>
      <to sec="1165900338" usec="0"/>
    </slice>
    <from sec="46577032" usec="0"/>
    <to sec="46577032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
722[label="204.6.226.123;s;9pkt 9fpkt", shape=diamond, color=yellow];
723[label="204.88.235.149;d;9pkt 9fpkt", shape=diamond, color=yellow];
5528[label="204.6.226.123;s;7pkt 7fpkt", shape=hexagon, color=black];
6871[label="204.88.235.149;d;7pkt 7fpkt", shape=hexagon, color=black];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.226.123:119, 204.88.235.149:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (50%)&lt;BR/&gt; 60652: (6.25%)&lt;BR/&gt; 55791: (6.25%)&lt;BR/&gt; 38754: (6.25%)&lt;BR/&gt; 34890: (6.25%)&gt;];
}
722--723[label="1;9pkt 9fpkt"];
722--5528[label="1;7pkt 7fpkt"];
722--6871[label="1;7pkt 7fpkt"];
723--5528[label="1;7pkt 7fpkt"];
723--6871[label="1;7pkt 7fpkt"];
5528--6871[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="204.88.235.149" src_ip="204.6.226.123" src_port="119"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
596[label="151.227.92.4;s;9pkt 9fpkt", shape=diamond, color=yellow];
789[label="34.141.175.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
5741[label="151.227.92.4;s;9pkt 9fpkt", shape=hexagon, color=black];
6006[label="34.141.175.132;d;1pkt 1fpkt", shape=hexagon, color=black];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.92.4:*, 204.96.242.68:80}[22.2222%]&lt;BR/&gt;{151.227.92.4:*, 204.96.242.103:8080}[22.2222%]&lt;BR/&gt;{151.227.92.4:*, 204.96.242.152:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 19101: (10%)&lt;BR/&gt; 8080: (10%)&lt;BR/&gt; 3253: (10%)&lt;BR/&gt; 19601: (5%)&gt;];
}
596--789[label="1;1pkt 1fpkt"];
596--5741[label="1;9pkt 9fpkt"];
596--6006[label="1;1pkt 1fpkt"];
789--5741[label="1;1pkt 1fpkt"];
789--6006[label="1;1pkt 1fpkt"];
5741--6006[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.96.242.152" dst_port="80" src_ip="151.227.92.4"/>
      <filter dst_ip="204.96.242.103" dst_port="8080" src_ip="151.227.92.4"/>
      <filter dst_ip="204.96.242.68" dst_port="80" src_ip="151.227.92.4"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14319,2.18538,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
91[label="216.239.108.139s;1pkt 1fpkt", shape=rectangle, color=red];
896[label="216.239.108.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.239.108.139:80, 151.227.105.51:1726}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1726: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
91--896[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.105.51" dst_port="1726" src_ip="216.239.108.139" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165899692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
942[label="204.6.224.165;s;524pkt 524fpkt", shape=diamond, color=yellow];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.224.165:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
942--3152[label="0.00458716;1pkt 1fpkt"];
942--6558[label="0.00458716;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="204.6.224.165"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
1120[label="145.229.168.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
1123[label="44.165.131.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
5641[label="145.229.168.12;d;1pkt 1fpkt", shape=hexagon, color=black];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.165.131.90:1935, 145.229.168.12:2452}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2452: (50%)&lt;BR/&gt; 1935: (50%)&gt;];
}
1120--1123[label="1;1pkt 1fpkt"];
1120--5641[label="1;1pkt 1fpkt"];
1123--5641[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.168.12" dst_port="2452" src_ip="44.165.131.90" src_port="1935"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
1153[label="34.180.108.83;d;11pkt 11fpkt", shape=diamond, color=yellow];
1154[label="204.6.251.89;s;11pkt 11fpkt", shape=diamond, color=yellow];
5646[label="34.180.108.83;d;11pkt 11fpkt", shape=hexagon, color=black];
5647[label="204.6.251.89;s;11pkt 11fpkt", shape=hexagon, color=black];
9599[label="204.6.251.89;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12221[label="204.6.251.89;11pkt 11fpkt", shape=invtriangle, color=brown];
13449[label="204.6.251.89;11pkt 11fpkt", shape=invhouse, color=bisque];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.251.89:*, 34.180.108.83:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1044: (4.54545%)&lt;BR/&gt; 1043: (4.54545%)&lt;BR/&gt; 1042: (4.54545%)&lt;BR/&gt; 1041: (4.54545%)&gt;];
}
1153--1154[label="1;11pkt 11fpkt"];
1153--5646[label="1;11pkt 11fpkt"];
1153--5647[label="1;11pkt 11fpkt"];
1153--9599[label="1;11pkt 11fpkt"];
1153--12221[label="1;11pkt 11fpkt"];
1153--13449[label="1;11pkt 11fpkt"];
1154--5646[label="1;11pkt 11fpkt"];
1154--5647[label="1;11pkt 11fpkt"];
1154--9599[label="1;11pkt 11fpkt"];
1154--12221[label="1;11pkt 11fpkt"];
1154--13449[label="1;11pkt 11fpkt"];
5646--5647[label="1;11pkt 11fpkt"];
5646--9599[label="1;11pkt 11fpkt"];
5646--12221[label="1;11pkt 11fpkt"];
5646--13449[label="1;11pkt 11fpkt"];
5647--9599[label="1;11pkt 11fpkt"];
5647--12221[label="1;11pkt 11fpkt"];
5647--13449[label="1;11pkt 11fpkt"];
9599--12221[label="1;11pkt 11fpkt"];
9599--13449[label="1;11pkt 11fpkt"];
12221--13449[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="34.180.108.83" dst_port="80" src_ip="204.6.251.89"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165899618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="151.227.91.76"/>
      <from sec="1165899607" usec="0"/>
      <to sec="1165899700" usec="0"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165899700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="151.227.91.76"/>
      <from sec="1165899607" usec="0"/>
      <to sec="1165899700" usec="0"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165899700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
1266[label="145.252.156.25;d;70pkt 70fpkt", shape=diamond, color=yellow];
1267[label="34.138.185.133;s;70pkt 70fpkt", shape=diamond, color=yellow];
5678[label="34.138.185.133;s;66pkt 66fpkt", shape=hexagon, color=black];
10110[label="34.138.185.133;74pkt 74fpkt", shape=pentagon, color=darkviolet];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.138.185.133:*, 145.252.156.25:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4508: (0.714286%)&lt;BR/&gt; 4507: (0.714286%)&lt;BR/&gt; 4506: (0.714286%)&lt;BR/&gt; 4505: (0.714286%)&gt;];
}
1266--1267[label="1;70pkt 70fpkt"];
1266--5678[label="1;66pkt 66fpkt"];
1266--10110[label="1;70pkt 70fpkt"];
1267--5678[label="1;66pkt 66fpkt"];
1267--10110[label="1;70pkt 70fpkt"];
5678--10110[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="145.252.156.25" dst_port="443" src_ip="34.138.185.133"/>
    </slice>
    <from sec="1165899639" usec="0"/>
    <to sec="1165900381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621137,2.15718,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
1281[label="41.152.130.64;d;260pkt 260fpkt", shape=diamond, color=yellow];
1282[label="145.248.11.163;s;260pkt 260fpkt", shape=diamond, color=yellow];
10532[label="145.248.11.163;262pkt 262fpkt", shape=pentagon, color=darkviolet];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.11.163:*, 41.152.130.64:80}[99.2366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1363: (0.191816%)&lt;BR/&gt; 1362: (0.191816%)&lt;BR/&gt; 1361: (0.191816%)&lt;BR/&gt; 1360: (0.191816%)&gt;];
}
1281--1282[label="1;260pkt 260fpkt"];
1281--10532[label="1;260pkt 260fpkt"];
1282--10532[label="1;260pkt 260fpkt"];
</description>
    <slice>
      <filter dst_ip="41.152.130.64" dst_port="80" src_ip="145.248.11.163"/>
    </slice>
    <from sec="1165899646" usec="0"/>
    <to sec="1165900314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
517[label="129.202.4.14;s;10pkt 10fpkt", shape=diamond, color=yellow];
1414[label="204.18.71.231;d;2pkt 2fpkt", shape=diamond, color=yellow];
5470[label="129.202.4.14;s;10pkt 10fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.202.4.14:*, 204.18.188.96:110}[40%]&lt;BR/&gt;{129.202.4.14:*, 204.18.184.196:110}[40%]&lt;BR/&gt;{129.202.4.14:4764, 204.18.71.231:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (36.3636%)&lt;BR/&gt; 4764: (13.6364%)&lt;BR/&gt; 29199: (6.81818%)&lt;BR/&gt; 1930: (6.81818%)&lt;BR/&gt; 4128: (4.54545%)&gt;];
}
517--1414[label="1;2pkt 2fpkt"];
517--5470[label="1;10pkt 10fpkt"];
1414--5470[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.18.184.196" dst_port="110" src_ip="129.202.4.14"/>
      <filter dst_ip="204.18.188.96" dst_port="110" src_ip="129.202.4.14"/>
      <filter dst_ip="204.18.71.231" src_ip="129.202.4.14" src_port="4764"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
1456[label="41.134.248.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
1457[label="151.227.177.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
5984[label="151.227.177.179;d;1pkt 1fpkt", shape=hexagon, color=black];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.134.248.232:8500, 151.227.177.179:49650}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49650: (50%)&lt;BR/&gt; 8500: (50%)&gt;];
}
1456--1457[label="1;1pkt 1fpkt"];
1456--5984[label="1;1pkt 1fpkt"];
1457--5984[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.177.179" dst_port="49650" src_ip="41.134.248.232" src_port="8500"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
1470[label="169.230.129.54;d;2pkt 2fpkt", shape=diamond, color=yellow];
1471[label="42.103.75.246;s;2pkt 2fpkt", shape=diamond, color=yellow];
5751[label="42.103.75.246;s;2pkt 2fpkt", shape=hexagon, color=black];
7543[label="169.230.129.54;d;2pkt 2fpkt", shape=hexagon, color=black];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.103.75.246:0, 169.230.129.54:0}[50%]&lt;BR/&gt;{42.103.75.246:2138, 169.230.129.54:1723}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 2138: (25%)&lt;BR/&gt; 1723: (25%)&gt;];
}
1470--1471[label="1;2pkt 2fpkt"];
1470--5751[label="1;2pkt 2fpkt"];
1470--7543[label="1;2pkt 2fpkt"];
1471--5751[label="1;2pkt 2fpkt"];
1471--7543[label="1;2pkt 2fpkt"];
5751--7543[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.129.54" dst_port="1723" src_ip="42.103.75.246" src_port="2138"/>
      <filter dst_ip="169.230.129.54" src_ip="42.103.75.246"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
708[label="145.229.82.147;s;10pkt 10fpkt", shape=diamond, color=yellow];
1483[label="50.50.184.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
6869[label="145.229.82.147;s;9pkt 9fpkt", shape=hexagon, color=black];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.82.147:*, *:5190}[50%]&lt;BR/&gt;{145.229.82.147:*, 43.180.44.2:995}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (25%)&lt;BR/&gt; 51781: (7.5%)&lt;BR/&gt; 995: (7.5%)&lt;BR/&gt; 993: (7.5%)&lt;BR/&gt; 52143: (5%)&gt;];
}
708--1483[label="1;1pkt 1fpkt"];
708--2079[label="0.1;1pkt 1fpkt"];
708--6869[label="1;9pkt 9fpkt"];
1483--6869[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="5190" src_ip="145.229.82.147"/>
      <filter dst_ip="43.180.44.2" dst_port="995" src_ip="145.229.82.147"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.130.168.201"/>
      <from sec="1165900167" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="1165900167" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.130.168.201"/>
      <from sec="1165900167" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="1165900167" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3091,2.13838,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
51[label="198.73.77.81s;1pkt 1fpkt", shape=rectangle, color=red];
1905[label="169.230.34.32;d;3pkt 3fpkt", shape=diamond, color=yellow];
2038[label="198.73.77.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
5932[label="198.73.77.81;s;1pkt 1fpkt", shape=hexagon, color=black];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.73.77.81:80, 169.230.34.32:40120}[33.3333%]&lt;BR/&gt;{41.82.25.148:80, 169.230.34.32:40061}[33.3333%]&lt;BR/&gt;{41.82.25.148:80, 169.230.34.32:40062}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40120: (33.3333%)&lt;BR/&gt; 40062: (8.33333%)&lt;BR/&gt; 40061: (8.33333%)&gt;];
}
51--1905[label="1;1pkt 1fpkt"];
51--2038[label="1;1pkt 1fpkt"];
51--5932[label="1;1pkt 1fpkt"];
1905--2038[label="1;1pkt 1fpkt"];
1905--5932[label="1;1pkt 1fpkt"];
2038--5932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.34.32" dst_port="40062" src_ip="41.82.25.148" src_port="80"/>
      <filter dst_ip="169.230.34.32" dst_port="40061" src_ip="41.82.25.148" src_port="80"/>
      <filter dst_ip="169.230.34.32" dst_port="40120" src_ip="198.73.77.81" src_port="80"/>
    </slice>
    <from sec="1165899665" usec="0"/>
    <to sec="1165899860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.239.108.155"/>
      <from sec="1165900384" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="1165900384" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
365[label="145.229.5.118;s;228pkt 228fpkt", shape=diamond, color=yellow];
699[label="214.167.23.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
1503[label="34.2.81.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
1504[label="12.201.239.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
1611[label="46.38.225.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
1927[label="46.246.175.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
1946[label="45.207.83.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
2192[label="218.228.218.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
2467[label="207.102.219.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
4457[label="40.100.86.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
5314[label="65.52.1.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
6043[label="46.38.225.44;d;1pkt 1fpkt", shape=hexagon, color=black];
6819[label="145.229.5.118;s;228pkt 228fpkt", shape=hexagon, color=black];
7999[label="46.246.175.218;d;1pkt 1fpkt", shape=hexagon, color=black];
8062[label="65.52.1.217;d;1pkt 1fpkt", shape=hexagon, color=black];
9928[label="145.229.5.118;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12389[label="145.229.5.118;13pkt 13fpkt", shape=invtriangle, color=brown];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.5.118:13274, *:*}[34.0611%]&lt;BR/&gt;{145.229.5.118:17977, *:4672}[31.441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17977: (28.0808%)&lt;BR/&gt; 13274: (19.1919%)&lt;BR/&gt; 4672: (14.5455%)&lt;BR/&gt; 4662: (0.808081%)&lt;BR/&gt; 5971: (0.606061%)&gt;];
}
365--699[label="1;1pkt 1fpkt"];
365--1503[label="1;1pkt 1fpkt"];
365--1504[label="1;1pkt 1fpkt"];
365--1611[label="1;1pkt 1fpkt"];
365--1927[label="1;1pkt 1fpkt"];
365--1946[label="1;1pkt 1fpkt"];
365--2192[label="1;1pkt 1fpkt"];
365--2467[label="1;1pkt 1fpkt"];
365--4457[label="1;1pkt 1fpkt"];
365--5314[label="1;1pkt 1fpkt"];
365--6043[label="1;1pkt 1fpkt"];
365--6819[label="1;228pkt 228fpkt"];
365--7999[label="1;1pkt 1fpkt"];
365--8062[label="1;1pkt 1fpkt"];
365--9928[label="0.923077;12pkt 12fpkt"];
365--12389[label="0.923077;12pkt 12fpkt"];
699--6819[label="1;1pkt 1fpkt"];
699--9928[label="1;1pkt 1fpkt"];
699--12389[label="1;1pkt 1fpkt"];
1503--6819[label="1;1pkt 1fpkt"];
1503--9928[label="1;1pkt 1fpkt"];
1503--12389[label="1;1pkt 1fpkt"];
1504--6819[label="1;1pkt 1fpkt"];
1504--9928[label="1;1pkt 1fpkt"];
1504--12389[label="1;1pkt 1fpkt"];
1611--6043[label="1;1pkt 1fpkt"];
1611--6819[label="1;1pkt 1fpkt"];
1927--6819[label="1;1pkt 1fpkt"];
1927--7999[label="1;1pkt 1fpkt"];
1927--9928[label="1;1pkt 1fpkt"];
1927--12389[label="1;1pkt 1fpkt"];
1946--6819[label="1;1pkt 1fpkt"];
2192--6819[label="1;1pkt 1fpkt"];
2192--9928[label="1;1pkt 1fpkt"];
2192--12389[label="1;1pkt 1fpkt"];
2467--6819[label="1;1pkt 1fpkt"];
4457--6819[label="1;1pkt 1fpkt"];
5314--6819[label="1;1pkt 1fpkt"];
5314--8062[label="1;1pkt 1fpkt"];
5314--9928[label="1;1pkt 1fpkt"];
5314--12389[label="1;1pkt 1fpkt"];
6043--6819[label="1;1pkt 1fpkt"];
6819--7999[label="1;1pkt 1fpkt"];
6819--8062[label="1;1pkt 1fpkt"];
6819--9928[label="0.923077;12pkt 12fpkt"];
6819--12389[label="0.923077;12pkt 12fpkt"];
7999--9928[label="1;1pkt 1fpkt"];
7999--12389[label="1;1pkt 1fpkt"];
8062--9928[label="1;1pkt 1fpkt"];
8062--12389[label="1;1pkt 1fpkt"];
9928--12389[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="145.229.5.118" src_port="13274"/>
      <filter dst_port="4672" src_ip="145.229.5.118" src_port="17977"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13498,2.09542,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
233[label="145.248.18.129s;28pkt 28fpkt", shape=rectangle, color=red];
1950[label="145.248.18.129;s;88pkt 88fpkt", shape=diamond, color=yellow];
10031[label="145.248.18.129;94pkt 94fpkt", shape=pentagon, color=darkviolet];
12435[label="145.248.18.129;94pkt 94fpkt", shape=invtriangle, color=brown];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.18.129:*, 204.18.121.53:80}[55.3191%]&lt;BR/&gt;{145.248.18.129:*, 204.18.121.56:80}[36.1702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1683: (0.657895%)&lt;BR/&gt; 1682: (0.657895%)&lt;BR/&gt; 1681: (0.657895%)&lt;BR/&gt; 1680: (0.657895%)&gt;];
}
233--1950[label="1;28pkt 28fpkt"];
233--10031[label="1;28pkt 28fpkt"];
233--12435[label="1;28pkt 28fpkt"];
1950--10031[label="1;88pkt 88fpkt"];
1950--12435[label="1;88pkt 88fpkt"];
10031--12435[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="204.18.121.53" dst_port="80" src_ip="145.248.18.129"/>
      <filter dst_ip="204.18.121.56" dst_port="80" src_ip="145.248.18.129"/>
    </slice>
    <from sec="1165899705" usec="0"/>
    <to sec="1165900409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.211.13.175"/>
      <from sec="1165900240" usec="0"/>
      <to sec="1165900286" usec="0"/>
    </slice>
    <from sec="1165900240" usec="0"/>
    <to sec="1165900286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
1992[label="205.0.2.45;d;75pkt 75fpkt", shape=diamond, color=yellow];
1993[label="139.152.200.227;s;76pkt 76fpkt", shape=diamond, color=yellow];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.200.227:*, 205.0.2.45:80}[98.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58402: (0.993377%)&lt;BR/&gt; 58401: (0.662252%)&lt;BR/&gt; 58398: (0.662252%)&lt;BR/&gt; 58397: (0.662252%)&gt;];
}
1992--1993[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="205.0.2.45" dst_port="80" src_ip="139.152.200.227"/>
    </slice>
    <from sec="1165899729" usec="0"/>
    <to sec="1165900316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.239.108.216"/>
      <from sec="1165900378" usec="0"/>
      <to sec="1165900427" usec="0"/>
    </slice>
    <from sec="1165900378" usec="0"/>
    <to sec="1165900427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="32.4.42.201"/>
      <from sec="1165899754" usec="0"/>
      <to sec="1165899763" usec="0"/>
    </slice>
    <from sec="1165899754" usec="0"/>
    <to sec="1165899763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
2113[label="41.134.248.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
2114[label="151.227.177.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
5985[label="151.227.177.179;s;1pkt 1fpkt", shape=hexagon, color=black];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.177.179:49650, 41.134.248.232:8500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49650: (50%)&lt;BR/&gt; 8500: (50%)&gt;];
}
2113--2114[label="1;1pkt 1fpkt"];
2113--5985[label="1;1pkt 1fpkt"];
2114--5985[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.134.248.232" dst_port="8500" src_ip="151.227.177.179" src_port="49650"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
954[label="170.169.27.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2213[label="145.41.183.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
7263[label="145.41.183.110;s;1pkt 1fpkt", shape=hexagon, color=black];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.41.183.110:3491, 170.169.27.2:8072}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8072: (50%)&lt;BR/&gt; 3491: (50%)&gt;];
}
954--2213[label="1;1pkt 1fpkt"];
954--7263[label="1;1pkt 1fpkt"];
2213--7263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.169.27.2" dst_port="8072" src_ip="145.41.183.110" src_port="3491"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.246.68.84"/>
      <from sec="1165899600" usec="0"/>
      <to sec="1165900427" usec="0"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
2768[label="205.246.68.49;d;78pkt 78fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 205.246.68.49:25}[73.0769%]&lt;BR/&gt;{*:25, 205.246.68.49:*}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65139: (0.641026%)&lt;BR/&gt; 64463: (0.641026%)&lt;BR/&gt; 64294: (0.641026%)&lt;BR/&gt; 63161: (0.641026%)&gt;];
}
2768--8266[label="0.0128205;1pkt 1fpkt"];
2768--8284[label="0.0128205;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.68.49" src_port="25"/>
      <filter dst_ip="205.246.68.49" dst_port="25"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
2772[label="47.192.36.147;d;2pkt 2fpkt", shape=diamond, color=yellow];
2773[label="145.229.5.34;s;4pkt 4fpkt", shape=diamond, color=yellow];
6672[label="145.229.5.34;s;4pkt 4fpkt", shape=hexagon, color=black];
8805[label="145.229.5.34;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11816[label="145.229.5.34;3pkt 3fpkt", shape=invtriangle, color=brown];
13288[label="145.229.5.34;3pkt 3fpkt", shape=invhouse, color=bisque];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.5.34:59226, 50.81.178.152:4351}[25%]&lt;BR/&gt;{145.229.5.34:1241, 201.110.204.162:80}[25%]&lt;BR/&gt;{145.229.5.34:1238, 47.192.36.147:29836}[25%]&lt;BR/&gt;{145.229.5.34:59226, 47.192.36.147:29836}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29836: (23.6842%)&lt;BR/&gt; 59226: (21.0526%)&lt;BR/&gt; 1238: (15.7895%)&lt;BR/&gt; 4351: (13.1579%)&lt;BR/&gt; 1241: (13.1579%)&gt;];
}
2772--2773[label="1;2pkt 2fpkt"];
2772--6672[label="1;2pkt 2fpkt"];
2772--8805[label="0.5;1pkt 1fpkt"];
2772--11816[label="0.5;1pkt 1fpkt"];
2772--13288[label="0.5;1pkt 1fpkt"];
2773--6672[label="1;4pkt 4fpkt"];
2773--8805[label="1;3pkt 3fpkt"];
2773--11816[label="1;3pkt 3fpkt"];
2773--13288[label="1;3pkt 3fpkt"];
6672--8805[label="1;3pkt 3fpkt"];
6672--11816[label="1;3pkt 3fpkt"];
6672--13288[label="1;3pkt 3fpkt"];
8805--11816[label="1;3pkt 3fpkt"];
8805--13288[label="1;3pkt 3fpkt"];
11816--13288[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="47.192.36.147" dst_port="29836" src_ip="145.229.5.34" src_port="59226"/>
      <filter dst_ip="47.192.36.147" dst_port="29836" src_ip="145.229.5.34" src_port="1238"/>
      <filter dst_ip="201.110.204.162" dst_port="80" src_ip="145.229.5.34" src_port="1241"/>
      <filter dst_ip="50.81.178.152" dst_port="4351" src_ip="145.229.5.34" src_port="59226"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
1577[label="151.227.5.136;s;398pkt 398fpkt", shape=diamond, color=yellow];
2971[label="65.156.88.102;d;3pkt 3fpkt", shape=diamond, color=yellow];
6032[label="151.227.5.136;s;167pkt 167fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.5.136:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6969: (2.99296%)&lt;BR/&gt; 8080: (1.40845%)&lt;BR/&gt; 80: (1.40845%)&lt;BR/&gt; 8000: (1.32042%)&lt;BR/&gt; 20000: (1.14437%)&gt;];
}
1577--2971[label="1;3pkt 3fpkt"];
1577--5708[label="0.00251256;1pkt 1fpkt"];
1577--6032[label="1;167pkt 167fpkt"];
2971--6032[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="151.227.5.136"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14319,2.18538,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
141[label="151.227.112.243s;1pkt 1fpkt", shape=rectangle, color=red];
3013[label="34.48.53.68;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.112.243:*, 34.48.53.68:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3914: (12.5%)&lt;BR/&gt; 3930: (6.25%)&lt;BR/&gt; 3929: (6.25%)&lt;BR/&gt; 3912: (6.25%)&gt;];
}
141--3013[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.48.53.68" dst_port="80" src_ip="151.227.112.243"/>
    </slice>
    <from sec="1165899803" usec="0"/>
    <to sec="1165900153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
3010[label="139.152.233.182;s;197pkt 197fpkt", shape=diamond, color=yellow];
3022[label="205.0.1.2;d;196pkt 196fpkt", shape=diamond, color=yellow];
6512[label="205.0.1.2;d;17pkt 17fpkt", shape=hexagon, color=black];
7107[label="139.152.233.182;s;171pkt 171fpkt", shape=hexagon, color=black];
10818[label="139.152.233.182;197pkt 197fpkt", shape=pentagon, color=darkviolet];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.233.182:*, 205.0.1.2:80}[99.4924%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28218: (0.321337%)&lt;BR/&gt; 28216: (0.321337%)&lt;BR/&gt; 28214: (0.321337%)&lt;BR/&gt; 28212: (0.321337%)&gt;];
}
3010--3022[label="1;196pkt 196fpkt"];
3010--6512[label="1;17pkt 17fpkt"];
3010--7107[label="1;171pkt 171fpkt"];
3010--10818[label="1;197pkt 197fpkt"];
3022--6512[label="1;17pkt 17fpkt"];
3022--7107[label="0.994152;170pkt 170fpkt"];
3022--10818[label="1;196pkt 196fpkt"];
6512--7107[label="1;17pkt 17fpkt"];
6512--10818[label="1;17pkt 17fpkt"];
7107--10818[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_ip="205.0.1.2" dst_port="80" src_ip="139.152.233.182"/>
    </slice>
    <from sec="1165899797" usec="0"/>
    <to sec="1165900388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
3055[label="205.18.222.137;d;175pkt 175fpkt", shape=diamond, color=yellow];
3058[label="151.227.14.7;s;175pkt 175fpkt", shape=diamond, color=yellow];
7442[label="205.18.222.137;d;147pkt 147fpkt", shape=hexagon, color=black];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.14.7:*, 205.18.222.137:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4249: (0.301811%)&lt;BR/&gt; 4248: (0.301811%)&lt;BR/&gt; 4247: (0.301811%)&lt;BR/&gt; 4246: (0.301811%)&gt;];
}
3055--3058[label="1;175pkt 175fpkt"];
3055--7442[label="1;147pkt 147fpkt"];
3058--7442[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_ip="205.18.222.137" dst_port="443" src_ip="151.227.14.7"/>
    </slice>
    <from sec="1165899876" usec="0"/>
    <to sec="1165900427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14319,2.18538,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
16[label="204.6.229.19s;1pkt 1fpkt", shape=rectangle, color=red];
3082[label="41.132.226.192;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.229.19:21, 41.132.226.192:43020}[25%]&lt;BR/&gt;{204.6.229.19:54382, 41.132.226.192:43248}[25%]&lt;BR/&gt;{204.6.229.19:80, 41.132.226.192:42355}[25%]&lt;BR/&gt;{204.6.229.19:80, 41.132.226.192:42583}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54382: (20%)&lt;BR/&gt; 43248: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 43020: (10%)&lt;BR/&gt; 42583: (10%)&gt;];
}
16--3082[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.132.226.192" dst_port="42583" src_ip="204.6.229.19" src_port="80"/>
      <filter dst_ip="41.132.226.192" dst_port="42355" src_ip="204.6.229.19" src_port="80"/>
      <filter dst_ip="41.132.226.192" dst_port="43248" src_ip="204.6.229.19" src_port="54382"/>
      <filter dst_ip="41.132.226.192" dst_port="43020" src_ip="204.6.229.19" src_port="21"/>
    </slice>
    <from sec="1165900383" usec="0"/>
    <to sec="1165900440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
2624[label="204.6.229.19;d;5pkt 5fpkt", shape=diamond, color=yellow];
3083[label="41.132.226.192;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.50.184.24:60621, 204.6.229.19:80}[20%]&lt;BR/&gt;{41.132.226.192:42355, 204.6.229.19:80}[20%]&lt;BR/&gt;{41.132.226.192:42583, 204.6.229.19:80}[20%]&lt;BR/&gt;{41.132.226.192:43020, 204.6.229.19:21}[20%]&lt;BR/&gt;{41.132.226.192:43248, 204.6.229.19:54382}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.7778%)&lt;BR/&gt; 54382: (11.1111%)&lt;BR/&gt; 43248: (11.1111%)&lt;BR/&gt; 43020: (11.1111%)&lt;BR/&gt; 42583: (11.1111%)&gt;];
}
2624--3083[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.229.19" dst_port="54382" src_ip="41.132.226.192" src_port="43248"/>
      <filter dst_ip="204.6.229.19" dst_port="21" src_ip="41.132.226.192" src_port="43020"/>
      <filter dst_ip="204.6.229.19" dst_port="80" src_ip="41.132.226.192" src_port="42583"/>
      <filter dst_ip="204.6.229.19" dst_port="80" src_ip="41.132.226.192" src_port="42355"/>
      <filter dst_ip="204.6.229.19" dst_port="80" src_ip="215.50.184.24" src_port="60621"/>
    </slice>
    <from sec="1165900362" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
3108[label="145.229.240.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
3111[label="32.4.34.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
6547[label="145.229.240.190;d;1pkt 1fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.4.34.75:45693, 145.229.240.190:80}[50%]&lt;BR/&gt;{32.4.35.173:41347, 145.229.240.190:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45693: (37.5%)&lt;BR/&gt; 41347: (12.5%)&gt;];
}
3108--3111[label="1;1pkt 1fpkt"];
3108--6547[label="1;1pkt 1fpkt"];
3111--6547[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.240.190" dst_port="80" src_ip="32.4.35.173" src_port="41347"/>
      <filter dst_ip="145.229.240.190" dst_port="80" src_ip="32.4.34.75" src_port="45693"/>
    </slice>
    <from sec="1165899919" usec="0"/>
    <to sec="1165899982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
2648[label="42.103.75.246;d;2pkt 2fpkt", shape=diamond, color=yellow];
3185[label="169.230.129.54;s;2pkt 2fpkt", shape=diamond, color=yellow];
6268[label="42.103.75.246;d;2pkt 2fpkt", shape=hexagon, color=black];
9122[label="169.230.129.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.129.54:0, 42.103.75.246:0}[50%]&lt;BR/&gt;{169.230.129.54:1723, 42.103.75.246:2138}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 2138: (25%)&lt;BR/&gt; 1723: (25%)&gt;];
}
2648--3185[label="1;2pkt 2fpkt"];
2648--6268[label="1;2pkt 2fpkt"];
2648--9122[label="1;2pkt 2fpkt"];
3185--6268[label="1;2pkt 2fpkt"];
3185--9122[label="1;2pkt 2fpkt"];
6268--9122[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.103.75.246" dst_port="2138" src_ip="169.230.129.54" src_port="1723"/>
      <filter dst_ip="42.103.75.246" src_ip="169.230.129.54"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
3399[label="145.229.45.142;d;54pkt 54fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.112.170.196:*, 145.229.45.142:80}[42.5926%]&lt;BR/&gt;{41.132.224.152:*, 145.229.45.142:80}[20.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5185%)&lt;BR/&gt; 53: (6.48148%)&lt;BR/&gt; 64431: (0.925926%)&lt;BR/&gt; 63403: (0.925926%)&lt;BR/&gt; 60353: (0.925926%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="145.229.45.142" dst_port="80" src_ip="41.112.170.196"/>
      <filter dst_ip="145.229.45.142" dst_port="80" src_ip="41.132.224.152"/>
    </slice>
    <from sec="1165899625" usec="0"/>
    <to sec="1165900330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="41.132.224.218"/>
      <from sec="1165899742" usec="0"/>
      <to sec="1165900217" usec="0"/>
    </slice>
    <from sec="1165899742" usec="0"/>
    <to sec="1165900217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.67.111.129"/>
      <from sec="1165899907" usec="0"/>
      <to sec="1165900154" usec="0"/>
    </slice>
    <from sec="1165899907" usec="0"/>
    <to sec="1165900154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892483,2.09447,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
3122[label="204.141.66.141;d;10pkt 10fpkt", shape=diamond, color=yellow];
3507[label="129.202.233.52;s;10pkt 10fpkt", shape=diamond, color=yellow];
9100[label="129.202.233.52;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11967[label="129.202.233.52;10pkt 10fpkt", shape=invtriangle, color=brown];
13338[label="129.202.233.52;10pkt 10fpkt", shape=invhouse, color=bisque];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.202.233.52:*, 204.141.66.141:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64478: (5%)&lt;BR/&gt; 64475: (5%)&lt;BR/&gt; 64474: (5%)&lt;BR/&gt; 64473: (5%)&gt;];
}
3122--3507[label="1;10pkt 10fpkt"];
3122--9100[label="1;10pkt 10fpkt"];
3122--11967[label="1;10pkt 10fpkt"];
3122--13338[label="1;10pkt 10fpkt"];
3507--9100[label="1;10pkt 10fpkt"];
3507--11967[label="1;10pkt 10fpkt"];
3507--13338[label="1;10pkt 10fpkt"];
9100--11967[label="1;10pkt 10fpkt"];
9100--13338[label="1;10pkt 10fpkt"];
11967--13338[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="204.141.66.141" dst_port="80" src_ip="129.202.233.52"/>
    </slice>
    <from sec="1165899926" usec="0"/>
    <to sec="1165900040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="45.213.11.151"/>
      <from sec="1165899949" usec="0"/>
      <to sec="1165900228" usec="0"/>
    </slice>
    <from sec="1165899949" usec="0"/>
    <to sec="1165900228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30193,2.04636,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
35[label="32.4.58.45s;1pkt 1fpkt", shape=rectangle, color=red];
3603[label="145.229.38.25;d;3pkt 3fpkt", shape=diamond, color=yellow];
3618[label="32.4.58.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
6814[label="32.4.58.45;s;1pkt 1fpkt", shape=hexagon, color=black];
8990[label="32.4.58.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11909[label="32.4.58.45;1pkt 1fpkt", shape=invtriangle, color=brown];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.4.59.0:49629, 145.229.38.25:80}[33.3333%]&lt;BR/&gt;{32.4.58.45:41120, 145.229.38.25:80}[33.3333%]&lt;BR/&gt;{41.132.226.130:50007, 145.229.38.25:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41120: (37.5%)&lt;BR/&gt; 50007: (6.25%)&lt;BR/&gt; 49629: (6.25%)&gt;];
}
35--3603[label="1;1pkt 1fpkt"];
35--3618[label="1;1pkt 1fpkt"];
35--6814[label="1;1pkt 1fpkt"];
35--8990[label="1;1pkt 1fpkt"];
35--11909[label="1;1pkt 1fpkt"];
3603--3618[label="1;1pkt 1fpkt"];
3603--6814[label="1;1pkt 1fpkt"];
3603--8990[label="1;1pkt 1fpkt"];
3603--11909[label="1;1pkt 1fpkt"];
3618--6814[label="1;1pkt 1fpkt"];
3618--8990[label="1;1pkt 1fpkt"];
3618--11909[label="1;1pkt 1fpkt"];
6814--8990[label="1;1pkt 1fpkt"];
6814--11909[label="1;1pkt 1fpkt"];
8990--11909[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.38.25" dst_port="80" src_ip="41.132.226.130" src_port="50007"/>
      <filter dst_ip="145.229.38.25" dst_port="80" src_ip="32.4.58.45" src_port="41120"/>
      <filter dst_ip="145.229.38.25" dst_port="80" src_ip="32.4.59.0" src_port="49629"/>
    </slice>
    <from sec="1165900022" usec="0"/>
    <to sec="1165900073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
3683[label="205.246.93.156;d;785pkt 785fpkt", shape=diamond, color=yellow];
3684[label="212.197.115.82;s;787pkt 787fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.197.115.82:*, 205.246.93.156:1111}[99.7459%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1111: (49.9364%)&lt;BR/&gt; 60885: (0.0636132%)&lt;BR/&gt; 60841: (0.0636132%)&lt;BR/&gt; 60822: (0.0636132%)&lt;BR/&gt; 60806: (0.0636132%)&gt;];
}
3683--3684[label="1;785pkt 785fpkt"];
3684--5945[label="0.00127065;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.93.156" dst_port="1111" src_ip="212.197.115.82"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
3695[label="205.246.69.18;s;8pkt 8fpkt", shape=diamond, color=yellow];
3696[label="51.197.174.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
7891[label="51.197.174.58;d;1pkt 1fpkt", shape=hexagon, color=black];
8594[label="205.246.69.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.246.69.18:0, *:0}[50%]&lt;BR/&gt;{205.246.69.18:*, *:4000}[25%]&lt;BR/&gt;{205.246.69.18:*, 202.3.203.49:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (36.3636%)&lt;BR/&gt; 26901: (18.1818%)&lt;BR/&gt; 25: (18.1818%)&lt;BR/&gt; 4000: (9.09091%)&lt;BR/&gt; 52048: (4.54545%)&gt;];
}
3695--3696[label="1;1pkt 1fpkt"];
3695--7891[label="1;1pkt 1fpkt"];
3695--8594[label="1;1pkt 1fpkt"];
3696--7891[label="1;1pkt 1fpkt"];
3696--8594[label="1;1pkt 1fpkt"];
7891--8594[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.3.203.49" src_ip="205.246.69.18"/>
      <filter dst_port="4000" src_ip="205.246.69.18"/>
      <filter src_ip="205.246.69.18"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
3710[label="43.136.135.155;s;2pkt 2fpkt", shape=diamond, color=yellow];
3711[label="151.227.78.243;d;2pkt 2fpkt", shape=diamond, color=yellow];
7596[label="43.136.135.155;s;2pkt 2fpkt", shape=hexagon, color=black];
7597[label="151.227.78.243;d;2pkt 2fpkt", shape=hexagon, color=black];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.136.135.155:554, 151.227.78.243:1095}[50%]&lt;BR/&gt;{43.136.135.155:26813, 151.227.78.243:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26813: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1095: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
3710--3711[label="1;2pkt 2fpkt"];
3710--7596[label="1;2pkt 2fpkt"];
3710--7597[label="1;2pkt 2fpkt"];
3711--7596[label="1;2pkt 2fpkt"];
3711--7597[label="1;2pkt 2fpkt"];
7596--7597[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.78.243" dst_port="6970" src_ip="43.136.135.155" src_port="26813"/>
      <filter dst_ip="151.227.78.243" dst_port="1095" src_ip="43.136.135.155" src_port="554"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
3713[label="214.209.103.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
3714[label="151.227.72.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
7276[label="151.227.72.132;s;1pkt 1fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.72.132:0, 214.209.103.208:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3713--3714[label="1;1pkt 1fpkt"];
3713--7276[label="1;1pkt 1fpkt"];
3714--7276[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.209.103.208" src_ip="151.227.72.132"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
781[label="58.162.71.131;s;7229pkt 7229fpkt", shape=diamond, color=yellow];
3739[label="204.6.197.199;d;3pkt 3fpkt", shape=diamond, color=yellow];
3740[label="212.12.53.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
6953[label="212.12.53.116;s;1pkt 1fpkt", shape=hexagon, color=black];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.162.71.131:*, *:17300}[99.9862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17300: (49.9793%)&lt;BR/&gt; 4495: (0.0483826%)&lt;BR/&gt; 3879: (0.0483826%)&lt;BR/&gt; 3442: (0.0483826%)&lt;BR/&gt; 2420: (0.0483826%)&gt;];
}
781--3739[label="0.666667;2pkt 2fpkt"];
3739--3740[label="1;1pkt 1fpkt"];
3739--6953[label="1;1pkt 1fpkt"];
3740--6953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17300" src_ip="58.162.71.131"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="151.227.92.92"/>
      <from sec="1165899607" usec="0"/>
      <to sec="1165900335" usec="0"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
3451[label="169.230.72.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
3907[label="41.132.224.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.132.224.218:55478, 169.230.72.91:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55478: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3451--3907[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.72.91" dst_port="80" src_ip="41.132.224.218" src_port="55478"/>
    </slice>
    <from sec="1165900373" usec="0"/>
    <to sec="1165900383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
3977[label="68.119.216.248;d;14pkt 14fpkt", shape=diamond, color=yellow];
3978[label="139.152.32.217;s;14pkt 14fpkt", shape=diamond, color=yellow];
7463[label="68.119.216.248;d;14pkt 14fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.32.217:*, 68.119.216.248:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49639: (3.57143%)&lt;BR/&gt; 49636: (3.57143%)&lt;BR/&gt; 49635: (3.57143%)&lt;BR/&gt; 49634: (3.57143%)&gt;];
}
3977--3978[label="1;14pkt 14fpkt"];
3977--7463[label="1;14pkt 14fpkt"];
3978--7463[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="68.119.216.248" dst_port="80" src_ip="139.152.32.217"/>
    </slice>
    <from sec="1165899977" usec="0"/>
    <to sec="1165900238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
3617[label="32.4.58.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
4013[label="145.229.38.25;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.38.25:80, 32.4.59.0:49629}[33.3333%]&lt;BR/&gt;{145.229.38.25:80, 32.4.58.45:41120}[33.3333%]&lt;BR/&gt;{145.229.38.25:80, 41.132.226.130:50007}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41120: (25%)&lt;BR/&gt; 50007: (12.5%)&lt;BR/&gt; 49629: (12.5%)&gt;];
}
3617--4013[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.132.226.130" dst_port="50007" src_ip="145.229.38.25" src_port="80"/>
      <filter dst_ip="32.4.58.45" dst_port="41120" src_ip="145.229.38.25" src_port="80"/>
      <filter dst_ip="32.4.59.0" dst_port="49629" src_ip="145.229.38.25" src_port="80"/>
    </slice>
    <from sec="1165900022" usec="0"/>
    <to sec="1165900073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
3886[label="145.41.205.145;s;23pkt 23fpkt", shape=diamond, color=yellow];
4032[label="215.18.132.90;d;23pkt 23fpkt", shape=diamond, color=yellow];
7165[label="215.18.132.90;d;23pkt 23fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.41.205.145:443, 215.18.132.90:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4421: (2.17391%)&lt;BR/&gt; 4420: (2.17391%)&lt;BR/&gt; 4419: (2.17391%)&lt;BR/&gt; 4418: (2.17391%)&gt;];
}
3886--4032[label="1;23pkt 23fpkt"];
3886--7165[label="1;23pkt 23fpkt"];
4032--7165[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="215.18.132.90" src_ip="145.41.205.145" src_port="443"/>
    </slice>
    <from sec="1165899640" usec="0"/>
    <to sec="1165900426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
4019[label="145.229.168.189;s;14pkt 14fpkt", shape=diamond, color=yellow];
4057[label="205.90.91.41;d;2pkt 2fpkt", shape=diamond, color=yellow];
5397[label="205.160.118.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.168.189:*, 32.101.223.125:3531}[28.5714%]&lt;BR/&gt;{145.229.168.189:3531, 212.150.68.152:*}[28.5714%]&lt;BR/&gt;{145.229.168.189:3531, *:3531}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3531: (55.8824%)&lt;BR/&gt; 32932: (5.88235%)&lt;BR/&gt; 32796: (5.88235%)&lt;BR/&gt; 2530: (5.88235%)&lt;BR/&gt; 60441: (2.94118%)&gt;];
}
4019--4057[label="1;2pkt 2fpkt"];
4019--5397[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.150.68.152" src_ip="145.229.168.189" src_port="3531"/>
      <filter dst_ip="32.101.223.125" dst_port="3531" src_ip="145.229.168.189"/>
      <filter dst_port="3531" src_ip="145.229.168.189" src_port="3531"/>
    </slice>
    <from sec="1165900031" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621137,2.15718,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
4067[label="204.70.54.127;s;6pkt 6fpkt", shape=diamond, color=yellow];
4068[label="205.249.47.42;d;6pkt 6fpkt", shape=diamond, color=yellow];
10003[label="204.70.54.127;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.70.54.127:1755, 205.249.47.42:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (33.3333%)&lt;BR/&gt; 38173: (8.33333%)&lt;BR/&gt; 2051: (8.33333%)&lt;BR/&gt; 2030: (8.33333%)&lt;BR/&gt; 2021: (8.33333%)&gt;];
}
4067--4068[label="1;6pkt 6fpkt"];
4067--10003[label="1;6pkt 6fpkt"];
4068--10003[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.47.42" src_ip="204.70.54.127" src_port="1755"/>
    </slice>
    <from sec="1165900074" usec="0"/>
    <to sec="1165900455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
4125[label="218.209.53.13;d;2pkt 2fpkt", shape=diamond, color=yellow];
4128[label="151.227.84.169;s;2pkt 2fpkt", shape=diamond, color=yellow];
7494[label="151.227.84.169;s;2pkt 2fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.84.169:1386, 218.209.53.13:80}[50%]&lt;BR/&gt;{151.227.84.169:1387, 218.209.53.13:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1387: (25%)&lt;BR/&gt; 1386: (25%)&gt;];
}
4125--4128[label="1;2pkt 2fpkt"];
4125--7494[label="1;2pkt 2fpkt"];
4128--7494[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="218.209.53.13" dst_port="80" src_ip="151.227.84.169" src_port="1387"/>
      <filter dst_ip="218.209.53.13" dst_port="80" src_ip="151.227.84.169" src_port="1386"/>
    </slice>
    <from sec="1165900124" usec="0"/>
    <to sec="1165900151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
3712[label="151.227.78.243;s;2pkt 2fpkt", shape=diamond, color=yellow];
4199[label="43.136.135.155;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.78.243:1095, 43.136.135.155:554}[50%]&lt;BR/&gt;{151.227.78.243:6970, 43.136.135.155:26813}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26813: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1095: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
3712--4199[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="43.136.135.155" dst_port="26813" src_ip="151.227.78.243" src_port="6970"/>
      <filter dst_ip="43.136.135.155" dst_port="554" src_ip="151.227.78.243" src_port="1095"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.239.55.128"/>
      <from sec="1165899606" usec="0"/>
      <to sec="1165900372" usec="0"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165900372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="151.227.186.145"/>
      <from sec="1165899609" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.141.133.215"/>
      <from sec="1165900080" usec="0"/>
      <to sec="1165900376" usec="0"/>
    </slice>
    <from sec="1165900080" usec="0"/>
    <to sec="1165900376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
4475[label="209.78.244.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
4476[label="129.202.23.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
8038[label="209.78.244.54;d;1pkt 1fpkt", shape=hexagon, color=black];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.202.23.211:3811, 209.78.244.54:10556}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10556: (50%)&lt;BR/&gt; 3811: (50%)&gt;];
}
4475--4476[label="1;1pkt 1fpkt"];
4475--8038[label="1;1pkt 1fpkt"];
4476--8038[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.78.244.54" dst_port="10556" src_ip="129.202.23.211" src_port="3811"/>
    </slice>
    <from sec="1165900100" usec="0"/>
    <to sec="1165900427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
4415[label="150.12.213.128;s;68pkt 68fpkt", shape=diamond, color=yellow];
4528[label="219.1.238.4;d;19pkt 19fpkt", shape=diamond, color=yellow];
7446[label="150.12.213.128;s;68pkt 68fpkt", shape=hexagon, color=black];
7505[label="219.1.238.4;d;19pkt 19fpkt", shape=hexagon, color=black];
10026[label="150.12.213.128;89pkt 89fpkt", shape=pentagon, color=darkviolet];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.12.213.128:*, 205.78.87.135:80}[26.9663%]&lt;BR/&gt;{150.12.213.128:*, 205.78.81.223:80}[23.5955%]&lt;BR/&gt;{150.12.213.128:*, 219.1.224.107:80}[22.4719%]&lt;BR/&gt;{150.12.213.128:*, 219.1.238.4:80}[21.3483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4297%)&lt;BR/&gt; 8385: (1.14068%)&lt;BR/&gt; 8384: (1.14068%)&lt;BR/&gt; 9586: (0.95057%)&lt;BR/&gt; 9585: (0.95057%)&gt;];
}
4415--4528[label="1;19pkt 19fpkt"];
4415--7446[label="1;68pkt 68fpkt"];
4415--7505[label="1;19pkt 19fpkt"];
4415--10026[label="1;68pkt 68fpkt"];
4528--7446[label="1;19pkt 19fpkt"];
4528--7505[label="1;19pkt 19fpkt"];
4528--10026[label="1;19pkt 19fpkt"];
7446--7505[label="1;19pkt 19fpkt"];
7446--10026[label="1;68pkt 68fpkt"];
7505--10026[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="205.78.87.135" dst_port="80" src_ip="150.12.213.128"/>
      <filter dst_ip="205.78.81.223" dst_port="80" src_ip="150.12.213.128"/>
      <filter dst_ip="219.1.224.107" dst_port="80" src_ip="150.12.213.128"/>
      <filter dst_ip="219.1.238.4" dst_port="80" src_ip="150.12.213.128"/>
    </slice>
    <from sec="1165899626" usec="0"/>
    <to sec="1165900494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="151.227.86.9"/>
      <from sec="1165899600" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="169.230.209.198"/>
      <from sec="1165899601" usec="0"/>
      <to sec="1165900426" usec="0"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.55.220.58"/>
      <from sec="1165899601" usec="0"/>
      <to sec="1165900318" usec="0"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.29.254.137"/>
      <from sec="1165899605" usec="0"/>
      <to sec="1165900337" usec="0"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="70.160.70.74"/>
      <from sec="1165899943" usec="0"/>
      <to sec="1165900339" usec="0"/>
    </slice>
    <from sec="1165899943" usec="0"/>
    <to sec="1165900339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621137,2.15718,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
4914[label="219.68.118.192;d;8pkt 8fpkt", shape=diamond, color=yellow];
4915[label="145.248.103.112;s;8pkt 8fpkt", shape=diamond, color=yellow];
9868[label="145.248.103.112;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.103.112:80, 219.68.118.192:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53925: (6%)&lt;BR/&gt; 51631: (6%)&lt;BR/&gt; 49439: (6%)&lt;BR/&gt; 49024: (6%)&gt;];
}
4914--4915[label="1;8pkt 8fpkt"];
4914--9868[label="1;8pkt 8fpkt"];
4915--9868[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="219.68.118.192" src_ip="145.248.103.112" src_port="80"/>
    </slice>
    <from sec="1165900245" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14319,2.18538,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
31[label="139.152.54.42s;1pkt 1fpkt", shape=rectangle, color=red];
4959[label="139.152.54.42;s;152pkt 152fpkt", shape=diamond, color=yellow];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.54.42:*, 205.0.2.173:80}[98.0263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4252: (0.653595%)&lt;BR/&gt; 4289: (0.326797%)&lt;BR/&gt; 4286: (0.326797%)&lt;BR/&gt; 4262: (0.326797%)&gt;];
}
31--4959[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.0.2.173" dst_port="80" src_ip="139.152.54.42"/>
    </slice>
    <from sec="1165900290" usec="0"/>
    <to sec="1165900391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08697,2.12875,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
38[label="145.229.175.50s;1pkt 1fpkt", shape=rectangle, color=red];
4971[label="145.229.175.50;s;19pkt 19fpkt", shape=diamond, color=yellow];
5327[label="34.36.144.145;d;19pkt 19fpkt", shape=diamond, color=yellow];
9072[label="145.229.175.50;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.175.50:*, 34.36.144.145:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2548: (2.98507%)&lt;BR/&gt; 2560: (2.23881%)&lt;BR/&gt; 2558: (2.23881%)&lt;BR/&gt; 2556: (2.23881%)&gt;];
}
38--4971[label="1;1pkt 1fpkt"];
38--5327[label="1;1pkt 1fpkt"];
38--9072[label="1;1pkt 1fpkt"];
4971--5327[label="1;19pkt 19fpkt"];
4971--9072[label="1;19pkt 19fpkt"];
5327--9072[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="34.36.144.145" dst_port="80" src_ip="145.229.175.50"/>
    </slice>
    <from sec="1165900300" usec="0"/>
    <to sec="1165900476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14319,2.18538,504,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
170[label="169.230.134.67s;79pkt 79fpkt", shape=rectangle, color=red];
4976[label="219.206.8.172;d;79pkt 79fpkt", shape=diamond, color=yellow];
4978[label="169.230.134.67;s;102pkt 102fpkt", shape=diamond, color=yellow];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.134.67:*, 219.206.8.172:443}[50.9804%]&lt;BR/&gt;{169.230.134.67:*, 219.206.8.172:80}[46.0784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.5%)&lt;BR/&gt; 443: (22.5%)&lt;BR/&gt; 1607: (0.576923%)&lt;BR/&gt; 1606: (0.576923%)&lt;BR/&gt; 1605: (0.576923%)&gt;];
}
170--4976[label="1;79pkt 79fpkt"];
170--4978[label="1;79pkt 79fpkt"];
4976--4978[label="1;79pkt 79fpkt"];
4978--7249[label="0.010989;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.206.8.172" dst_port="443" src_ip="169.230.134.67"/>
      <filter dst_ip="219.206.8.172" dst_port="80" src_ip="169.230.134.67"/>
    </slice>
    <from sec="1165900311" usec="0"/>
    <to sec="1165900427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.48.234.160"/>
      <from sec="1165899600" usec="0"/>
      <to sec="1165900423" usec="0"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
5071[label="145.20.216.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
5072[label="68.119.211.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.119.211.226:8603, 145.20.216.21:1423}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8603: (50%)&lt;BR/&gt; 1423: (50%)&gt;];
}
5071--5072[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.20.216.21" dst_port="1423" src_ip="68.119.211.226" src_port="8603"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.239.24.172"/>
      <from sec="1165899602" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3091,2.13838,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
143[label="145.229.168.244s;1pkt 1fpkt", shape=rectangle, color=red];
5172[label="145.229.168.244;s;4pkt 4fpkt", shape=diamond, color=yellow];
5323[label="202.51.87.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
8068[label="202.51.87.22;d;1pkt 1fpkt", shape=hexagon, color=black];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.168.244:1764, 43.61.101.21:1935}[25%]&lt;BR/&gt;{145.229.168.244:1763, 202.51.87.22:80}[25%]&lt;BR/&gt;{145.229.168.244:1088, 201.110.128.75:1863}[25%]&lt;BR/&gt;{145.229.168.244:1382, 68.119.203.97:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 1763: (28.5714%)&lt;BR/&gt; 1935: (7.14286%)&lt;BR/&gt; 1863: (7.14286%)&lt;BR/&gt; 1764: (7.14286%)&gt;];
}
143--5172[label="1;1pkt 1fpkt"];
143--5323[label="1;1pkt 1fpkt"];
143--8068[label="1;1pkt 1fpkt"];
5172--5323[label="1;1pkt 1fpkt"];
5172--8068[label="1;1pkt 1fpkt"];
5323--8068[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="68.119.203.97" dst_port="80" src_ip="145.229.168.244" src_port="1382"/>
      <filter dst_ip="201.110.128.75" dst_port="1863" src_ip="145.229.168.244" src_port="1088"/>
      <filter dst_ip="202.51.87.22" dst_port="80" src_ip="145.229.168.244" src_port="1763"/>
      <filter dst_ip="43.61.101.21" dst_port="1935" src_ip="145.229.168.244" src_port="1764"/>
    </slice>
    <from sec="1165899615" usec="0"/>
    <to sec="1165900349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.239.143.146"/>
      <from sec="1165900053" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="1165900053" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.248.247.100"/>
      <from sec="1165900067" usec="0"/>
      <to sec="1165900425" usec="0"/>
    </slice>
    <from sec="1165900067" usec="0"/>
    <to sec="1165900425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
4924[label="151.227.238.170;s;2pkt 2fpkt", shape=diamond, color=yellow];
5309[label="32.4.36.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
8058[label="32.4.36.227;d;1pkt 1fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.238.170:80, 42.127.97.16:61962}[50%]&lt;BR/&gt;{151.227.238.170:80, 32.4.36.227:56851}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56851: (37.5%)&lt;BR/&gt; 61962: (12.5%)&gt;];
}
4924--5309[label="1;1pkt 1fpkt"];
4924--8058[label="1;1pkt 1fpkt"];
5309--8058[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.4.36.227" dst_port="56851" src_ip="151.227.238.170" src_port="80"/>
      <filter dst_ip="42.127.97.16" dst_port="61962" src_ip="151.227.238.170" src_port="80"/>
    </slice>
    <from sec="1165900254" usec="0"/>
    <to sec="1165900371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
2620[label="151.227.90.49;d;5308pkt 5308fpkt", shape=diamond, color=yellow];
5313[label="36.135.190.190;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.227.90.49:22220}[96.1575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22220: (48.0791%)&lt;BR/&gt; 0: (3.70998%)&lt;BR/&gt; 32459: (0.602637%)&lt;BR/&gt; 6881: (0.47081%)&lt;BR/&gt; 21588: (0.27307%)&gt;];
}
2620--5313[label="0.5;1pkt 1fpkt"];
2620--8265[label="0.000552792;1pkt 1fpkt"];
2620--8268[label="0.00037679;2pkt 2fpkt"];
2620--8270[label="0.000434405;1pkt 1fpkt"];
2620--8272[label="0.000188395;1pkt 1fpkt"];
2620--8283[label="0.000552792;1pkt 1fpkt"];
2620--8286[label="0.00037679;2pkt 2fpkt"];
2620--8288[label="0.000434405;1pkt 1fpkt"];
2620--8290[label="0.000188395;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.90.49" dst_port="22220"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.208.118.245"/>
      <from sec="1165900365" usec="0"/>
      <to sec="1165900372" usec="0"/>
    </slice>
    <from sec="1165900365" usec="0"/>
    <to sec="1165900372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="44.165.160.130"/>
      <from sec="1165900386" usec="0"/>
      <to sec="1165900417" usec="0"/>
    </slice>
    <from sec="1165900386" usec="0"/>
    <to sec="1165900417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.714987,2.21309,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.115.3.128"/>
      <from sec="1165900401" usec="0"/>
      <to sec="1165900423" usec="0"/>
    </slice>
    <from sec="1165900401" usec="0"/>
    <to sec="1165900423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10548,2.13744,504,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
433[label="145.41.230.228;s;15pkt 15fpkt", shape=diamond, color=yellow];
434[label="81.33.101.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
5446[label="145.41.230.228;s;1pkt 1fpkt", shape=hexagon, color=black];
7202[label="81.33.101.15;d;1pkt 1fpkt", shape=hexagon, color=black];
13851[label="145.41.230.228;18pkt 18fpkt", shape=invhouse, color=bisque];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.41.230.228:*, 192.124.74.170:443}[63.1579%]&lt;BR/&gt;{145.41.230.228:*, 205.0.0.216:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (27.7778%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 53971: (5.55556%)&lt;BR/&gt; 8000: (5.55556%)&lt;BR/&gt; 54120: (2.77778%)&gt;];
}
433--434[label="1;1pkt 1fpkt"];
433--5446[label="1;1pkt 1fpkt"];
433--7202[label="1;1pkt 1fpkt"];
433--13851[label="0.933333;14pkt 14fpkt"];
434--5446[label="1;1pkt 1fpkt"];
434--7202[label="1;1pkt 1fpkt"];
5446--7202[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.124.74.170" dst_port="443" src_ip="145.41.230.228"/>
      <filter dst_ip="205.0.0.216" dst_port="80" src_ip="145.41.230.228"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.822873,2.22057,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1165899600" usec="0"/>
      <to sec="1165900248" usec="0"/>
    </slice>
    <from sec="47374376" usec="0"/>
    <to sec="47374376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
368[label="205.249.135.172;s;94pkt 94fpkt", shape=diamond, color=yellow];
950[label="12.235.130.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
1008[label="52.229.29.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
2090[label="44.92.146.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
2094[label="56.167.2.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
2119[label="215.92.94.171;d;3pkt 3fpkt", shape=diamond, color=yellow];
2742[label="71.112.220.145;d;3pkt 3fpkt", shape=diamond, color=yellow];
3212[label="49.15.4.139;d;3pkt 3fpkt", shape=diamond, color=yellow];
4017[label="33.65.196.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
4991[label="59.4.51.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
5592[label="12.235.130.18;d;1pkt 1fpkt", shape=hexagon, color=black];
5712[label="205.249.135.172;s;93pkt 93fpkt", shape=hexagon, color=black];
6242[label="44.92.146.60;d;1pkt 1fpkt", shape=hexagon, color=black];
6250[label="56.167.2.133;d;1pkt 1fpkt", shape=hexagon, color=black];
6352[label="71.112.220.145;d;3pkt 3fpkt", shape=hexagon, color=black];
7474[label="33.65.196.48;d;1pkt 1fpkt", shape=hexagon, color=black];
7882[label="49.15.4.139;d;3pkt 3fpkt", shape=hexagon, color=black];
7903[label="52.229.29.157;d;1pkt 1fpkt", shape=hexagon, color=black];
10681[label="205.249.135.172;113pkt 113fpkt", shape=pentagon, color=darkviolet];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.249.135.172:*, *:6881}[34.5133%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (14.2638%)&lt;BR/&gt; 50569: (2.30061%)&lt;BR/&gt; 43517: (2.30061%)&lt;BR/&gt; 7979: (2.14724%)&lt;BR/&gt; 80: (1.38037%)&gt;];
}
368--950[label="1;1pkt 1fpkt"];
368--1008[label="1;1pkt 1fpkt"];
368--1054[label="0.0212766;2pkt 2fpkt"];
368--2090[label="1;1pkt 1fpkt"];
368--2094[label="1;1pkt 1fpkt"];
368--2119[label="1;3pkt 3fpkt"];
368--2742[label="1;3pkt 3fpkt"];
368--3212[label="1;3pkt 3fpkt"];
368--4017[label="1;1pkt 1fpkt"];
368--4991[label="1;1pkt 1fpkt"];
368--5592[label="1;1pkt 1fpkt"];
368--5712[label="1;93pkt 93fpkt"];
368--6242[label="1;1pkt 1fpkt"];
368--6250[label="1;1pkt 1fpkt"];
368--6352[label="1;3pkt 3fpkt"];
368--7474[label="1;1pkt 1fpkt"];
368--7882[label="1;3pkt 3fpkt"];
368--7903[label="1;1pkt 1fpkt"];
368--10681[label="1;94pkt 94fpkt"];
950--5592[label="1;1pkt 1fpkt"];
950--5712[label="1;1pkt 1fpkt"];
950--10681[label="1;1pkt 1fpkt"];
1008--5712[label="1;1pkt 1fpkt"];
1008--7903[label="1;1pkt 1fpkt"];
1008--10681[label="1;1pkt 1fpkt"];
2090--5712[label="1;1pkt 1fpkt"];
2090--6242[label="1;1pkt 1fpkt"];
2090--10681[label="1;1pkt 1fpkt"];
2094--5712[label="1;1pkt 1fpkt"];
2094--6250[label="1;1pkt 1fpkt"];
2094--10681[label="1;1pkt 1fpkt"];
2119--5712[label="1;3pkt 3fpkt"];
2119--10681[label="1;3pkt 3fpkt"];
2742--5712[label="1;3pkt 3fpkt"];
2742--6352[label="1;3pkt 3fpkt"];
2742--10681[label="1;3pkt 3fpkt"];
3212--5712[label="1;3pkt 3fpkt"];
3212--7882[label="1;3pkt 3fpkt"];
3212--10681[label="1;3pkt 3fpkt"];
4017--5712[label="1;1pkt 1fpkt"];
4017--7474[label="1;1pkt 1fpkt"];
4017--10681[label="1;1pkt 1fpkt"];
4991--5712[label="1;1pkt 1fpkt"];
4991--10681[label="1;1pkt 1fpkt"];
5592--5712[label="1;1pkt 1fpkt"];
5592--10681[label="1;1pkt 1fpkt"];
5712--6242[label="1;1pkt 1fpkt"];
5712--6250[label="1;1pkt 1fpkt"];
5712--6352[label="1;3pkt 3fpkt"];
5712--7474[label="1;1pkt 1fpkt"];
5712--7882[label="1;3pkt 3fpkt"];
5712--7903[label="1;1pkt 1fpkt"];
5712--10681[label="1;93pkt 93fpkt"];
6242--10681[label="1;1pkt 1fpkt"];
6250--10681[label="1;1pkt 1fpkt"];
6352--10681[label="1;3pkt 3fpkt"];
7474--10681[label="1;1pkt 1fpkt"];
7882--10681[label="1;3pkt 3fpkt"];
7903--10681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6881" src_ip="205.249.135.172"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
1044[label="169.230.243.204;d;8pkt 8fpkt", shape=diamond, color=yellow];
1213[label="32.4.33.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
5660[label="32.4.33.3;s;1pkt 1fpkt", shape=hexagon, color=black];
6371[label="169.230.243.204;d;7pkt 7fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.4.146.219:*, 169.230.243.204:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37510: (11.7647%)&lt;BR/&gt; 48820: (5.88235%)&lt;BR/&gt; 46549: (5.88235%)&lt;BR/&gt; 39651: (5.88235%)&gt;];
}
1044--1213[label="1;1pkt 1fpkt"];
1044--5660[label="1;1pkt 1fpkt"];
1044--6371[label="1;7pkt 7fpkt"];
1213--5660[label="1;1pkt 1fpkt"];
1213--6371[label="1;1pkt 1fpkt"];
5660--6371[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.243.204" dst_port="80" src_ip="32.4.146.219"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165899991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
302[label="52.73.94.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
5701[label="52.73.94.73;s;1pkt 1fpkt", shape=hexagon, color=black];
9367[label="52.73.94.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.73.94.73:80, 169.230.113.199:1965}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1965: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
302--5701[label="1;1pkt 1fpkt"];
302--9367[label="1;1pkt 1fpkt"];
5701--9367[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.113.199" dst_port="1965" src_ip="52.73.94.73" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165899677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
1532[label="204.6.227.222;s;451pkt 451fpkt", shape=diamond, color=yellow];
5773[label="204.6.227.222;s;451pkt 451fpkt", shape=hexagon, color=black];
11289[label="204.6.227.222;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13054[label="204.6.227.222;4pkt 4fpkt", shape=invtriangle, color=brown];
13838[label="204.6.227.222;4pkt 4fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.227.222:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1532--5773[label="1;451pkt 451fpkt"];
1532--11289[label="1;4pkt 4fpkt"];
1532--13054[label="1;4pkt 4fpkt"];
1532--13838[label="1;4pkt 4fpkt"];
5773--11289[label="1;4pkt 4fpkt"];
5773--13054[label="1;4pkt 4fpkt"];
5773--13838[label="1;4pkt 4fpkt"];
11289--13054[label="1;4pkt 4fpkt"];
11289--13838[label="1;4pkt 4fpkt"];
13054--13838[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="204.6.227.222"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10548,2.13744,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
1144[label="139.152.250.231;s;9pkt 9fpkt", shape=diamond, color=yellow];
1145[label="69.21.103.150;d;2pkt 2fpkt", shape=diamond, color=yellow];
5851[label="139.152.250.231;s;8pkt 8fpkt", shape=hexagon, color=black];
13856[label="139.152.250.231;9pkt 9fpkt", shape=invhouse, color=bisque];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.250.231:53, *:*}[70%]&lt;BR/&gt;{139.152.250.231:80, 69.21.103.150:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.2857%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 3315: (7.14286%)&lt;BR/&gt; 3313: (7.14286%)&lt;BR/&gt; 39110: (5.35714%)&gt;];
}
1144--1145[label="1;2pkt 2fpkt"];
1144--5851[label="1;8pkt 8fpkt"];
1144--13856[label="0.888889;8pkt 8fpkt"];
1145--5851[label="1;2pkt 2fpkt"];
1145--13856[label="1;2pkt 2fpkt"];
5851--13856[label="0.875;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="139.152.250.231" src_port="53"/>
      <filter dst_ip="69.21.103.150" src_ip="139.152.250.231" src_port="80"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.822873,2.22057,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="41.220.109.27"/>
      <from sec="1165899659" usec="0"/>
      <to sec="1165899678" usec="0"/>
    </slice>
    <from sec="1165899659" usec="0"/>
    <to sec="1165899678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30193,2.04636,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
160[label="205.55.220.221d;1pkt 1fpkt", shape=rectangle, color=red];
1216[label="205.22.192.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
1779[label="205.55.220.221;d;18pkt 18fpkt", shape=diamond, color=yellow];
1960[label="210.66.198.24;s;2pkt 2fpkt", shape=diamond, color=yellow];
1962[label="210.66.198.26;s;2pkt 2fpkt", shape=diamond, color=yellow];
5913[label="210.66.198.26;s;2pkt 2fpkt", shape=hexagon, color=black];
7341[label="205.55.220.221;d;18pkt 18fpkt", shape=hexagon, color=black];
8713[label="210.66.198.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9415[label="215.52.30.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12140[label="215.52.30.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:12340, 205.55.220.221:*}[27.7778%]&lt;BR/&gt;{195.0.24.29:12350, 205.55.220.221:*}[22.2222%]&lt;BR/&gt;{*:443, 205.55.220.221:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12340: (20.2128%)&lt;BR/&gt; 12350: (8.51064%)&lt;BR/&gt; 443: (8.51064%)&lt;BR/&gt; 23456: (6.38298%)&lt;BR/&gt; 1056: (5.31915%)&gt;];
}
160--1779[label="1;1pkt 1fpkt"];
160--1960[label="1;1pkt 1fpkt"];
160--7341[label="1;1pkt 1fpkt"];
1216--1779[label="1;1pkt 1fpkt"];
1216--7341[label="1;1pkt 1fpkt"];
1779--1960[label="1;2pkt 2fpkt"];
1779--1962[label="1;2pkt 2fpkt"];
1779--5913[label="1;2pkt 2fpkt"];
1779--7341[label="1;18pkt 18fpkt"];
1779--8713[label="1;1pkt 1fpkt"];
1779--9415[label="1;1pkt 1fpkt"];
1779--12140[label="1;1pkt 1fpkt"];
1960--7341[label="1;2pkt 2fpkt"];
1962--5913[label="1;2pkt 2fpkt"];
1962--7341[label="1;2pkt 2fpkt"];
1962--8713[label="1;1pkt 1fpkt"];
5913--7341[label="1;2pkt 2fpkt"];
5913--8713[label="1;1pkt 1fpkt"];
7341--8713[label="1;1pkt 1fpkt"];
7341--9415[label="1;1pkt 1fpkt"];
7341--12140[label="1;1pkt 1fpkt"];
9415--12140[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.220.221" src_port="12340"/>
      <filter dst_ip="205.55.220.221" src_port="443"/>
      <filter dst_ip="205.55.220.221" src_ip="195.0.24.29" src_port="12350"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.822873,2.22057,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.211.13.175"/>
      <from sec="1165899984" usec="0"/>
      <to sec="1165900031" usec="0"/>
    </slice>
    <from sec="1165899984" usec="0"/>
    <to sec="1165900031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
1576[label="151.227.5.136;d;327pkt 327fpkt", shape=diamond, color=yellow];
2972[label="65.156.88.102;s;3pkt 3fpkt", shape=diamond, color=yellow];
6031[label="151.227.5.136;d;137pkt 137fpkt", shape=hexagon, color=black];
7421[label="65.156.88.102;s;3pkt 3fpkt", shape=hexagon, color=black];
9691[label="69.134.214.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.227.5.136:21265}[60.8563%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21265: (30.5732%)&lt;BR/&gt; 20000: (1.38004%)&lt;BR/&gt; 10539: (1.27389%)&lt;BR/&gt; 17571: (1.16773%)&lt;BR/&gt; 9859: (0.849257%)&gt;];
}
1576--2972[label="1;3pkt 3fpkt"];
1576--6031[label="1;137pkt 137fpkt"];
1576--7421[label="1;3pkt 3fpkt"];
1576--9691[label="1;1pkt 1fpkt"];
2972--6031[label="0.666667;2pkt 2fpkt"];
2972--7421[label="1;3pkt 3fpkt"];
6031--7421[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.5.136" dst_port="21265"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
1331[label="169.230.19.102;d;259pkt 259fpkt", shape=diamond, color=yellow];
1918[label="215.196.12.14;s;125pkt 125fpkt", shape=diamond, color=yellow];
3976[label="195.55.87.80;s;4pkt 4fpkt", shape=diamond, color=yellow];
5893[label="169.230.19.102;d;128pkt 128fpkt", shape=hexagon, color=black];
5897[label="215.196.12.14;s;121pkt 121fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.196.12.14:80, 169.230.19.102:*}[48.2625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1264: (0.313972%)&lt;BR/&gt; 1263: (0.313972%)&lt;BR/&gt; 1262: (0.313972%)&lt;BR/&gt; 1261: (0.313972%)&gt;];
}
1331--1587[label="0.04;1pkt 1fpkt"];
1331--1918[label="1;125pkt 125fpkt"];
1331--3976[label="1;4pkt 4fpkt"];
1331--5893[label="1;128pkt 128fpkt"];
1331--5897[label="1;121pkt 121fpkt"];
1331--6034[label="0.0526316;1pkt 1fpkt"];
1331--8268[label="0.015444;4pkt 4fpkt"];
1331--8286[label="0.015444;4pkt 4fpkt"];
1918--5893[label="0.56;70pkt 70fpkt"];
1918--5897[label="1;121pkt 121fpkt"];
1918--8268[label="0.008;1pkt 1fpkt"];
1918--8286[label="0.008;1pkt 1fpkt"];
5893--5897[label="0.578512;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.19.102" src_ip="215.196.12.14" src_port="80"/>
    </slice>
    <from sec="1165899677" usec="0"/>
    <to sec="1165900005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
1045[label="169.230.243.204;s;15pkt 15fpkt", shape=diamond, color=yellow];
1212[label="32.4.33.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
6069[label="169.230.243.204;s;13pkt 13fpkt", shape=hexagon, color=black];
11088[label="169.230.243.204;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.243.204:80, 42.127.98.59:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37510: (4.34783%)&lt;BR/&gt; 58227: (3.26087%)&lt;BR/&gt; 53841: (3.26087%)&lt;BR/&gt; 53839: (3.26087%)&gt;];
}
1045--1212[label="1;1pkt 1fpkt"];
1045--6069[label="1;13pkt 13fpkt"];
1045--8268[label="0.0666667;1pkt 1fpkt"];
1045--8286[label="0.0666667;1pkt 1fpkt"];
1045--11088[label="1;15pkt 15fpkt"];
1212--6069[label="1;1pkt 1fpkt"];
1212--11088[label="1;1pkt 1fpkt"];
6069--11088[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="42.127.98.59" src_ip="169.230.243.204" src_port="80"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
425[label="59.251.209.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
428[label="169.230.13.21;s;348pkt 348fpkt", shape=diamond, color=yellow];
2137[label="220.224.153.8;d;237pkt 237fpkt", shape=diamond, color=yellow];
4173[label="43.176.71.177;d;110pkt 110fpkt", shape=diamond, color=yellow];
6868[label="220.224.153.8;d;213pkt 213fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.13.21:*, 220.224.153.8:80}[67.1388%]&lt;BR/&gt;{169.230.13.21:*, 43.176.71.177:80}[29.745%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.835%)&lt;BR/&gt; 5000: (0.165017%)&lt;BR/&gt; 4999: (0.165017%)&lt;BR/&gt; 4996: (0.165017%)&lt;BR/&gt; 4994: (0.165017%)&gt;];
}
425--428[label="1;1pkt 1fpkt"];
428--2137[label="1;237pkt 237fpkt"];
428--3183[label="0.0183486;2pkt 2fpkt"];
428--4173[label="0.954545;105pkt 105fpkt"];
428--6868[label="1;213pkt 213fpkt"];
2137--6868[label="1;213pkt 213fpkt"];
4173--4608[label="0.00909091;1pkt 1fpkt"];
4173--5170[label="0.00909091;1pkt 1fpkt"];
4173--5970[label="0.015873;1pkt 1fpkt"];
4173--10969[label="0.0121951;1pkt 1fpkt"];
4173--11481[label="0.00909091;1pkt 1fpkt"];
4173--12894[label="0.0121951;1pkt 1fpkt"];
4173--13152[label="0.00909091;1pkt 1fpkt"];
4173--13761[label="0.0121951;1pkt 1fpkt"];
4173--13880[label="0.00909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.224.153.8" dst_port="80" src_ip="169.230.13.21"/>
      <filter dst_ip="43.176.71.177" dst_port="80" src_ip="169.230.13.21"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
2566[label="151.227.30.26;d;4pkt 4fpkt", shape=diamond, color=yellow];
6194[label="151.227.30.26;d;4pkt 4fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.150.173.75:80, 151.227.30.26:1743}[25%]&lt;BR/&gt;{43.150.173.75:80, 151.227.30.26:1744}[25%]&lt;BR/&gt;{43.150.173.102:80, 151.227.30.26:1086}[25%]&lt;BR/&gt;{43.150.173.102:80, 151.227.30.26:1087}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1744: (12.5%)&lt;BR/&gt; 1743: (12.5%)&lt;BR/&gt; 1087: (12.5%)&lt;BR/&gt; 1086: (12.5%)&gt;];
}
2566--6194[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.30.26" dst_port="1087" src_ip="43.150.173.102" src_port="80"/>
      <filter dst_ip="151.227.30.26" dst_port="1086" src_ip="43.150.173.102" src_port="80"/>
      <filter dst_ip="151.227.30.26" dst_port="1744" src_ip="43.150.173.75" src_port="80"/>
      <filter dst_ip="151.227.30.26" dst_port="1743" src_ip="43.150.173.75" src_port="80"/>
    </slice>
    <from sec="1165899831" usec="0"/>
    <to sec="1165899859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
309[label="48.178.209.83;s;5943pkt 5943fpkt", shape=diamond, color=yellow];
6207[label="48.178.209.83;s;5943pkt 5943fpkt", shape=hexagon, color=black];
9508[label="48.178.209.83;5943pkt 5943fpkt", shape=pentagon, color=darkviolet];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.178.209.83:0, *:0}[99.0745%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.0745%)&lt;BR/&gt; 139: (0.260811%)&lt;BR/&gt; 445: (0.201918%)&lt;BR/&gt; 2506: (0.0504796%)&lt;BR/&gt; 4684: (0.0252398%)&gt;];
}
309--459[label="0.00250627;1pkt 1fpkt"];
309--664[label="0.000398406;1pkt 1fpkt"];
309--1012[label="0.00157729;1pkt 1fpkt"];
309--1533[label="0.00212314;1pkt 1fpkt"];
309--2301[label="0.00854701;1pkt 1fpkt"];
309--6007[label="0.00212314;1pkt 1fpkt"];
309--6207[label="1;5943pkt 5943fpkt"];
309--6235[label="0.00250627;1pkt 1fpkt"];
309--9508[label="1;5943pkt 5943fpkt"];
6207--6235[label="0.00250627;1pkt 1fpkt"];
6207--9508[label="1;5943pkt 5943fpkt"];
</description>
    <slice>
      <filter src_ip="48.178.209.83"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
2619[label="150.105.189.125;s;676pkt 676fpkt", shape=diamond, color=yellow];
6225[label="150.105.189.125;s;512pkt 512fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.105.189.125:123, *:123}[63.7574%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (82.197%)&lt;BR/&gt; 1024: (0.925926%)&lt;BR/&gt; 1026: (0.883838%)&lt;BR/&gt; 50001: (0.420875%)&lt;BR/&gt; 1028: (0.210438%)&gt;];
}
2619--4464[label="0.241379;7pkt 7fpkt"];
2619--6225[label="1;512pkt 512fpkt"];
</description>
    <slice>
      <filter dst_port="123" src_ip="150.105.189.125" src_port="123"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
2204[label="145.229.169.151;d;382pkt 382fpkt", shape=diamond, color=yellow];
2707[label="218.171.113.166;s;377pkt 377fpkt", shape=diamond, color=yellow];
6039[label="145.229.169.151;d;382pkt 382fpkt", shape=hexagon, color=black];
6325[label="218.171.113.166;s;294pkt 294fpkt", shape=hexagon, color=black];
9082[label="204.100.7.52;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10575[label="218.171.113.166;413pkt 413fpkt", shape=pentagon, color=darkviolet];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.171.113.166:80, 145.229.169.151:*}[98.0998%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2098: (0.134989%)&lt;BR/&gt; 2097: (0.134989%)&lt;BR/&gt; 2096: (0.134989%)&lt;BR/&gt; 2095: (0.134989%)&gt;];
}
2204--2707[label="1;377pkt 377fpkt"];
2204--6039[label="1;382pkt 382fpkt"];
2204--6325[label="1;294pkt 294fpkt"];
2204--8268[label="0.0628272;24pkt 24fpkt"];
2204--8272[label="0.0706806;27pkt 27fpkt"];
2204--8275[label="0.0680628;26pkt 26fpkt"];
2204--8286[label="0.0628272;24pkt 24fpkt"];
2204--8290[label="0.0706806;27pkt 27fpkt"];
2204--8293[label="0.0680628;26pkt 26fpkt"];
2204--9082[label="0.25;1pkt 1fpkt"];
2204--10575[label="0.986911;377pkt 377fpkt"];
2707--6039[label="1;377pkt 377fpkt"];
2707--6325[label="1;294pkt 294fpkt"];
2707--8268[label="0.0636605;24pkt 24fpkt"];
2707--8272[label="0.0689655;26pkt 26fpkt"];
2707--8275[label="0.066313;25pkt 25fpkt"];
2707--8286[label="0.0636605;24pkt 24fpkt"];
2707--8290[label="0.0689655;26pkt 26fpkt"];
2707--8293[label="0.066313;25pkt 25fpkt"];
2707--10575[label="1;377pkt 377fpkt"];
6039--6325[label="1;294pkt 294fpkt"];
6039--8268[label="0.0628272;24pkt 24fpkt"];
6039--8272[label="0.0706806;27pkt 27fpkt"];
6039--8275[label="0.0680628;26pkt 26fpkt"];
6039--8286[label="0.0628272;24pkt 24fpkt"];
6039--8290[label="0.0706806;27pkt 27fpkt"];
6039--8293[label="0.0680628;26pkt 26fpkt"];
6039--9082[label="0.25;1pkt 1fpkt"];
6039--10575[label="0.986911;377pkt 377fpkt"];
6325--8268[label="0.0816327;24pkt 24fpkt"];
6325--8272[label="0.0884354;26pkt 26fpkt"];
6325--8275[label="0.00340136;1pkt 1fpkt"];
6325--8286[label="0.0816327;24pkt 24fpkt"];
6325--8290[label="0.0884354;26pkt 26fpkt"];
6325--8293[label="0.00340136;1pkt 1fpkt"];
6325--10575[label="1;294pkt 294fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.169.151" src_ip="218.171.113.166" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
2207[label="145.20.219.4;s;279pkt 279fpkt", shape=diamond, color=yellow];
6328[label="145.20.219.4;s;134pkt 134fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.20.219.4:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2207--4612[label="0.00358423;1pkt 1fpkt"];
2207--4632[label="0.00378788;1pkt 1fpkt"];
2207--4638[label="0.00383142;1pkt 1fpkt"];
2207--5052[label="0.00373134;1pkt 1fpkt"];
2207--6328[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter src_ip="145.20.219.4"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
1808[label="205.85.65.183;d;143pkt 143fpkt", shape=diamond, color=yellow];
1945[label="145.248.107.112;s;90pkt 90fpkt", shape=diamond, color=yellow];
6157[label="145.248.107.112;s;90pkt 90fpkt", shape=hexagon, color=black];
8702[label="145.248.68.26;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9201[label="145.248.82.61;18pkt 18fpkt", shape=pentagon, color=darkviolet];
9677[label="139.152.68.96;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12264[label="139.152.68.96;7pkt 7fpkt", shape=invtriangle, color=brown];
13465[label="139.152.68.96;7pkt 7fpkt", shape=invhouse, color=bisque];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.107.112:*, 205.85.65.183:80}[60.5442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8638%)&lt;BR/&gt; 33628: (0.544959%)&lt;BR/&gt; 33538: (0.544959%)&lt;BR/&gt; 33511: (0.544959%)&lt;BR/&gt; 33342: (0.544959%)&gt;];
}
1808--1945[label="0.988889;89pkt 89fpkt"];
1808--4317[label="0.025641;1pkt 1fpkt"];
1808--4437[label="0.176471;6pkt 6fpkt"];
1808--5836[label="0.013986;2pkt 2fpkt"];
1808--6157[label="0.988889;89pkt 89fpkt"];
1808--6399[label="0.013986;2pkt 2fpkt"];
1808--8702[label="0.4;2pkt 2fpkt"];
1808--9087[label="0.025641;1pkt 1fpkt"];
1808--9201[label="1;18pkt 18fpkt"];
1808--9677[label="1;7pkt 7fpkt"];
1808--10705[label="0.00699301;1pkt 1fpkt"];
1808--11958[label="0.025641;1pkt 1fpkt"];
1808--12264[label="1;7pkt 7fpkt"];
1808--12750[label="0.00699301;1pkt 1fpkt"];
1808--13465[label="1;7pkt 7fpkt"];
1945--5569[label="0.0111111;1pkt 1fpkt"];
1945--6157[label="1;90pkt 90fpkt"];
9677--12264[label="1;7pkt 7fpkt"];
9677--13465[label="1;7pkt 7fpkt"];
12264--13465[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="205.85.65.183" dst_port="80" src_ip="145.248.107.112"/>
    </slice>
    <from sec="1165899610" usec="0"/>
    <to sec="1165900325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
2625[label="204.6.229.19;s;21pkt 21fpkt", shape=diamond, color=yellow];
6539[label="41.132.226.192;d;4pkt 4fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.229.19:80, 44.165.104.150:*}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42%)&lt;BR/&gt; 60828: (4%)&lt;BR/&gt; 56653: (4%)&lt;BR/&gt; 56424: (4%)&lt;BR/&gt; 56214: (4%)&gt;];
}
2625--6539[label="1;4pkt 4fpkt"];
2625--8272[label="0.190476;4pkt 4fpkt"];
2625--8290[label="0.190476;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="44.165.104.150" src_ip="204.6.229.19" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
659[label="151.227.235.3;s;809pkt 809fpkt", shape=diamond, color=yellow];
1096[label="41.132.233.104;d;41pkt 41fpkt", shape=diamond, color=yellow];
2436[label="215.116.173.22;d;54pkt 54fpkt", shape=diamond, color=yellow];
3787[label="151.227.87.13;s;33pkt 33fpkt", shape=diamond, color=yellow];
4131[label="219.143.164.1;d;40pkt 40fpkt", shape=diamond, color=yellow];
6136[label="215.116.173.22;d;53pkt 53fpkt", shape=hexagon, color=black];
6995[label="41.132.233.104;d;37pkt 37fpkt", shape=hexagon, color=black];
7187[label="219.143.164.1;d;40pkt 40fpkt", shape=hexagon, color=black];
7641[label="151.227.87.13;s;33pkt 33fpkt", shape=hexagon, color=black];
8376[label="151.227.235.3;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8516[label="151.227.235.12;46pkt 46fpkt", shape=pentagon, color=darkviolet];
8525[label="151.227.87.13;35pkt 35fpkt", shape=pentagon, color=darkviolet];
11307[label="151.227.235.225;19pkt 19fpkt", shape=pentagon, color=darkviolet];
11666[label="151.227.87.13;35pkt 35fpkt", shape=invtriangle, color=brown];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.235.3:*, *:80}[26.1057%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.3224%)&lt;BR/&gt; 515: (4.68384%)&lt;BR/&gt; 0: (1.63934%)&lt;BR/&gt; 9100: (1.24902%)&lt;BR/&gt; 10966: (0.9758%)&gt;];
}
659--826[label="0.00283286;1pkt 1fpkt"];
659--890[label="0.0108696;2pkt 2fpkt"];
659--946[label="0.0116618;8pkt 8fpkt"];
659--986[label="0.012987;5pkt 5fpkt"];
659--992[label="0.0205128;4pkt 4fpkt"];
659--1000[label="0.00628931;4pkt 4fpkt"];
659--1051[label="0.0895522;12pkt 12fpkt"];
659--1087[label="0.0160692;13pkt 13fpkt"];
659--1163[label="0.0194175;4pkt 4fpkt"];
659--1433[label="0.00452489;1pkt 1fpkt"];
659--1474[label="0.00259067;1pkt 1fpkt"];
659--1591[label="0.0147059;4pkt 4fpkt"];
659--1621[label="0.00854701;3pkt 3fpkt"];
659--1723[label="0.0058309;2pkt 2fpkt"];
659--1756[label="0.0359712;5pkt 5fpkt"];
659--1761[label="0.0298507;4pkt 4fpkt"];
659--1787[label="0.00702576;3pkt 3fpkt"];
659--1988[label="0.0192308;4pkt 4fpkt"];
659--1990[label="0.00892857;2pkt 2fpkt"];
659--2079[label="0.0121951;1pkt 1fpkt"];
659--2108[label="0.00537634;1pkt 1fpkt"];
659--2142[label="0.0275229;3pkt 3fpkt"];
659--2381[label="0.00497512;1pkt 1fpkt"];
659--2394[label="0.00970874;1pkt 1fpkt"];
659--2436[label="0.37037;20pkt 20fpkt"];
659--2497[label="0.0143885;2pkt 2fpkt"];
659--3634[label="0.0454545;2pkt 2fpkt"];
659--3871[label="0.0625;2pkt 2fpkt"];
659--4131[label="1;40pkt 40fpkt"];
659--4149[label="0.0645161;2pkt 2fpkt"];
659--4802[label="0.0769231;2pkt 2fpkt"];
659--4810[label="0.0625;1pkt 1fpkt"];
659--5505[label="0.00123609;1pkt 1fpkt"];
659--5590[label="0.0116618;8pkt 8fpkt"];
659--5631[label="0.00907029;4pkt 4fpkt"];
659--6136[label="0.377358;20pkt 20fpkt"];
659--6324[label="0.0147059;4pkt 4fpkt"];
659--6483[label="0.0192308;4pkt 4fpkt"];
659--7016[label="0.0416667;4pkt 4fpkt"];
659--7187[label="1;40pkt 40fpkt"];
659--7375[label="0.00970874;1pkt 1fpkt"];
659--7546[label="0.00259067;1pkt 1fpkt"];
659--7573[label="0.0108696;2pkt 2fpkt"];
659--7632[label="0.0058309;2pkt 2fpkt"];
659--7675[label="0.00810811;3pkt 3fpkt"];
659--8174[label="0.0116618;8pkt 8fpkt"];
659--8376[label="0.333333;2pkt 2fpkt"];
1096--3787[label="0.848485;28pkt 28fpkt"];
1096--6272[label="0.146341;6pkt 6fpkt"];
1096--6995[label="1;37pkt 37fpkt"];
1096--7641[label="0.848485;28pkt 28fpkt"];
1096--8268[label="0.0487805;2pkt 2fpkt"];
1096--8272[label="0.0487805;2pkt 2fpkt"];
1096--8275[label="0.097561;4pkt 4fpkt"];
1096--8286[label="0.0487805;2pkt 2fpkt"];
1096--8290[label="0.0487805;2pkt 2fpkt"];
1096--8293[label="0.097561;4pkt 4fpkt"];
1096--8525[label="0.8;28pkt 28fpkt"];
1096--11666[label="0.8;28pkt 28fpkt"];
2436--3787[label="0.030303;1pkt 1fpkt"];
2436--6136[label="1;53pkt 53fpkt"];
2436--7641[label="0.030303;1pkt 1fpkt"];
2436--8268[label="0.0185185;1pkt 1fpkt"];
2436--8286[label="0.0185185;1pkt 1fpkt"];
2436--8516[label="0.347826;16pkt 16fpkt"];
2436--8525[label="0.0285714;1pkt 1fpkt"];
2436--11307[label="0.842105;16pkt 16fpkt"];
2436--11666[label="0.0285714;1pkt 1fpkt"];
3787--6136[label="0.030303;1pkt 1fpkt"];
3787--6995[label="0.757576;25pkt 25fpkt"];
3787--7641[label="1;33pkt 33fpkt"];
3787--8268[label="0.030303;1pkt 1fpkt"];
3787--8272[label="0.030303;1pkt 1fpkt"];
3787--8275[label="0.030303;1pkt 1fpkt"];
3787--8286[label="0.030303;1pkt 1fpkt"];
3787--8290[label="0.030303;1pkt 1fpkt"];
3787--8293[label="0.030303;1pkt 1fpkt"];
3787--8525[label="1;33pkt 33fpkt"];
3787--11666[label="1;33pkt 33fpkt"];
4131--7187[label="1;40pkt 40fpkt"];
6136--7641[label="0.030303;1pkt 1fpkt"];
6136--8516[label="0.347826;16pkt 16fpkt"];
6136--8525[label="0.0285714;1pkt 1fpkt"];
6136--11307[label="0.842105;16pkt 16fpkt"];
6136--11666[label="0.0285714;1pkt 1fpkt"];
6995--7641[label="0.757576;25pkt 25fpkt"];
6995--8268[label="0.0540541;2pkt 2fpkt"];
6995--8272[label="0.0540541;2pkt 2fpkt"];
6995--8275[label="0.108108;4pkt 4fpkt"];
6995--8286[label="0.0540541;2pkt 2fpkt"];
6995--8290[label="0.0540541;2pkt 2fpkt"];
6995--8293[label="0.108108;4pkt 4fpkt"];
6995--8525[label="0.714286;25pkt 25fpkt"];
6995--11666[label="0.714286;25pkt 25fpkt"];
7641--8268[label="0.030303;1pkt 1fpkt"];
7641--8272[label="0.030303;1pkt 1fpkt"];
7641--8275[label="0.030303;1pkt 1fpkt"];
7641--8286[label="0.030303;1pkt 1fpkt"];
7641--8290[label="0.030303;1pkt 1fpkt"];
7641--8293[label="0.030303;1pkt 1fpkt"];
7641--8525[label="1;33pkt 33fpkt"];
7641--11666[label="1;33pkt 33fpkt"];
8525--11666[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="151.227.235.3"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1444[label="65.94.90.187;s;3612pkt 3612fpkt", shape=diamond, color=yellow];
6588[label="65.94.90.187;s;2436pkt 2436fpkt", shape=hexagon, color=black];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.94.90.187:1044, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1044: (50%)&gt;];
}
1444--6588[label="1;2436pkt 2436fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="65.94.90.187" src_port="1044"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
3228[label="192.246.217.32;s;807pkt 807fpkt", shape=diamond, color=yellow];
6634[label="192.246.217.32;s;722pkt 722fpkt", shape=hexagon, color=black];
8786[label="192.246.217.32;963pkt 963fpkt", shape=pentagon, color=darkviolet];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.246.217.32:39701, *:1080}[32.1244%]&lt;BR/&gt;{192.246.217.32:48663, *:1080}[29.1192%]&lt;BR/&gt;{192.246.217.32:45788, *:1080}[28.8083%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 39701: (15.7705%)&lt;BR/&gt; 45788: (14.7472%)&lt;BR/&gt; 48663: (14.6067%)&lt;BR/&gt; 20510: (4.8756%)&gt;];
}
3228--6634[label="1;722pkt 722fpkt"];
3228--8786[label="0.997522;805pkt 805fpkt"];
6634--8786[label="0.99723;720pkt 720fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="192.246.217.32" src_port="39701"/>
      <filter dst_port="1080" src_ip="192.246.217.32" src_port="48663"/>
      <filter dst_port="1080" src_ip="192.246.217.32" src_port="45788"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
2909[label="151.227.81.161;s;107pkt 107fpkt", shape=diamond, color=yellow];
6722[label="151.227.81.161;s;107pkt 107fpkt", shape=hexagon, color=black];
10502[label="151.227.81.161;108pkt 108fpkt", shape=pentagon, color=darkviolet];
12657[label="151.227.81.161;108pkt 108fpkt", shape=invtriangle, color=brown];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.81.161:*, 205.70.144.25:80}[62.963%]&lt;BR/&gt;{151.227.81.161:*, 43.99.33.203:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2387: (0.465116%)&lt;BR/&gt; 2386: (0.465116%)&lt;BR/&gt; 2385: (0.465116%)&lt;BR/&gt; 2384: (0.465116%)&gt;];
}
2909--6291[label="0.00934579;1pkt 1fpkt"];
2909--6722[label="1;107pkt 107fpkt"];
2909--10502[label="1;107pkt 107fpkt"];
2909--12657[label="1;107pkt 107fpkt"];
6722--10502[label="1;107pkt 107fpkt"];
6722--12657[label="1;107pkt 107fpkt"];
10502--12657[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_ip="205.70.144.25" dst_port="80" src_ip="151.227.81.161"/>
      <filter dst_ip="43.99.33.203" dst_port="80" src_ip="151.227.81.161"/>
    </slice>
    <from sec="1165899619" usec="0"/>
    <to sec="1165900200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
2407[label="145.252.156.96;d;118pkt 118fpkt", shape=diamond, color=yellow];
6723[label="145.252.156.96;d;118pkt 118fpkt", shape=hexagon, color=black];
10356[label="209.139.82.150;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.252.156.96:25}[83.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4544: (0.803213%)&lt;BR/&gt; 3652: (0.60241%)&lt;BR/&gt; 61167: (0.401606%)&lt;BR/&gt; 61164: (0.401606%)&gt;];
}
2407--6723[label="1;118pkt 118fpkt"];
2407--10356[label="0.0769231;1pkt 1fpkt"];
6723--10356[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.252.156.96" dst_port="25"/>
    </slice>
    <from sec="1165899619" usec="0"/>
    <to sec="1165900485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
665[label="195.19.194.209;s;3864pkt 3864fpkt", shape=diamond, color=yellow];
6861[label="195.19.194.209;s;3597pkt 3597fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.19.194.209:6667, *:3072}[44.8758%]&lt;BR/&gt;{195.19.194.209:6667, *:1024}[41.6149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (43.0572%)&lt;BR/&gt; 3072: (25.8611%)&lt;BR/&gt; 1024: (23.978%)&lt;BR/&gt; 6666: (6.82214%)&lt;BR/&gt; 7000: (0.0603136%)&gt;];
}
665--4624[label="0.00526316;1pkt 1fpkt"];
665--6861[label="1;3597pkt 3597fpkt"];
665--7606[label="0.00564972;1pkt 1fpkt"];
6861--7606[label="0.00564972;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="3072" src_ip="195.19.194.209" src_port="6667"/>
      <filter dst_port="1024" src_ip="195.19.194.209" src_port="6667"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
2688[label="205.246.68.84;d;158pkt 158fpkt", shape=diamond, color=yellow];
6904[label="205.246.68.84;d;158pkt 158fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 205.246.68.84:0}[99.3671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.3671%)&lt;BR/&gt; 62929: (0.316456%)&lt;BR/&gt; 135: (0.316456%)&gt;];
}
2688--6904[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.68.84"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.822873,2.22057,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.130.168.201"/>
      <from sec="1165900167" usec="0"/>
      <to sec="1165900428" usec="0"/>
    </slice>
    <from sec="1165900167" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
3834[label="169.230.153.141;s;90pkt 90fpkt", shape=diamond, color=yellow];
7027[label="169.230.153.141;s;90pkt 90fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.153.141:54045, *:*}[85.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54045: (42.7778%)&lt;BR/&gt; 12350: (3.88889%)&lt;BR/&gt; 43342: (2.22222%)&lt;BR/&gt; 38897: (1.11111%)&lt;BR/&gt; 65156: (0.555556%)&gt;];
}
3834--7027[label="1;90pkt 90fpkt"];
3834--7375[label="0.0111111;1pkt 1fpkt"];
7027--7375[label="0.0111111;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="169.230.153.141" src_port="54045"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
2902[label="145.229.42.105;s;116pkt 116fpkt", shape=diamond, color=yellow];
7055[label="145.229.42.105;s;101pkt 101fpkt", shape=hexagon, color=black];
9788[label="145.229.42.105;130pkt 130fpkt", shape=pentagon, color=darkviolet];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.42.105:*, 42.126.208.97:80}[37.6923%]&lt;BR/&gt;{145.229.42.105:*, 43.107.236.187:80}[33.0769%]&lt;BR/&gt;{145.229.42.105:*, 42.127.13.195:80}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5677%)&lt;BR/&gt; 3228: (0.432277%)&lt;BR/&gt; 3227: (0.432277%)&lt;BR/&gt; 3226: (0.432277%)&lt;BR/&gt; 3225: (0.432277%)&gt;];
}
2902--7055[label="1;101pkt 101fpkt"];
2902--9788[label="1;116pkt 116fpkt"];
7055--9788[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_ip="42.126.208.97" dst_port="80" src_ip="145.229.42.105"/>
      <filter dst_ip="43.107.236.187" dst_port="80" src_ip="145.229.42.105"/>
      <filter dst_ip="42.127.13.195" dst_port="80" src_ip="145.229.42.105"/>
    </slice>
    <from sec="1165899617" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
793[label="205.156.38.75;s;472pkt 472fpkt", shape=diamond, color=yellow];
1528[label="205.246.120.151;d;1244pkt 1244fpkt", shape=diamond, color=yellow];
1639[label="205.156.38.173;s;373pkt 373fpkt", shape=diamond, color=yellow];
3414[label="205.156.38.171;s;352pkt 352fpkt", shape=diamond, color=yellow];
7079[label="205.156.38.171;s;352pkt 352fpkt", shape=hexagon, color=black];
10401[label="68.235.67.153;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10688[label="205.156.38.173;394pkt 394fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.156.38.75:*, 205.246.120.151:53}[37.3123%]&lt;BR/&gt;{205.156.38.173:*, 205.246.120.151:53}[31.1462%]&lt;BR/&gt;{205.156.38.171:*, 205.246.120.151:53}[27.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.9844%)&lt;BR/&gt; 2805: (0.0938673%)&lt;BR/&gt; 2804: (0.0938673%)&lt;BR/&gt; 2803: (0.0938673%)&lt;BR/&gt; 2802: (0.0938673%)&gt;];
}
793--1528[label="1;472pkt 472fpkt"];
1528--1639[label="1;373pkt 373fpkt"];
1528--3414[label="1;352pkt 352fpkt"];
1528--7079[label="1;352pkt 352fpkt"];
1528--10401[label="1;9pkt 9fpkt"];
1528--10688[label="0.946701;373pkt 373fpkt"];
1639--10688[label="1;373pkt 373fpkt"];
3414--7079[label="1;352pkt 352fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.120.151" dst_port="53" src_ip="205.156.38.75"/>
      <filter dst_ip="205.246.120.151" dst_port="53" src_ip="205.156.38.173"/>
      <filter dst_ip="205.246.120.151" dst_port="53" src_ip="205.156.38.171"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1964[label="150.105.130.18;s;57pkt 57fpkt", shape=diamond, color=yellow];
2298[label="218.104.50.20;d;109pkt 109fpkt", shape=diamond, color=yellow];
3473[label="139.152.253.153;s;36pkt 36fpkt", shape=diamond, color=yellow];
3558[label="218.217.52.102;d;3pkt 3fpkt", shape=diamond, color=yellow];
5914[label="150.105.130.18;s;57pkt 57fpkt", shape=hexagon, color=black];
6768[label="139.152.253.153;s;36pkt 36fpkt", shape=hexagon, color=black];
7141[label="218.217.52.102;d;3pkt 3fpkt", shape=hexagon, color=black];
10408[label="139.152.253.153;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.105.130.18:*, 218.104.50.20:80}[37.9562%]&lt;BR/&gt;{139.152.253.153:*, 218.104.50.20:80}[22.6277%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3923: (0.74184%)&lt;BR/&gt; 3920: (0.74184%)&lt;BR/&gt; 3917: (0.74184%)&lt;BR/&gt; 3915: (0.593472%)&gt;];
}
1964--2298[label="0.596491;34pkt 34fpkt"];
1964--5914[label="1;57pkt 57fpkt"];
2298--3473[label="0.861111;31pkt 31fpkt"];
2298--5914[label="0.596491;34pkt 34fpkt"];
2298--6768[label="0.861111;31pkt 31fpkt"];
2298--10408[label="0.861111;31pkt 31fpkt"];
3473--3558[label="1;3pkt 3fpkt"];
3473--6768[label="1;36pkt 36fpkt"];
3473--7141[label="1;3pkt 3fpkt"];
3473--10408[label="1;36pkt 36fpkt"];
3558--6768[label="1;3pkt 3fpkt"];
3558--7141[label="1;3pkt 3fpkt"];
3558--10408[label="1;3pkt 3fpkt"];
6768--7141[label="1;3pkt 3fpkt"];
6768--10408[label="1;36pkt 36fpkt"];
7141--10408[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="218.104.50.20" dst_port="80" src_ip="150.105.130.18"/>
      <filter dst_ip="218.104.50.20" dst_port="80" src_ip="139.152.253.153"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
2641[label="205.246.69.128;d;268pkt 268fpkt", shape=diamond, color=yellow];
7214[label="205.246.69.128;d;266pkt 266fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 205.246.69.128:0}[98.8806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2509%)&lt;BR/&gt; 1027: (0.280899%)&lt;BR/&gt; 56167: (0.187266%)&lt;BR/&gt; 36735: (0.187266%)&lt;BR/&gt; 1026: (0.093633%)&gt;];
}
2641--5320[label="0.00746269;2pkt 2fpkt"];
2641--7214[label="1;266pkt 266fpkt"];
2641--8066[label="0.00746269;2pkt 2fpkt"];
2641--8256[label="0.00746269;2pkt 2fpkt"];
2641--9994[label="0.00746269;2pkt 2fpkt"];
2641--11405[label="0.00373134;1pkt 1fpkt"];
2641--12424[label="0.00746269;2pkt 2fpkt"];
2641--13108[label="0.00373134;1pkt 1fpkt"];
2641--13543[label="0.00746269;2pkt 2fpkt"];
7214--11405[label="0.0037594;1pkt 1fpkt"];
7214--13108[label="0.0037594;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.69.128"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
4230[label="204.6.229.82;d;103pkt 103fpkt", shape=diamond, color=yellow];
7303[label="204.6.229.82;d;103pkt 103fpkt", shape=hexagon, color=black];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.6.229.82:25}[75.7282%]&lt;BR/&gt;{*:25, 204.6.229.82:*}[22.3301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0291%)&lt;BR/&gt; 0: (1.94175%)&lt;BR/&gt; 64801: (0.485437%)&lt;BR/&gt; 64419: (0.485437%)&lt;BR/&gt; 63062: (0.485437%)&gt;];
}
4230--7303[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.229.82" src_port="25"/>
      <filter dst_ip="204.6.229.82" dst_port="25"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
705[label="201.110.193.211;d;6pkt 6fpkt", shape=diamond, color=yellow];
1481[label="151.227.184.151;s;232pkt 232fpkt", shape=diamond, color=yellow];
3549[label="205.0.0.156;d;59pkt 59fpkt", shape=diamond, color=yellow];
3835[label="205.249.128.199;s;96pkt 96fpkt", shape=diamond, color=yellow];
5523[label="201.110.193.211;d;3pkt 3fpkt", shape=hexagon, color=black];
5995[label="151.227.184.151;s;99pkt 99fpkt", shape=hexagon, color=black];
7960[label="205.249.128.199;s;96pkt 96fpkt", shape=hexagon, color=black];
11014[label="205.249.128.199;98pkt 98fpkt", shape=pentagon, color=darkviolet];
12915[label="205.249.128.199;98pkt 98fpkt", shape=invtriangle, color=brown];
13772[label="205.249.128.199;98pkt 98fpkt", shape=invhouse, color=bisque];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.184.151:*, *:80}[29.3413%]&lt;BR/&gt;{205.249.128.199:*, *:80}[25.7485%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.8023%)&lt;BR/&gt; 53: (7.17514%)&lt;BR/&gt; 3745: (5.31073%)&lt;BR/&gt; 25: (3.33333%)&lt;BR/&gt; 1863: (3.05085%)&gt;];
}
705--1481[label="0.166667;1pkt 1fpkt"];
705--3835[label="0.166667;1pkt 1fpkt"];
705--5523[label="1;3pkt 3fpkt"];
705--5995[label="0.166667;1pkt 1fpkt"];
705--7960[label="0.166667;1pkt 1fpkt"];
705--11014[label="0.166667;1pkt 1fpkt"];
705--11422[label="0.166667;1pkt 1fpkt"];
705--12915[label="0.166667;1pkt 1fpkt"];
705--13772[label="0.166667;1pkt 1fpkt"];
1481--1621[label="0.00431034;1pkt 1fpkt"];
1481--1988[label="0.00480769;1pkt 1fpkt"];
1481--2085[label="0.00552486;1pkt 1fpkt"];
1481--2386[label="0.012931;3pkt 3fpkt"];
1481--2497[label="0.00719424;1pkt 1fpkt"];
1481--2699[label="0.00510204;1pkt 1fpkt"];
1481--2713[label="0.00653595;1pkt 1fpkt"];
1481--2783[label="0.00529101;1pkt 1fpkt"];
1481--2827[label="0.015873;1pkt 1fpkt"];
1481--3183[label="0.0183486;2pkt 2fpkt"];
1481--3225[label="0.00763359;1pkt 1fpkt"];
1481--3229[label="0.0119048;1pkt 1fpkt"];
1481--3244[label="0.00657895;1pkt 1fpkt"];
1481--3246[label="0.00689655;1pkt 1fpkt"];
1481--3254[label="0.00769231;1pkt 1fpkt"];
1481--3657[label="0.00909091;1pkt 1fpkt"];
1481--3660[label="0.00757576;1pkt 1fpkt"];
1481--3691[label="0.0162602;2pkt 2fpkt"];
1481--3718[label="0.00806452;1pkt 1fpkt"];
1481--3719[label="0.00970874;1pkt 1fpkt"];
1481--3736[label="0.00854701;1pkt 1fpkt"];
1481--3748[label="0.00833333;1pkt 1fpkt"];
1481--4227[label="0.00892857;1pkt 1fpkt"];
1481--4241[label="0.0416667;3pkt 3fpkt"];
1481--4604[label="0.0357143;1pkt 1fpkt"];
1481--4610[label="0.00952381;1pkt 1fpkt"];
1481--4706[label="0.0333333;1pkt 1fpkt"];
1481--4764[label="0.0689655;2pkt 2fpkt"];
1481--4994[label="0.0126582;1pkt 1fpkt"];
1481--5094[label="0.00869565;1pkt 1fpkt"];
1481--5146[label="0.0333333;1pkt 1fpkt"];
1481--5234[label="0.03125;1pkt 1fpkt"];
1481--5447[label="0.0285714;1pkt 1fpkt"];
1481--5489[label="0.0333333;2pkt 2fpkt"];
1481--5505[label="0.00862069;2pkt 2fpkt"];
1481--5523[label="0.333333;1pkt 1fpkt"];
1481--5590[label="0.0862069;20pkt 20fpkt"];
1481--5614[label="0.00934579;1pkt 1fpkt"];
1481--5995[label="1;99pkt 99fpkt"];
1481--6334[label="0.01;1pkt 1fpkt"];
1481--6374[label="0.00529101;1pkt 1fpkt"];
1481--6396[label="0.015873;1pkt 1fpkt"];
1481--6483[label="0.00480769;1pkt 1fpkt"];
1481--6841[label="0.0172414;4pkt 4fpkt"];
1481--7250[label="0.00469484;1pkt 1fpkt"];
1481--7560[label="0.00961538;1pkt 1fpkt"];
1481--7579[label="0.00543478;1pkt 1fpkt"];
1481--7601[label="0.00813008;1pkt 1fpkt"];
1481--7618[label="0.00431034;1pkt 1fpkt"];
1481--7861[label="0.012987;2pkt 2fpkt"];
1481--7876[label="0.0126582;1pkt 1fpkt"];
1481--7931[label="0.00869565;1pkt 1fpkt"];
1481--8174[label="0.0862069;20pkt 20fpkt"];
1481--8266[label="0.012931;3pkt 3fpkt"];
1481--8267[label="0.00431034;1pkt 1fpkt"];
1481--8271[label="0.00431034;1pkt 1fpkt"];
1481--8275[label="0.00862069;2pkt 2fpkt"];
1481--8284[label="0.012931;3pkt 3fpkt"];
1481--8285[label="0.00431034;1pkt 1fpkt"];
1481--8289[label="0.00431034;1pkt 1fpkt"];
1481--8293[label="0.00862069;2pkt 2fpkt"];
3549--3835[label="1;59pkt 59fpkt"];
3549--7960[label="1;59pkt 59fpkt"];
3549--11014[label="1;59pkt 59fpkt"];
3549--12915[label="1;59pkt 59fpkt"];
3549--13772[label="1;59pkt 59fpkt"];
3835--4236[label="0.0104167;1pkt 1fpkt"];
3835--5431[label="0.0208333;2pkt 2fpkt"];
3835--5523[label="0.333333;1pkt 1fpkt"];
3835--5629[label="0.0104167;1pkt 1fpkt"];
3835--6386[label="0.0104167;1pkt 1fpkt"];
3835--6406[label="0.0416667;4pkt 4fpkt"];
3835--6576[label="0.0208333;2pkt 2fpkt"];
3835--6608[label="0.0104167;1pkt 1fpkt"];
3835--6841[label="0.0104167;1pkt 1fpkt"];
3835--6873[label="0.0104167;1pkt 1fpkt"];
3835--7197[label="0.0104167;1pkt 1fpkt"];
3835--7960[label="1;96pkt 96fpkt"];
3835--11014[label="1;96pkt 96fpkt"];
3835--12915[label="1;96pkt 96fpkt"];
3835--13772[label="1;96pkt 96fpkt"];
5523--5995[label="0.333333;1pkt 1fpkt"];
5523--7960[label="0.333333;1pkt 1fpkt"];
5523--11014[label="0.333333;1pkt 1fpkt"];
5523--12915[label="0.333333;1pkt 1fpkt"];
5523--13772[label="0.333333;1pkt 1fpkt"];
5995--6334[label="0.010101;1pkt 1fpkt"];
5995--6483[label="0.010101;1pkt 1fpkt"];
5995--6841[label="0.010101;1pkt 1fpkt"];
5995--7579[label="0.010101;1pkt 1fpkt"];
5995--7618[label="0.010101;1pkt 1fpkt"];
5995--7876[label="0.0126582;1pkt 1fpkt"];
5995--7931[label="0.010101;1pkt 1fpkt"];
7960--11014[label="1;96pkt 96fpkt"];
7960--12915[label="1;96pkt 96fpkt"];
7960--13772[label="1;96pkt 96fpkt"];
11014--12915[label="1;98pkt 98fpkt"];
11014--13772[label="1;98pkt 98fpkt"];
12915--13772[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="151.227.184.151"/>
      <filter dst_port="80" src_ip="205.249.128.199"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
432[label="145.41.230.228;d;6pkt 6fpkt", shape=diamond, color=yellow];
435[label="81.33.101.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
5717[label="81.33.101.15;s;1pkt 1fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.0.0.216:80, 145.41.230.228:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.25%)&lt;BR/&gt; 53971: (18.75%)&lt;BR/&gt; 8000: (18.75%)&lt;BR/&gt; 54104: (6.25%)&lt;BR/&gt; 54103: (6.25%)&gt;];
}
432--435[label="1;1pkt 1fpkt"];
432--1512[label="0.166667;1pkt 1fpkt"];
432--5717[label="1;1pkt 1fpkt"];
432--5765[label="0.166667;1pkt 1fpkt"];
435--5717[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.41.230.228" src_ip="205.0.0.216" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
1487[label="204.6.226.142;d;421pkt 421fpkt", shape=diamond, color=yellow];
1531[label="204.6.227.222;d;424pkt 424fpkt", shape=diamond, color=yellow];
1597[label="204.6.224.165;d;440pkt 440fpkt", shape=diamond, color=yellow];
2122[label="68.119.238.85;d;173pkt 173fpkt", shape=diamond, color=yellow];
3888[label="41.112.133.204;s;185pkt 185fpkt", shape=diamond, color=yellow];
4260[label="204.6.230.154;d;137pkt 137fpkt", shape=diamond, color=yellow];
4335[label="41.112.133.138;s;136pkt 136fpkt", shape=diamond, color=yellow];
4728[label="204.6.224.171;d;120pkt 120fpkt", shape=diamond, color=yellow];
4747[label="41.112.133.201;s;131pkt 131fpkt", shape=diamond, color=yellow];
5989[label="68.119.238.85;d;141pkt 141fpkt", shape=hexagon, color=black];
6870[label="204.6.226.142;d;410pkt 410fpkt", shape=hexagon, color=black];
7324[label="204.6.230.154;d;123pkt 123fpkt", shape=hexagon, color=black];
7381[label="41.112.133.138;s;106pkt 106fpkt", shape=hexagon, color=black];
7582[label="204.6.224.165;d;440pkt 440fpkt", shape=hexagon, color=black];
7705[label="204.6.224.171;d;110pkt 110fpkt", shape=hexagon, color=black];
10171[label="41.112.133.138;146pkt 146fpkt", shape=pentagon, color=darkviolet];
13176[label="202.56.137.249;16pkt 16fpkt", shape=invtriangle, color=brown];
13717[label="202.56.213.181;15pkt 15fpkt", shape=invhouse, color=bisque];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 204.6.227.222:0}[23.3867%]&lt;BR/&gt;{*:0, 204.6.224.165:0}[23.2763%]&lt;BR/&gt;{*:0, 204.6.226.142:0}[23.2212%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (58.5738%)&lt;BR/&gt; 33438: (6.23299%)&lt;BR/&gt; 33435: (6.16494%)&lt;BR/&gt; 33437: (4.95373%)&lt;BR/&gt; 33436: (3.25259%)&gt;];
}
1487--6870[label="1;410pkt 410fpkt"];
1487--13176[label="0.0625;1pkt 1fpkt"];
1531--13176[label="0.0625;1pkt 1fpkt"];
1531--13717[label="0.0666667;1pkt 1fpkt"];
1597--7582[label="1;440pkt 440fpkt"];
1597--13176[label="0.0625;1pkt 1fpkt"];
1597--13717[label="0.0666667;1pkt 1fpkt"];
2122--3888[label="0.277457;48pkt 48fpkt"];
2122--4335[label="0.382353;52pkt 52fpkt"];
2122--4747[label="0.396947;52pkt 52fpkt"];
2122--5988[label="0.025641;1pkt 1fpkt"];
2122--5989[label="1;141pkt 141fpkt"];
2122--7381[label="0.377358;40pkt 40fpkt"];
2122--10171[label="0.356164;52pkt 52fpkt"];
2122--13176[label="0.0625;1pkt 1fpkt"];
2122--13717[label="0.0666667;1pkt 1fpkt"];
3888--4260[label="0.262774;36pkt 36fpkt"];
3888--4728[label="0.291667;35pkt 35fpkt"];
3888--5423[label="0.0486486;9pkt 9fpkt"];
3888--5989[label="0.283688;40pkt 40fpkt"];
3888--7324[label="0.292683;36pkt 36fpkt"];
3888--7705[label="0.318182;35pkt 35fpkt"];
3888--8115[label="0.0486486;9pkt 9fpkt"];
4260--4335[label="0.308824;42pkt 42fpkt"];
4260--4747[label="0.29771;39pkt 39fpkt"];
4260--7324[label="1;123pkt 123fpkt"];
4260--7381[label="0.311321;33pkt 33fpkt"];
4260--10171[label="0.306569;42pkt 42fpkt"];
4260--13176[label="0.0625;1pkt 1fpkt"];
4260--13717[label="0.0666667;1pkt 1fpkt"];
4335--4728[label="0.35;42pkt 42fpkt"];
4335--5989[label="0.294118;40pkt 40fpkt"];
4335--7324[label="0.317073;39pkt 39fpkt"];
4335--7381[label="1;106pkt 106fpkt"];
4335--7705[label="0.354545;39pkt 39fpkt"];
4335--10171[label="1;136pkt 136fpkt"];
4728--4747[label="0.333333;40pkt 40fpkt"];
4728--7381[label="0.311321;33pkt 33fpkt"];
4728--7705[label="1;110pkt 110fpkt"];
4728--10171[label="0.35;42pkt 42fpkt"];
4747--5989[label="0.335878;44pkt 44fpkt"];
4747--7324[label="0.268293;33pkt 33fpkt"];
4747--7705[label="0.327273;36pkt 36fpkt"];
5989--7381[label="0.377358;40pkt 40fpkt"];
5989--10171[label="0.283688;40pkt 40fpkt"];
5989--13176[label="0.0625;1pkt 1fpkt"];
5989--13717[label="0.0666667;1pkt 1fpkt"];
6870--13176[label="0.0625;1pkt 1fpkt"];
7324--7381[label="0.311321;33pkt 33fpkt"];
7324--10171[label="0.317073;39pkt 39fpkt"];
7324--13176[label="0.0625;1pkt 1fpkt"];
7324--13717[label="0.0666667;1pkt 1fpkt"];
7381--7705[label="0.311321;33pkt 33fpkt"];
7381--10171[label="1;106pkt 106fpkt"];
7582--13176[label="0.0625;1pkt 1fpkt"];
7582--13717[label="0.0666667;1pkt 1fpkt"];
7705--10171[label="0.354545;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.224.165"/>
      <filter dst_ip="204.6.227.222"/>
      <filter dst_ip="204.6.226.142"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.822873,2.22057,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.230.72.91"/>
      <from sec="1165899742" usec="0"/>
      <to sec="1165900217" usec="0"/>
    </slice>
    <from sec="1165899742" usec="0"/>
    <to sec="1165900217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
1488[label="204.6.226.142;s;479pkt 479fpkt", shape=diamond, color=yellow];
7551[label="204.6.226.142;s;477pkt 477fpkt", shape=hexagon, color=black];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.226.142:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1488--3152[label="0.00458716;1pkt 1fpkt"];
1488--3223[label="0.0126582;1pkt 1fpkt"];
1488--4162[label="0.00628931;1pkt 1fpkt"];
1488--4660[label="0.00833333;1pkt 1fpkt"];
1488--6558[label="0.00458716;1pkt 1fpkt"];
1488--7551[label="1;477pkt 477fpkt"];
1488--7637[label="0.00877193;1pkt 1fpkt"];
7551--7637[label="0.00877193;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="204.6.226.142"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
4587[label="172.239.4.220;s;187pkt 187fpkt", shape=diamond, color=yellow];
7558[label="172.239.4.220;s;171pkt 171fpkt", shape=hexagon, color=black];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.239.4.220:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4587--4623[label="0.0769231;1pkt 1fpkt"];
4587--7558[label="1;171pkt 171fpkt"];
4587--7904[label="0.0769231;1pkt 1fpkt"];
7558--7904[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.239.4.220"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
4624[label="151.227.151.160;d;190pkt 190fpkt", shape=diamond, color=yellow];
7606[label="151.227.151.160;d;177pkt 177fpkt", shape=hexagon, color=black];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.227.151.160:30617}[99.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30617: (49.7275%)&lt;BR/&gt; 3131: (0.544959%)&lt;BR/&gt; 2549: (0.544959%)&lt;BR/&gt; 1519: (0.544959%)&lt;BR/&gt; 65409: (0.27248%)&gt;];
}
4624--6861[label="0.00526316;1pkt 1fpkt"];
4624--7606[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.151.160" dst_port="30617"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
3952[label="145.248.22.90;s;223pkt 223fpkt", shape=diamond, color=yellow];
4789[label="204.18.114.156;d;37pkt 37fpkt", shape=diamond, color=yellow];
7768[label="145.248.22.90;s;223pkt 223fpkt", shape=hexagon, color=black];
9600[label="145.248.22.90;223pkt 223fpkt", shape=pentagon, color=darkviolet];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.22.90:*, 204.18.121.53:80}[37.069%]&lt;BR/&gt;{145.248.22.90:*, 204.18.121.56:80}[36.6379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4444: (0.283286%)&lt;BR/&gt; 4443: (0.283286%)&lt;BR/&gt; 4442: (0.283286%)&lt;BR/&gt; 4441: (0.283286%)&gt;];
}
3952--4789[label="0.756757;28pkt 28fpkt"];
3952--7768[label="1;223pkt 223fpkt"];
3952--9600[label="1;223pkt 223fpkt"];
4789--7768[label="0.756757;28pkt 28fpkt"];
4789--9600[label="0.756757;28pkt 28fpkt"];
7768--9600[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_ip="204.18.121.53" dst_port="80" src_ip="145.248.22.90"/>
      <filter dst_ip="204.18.121.56" dst_port="80" src_ip="145.248.22.90"/>
    </slice>
    <from sec="1165899662" usec="0"/>
    <to sec="1165900427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
4929[label="174.255.41.68;s;7pkt 7fpkt", shape=diamond, color=yellow];
7840[label="174.255.41.68;s;7pkt 7fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.255.41.68:443, 151.227.25.0:*}[71.4286%]&lt;BR/&gt;{174.255.41.68:80, 151.227.25.0:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (35.7143%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 2601: (7.14286%)&lt;BR/&gt; 2600: (7.14286%)&lt;BR/&gt; 2599: (7.14286%)&gt;];
}
4929--7840[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.25.0" src_ip="174.255.41.68" src_port="443"/>
      <filter dst_ip="151.227.25.0" src_ip="174.255.41.68" src_port="80"/>
    </slice>
    <from sec="1165900256" usec="0"/>
    <to sec="1165900359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
5004[label="214.29.254.161;d;14pkt 14fpkt", shape=diamond, color=yellow];
7885[label="214.29.254.161;d;14pkt 14fpkt", shape=hexagon, color=black];
11008[label="172.239.34.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.29.254.161:5050}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (48.3333%)&lt;BR/&gt; 1126: (5%)&lt;BR/&gt; 63575: (3.33333%)&lt;BR/&gt; 4358: (3.33333%)&lt;BR/&gt; 3824: (3.33333%)&gt;];
}
5004--7885[label="1;14pkt 14fpkt"];
5004--10206[label="0.142857;1pkt 1fpkt"];
5004--11008[label="0.5;1pkt 1fpkt"];
7885--10206[label="0.142857;1pkt 1fpkt"];
7885--11008[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.29.254.161" dst_port="5050"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
5020[label="169.128.92.29;s;259pkt 259fpkt", shape=diamond, color=yellow];
7892[label="169.128.92.29;s;259pkt 259fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.128.92.29:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5020--5052[label="0.003861;1pkt 1fpkt"];
5020--7892[label="1;259pkt 259fpkt"];
</description>
    <slice>
      <filter src_ip="169.128.92.29"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
3929[label="205.249.47.109;d;13pkt 13fpkt", shape=diamond, color=yellow];
8008[label="205.249.47.109;d;13pkt 13fpkt", shape=hexagon, color=black];
11026[label="213.39.74.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.145.81.73:6881, 205.249.47.109:*}[23.0769%]&lt;BR/&gt;{209.145.48.176:6881, 205.249.47.109:*}[23.0769%]&lt;BR/&gt;{213.39.74.200:6881, 205.249.47.109:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 1374: (5.35714%)&lt;BR/&gt; 1356: (5.35714%)&lt;BR/&gt; 30593: (3.57143%)&lt;BR/&gt; 1443: (3.57143%)&gt;];
}
3929--8008[label="1;13pkt 13fpkt"];
3929--11026[label="1;2pkt 2fpkt"];
8008--11026[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.47.109" src_ip="213.39.74.200" src_port="6881"/>
      <filter dst_ip="205.249.47.109" src_ip="209.145.48.176" src_port="6881"/>
      <filter dst_ip="205.249.47.109" src_ip="209.145.81.73" src_port="6881"/>
    </slice>
    <from sec="1165899832" usec="0"/>
    <to sec="1165900445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
3056[label="205.18.222.137;s;175pkt 175fpkt", shape=diamond, color=yellow];
3057[label="151.227.14.7;d;148pkt 148fpkt", shape=diamond, color=yellow];
7126[label="151.227.14.7;d;148pkt 148fpkt", shape=hexagon, color=black];
8011[label="205.18.222.137;s;175pkt 175fpkt", shape=hexagon, color=black];
10164[label="205.18.222.137;244pkt 244fpkt", shape=pentagon, color=darkviolet];
12504[label="205.18.222.137;244pkt 244fpkt", shape=invtriangle, color=brown];
13580[label="205.18.222.137;244pkt 244fpkt", shape=invhouse, color=bisque];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.18.222.137:443, 151.227.14.7:*}[99.5918%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.9274%)&lt;BR/&gt; 4249: (0.253991%)&lt;BR/&gt; 4248: (0.253991%)&lt;BR/&gt; 4247: (0.253991%)&lt;BR/&gt; 4246: (0.253991%)&gt;];
}
3056--3057[label="0.993243;147pkt 147fpkt"];
3056--7126[label="0.993243;147pkt 147fpkt"];
3056--8011[label="1;175pkt 175fpkt"];
3056--10164[label="1;175pkt 175fpkt"];
3056--12504[label="1;175pkt 175fpkt"];
3056--13580[label="1;175pkt 175fpkt"];
3057--7126[label="1;148pkt 148fpkt"];
3057--8011[label="0.993243;147pkt 147fpkt"];
3057--10164[label="0.993243;147pkt 147fpkt"];
3057--12504[label="0.993243;147pkt 147fpkt"];
3057--13580[label="0.993243;147pkt 147fpkt"];
7126--8011[label="0.993243;147pkt 147fpkt"];
7126--10164[label="0.993243;147pkt 147fpkt"];
7126--12504[label="0.993243;147pkt 147fpkt"];
7126--13580[label="0.993243;147pkt 147fpkt"];
8011--10164[label="1;175pkt 175fpkt"];
8011--12504[label="1;175pkt 175fpkt"];
8011--13580[label="1;175pkt 175fpkt"];
10164--12504[label="1;244pkt 244fpkt"];
10164--13580[label="1;244pkt 244fpkt"];
12504--13580[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.14.7" src_ip="205.18.222.137" src_port="443"/>
    </slice>
    <from sec="1165899876" usec="0"/>
    <to sec="1165900443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
829[label="151.227.240.25;d;106pkt 106fpkt", shape=diamond, color=yellow];
832[label="216.239.108.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
868[label="43.99.223.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
1341[label="216.239.111.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
3092[label="45.115.3.130;s;1pkt 1fpkt", shape=diamond, color=yellow];
5899[label="216.239.111.77;s;1pkt 1fpkt", shape=hexagon, color=black];
8084[label="45.115.3.130;s;1pkt 1fpkt", shape=hexagon, color=black];
10043[label="45.115.3.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12442[label="45.115.3.130;1pkt 1fpkt", shape=invtriangle, color=brown];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 151.227.240.25:*}[99.0566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5614%)&lt;BR/&gt; 32921: (2.19298%)&lt;BR/&gt; 33297: (1.31579%)&lt;BR/&gt; 33617: (0.877193%)&lt;BR/&gt; 33041: (0.877193%)&gt;];
}
829--832[label="1;1pkt 1fpkt"];
829--868[label="1;1pkt 1fpkt"];
829--947[label="0.00943396;1pkt 1fpkt"];
829--987[label="0.00943396;1pkt 1fpkt"];
829--1003[label="0.0471698;5pkt 5fpkt"];
829--1341[label="1;1pkt 1fpkt"];
829--1519[label="0.0377358;4pkt 4fpkt"];
829--1593[label="0.00943396;1pkt 1fpkt"];
829--1594[label="0.00943396;1pkt 1fpkt"];
829--1606[label="0.0283019;3pkt 3fpkt"];
829--1622[label="0.0188679;2pkt 2fpkt"];
829--1643[label="0.00943396;1pkt 1fpkt"];
829--1644[label="0.0188679;2pkt 2fpkt"];
829--1700[label="0.00943396;1pkt 1fpkt"];
829--1984[label="0.00943396;1pkt 1fpkt"];
829--2043[label="1;1pkt 1fpkt"];
829--2155[label="0.0188679;2pkt 2fpkt"];
829--2160[label="0.00943396;1pkt 1fpkt"];
829--2225[label="0.00943396;1pkt 1fpkt"];
829--2232[label="0.0188679;2pkt 2fpkt"];
829--2241[label="0.0188679;2pkt 2fpkt"];
829--2242[label="0.0188679;2pkt 2fpkt"];
829--2254[label="0.0188679;2pkt 2fpkt"];
829--2346[label="0.0471698;5pkt 5fpkt"];
829--2667[label="0.00943396;1pkt 1fpkt"];
829--2668[label="0.0283019;3pkt 3fpkt"];
829--2669[label="0.0283019;3pkt 3fpkt"];
829--2703[label="0.0188679;2pkt 2fpkt"];
829--2732[label="0.0283019;3pkt 3fpkt"];
829--2738[label="0.00943396;1pkt 1fpkt"];
829--2739[label="0.0377358;4pkt 4fpkt"];
829--2764[label="0.0188679;2pkt 2fpkt"];
829--2776[label="0.0188679;2pkt 2fpkt"];
829--2800[label="0.0377358;4pkt 4fpkt"];
829--2810[label="0.0188679;2pkt 2fpkt"];
829--2875[label="0.0283019;3pkt 3fpkt"];
829--2881[label="0.0283019;3pkt 3fpkt"];
829--3092[label="1;1pkt 1fpkt"];
829--3275[label="0.00943396;1pkt 1fpkt"];
829--3645[label="0.0188679;2pkt 2fpkt"];
829--4134[label="1;1pkt 1fpkt"];
829--5429[label="0.0471698;5pkt 5fpkt"];
829--5467[label="0.00943396;1pkt 1fpkt"];
829--5591[label="0.00943396;1pkt 1fpkt"];
829--5768[label="0.0283019;3pkt 3fpkt"];
829--5794[label="0.00943396;1pkt 1fpkt"];
829--5810[label="0.0227273;2pkt 2fpkt"];
829--5899[label="1;1pkt 1fpkt"];
829--6005[label="0.00943396;1pkt 1fpkt"];
829--6048[label="0.00943396;1pkt 1fpkt"];
829--6054[label="0.0188679;2pkt 2fpkt"];
829--6166[label="0.00943396;1pkt 1fpkt"];
829--6223[label="0.0377358;4pkt 4fpkt"];
829--6349[label="0.0283019;3pkt 3fpkt"];
829--6384[label="0.0210526;2pkt 2fpkt"];
829--6387[label="0.0188679;2pkt 2fpkt"];
829--6609[label="0.00943396;1pkt 1fpkt"];
829--6659[label="0.0471698;5pkt 5fpkt"];
829--6668[label="0.00943396;1pkt 1fpkt"];
829--6699[label="0.0471698;5pkt 5fpkt"];
829--6712[label="0.0283019;3pkt 3fpkt"];
829--6917[label="0.00943396;1pkt 1fpkt"];
829--6934[label="0.0188679;2pkt 2fpkt"];
829--6951[label="0.00943396;1pkt 1fpkt"];
829--7237[label="0.0283019;3pkt 3fpkt"];
829--7878[label="0.0283019;3pkt 3fpkt"];
829--7898[label="0.0188679;2pkt 2fpkt"];
829--8084[label="1;1pkt 1fpkt"];
829--8106[label="0.00943396;1pkt 1fpkt"];
829--8132[label="0.00943396;1pkt 1fpkt"];
829--8268[label="0.0377358;4pkt 4fpkt"];
829--8272[label="0.0849057;9pkt 9fpkt"];
829--8275[label="0.0471698;5pkt 5fpkt"];
829--8286[label="0.0377358;4pkt 4fpkt"];
829--8290[label="0.0849057;9pkt 9fpkt"];
829--8293[label="0.0471698;5pkt 5fpkt"];
829--8399[label="0.0188679;2pkt 2fpkt"];
829--8414[label="0.0377358;4pkt 4fpkt"];
829--8470[label="0.0188679;2pkt 2fpkt"];
829--8493[label="0.777778;7pkt 7fpkt"];
829--8530[label="0.00943396;1pkt 1fpkt"];
829--8802[label="1;1pkt 1fpkt"];
829--8869[label="0.00943396;1pkt 1fpkt"];
829--9580[label="0.0377358;4pkt 4fpkt"];
829--9638[label="0.0188679;2pkt 2fpkt"];
829--9665[label="0.0283019;3pkt 3fpkt"];
829--10043[label="1;1pkt 1fpkt"];
829--10613[label="0.0471698;5pkt 5fpkt"];
829--11643[label="0.0188679;2pkt 2fpkt"];
829--11669[label="0.00943396;1pkt 1fpkt"];
829--11814[label="1;1pkt 1fpkt"];
829--12213[label="0.0377358;4pkt 4fpkt"];
829--12381[label="0.0188679;2pkt 2fpkt"];
829--12442[label="1;1pkt 1fpkt"];
829--13231[label="0.00943396;1pkt 1fpkt"];
829--13441[label="0.0377358;4pkt 4fpkt"];
1341--5899[label="1;1pkt 1fpkt"];
3092--8084[label="1;1pkt 1fpkt"];
3092--10043[label="1;1pkt 1fpkt"];
3092--12442[label="1;1pkt 1fpkt"];
8084--10043[label="1;1pkt 1fpkt"];
8084--12442[label="1;1pkt 1fpkt"];
10043--12442[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.240.25" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
5360[label="206.78.162.15;s;2pkt 2fpkt", shape=diamond, color=yellow];
8087[label="206.78.162.15;s;2pkt 2fpkt", shape=hexagon, color=black];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.78.162.15:1063, 169.230.158.2:80}[50%]&lt;BR/&gt;{206.78.162.15:1065, 169.230.158.2:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1065: (25%)&lt;BR/&gt; 1063: (25%)&gt;];
}
5360--8087[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="206.78.162.15" src_port="1065"/>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="206.78.162.15" src_port="1063"/>
    </slice>
    <from sec="1165900348" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
5365[label="43.99.221.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
8088[label="43.99.221.226;s;1pkt 1fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.99.221.226:80, 151.227.68.200:31536}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31536: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5365--8088[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.68.200" dst_port="31536" src_ip="43.99.221.226" src_port="80"/>
    </slice>
    <from sec="1165900350" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
3452[label="169.230.72.91;s;2pkt 2fpkt", shape=diamond, color=yellow];
8089[label="169.230.72.91;s;2pkt 2fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.72.91:4568, 214.82.118.1:53}[50%]&lt;BR/&gt;{169.230.72.91:80, 41.132.224.218:55478}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55478: (25%)&lt;BR/&gt; 4568: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 53: (25%)&gt;];
}
3452--8089[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="41.132.224.218" dst_port="55478" src_ip="169.230.72.91" src_port="80"/>
      <filter dst_ip="214.82.118.1" dst_port="53" src_ip="169.230.72.91" src_port="4568"/>
    </slice>
    <from sec="1165900373" usec="0"/>
    <to sec="1165900383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
5392[label="48.200.108.21;s;2pkt 2fpkt", shape=diamond, color=yellow];
8093[label="48.200.108.21;s;2pkt 2fpkt", shape=hexagon, color=black];
8639[label="48.200.108.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.200.108.21:80, 145.229.169.200:3213}[50%]&lt;BR/&gt;{48.200.108.21:80, 145.229.169.200:3214}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3214: (30%)&lt;BR/&gt; 3213: (20%)&gt;];
}
5392--8093[label="1;2pkt 2fpkt"];
5392--8639[label="1;1pkt 1fpkt"];
8093--8639[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.169.200" dst_port="3214" src_ip="48.200.108.21" src_port="80"/>
      <filter dst_ip="145.229.169.200" dst_port="3213" src_ip="48.200.108.21" src_port="80"/>
    </slice>
    <from sec="1165900397" usec="0"/>
    <to sec="1165900432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
5407[label="50.204.41.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
8094[label="50.204.41.156;s;2pkt 2fpkt", shape=hexagon, color=black];
10432[label="50.204.41.156;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.204.41.156:80, 205.249.45.139:60428}[33.3333%]&lt;BR/&gt;{50.204.41.156:80, 205.249.45.139:60489}[33.3333%]&lt;BR/&gt;{50.204.41.156:80, 205.249.45.139:62998}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60489: (21.4286%)&lt;BR/&gt; 60428: (21.4286%)&lt;BR/&gt; 62998: (7.14286%)&gt;];
}
5407--8094[label="1;2pkt 2fpkt"];
5407--10432[label="1;2pkt 2fpkt"];
8094--10432[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.45.139" dst_port="62998" src_ip="50.204.41.156" src_port="80"/>
      <filter dst_ip="205.249.45.139" dst_port="60489" src_ip="50.204.41.156" src_port="80"/>
      <filter dst_ip="205.249.45.139" dst_port="60428" src_ip="50.204.41.156" src_port="80"/>
    </slice>
    <from sec="1165900409" usec="0"/>
    <to sec="1165900468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
2246[label="212.116.16.54;s;1545pkt 1545fpkt", shape=diamond, color=yellow];
6056[label="212.116.16.54;s;1162pkt 1162fpkt", shape=hexagon, color=black];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.116.16.54:1235, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1235: (50%)&gt;];
}
2246--3271[label="0.0555556;1pkt 1fpkt"];
2246--6056[label="1;1162pkt 1162fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.116.16.54" src_port="1235"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
13065[label="205.73.5.226;148pkt 148fpkt", shape=invtriangle, color=brown];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.73.5.226:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4544: (0.675676%)&lt;BR/&gt; 4420: (0.675676%)&lt;BR/&gt; 4391: (0.675676%)&lt;BR/&gt; 4176: (0.675676%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1433" src_ip="205.73.5.226"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.85.80.0"/>
    </slice>
    <from sec="1165900245" usec="0"/>
    <to sec="1165900453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.20.216.0"/>
    </slice>
    <from sec="1165899610" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.6.233.0"/>
    </slice>
    <from sec="1165899621" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.132.233.0"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.71.1"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.26.3"/>
    </slice>
    <from sec="1165899617" usec="0"/>
    <to sec="1165900480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.4.33.3"/>
    </slice>
    <from sec="1165899618" usec="0"/>
    <to sec="1165899624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.131.239.3"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.239.111.4"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.0.170.5"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.64.192.5"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.249.152.6"/>
    </slice>
    <from sec="1165899617" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.174.1.7"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.46.7"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.181.7"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.165.84.8"/>
    </slice>
    <from sec="1165900301" usec="0"/>
    <to sec="1165900381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
5174[label="151.227.92.8;s;45pkt 45fpkt", shape=diamond, color=yellow];
8439[label="151.227.92.8;48pkt 48fpkt", shape=pentagon, color=darkviolet];
11631[label="151.227.92.8;48pkt 48fpkt", shape=invtriangle, color=brown];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.92.8:*, 151.248.23.215:515}[70.8333%]&lt;BR/&gt;{151.227.92.8:*, *:80}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 515: (35.461%)&lt;BR/&gt; 80: (14.539%)&lt;BR/&gt; 2198: (1.06383%)&lt;BR/&gt; 2197: (1.06383%)&lt;BR/&gt; 2196: (1.06383%)&gt;];
}
5174--8439[label="1;45pkt 45fpkt"];
5174--11631[label="1;45pkt 45fpkt"];
8439--11631[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="151.227.92.8"/>
      <filter dst_ip="151.248.23.215" dst_port="515" src_ip="151.227.92.8"/>
    </slice>
    <from sec="1165899616" usec="0"/>
    <to sec="1165900486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
4421[label="204.6.230.169;d;24pkt 24fpkt", shape=diamond, color=yellow];
8441[label="113.19.104.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11632[label="113.19.104.8;2pkt 2fpkt", shape=invtriangle, color=brown];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.61.52.68:*, 204.6.230.169:80}[37.5%]&lt;BR/&gt;{69.37.175.192:*, 204.6.230.169:80}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4430: (5.35714%)&lt;BR/&gt; 4386: (5.35714%)&lt;BR/&gt; 65167: (1.78571%)&lt;BR/&gt; 60547: (1.78571%)&gt;];
}
4421--8441[label="1;2pkt 2fpkt"];
4421--11632[label="1;2pkt 2fpkt"];
8441--11632[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.230.169" dst_port="80" src_ip="205.61.52.68"/>
      <filter dst_ip="204.6.230.169" dst_port="80" src_ip="69.37.175.192"/>
    </slice>
    <from sec="1165899933" usec="0"/>
    <to sec="1165900338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.239.110.8"/>
    </slice>
    <from sec="1165900180" usec="0"/>
    <to sec="1165900222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.12.9"/>
    </slice>
    <from sec="1165899619" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.163.164.9"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.211.9"/>
    </slice>
    <from sec="1165900138" usec="0"/>
    <to sec="1165900474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.18.219.9"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.76.10"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.220.96.10"/>
    </slice>
    <from sec="1165899612" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.231.10"/>
    </slice>
    <from sec="1165899708" usec="0"/>
    <to sec="1165899738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.192.20.11"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.38.11"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.73.11"/>
    </slice>
    <from sec="1165899659" usec="0"/>
    <to sec="1165899897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.222.11"/>
    </slice>
    <from sec="1165900332" usec="0"/>
    <to sec="1165900462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.77.244.11"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.234.101.12"/>
    </slice>
    <from sec="1165899655" usec="0"/>
    <to sec="1165900486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.92.255.12"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.6.13"/>
    </slice>
    <from sec="1165899612" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.109.13"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
418[label="169.230.134.98;d;8pkt 8fpkt", shape=diamond, color=yellow];
931[label="151.227.155.89;d;199pkt 199fpkt", shape=diamond, color=yellow];
934[label="43.99.223.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
1017[label="169.230.10.195;d;10pkt 10fpkt", shape=diamond, color=yellow];
1019[label="216.239.110.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
1386[label="43.99.211.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
1865[label="149.41.33.36;s;44pkt 44fpkt", shape=diamond, color=yellow];
1965[label="151.227.93.134;d;179pkt 179fpkt", shape=diamond, color=yellow];
2026[label="43.99.221.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
2225[label="43.99.212.37;s;233pkt 233fpkt", shape=diamond, color=yellow];
2539[label="43.99.223.48;s;2pkt 2fpkt", shape=diamond, color=yellow];
4136[label="43.99.216.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
5608[label="216.239.110.24;s;1pkt 1fpkt", shape=hexagon, color=black];
5715[label="43.99.211.79;s;1pkt 1fpkt", shape=hexagon, color=black];
5793[label="43.99.223.44;s;1pkt 1fpkt", shape=hexagon, color=black];
5928[label="43.99.221.186;s;1pkt 1fpkt", shape=hexagon, color=black];
6048[label="43.99.212.37;s;167pkt 167fpkt", shape=hexagon, color=black];
6185[label="43.99.223.48;s;2pkt 2fpkt", shape=hexagon, color=black];
7096[label="151.227.93.134;d;179pkt 179fpkt", shape=hexagon, color=black];
7258[label="151.227.155.89;d;199pkt 199fpkt", shape=hexagon, color=black];
7721[label="149.41.33.36;s;42pkt 42fpkt", shape=hexagon, color=black];
8535[label="217.41.10.14;95pkt 95fpkt", shape=pentagon, color=darkviolet];
8841[label="149.41.33.36;44pkt 44fpkt", shape=pentagon, color=darkviolet];
8869[label="43.99.212.37;242pkt 242fpkt", shape=pentagon, color=darkviolet];
9041[label="43.99.223.48;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11672[label="217.41.10.14;95pkt 95fpkt", shape=invtriangle, color=brown];
11831[label="149.41.33.36;44pkt 44fpkt", shape=invtriangle, color=brown];
13293[label="149.41.33.36;44pkt 44fpkt", shape=invhouse, color=bisque];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.99.212.37:80, *:*}[38.5965%]&lt;BR/&gt;{*:80, 151.227.155.89:*}[31.7384%]&lt;BR/&gt;{*:80, 151.227.93.134:*}[28.5486%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3564: (0.271887%)&lt;BR/&gt; 3692: (0.21751%)&lt;BR/&gt; 1584: (0.21751%)&lt;BR/&gt; 3694: (0.190321%)&gt;];
}
418--1003[label="0.125;1pkt 1fpkt"];
418--1386[label="1;1pkt 1fpkt"];
418--1594[label="0.125;1pkt 1fpkt"];
418--1644[label="0.125;1pkt 1fpkt"];
418--2225[label="0.25;2pkt 2fpkt"];
418--2776[label="0.125;1pkt 1fpkt"];
418--2875[label="0.125;1pkt 1fpkt"];
418--5715[label="1;1pkt 1fpkt"];
418--5794[label="0.125;1pkt 1fpkt"];
418--6048[label="0.25;2pkt 2fpkt"];
418--6659[label="0.125;1pkt 1fpkt"];
418--6712[label="0.125;1pkt 1fpkt"];
418--8268[label="0.125;1pkt 1fpkt"];
418--8286[label="0.125;1pkt 1fpkt"];
418--8869[label="0.25;2pkt 2fpkt"];
418--9638[label="0.125;1pkt 1fpkt"];
931--934[label="1;1pkt 1fpkt"];
931--1519[label="0.0100503;2pkt 2fpkt"];
931--1593[label="0.00502513;1pkt 1fpkt"];
931--1594[label="0.0100503;2pkt 2fpkt"];
931--1606[label="0.00502513;1pkt 1fpkt"];
931--1622[label="0.00502513;1pkt 1fpkt"];
931--1709[label="0.0100503;2pkt 2fpkt"];
931--1865[label="0.954545;42pkt 42fpkt"];
931--2154[label="0.00502513;1pkt 1fpkt"];
931--2160[label="0.00502513;1pkt 1fpkt"];
931--2225[label="0.0100503;2pkt 2fpkt"];
931--2232[label="0.0100503;2pkt 2fpkt"];
931--2346[label="0.0100503;2pkt 2fpkt"];
931--2539[label="0.5;1pkt 1fpkt"];
931--2669[label="0.0100503;2pkt 2fpkt"];
931--2703[label="0.0100503;2pkt 2fpkt"];
931--2704[label="0.0100503;2pkt 2fpkt"];
931--2738[label="0.00534759;1pkt 1fpkt"];
931--2764[label="0.00502513;1pkt 1fpkt"];
931--2776[label="0.00502513;1pkt 1fpkt"];
931--2800[label="0.0100503;2pkt 2fpkt"];
931--3645[label="0.00925926;1pkt 1fpkt"];
931--4136[label="1;1pkt 1fpkt"];
931--5768[label="0.012987;2pkt 2fpkt"];
931--5793[label="1;1pkt 1fpkt"];
931--5794[label="0.0100503;2pkt 2fpkt"];
931--6005[label="0.00502513;1pkt 1fpkt"];
931--6048[label="0.011976;2pkt 2fpkt"];
931--6075[label="0.0108696;2pkt 2fpkt"];
931--6185[label="0.5;1pkt 1fpkt"];
931--6223[label="0.040201;8pkt 8fpkt"];
931--6384[label="0.0210526;2pkt 2fpkt"];
931--6699[label="0.0114286;2pkt 2fpkt"];
931--6917[label="0.0103093;2pkt 2fpkt"];
931--6934[label="0.0100503;2pkt 2fpkt"];
931--7234[label="0.00502513;1pkt 1fpkt"];
931--7258[label="1;199pkt 199fpkt"];
931--7721[label="0.952381;40pkt 40fpkt"];
931--7878[label="0.0100503;2pkt 2fpkt"];
931--8268[label="0.0703518;14pkt 14fpkt"];
931--8272[label="0.120603;24pkt 24fpkt"];
931--8275[label="0.0301508;6pkt 6fpkt"];
931--8286[label="0.0703518;14pkt 14fpkt"];
931--8290[label="0.120603;24pkt 24fpkt"];
931--8293[label="0.0301508;6pkt 6fpkt"];
931--8327[label="0.0108696;1pkt 1fpkt"];
931--8414[label="0.0100503;2pkt 2fpkt"];
931--8470[label="0.0100503;2pkt 2fpkt"];
931--8535[label="1;95pkt 95fpkt"];
931--8554[label="0.0100503;2pkt 2fpkt"];
931--8841[label="0.954545;42pkt 42fpkt"];
931--8869[label="0.0100503;2pkt 2fpkt"];
931--9041[label="0.5;1pkt 1fpkt"];
931--9665[label="0.0100503;2pkt 2fpkt"];
931--11576[label="0.010989;1pkt 1fpkt"];
931--11643[label="0.0100503;2pkt 2fpkt"];
931--11672[label="1;95pkt 95fpkt"];
931--11680[label="0.0100503;2pkt 2fpkt"];
931--11831[label="0.954545;42pkt 42fpkt"];
931--13293[label="0.954545;42pkt 42fpkt"];
934--5793[label="1;1pkt 1fpkt"];
934--7258[label="1;1pkt 1fpkt"];
1017--1019[label="1;1pkt 1fpkt"];
1017--1700[label="0.1;1pkt 1fpkt"];
1017--2026[label="1;1pkt 1fpkt"];
1017--2225[label="0.1;1pkt 1fpkt"];
1017--2346[label="0.1;1pkt 1fpkt"];
1017--2668[label="0.1;1pkt 1fpkt"];
1017--2800[label="0.1;1pkt 1fpkt"];
1017--3275[label="0.1;1pkt 1fpkt"];
1017--3816[label="0.1;1pkt 1fpkt"];
1017--5429[label="0.1;1pkt 1fpkt"];
1017--5608[label="1;1pkt 1fpkt"];
1017--5928[label="1;1pkt 1fpkt"];
1017--6048[label="0.1;1pkt 1fpkt"];
1017--6384[label="0.1;1pkt 1fpkt"];
1017--6668[label="0.1;1pkt 1fpkt"];
1017--6699[label="0.1;1pkt 1fpkt"];
1017--7237[label="0.1;1pkt 1fpkt"];
1017--7669[label="0.1;1pkt 1fpkt"];
1017--8869[label="0.1;1pkt 1fpkt"];
1017--10613[label="0.1;1pkt 1fpkt"];
1019--5608[label="1;1pkt 1fpkt"];
1386--5715[label="1;1pkt 1fpkt"];
1865--2138[label="0.0227273;1pkt 1fpkt"];
1865--6232[label="0.0227273;1pkt 1fpkt"];
1865--7258[label="0.954545;42pkt 42fpkt"];
1865--7721[label="1;42pkt 42fpkt"];
1865--8268[label="0.0681818;3pkt 3fpkt"];
1865--8272[label="0.0454545;2pkt 2fpkt"];
1865--8275[label="0.0454545;2pkt 2fpkt"];
1865--8286[label="0.0681818;3pkt 3fpkt"];
1865--8290[label="0.0454545;2pkt 2fpkt"];
1865--8293[label="0.0454545;2pkt 2fpkt"];
1865--8841[label="1;44pkt 44fpkt"];
1865--11831[label="1;44pkt 44fpkt"];
1865--13293[label="1;44pkt 44fpkt"];
1965--2154[label="0.0167598;3pkt 3fpkt"];
1965--2155[label="0.0167598;3pkt 3fpkt"];
1965--2160[label="0.0223464;4pkt 4fpkt"];
1965--2225[label="0.0446927;8pkt 8fpkt"];
1965--2232[label="0.0614525;11pkt 11fpkt"];
1965--2241[label="0.0502793;9pkt 9fpkt"];
1965--2242[label="0.027933;5pkt 5fpkt"];
1965--2254[label="0.027933;5pkt 5fpkt"];
1965--2346[label="0.00558659;1pkt 1fpkt"];
1965--2366[label="0.0111732;2pkt 2fpkt"];
1965--2539[label="0.5;1pkt 1fpkt"];
1965--2667[label="0.0391061;7pkt 7fpkt"];
1965--2668[label="0.027933;5pkt 5fpkt"];
1965--2669[label="0.0111732;2pkt 2fpkt"];
1965--2703[label="0.027933;5pkt 5fpkt"];
1965--2704[label="0.0223464;4pkt 4fpkt"];
1965--2732[label="0.027933;5pkt 5fpkt"];
1965--2738[label="0.0167598;3pkt 3fpkt"];
1965--2739[label="0.0391061;7pkt 7fpkt"];
1965--2764[label="0.0223464;4pkt 4fpkt"];
1965--2776[label="0.027933;5pkt 5fpkt"];
1965--2800[label="0.0167598;3pkt 3fpkt"];
1965--2810[label="0.0223464;4pkt 4fpkt"];
1965--2875[label="0.0391061;7pkt 7fpkt"];
1965--3275[label="0.0223464;4pkt 4fpkt"];
1965--3644[label="0.0176991;2pkt 2fpkt"];
1965--3645[label="0.00925926;1pkt 1fpkt"];
1965--3831[label="0.00813008;1pkt 1fpkt"];
1965--5580[label="0.00558659;1pkt 1fpkt"];
1965--5725[label="0.0223464;4pkt 4fpkt"];
1965--5768[label="0.012987;2pkt 2fpkt"];
1965--5794[label="0.027933;5pkt 5fpkt"];
1965--5810[label="0.0454545;4pkt 4fpkt"];
1965--6005[label="0.0223464;4pkt 4fpkt"];
1965--6048[label="0.0479042;8pkt 8fpkt"];
1965--6054[label="0.027933;5pkt 5fpkt"];
1965--6075[label="0.0167598;3pkt 3fpkt"];
1965--6185[label="0.5;1pkt 1fpkt"];
1965--6349[label="0.027933;5pkt 5fpkt"];
1965--6387[label="0.0223464;4pkt 4fpkt"];
1965--6609[label="0.00775194;1pkt 1fpkt"];
1965--6668[label="0.0223464;4pkt 4fpkt"];
1965--6699[label="0.00571429;1pkt 1fpkt"];
1965--6712[label="0.0391061;7pkt 7fpkt"];
1965--6917[label="0.027933;5pkt 5fpkt"];
1965--6934[label="0.0614525;11pkt 11fpkt"];
1965--6951[label="0.027027;4pkt 4fpkt"];
1965--7096[label="1;179pkt 179fpkt"];
1965--7234[label="0.0167598;3pkt 3fpkt"];
1965--7237[label="0.0306748;5pkt 5fpkt"];
1965--7677[label="0.00925926;1pkt 1fpkt"];
1965--7878[label="0.0111732;2pkt 2fpkt"];
1965--7898[label="0.0502793;9pkt 9fpkt"];
1965--8268[label="0.00558659;1pkt 1fpkt"];
1965--8272[label="0.240223;43pkt 43fpkt"];
1965--8286[label="0.00558659;1pkt 1fpkt"];
1965--8290[label="0.240223;43pkt 43fpkt"];
1965--8399[label="0.0223464;4pkt 4fpkt"];
1965--8414[label="0.027933;5pkt 5fpkt"];
1965--8470[label="0.027933;5pkt 5fpkt"];
1965--8501[label="0.027933;5pkt 5fpkt"];
1965--8530[label="0.027933;5pkt 5fpkt"];
1965--8554[label="0.0167598;3pkt 3fpkt"];
1965--8869[label="0.0446927;8pkt 8fpkt"];
1965--9041[label="0.5;1pkt 1fpkt"];
1965--9580[label="0.0391061;7pkt 7fpkt"];
1965--9638[label="0.0502793;9pkt 9fpkt"];
1965--9665[label="0.0111732;2pkt 2fpkt"];
1965--10678[label="0.0223464;4pkt 4fpkt"];
1965--11643[label="0.027933;5pkt 5fpkt"];
1965--11669[label="0.027933;5pkt 5fpkt"];
1965--11680[label="0.0167598;3pkt 3fpkt"];
1965--12213[label="0.0391061;7pkt 7fpkt"];
1965--13231[label="0.027933;5pkt 5fpkt"];
1965--13441[label="0.0391061;7pkt 7fpkt"];
2026--5928[label="1;1pkt 1fpkt"];
2225--2417[label="0.0140845;2pkt 2fpkt"];
2225--2853[label="0.0336538;7pkt 7fpkt"];
2225--3310[label="0.00657895;1pkt 1fpkt"];
2225--3664[label="0.0240964;2pkt 2fpkt"];
2225--3879[label="0.0117647;1pkt 1fpkt"];
2225--3973[label="0.0128205;2pkt 2fpkt"];
2225--4054[label="0.0163934;1pkt 1fpkt"];
2225--4237[label="0.0102041;1pkt 1fpkt"];
2225--4239[label="0.123457;20pkt 20fpkt"];
2225--4282[label="0.0123457;1pkt 1fpkt"];
2225--4440[label="0.0171429;3pkt 3fpkt"];
2225--5430[label="0.0434783;3pkt 3fpkt"];
2225--5436[label="0.00858369;2pkt 2fpkt"];
2225--5438[label="0.0174419;3pkt 3fpkt"];
2225--5507[label="0.0344828;1pkt 1fpkt"];
2225--5823[label="0.0185185;2pkt 2fpkt"];
2225--5940[label="0.00429185;1pkt 1fpkt"];
2225--5941[label="0.00429185;1pkt 1fpkt"];
2225--5943[label="0.0343348;8pkt 8fpkt"];
2225--5962[label="0.00858369;2pkt 2fpkt"];
2225--6048[label="1;167pkt 167fpkt"];
2225--6127[label="0.0140845;1pkt 1fpkt"];
2225--6232[label="0.0128755;3pkt 3fpkt"];
2225--6252[label="0.00645161;1pkt 1fpkt"];
2225--6261[label="0.0128755;3pkt 3fpkt"];
2225--6689[label="0.00657895;1pkt 1fpkt"];
2225--6716[label="0.00775194;1pkt 1fpkt"];
2225--6836[label="0.0196078;2pkt 2fpkt"];
2225--6894[label="0.025641;2pkt 2fpkt"];
2225--7096[label="0.0446927;8pkt 8fpkt"];
2225--7258[label="0.0100503;2pkt 2fpkt"];
2225--7397[label="0.0140845;2pkt 2fpkt"];
2225--7404[label="0.0258065;4pkt 4fpkt"];
2225--7522[label="0.0257511;6pkt 6fpkt"];
2225--7741[label="0.0135135;1pkt 1fpkt"];
2225--7778[label="0.0128205;2pkt 2fpkt"];
2225--8215[label="0.0344828;1pkt 1fpkt"];
2225--8248[label="0.00657895;1pkt 1fpkt"];
2225--8268[label="0.0386266;9pkt 9fpkt"];
2225--8272[label="0.0515021;12pkt 12fpkt"];
2225--8275[label="0.0643777;15pkt 15fpkt"];
2225--8286[label="0.0386266;9pkt 9fpkt"];
2225--8290[label="0.0515021;12pkt 12fpkt"];
2225--8293[label="0.0643777;15pkt 15fpkt"];
2225--8869[label="1;233pkt 233fpkt"];
2539--6185[label="1;2pkt 2fpkt"];
2539--7096[label="0.5;1pkt 1fpkt"];
2539--7258[label="0.5;1pkt 1fpkt"];
2539--8268[label="0.5;1pkt 1fpkt"];
2539--8272[label="0.5;1pkt 1fpkt"];
2539--8286[label="0.5;1pkt 1fpkt"];
2539--8290[label="0.5;1pkt 1fpkt"];
2539--9041[label="1;2pkt 2fpkt"];
4136--7258[label="1;1pkt 1fpkt"];
4136--8272[label="1;1pkt 1fpkt"];
4136--8275[label="1;1pkt 1fpkt"];
4136--8290[label="1;1pkt 1fpkt"];
4136--8293[label="1;1pkt 1fpkt"];
5793--7258[label="1;1pkt 1fpkt"];
6048--6127[label="0.0140845;1pkt 1fpkt"];
6048--6232[label="0.0179641;3pkt 3fpkt"];
6048--6252[label="0.00645161;1pkt 1fpkt"];
6048--6261[label="0.0179641;3pkt 3fpkt"];
6048--6689[label="0.00657895;1pkt 1fpkt"];
6048--6716[label="0.00775194;1pkt 1fpkt"];
6048--6836[label="0.0196078;2pkt 2fpkt"];
6048--6894[label="0.0128205;1pkt 1fpkt"];
6048--7096[label="0.0479042;8pkt 8fpkt"];
6048--7258[label="0.011976;2pkt 2fpkt"];
6048--7397[label="0.0140845;2pkt 2fpkt"];
6048--7404[label="0.0258065;4pkt 4fpkt"];
6048--7522[label="0.0299401;5pkt 5fpkt"];
6048--7741[label="0.0135135;1pkt 1fpkt"];
6048--7778[label="0.0128205;2pkt 2fpkt"];
6048--8215[label="0.0344828;1pkt 1fpkt"];
6048--8248[label="0.00657895;1pkt 1fpkt"];
6048--8268[label="0.0538922;9pkt 9fpkt"];
6048--8272[label="0.0718563;12pkt 12fpkt"];
6048--8286[label="0.0538922;9pkt 9fpkt"];
6048--8290[label="0.0718563;12pkt 12fpkt"];
6048--8869[label="1;167pkt 167fpkt"];
6185--7096[label="0.5;1pkt 1fpkt"];
6185--7258[label="0.5;1pkt 1fpkt"];
6185--8268[label="0.5;1pkt 1fpkt"];
6185--8272[label="0.5;1pkt 1fpkt"];
6185--8286[label="0.5;1pkt 1fpkt"];
6185--8290[label="0.5;1pkt 1fpkt"];
6185--9041[label="1;2pkt 2fpkt"];
7096--7234[label="0.0167598;3pkt 3fpkt"];
7096--7237[label="0.0306748;5pkt 5fpkt"];
7096--7677[label="0.00925926;1pkt 1fpkt"];
7096--7878[label="0.0111732;2pkt 2fpkt"];
7096--7898[label="0.0502793;9pkt 9fpkt"];
7096--8268[label="0.00558659;1pkt 1fpkt"];
7096--8272[label="0.240223;43pkt 43fpkt"];
7096--8286[label="0.00558659;1pkt 1fpkt"];
7096--8290[label="0.240223;43pkt 43fpkt"];
7096--8399[label="0.0223464;4pkt 4fpkt"];
7096--8414[label="0.027933;5pkt 5fpkt"];
7096--8470[label="0.027933;5pkt 5fpkt"];
7096--8501[label="0.027933;5pkt 5fpkt"];
7096--8530[label="0.027933;5pkt 5fpkt"];
7096--8554[label="0.0167598;3pkt 3fpkt"];
7096--8869[label="0.0446927;8pkt 8fpkt"];
7096--9041[label="0.5;1pkt 1fpkt"];
7096--9580[label="0.0391061;7pkt 7fpkt"];
7096--9638[label="0.0502793;9pkt 9fpkt"];
7096--9665[label="0.0111732;2pkt 2fpkt"];
7096--10678[label="0.0223464;4pkt 4fpkt"];
7096--11643[label="0.027933;5pkt 5fpkt"];
7096--11669[label="0.027933;5pkt 5fpkt"];
7096--11680[label="0.0167598;3pkt 3fpkt"];
7096--12213[label="0.0391061;7pkt 7fpkt"];
7096--13231[label="0.027933;5pkt 5fpkt"];
7096--13441[label="0.0391061;7pkt 7fpkt"];
7258--7721[label="0.952381;40pkt 40fpkt"];
7258--7878[label="0.0100503;2pkt 2fpkt"];
7258--8268[label="0.0703518;14pkt 14fpkt"];
7258--8272[label="0.120603;24pkt 24fpkt"];
7258--8275[label="0.0301508;6pkt 6fpkt"];
7258--8286[label="0.0703518;14pkt 14fpkt"];
7258--8290[label="0.120603;24pkt 24fpkt"];
7258--8293[label="0.0301508;6pkt 6fpkt"];
7258--8327[label="0.0108696;1pkt 1fpkt"];
7258--8414[label="0.0100503;2pkt 2fpkt"];
7258--8470[label="0.0100503;2pkt 2fpkt"];
7258--8535[label="1;95pkt 95fpkt"];
7258--8554[label="0.0100503;2pkt 2fpkt"];
7258--8841[label="0.954545;42pkt 42fpkt"];
7258--8869[label="0.0100503;2pkt 2fpkt"];
7258--9041[label="0.5;1pkt 1fpkt"];
7258--9665[label="0.0100503;2pkt 2fpkt"];
7258--11576[label="0.010989;1pkt 1fpkt"];
7258--11643[label="0.0100503;2pkt 2fpkt"];
7258--11672[label="1;95pkt 95fpkt"];
7258--11680[label="0.0100503;2pkt 2fpkt"];
7258--11831[label="0.954545;42pkt 42fpkt"];
7258--13293[label="0.954545;42pkt 42fpkt"];
7721--8268[label="0.0714286;3pkt 3fpkt"];
7721--8272[label="0.047619;2pkt 2fpkt"];
7721--8275[label="0.047619;2pkt 2fpkt"];
7721--8286[label="0.0714286;3pkt 3fpkt"];
7721--8290[label="0.047619;2pkt 2fpkt"];
7721--8293[label="0.047619;2pkt 2fpkt"];
7721--8841[label="1;42pkt 42fpkt"];
7721--11831[label="1;42pkt 42fpkt"];
7721--13293[label="1;42pkt 42fpkt"];
8535--11672[label="1;95pkt 95fpkt"];
8841--11831[label="1;44pkt 44fpkt"];
8841--13293[label="1;44pkt 44fpkt"];
11831--13293[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="43.99.212.37" src_port="80"/>
      <filter dst_ip="151.227.155.89" src_port="80"/>
      <filter dst_ip="151.227.93.134" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.245.13"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.251.4.14"/>
    </slice>
    <from sec="1165899684" usec="0"/>
    <to sec="1165900113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.26.123.14"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165899829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.0.15"/>
    </slice>
    <from sec="1165899617" usec="0"/>
    <to sec="1165900483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.78.162.15"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.12.16"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.1.109.16"/>
    </slice>
    <from sec="1165900105" usec="0"/>
    <to sec="1165900129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.105.0.17"/>
    </slice>
    <from sec="1165899730" usec="0"/>
    <to sec="1165899849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.88.45.17"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.211.174.17"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165899704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.96.13.18"/>
    </slice>
    <from sec="1165899639" usec="0"/>
    <to sec="1165900480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.169.124.19"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.239.110.20"/>
    </slice>
    <from sec="1165899714" usec="0"/>
    <to sec="1165899884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.211.21"/>
    </slice>
    <from sec="1165899611" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.235.21"/>
    </slice>
    <from sec="1165899617" usec="0"/>
    <to sec="1165900491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.115.6.22"/>
    </slice>
    <from sec="1165900405" usec="0"/>
    <to sec="1165900410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.4.42.22"/>
    </slice>
    <from sec="1165900137" usec="0"/>
    <to sec="1165900141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.239.110.22"/>
    </slice>
    <from sec="1165900109" usec="0"/>
    <to sec="1165900307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.77.63.23"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.141.18.24"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.137.78.24"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.149.83.24"/>
    </slice>
    <from sec="1165899612" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.64.231.24"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
5183[label="204.6.236.24;s;53pkt 53fpkt", shape=diamond, color=yellow];
5308[label="42.127.96.91;d;6pkt 6fpkt", shape=diamond, color=yellow];
8683[label="204.6.236.24;57pkt 57fpkt", shape=pentagon, color=darkviolet];
11748[label="204.6.236.24;56pkt 56fpkt", shape=invtriangle, color=brown];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.236.24:80, 44.165.104.212:*}[68.4211%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6395%)&lt;BR/&gt; 22: (2.61628%)&lt;BR/&gt; 0: (1.74419%)&lt;BR/&gt; 18521: (1.16279%)&lt;BR/&gt; 17908: (1.16279%)&gt;];
}
5183--5308[label="1;6pkt 6fpkt"];
5183--8268[label="0.0377358;2pkt 2fpkt"];
5183--8272[label="0.0377358;2pkt 2fpkt"];
5183--8275[label="0.0943396;5pkt 5fpkt"];
5183--8286[label="0.0377358;2pkt 2fpkt"];
5183--8290[label="0.0377358;2pkt 2fpkt"];
5183--8293[label="0.0943396;5pkt 5fpkt"];
5183--8683[label="1;53pkt 53fpkt"];
5183--11748[label="0.981132;52pkt 52fpkt"];
5308--8275[label="0.5;3pkt 3fpkt"];
5308--8293[label="0.5;3pkt 3fpkt"];
5308--8683[label="1;6pkt 6fpkt"];
5308--11748[label="1;6pkt 6fpkt"];
8683--11748[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="44.165.104.212" src_ip="204.6.236.24" src_port="80"/>
    </slice>
    <from sec="1165899623" usec="0"/>
    <to sec="1165900495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.52.170.25"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.172.213.25"/>
    </slice>
    <from sec="1165900456" usec="0"/>
    <to sec="1165900477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.114.106.26"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.216.152.26"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.96.16.29"/>
    </slice>
    <from sec="1165899617" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.178.29"/>
    </slice>
    <from sec="1165900416" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.49.182.29"/>
    </slice>
    <from sec="1165899853" usec="0"/>
    <to sec="1165899973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.29.114.30"/>
    </slice>
    <from sec="1165899641" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.34.31"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165899678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.80.74.31"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.199.106.32"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.246.66.33"/>
    </slice>
    <from sec="1165899612" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.171.161.33"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.22.34"/>
    </slice>
    <from sec="1165900080" usec="0"/>
    <to sec="1165900084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.70.149.34"/>
    </slice>
    <from sec="1165900447" usec="0"/>
    <to sec="1165900467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.155.34"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.6.228.35"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
9120[label="151.227.105.54;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.105.54:*, 219.8.57.116:80}[65.3846%]&lt;BR/&gt;{151.227.105.54:*, 219.8.58.38:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1224: (1.92308%)&lt;BR/&gt; 1223: (1.92308%)&lt;BR/&gt; 1222: (1.92308%)&lt;BR/&gt; 1221: (1.92308%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="219.8.57.116" dst_port="80" src_ip="151.227.105.54"/>
      <filter dst_ip="219.8.58.38" dst_port="80" src_ip="151.227.105.54"/>
    </slice>
    <from sec="1165899804" usec="0"/>
    <to sec="1165900431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.115.41.38"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.199.99.39"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
5382[label="43.46.110.39;s;13pkt 13fpkt", shape=diamond, color=yellow];
8894[label="43.46.110.39;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11865[label="43.46.110.39;4pkt 4fpkt", shape=invtriangle, color=brown];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.46.110.39:80, 205.246.71.240:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63312: (7.14286%)&lt;BR/&gt; 63310: (7.14286%)&lt;BR/&gt; 63290: (7.14286%)&lt;BR/&gt; 63210: (7.14286%)&gt;];
}
5382--8894[label="1;4pkt 4fpkt"];
5382--11865[label="1;4pkt 4fpkt"];
8894--11865[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.240" src_ip="43.46.110.39" src_port="80"/>
    </slice>
    <from sec="1165900377" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.247.185.39"/>
    </slice>
    <from sec="1165899762" usec="0"/>
    <to sec="1165899766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.154.40"/>
    </slice>
    <from sec="1165899954" usec="0"/>
    <to sec="1165900032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.174.40"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.16.214.40"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1799[label="214.68.42.71;d;77pkt 77fpkt", shape=diamond, color=yellow];
2910[label="129.202.40.181;s;36pkt 36fpkt", shape=diamond, color=yellow];
6418[label="214.68.42.71;d;40pkt 40fpkt", shape=hexagon, color=black];
6441[label="129.202.40.181;s;22pkt 22fpkt", shape=hexagon, color=black];
8936[label="150.12.6.42;17pkt 17fpkt", shape=pentagon, color=darkviolet];
10323[label="150.12.213.148;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10344[label="150.12.213.149;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10793[label="129.202.40.181;43pkt 43fpkt", shape=pentagon, color=darkviolet];
11885[label="150.12.6.42;17pkt 17fpkt", shape=invtriangle, color=brown];
12581[label="150.12.213.148;13pkt 13fpkt", shape=invtriangle, color=brown];
13314[label="150.12.6.42;17pkt 17fpkt", shape=invhouse, color=bisque];
13617[label="150.12.213.148;13pkt 13fpkt", shape=invhouse, color=bisque];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.202.40.181:*, 214.68.42.71:443}[20.3883%]&lt;BR/&gt;{129.202.40.181:25, *:*}[20.3883%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (41.3522%)&lt;BR/&gt; 25: (8.6478%)&lt;BR/&gt; 47390: (0.786164%)&lt;BR/&gt; 47389: (0.786164%)&lt;BR/&gt; 47388: (0.786164%)&gt;];
}
1799--2910[label="0.472222;17pkt 17fpkt"];
1799--6418[label="1;40pkt 40fpkt"];
1799--6441[label="0.409091;9pkt 9fpkt"];
1799--8936[label="1;17pkt 17fpkt"];
1799--10323[label="0.923077;12pkt 12fpkt"];
1799--10344[label="0.8;8pkt 8fpkt"];
1799--10793[label="0.465116;20pkt 20fpkt"];
1799--11885[label="1;17pkt 17fpkt"];
1799--12581[label="0.923077;12pkt 12fpkt"];
1799--13314[label="1;17pkt 17fpkt"];
1799--13617[label="0.923077;12pkt 12fpkt"];
2910--6418[label="0.25;9pkt 9fpkt"];
2910--6441[label="1;22pkt 22fpkt"];
2910--8266[label="0.0277778;1pkt 1fpkt"];
2910--8284[label="0.0277778;1pkt 1fpkt"];
2910--10793[label="1;36pkt 36fpkt"];
6418--6441[label="0.409091;9pkt 9fpkt"];
6418--8936[label="0.470588;8pkt 8fpkt"];
6418--10323[label="0.615385;8pkt 8fpkt"];
6418--10344[label="0.6;6pkt 6fpkt"];
6418--10793[label="0.225;9pkt 9fpkt"];
6418--11885[label="0.470588;8pkt 8fpkt"];
6418--12581[label="0.615385;8pkt 8fpkt"];
6418--13314[label="0.470588;8pkt 8fpkt"];
6418--13617[label="0.615385;8pkt 8fpkt"];
6441--8266[label="0.0454545;1pkt 1fpkt"];
6441--8284[label="0.0454545;1pkt 1fpkt"];
6441--10793[label="1;22pkt 22fpkt"];
8936--11885[label="1;17pkt 17fpkt"];
8936--13314[label="1;17pkt 17fpkt"];
10323--12581[label="1;13pkt 13fpkt"];
10323--13617[label="1;13pkt 13fpkt"];
11885--13314[label="1;17pkt 17fpkt"];
12581--13617[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="129.202.40.181" src_port="25"/>
      <filter dst_ip="214.68.42.71" dst_port="443" src_ip="129.202.40.181"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.149.73.42"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.165.104.42"/>
    </slice>
    <from sec="1165900028" usec="0"/>
    <to sec="1165900030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.183.105.42"/>
    </slice>
    <from sec="1165899852" usec="0"/>
    <to sec="1165899896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.110.130.42"/>
    </slice>
    <from sec="1165900372" usec="0"/>
    <to sec="1165900381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.173.42"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.228.12.44"/>
    </slice>
    <from sec="1165899662" usec="0"/>
    <to sec="1165900385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.82.24.44"/>
    </slice>
    <from sec="1165900298" usec="0"/>
    <to sec="1165900348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.62.38.44"/>
    </slice>
    <from sec="1165900407" usec="0"/>
    <to sec="1165900445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
5402[label="216.239.108.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
8993[label="216.239.108.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11911[label="216.239.108.45;1pkt 1fpkt", shape=invtriangle, color=brown];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.239.108.45:80, 205.249.45.139:60359}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60359: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5402--8993[label="1;1pkt 1fpkt"];
5402--11911[label="1;1pkt 1fpkt"];
8993--11911[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.45.139" dst_port="60359" src_ip="216.239.108.45" src_port="80"/>
    </slice>
    <from sec="1165900407" usec="0"/>
    <to sec="1165900451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.110.203.45"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.248.14.46"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.171.21.46"/>
    </slice>
    <from sec="1165900252" usec="0"/>
    <to sec="1165900273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.4.33.46"/>
    </slice>
    <from sec="1165900246" usec="0"/>
    <to sec="1165900248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.172.46"/>
    </slice>
    <from sec="1165899626" usec="0"/>
    <to sec="1165900440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.146.47"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.108.227.47"/>
    </slice>
    <from sec="1165899816" usec="0"/>
    <to sec="1165899847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.245.9.48"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.208.27.48"/>
    </slice>
    <from sec="1165899697" usec="0"/>
    <to sec="1165899727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.221.48"/>
    </slice>
    <from sec="1165900048" usec="0"/>
    <to sec="1165900104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621137,2.15718,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
2855[label="151.227.85.49;s;132pkt 132fpkt", shape=diamond, color=yellow];
2856[label="41.132.226.55;d;121pkt 121fpkt", shape=diamond, color=yellow];
9052[label="151.227.85.49;142pkt 142fpkt", shape=pentagon, color=darkviolet];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.85.49:80, 41.132.226.55:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8734%)&lt;BR/&gt; 65057: (0.379747%)&lt;BR/&gt; 65055: (0.379747%)&lt;BR/&gt; 64982: (0.379747%)&lt;BR/&gt; 64719: (0.379747%)&gt;];
}
2855--2856[label="0.991736;120pkt 120fpkt"];
2855--8268[label="0.0530303;7pkt 7fpkt"];
2855--8272[label="0.0530303;7pkt 7fpkt"];
2855--8275[label="0.0530303;7pkt 7fpkt"];
2855--8286[label="0.0530303;7pkt 7fpkt"];
2855--8290[label="0.0530303;7pkt 7fpkt"];
2855--8293[label="0.0530303;7pkt 7fpkt"];
2855--9052[label="1;132pkt 132fpkt"];
2856--8268[label="0.0578512;7pkt 7fpkt"];
2856--8272[label="0.0578512;7pkt 7fpkt"];
2856--8275[label="0.0578512;7pkt 7fpkt"];
2856--8286[label="0.0578512;7pkt 7fpkt"];
2856--8290[label="0.0578512;7pkt 7fpkt"];
2856--8293[label="0.0578512;7pkt 7fpkt"];
2856--9052[label="0.991736;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_ip="41.132.226.55" src_ip="151.227.85.49" src_port="80"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.68.95.49"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165899715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.114.50"/>
    </slice>
    <from sec="1165899663" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.65.141.52"/>
    </slice>
    <from sec="1165899611" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.130.225.53"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.20.17.54"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.83.54"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.148.54"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.134.32.55"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.206.36.55"/>
    </slice>
    <from sec="1165900045" usec="0"/>
    <to sec="1165900060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.81.53.55"/>
    </slice>
    <from sec="1165900245" usec="0"/>
    <to sec="1165900418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.173.224.55"/>
    </slice>
    <from sec="1165900371" usec="0"/>
    <to sec="1165900377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
2360[label="151.227.85.49;d;133pkt 133fpkt", shape=diamond, color=yellow];
2857[label="41.132.226.55;s;120pkt 120fpkt", shape=diamond, color=yellow];
7950[label="41.132.226.55;s;120pkt 120fpkt", shape=hexagon, color=black];
9136[label="41.132.226.55;130pkt 130fpkt", shape=pentagon, color=darkviolet];
9827[label="215.154.197.108;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11984[label="41.132.226.55;130pkt 130fpkt", shape=invtriangle, color=brown];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.132.226.55:*, 151.227.85.49:80}[89.0411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9226%)&lt;BR/&gt; 65057: (0.386997%)&lt;BR/&gt; 65055: (0.386997%)&lt;BR/&gt; 64982: (0.386997%)&lt;BR/&gt; 64719: (0.386997%)&gt;];
}
2360--2857[label="1;120pkt 120fpkt"];
2360--7950[label="1;120pkt 120fpkt"];
2360--9136[label="0.923077;120pkt 120fpkt"];
2360--9827[label="0.769231;10pkt 10fpkt"];
2360--11984[label="0.923077;120pkt 120fpkt"];
2857--7950[label="1;120pkt 120fpkt"];
2857--9136[label="1;120pkt 120fpkt"];
2857--11984[label="1;120pkt 120fpkt"];
7950--9136[label="1;120pkt 120fpkt"];
7950--11984[label="1;120pkt 120fpkt"];
9136--11984[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.85.49" dst_port="80" src_ip="41.132.226.55"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.212.90.56"/>
    </slice>
    <from sec="1165899610" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.27.195.56"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.10.57"/>
    </slice>
    <from sec="1165899652" usec="0"/>
    <to sec="1165900049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
9186[label="204.6.252.59;84pkt 84fpkt", shape=pentagon, color=darkviolet];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.252.59:41201, *:53}[97.619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.4048%)&lt;BR/&gt; 41201: (48.8095%)&lt;BR/&gt; 0: (1.19048%)&lt;BR/&gt; 38303: (0.595238%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="204.6.252.59" src_port="41201"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.70.114.60"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
5006[label="214.29.254.162;d;15pkt 15fpkt", shape=diamond, color=yellow];
9199[label="172.239.34.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12022[label="172.239.34.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.29.254.162:5050}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (47.0588%)&lt;BR/&gt; 3168: (8.82353%)&lt;BR/&gt; 1039: (5.88235%)&lt;BR/&gt; 3066: (2.94118%)&lt;BR/&gt; 1627: (2.94118%)&gt;];
}
5006--9199[label="1;1pkt 1fpkt"];
5006--12022[label="1;1pkt 1fpkt"];
9199--12022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.29.254.162" dst_port="5050"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26183,2.06517,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
43[label="145.248.4.64s;3pkt 3fpkt", shape=rectangle, color=red];
3775[label="151.227.236.76;s;158pkt 158fpkt", shape=diamond, color=yellow];
4515[label="43.99.223.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
4517[label="44.165.160.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
5372[label="145.248.4.64;s;4pkt 4fpkt", shape=diamond, color=yellow];
9224[label="145.248.4.64;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9411[label="151.227.236.76;166pkt 166fpkt", shape=pentagon, color=darkviolet];
12037[label="145.248.4.64;6pkt 6fpkt", shape=invtriangle, color=brown];
12137[label="151.227.236.76;166pkt 166fpkt", shape=invtriangle, color=brown];
13410[label="151.227.236.76;166pkt 166fpkt", shape=invhouse, color=bisque];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.236.76:*, *:80}[83.1395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5007%)&lt;BR/&gt; 32769: (2.36337%)&lt;BR/&gt; 53: (2.36337%)&lt;BR/&gt; 25: (2.06795%)&lt;BR/&gt; 1863: (1.77253%)&gt;];
}
43--90[label="0.333333;1pkt 1fpkt"];
43--3775[label="0.333333;1pkt 1fpkt"];
43--4515[label="1;1pkt 1fpkt"];
43--5372[label="0.666667;2pkt 2fpkt"];
43--9224[label="0.666667;2pkt 2fpkt"];
43--9411[label="0.333333;1pkt 1fpkt"];
43--12037[label="0.666667;2pkt 2fpkt"];
43--12137[label="0.333333;1pkt 1fpkt"];
43--13410[label="0.333333;1pkt 1fpkt"];
3775--3782[label="0.0258621;3pkt 3fpkt"];
3775--4193[label="0.00909091;1pkt 1fpkt"];
3775--4515[label="1;1pkt 1fpkt"];
3775--4517[label="1;1pkt 1fpkt"];
3775--4821[label="0.0821918;6pkt 6fpkt"];
3775--5146[label="0.0333333;1pkt 1fpkt"];
3775--5234[label="0.03125;1pkt 1fpkt"];
3775--5505[label="0.00632911;1pkt 1fpkt"];
3775--5590[label="0.0316456;5pkt 5fpkt"];
3775--5708[label="0.00632911;1pkt 1fpkt"];
3775--6374[label="0.0126582;2pkt 2fpkt"];
3775--6483[label="0.00632911;1pkt 1fpkt"];
3775--6817[label="0.0294118;3pkt 3fpkt"];
3775--6884[label="0.010101;1pkt 1fpkt"];
3775--6941[label="0.00666667;1pkt 1fpkt"];
3775--6989[label="0.0186916;2pkt 2fpkt"];
3775--7233[label="0.0163934;2pkt 2fpkt"];
3775--7238[label="0.0196078;2pkt 2fpkt"];
3775--7546[label="0.0126582;2pkt 2fpkt"];
3775--7562[label="0.0102041;1pkt 1fpkt"];
3775--7587[label="0.0379747;6pkt 6fpkt"];
3775--7601[label="0.00813008;1pkt 1fpkt"];
3775--8012[label="0.0821918;6pkt 6fpkt"];
3775--8174[label="0.0316456;5pkt 5fpkt"];
3775--8205[label="0.0133333;2pkt 2fpkt"];
3775--9411[label="1;158pkt 158fpkt"];
3775--12137[label="1;158pkt 158fpkt"];
3775--13410[label="1;158pkt 158fpkt"];
4515--9411[label="1;1pkt 1fpkt"];
4515--12137[label="1;1pkt 1fpkt"];
4515--13410[label="1;1pkt 1fpkt"];
4517--9411[label="1;1pkt 1fpkt"];
4517--12137[label="1;1pkt 1fpkt"];
4517--13410[label="1;1pkt 1fpkt"];
5372--9224[label="1;4pkt 4fpkt"];
5372--12037[label="1;4pkt 4fpkt"];
9224--12037[label="1;6pkt 6fpkt"];
9411--12137[label="1;166pkt 166fpkt"];
9411--13410[label="1;166pkt 166fpkt"];
12137--13410[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="151.227.236.76"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.67.64"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.49.129.64"/>
    </slice>
    <from sec="1165899614" usec="0"/>
    <to sec="1165899736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.6.229.64"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.37.65"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621137,2.15718,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
5411[label="42.118.66.65;s;3pkt 3fpkt", shape=diamond, color=yellow];
9247[label="42.118.66.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.118.66.65:443, 151.227.240.105:26818}[33.3333%]&lt;BR/&gt;{42.118.66.65:80, 151.227.240.105:26361}[33.3333%]&lt;BR/&gt;{42.118.66.65:80, 151.227.240.105:26420}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 26818: (20%)&lt;BR/&gt; 26420: (20%)&lt;BR/&gt; 443: (20%)&lt;BR/&gt; 26361: (10%)&gt;];
}
5411--9247[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.240.105" dst_port="26420" src_ip="42.118.66.65" src_port="80"/>
      <filter dst_ip="151.227.240.105" dst_port="26361" src_ip="42.118.66.65" src_port="80"/>
      <filter dst_ip="151.227.240.105" dst_port="26818" src_ip="42.118.66.65" src_port="443"/>
    </slice>
    <from sec="1165900415" usec="0"/>
    <to sec="1165900431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.99.239.66"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.238.42.67"/>
    </slice>
    <from sec="1165899639" usec="0"/>
    <to sec="1165900490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.137.173.68"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.150.173.69"/>
    </slice>
    <from sec="1165899769" usec="0"/>
    <to sec="1165899892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.208.21.70"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.132.224.70"/>
    </slice>
    <from sec="1165899787" usec="0"/>
    <to sec="1165900468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.64.54.71"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.216.208.72"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.84.43.74"/>
    </slice>
    <from sec="1165900443" usec="0"/>
    <to sec="1165900455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.78.74"/>
    </slice>
    <from sec="1165900327" usec="0"/>
    <to sec="1165900328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.74.75"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.10.136.75"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.70.178.75"/>
    </slice>
    <from sec="1165899932" usec="0"/>
    <to sec="1165899996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.150.57.76"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.184.116.76"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.74.190.79"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.20.218.80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.131.11.81"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.73.77.81"/>
    </slice>
    <from sec="1165899756" usec="0"/>
    <to sec="1165899861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.22.133.81"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.93.85"/>
    </slice>
    <from sec="1165900458" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.48.99.85"/>
    </slice>
    <from sec="1165900288" usec="0"/>
    <to sec="1165900298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969828,2.18358,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
174[label="151.227.120.85s;23pkt 23fpkt", shape=rectangle, color=red];
9541[label="151.227.120.85;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.120.85:*, 219.206.0.139:80}[88.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52155: (2.04082%)&lt;BR/&gt; 52154: (2.04082%)&lt;BR/&gt; 52153: (2.04082%)&lt;BR/&gt; 52152: (2.04082%)&gt;];
}
174--9541[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="219.206.0.139" dst_port="80" src_ip="151.227.120.85"/>
    </slice>
    <from sec="1165900361" usec="0"/>
    <to sec="1165900381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
975[label="205.249.140.49;d;83pkt 83fpkt", shape=diamond, color=yellow];
2019[label="43.99.222.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
3551[label="43.99.222.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
4046[label="43.99.222.64;s;2pkt 2fpkt", shape=diamond, color=yellow];
5345[label="43.99.222.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
5598[label="205.249.140.49;d;38pkt 38fpkt", shape=hexagon, color=black];
5926[label="43.99.222.72;s;1pkt 1fpkt", shape=hexagon, color=black];
7140[label="43.99.222.70;s;1pkt 1fpkt", shape=hexagon, color=black];
8803[label="43.99.222.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9360[label="43.99.222.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10874[label="43.99.222.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11815[label="43.99.222.33;1pkt 1fpkt", shape=invtriangle, color=brown];
12113[label="43.99.222.72;1pkt 1fpkt", shape=invtriangle, color=brown];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 205.249.140.49:*}[98.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3025: (2.25564%)&lt;BR/&gt; 3090: (1.50376%)&lt;BR/&gt; 3053: (1.12782%)&lt;BR/&gt; 3012: (1.12782%)&gt;];
}
975--1003[label="0.0240964;2pkt 2fpkt"];
975--1090[label="0.0240964;2pkt 2fpkt"];
975--1519[label="0.0240964;2pkt 2fpkt"];
975--1593[label="0.0240964;2pkt 2fpkt"];
975--1594[label="0.0240964;2pkt 2fpkt"];
975--1606[label="0.0240964;2pkt 2fpkt"];
975--1636[label="0.0120482;1pkt 1fpkt"];
975--1643[label="0.0240964;2pkt 2fpkt"];
975--1644[label="0.0240964;2pkt 2fpkt"];
975--1700[label="0.0361446;3pkt 3fpkt"];
975--2019[label="1;1pkt 1fpkt"];
975--2154[label="0.060241;5pkt 5fpkt"];
975--2155[label="0.0240964;2pkt 2fpkt"];
975--2225[label="0.0240964;2pkt 2fpkt"];
975--2232[label="0.0361446;3pkt 3fpkt"];
975--2242[label="0.060241;5pkt 5fpkt"];
975--2346[label="0.0361446;3pkt 3fpkt"];
975--2667[label="0.0120482;1pkt 1fpkt"];
975--2668[label="0.0240964;2pkt 2fpkt"];
975--2669[label="0.0361446;3pkt 3fpkt"];
975--2703[label="0.0120482;1pkt 1fpkt"];
975--2704[label="0.060241;5pkt 5fpkt"];
975--2732[label="0.0240964;2pkt 2fpkt"];
975--2738[label="0.0120482;1pkt 1fpkt"];
975--2764[label="0.0240964;2pkt 2fpkt"];
975--2776[label="0.0361446;3pkt 3fpkt"];
975--2800[label="0.0361446;3pkt 3fpkt"];
975--2810[label="0.0361446;3pkt 3fpkt"];
975--2875[label="0.0240964;2pkt 2fpkt"];
975--2881[label="0.0240964;2pkt 2fpkt"];
975--3080[label="1;1pkt 1fpkt"];
975--3275[label="0.0240964;2pkt 2fpkt"];
975--3551[label="1;1pkt 1fpkt"];
975--3645[label="0.0120482;1pkt 1fpkt"];
975--3816[label="0.0120482;1pkt 1fpkt"];
975--4046[label="0.5;1pkt 1fpkt"];
975--5345[label="1;1pkt 1fpkt"];
975--5598[label="1;38pkt 38fpkt"];
975--5768[label="0.0240964;2pkt 2fpkt"];
975--5794[label="0.0240964;2pkt 2fpkt"];
975--5810[label="0.0120482;1pkt 1fpkt"];
975--5926[label="1;1pkt 1fpkt"];
975--6048[label="0.0120482;1pkt 1fpkt"];
975--6054[label="0.060241;5pkt 5fpkt"];
975--6349[label="0.0240964;2pkt 2fpkt"];
975--6384[label="0.0361446;3pkt 3fpkt"];
975--6387[label="0.0361446;3pkt 3fpkt"];
975--6609[label="0.0240964;2pkt 2fpkt"];
975--6659[label="0.0240964;2pkt 2fpkt"];
975--6668[label="0.0240964;2pkt 2fpkt"];
975--6687[label="0.0240964;2pkt 2fpkt"];
975--6699[label="0.0361446;3pkt 3fpkt"];
975--6712[label="0.0240964;2pkt 2fpkt"];
975--6778[label="1;1pkt 1fpkt"];
975--6917[label="0.0120482;1pkt 1fpkt"];
975--6934[label="0.0361446;3pkt 3fpkt"];
975--7140[label="1;1pkt 1fpkt"];
975--7217[label="0.0240964;2pkt 2fpkt"];
975--7234[label="0.0481928;4pkt 4fpkt"];
975--7237[label="0.0240964;2pkt 2fpkt"];
975--7669[label="0.0120482;1pkt 1fpkt"];
975--7878[label="0.0361446;3pkt 3fpkt"];
975--8268[label="0.0481928;4pkt 4fpkt"];
975--8272[label="0.120482;10pkt 10fpkt"];
975--8275[label="0.0843373;7pkt 7fpkt"];
975--8286[label="0.0481928;4pkt 4fpkt"];
975--8290[label="0.120482;10pkt 10fpkt"];
975--8293[label="0.0843373;7pkt 7fpkt"];
975--8399[label="0.0361446;3pkt 3fpkt"];
975--8414[label="0.0240964;2pkt 2fpkt"];
975--8470[label="0.0120482;1pkt 1fpkt"];
975--8501[label="0.0120482;1pkt 1fpkt"];
975--8530[label="0.0240964;2pkt 2fpkt"];
975--8803[label="1;1pkt 1fpkt"];
975--8869[label="0.0240964;2pkt 2fpkt"];
975--9360[label="1;1pkt 1fpkt"];
975--9638[label="0.0240964;2pkt 2fpkt"];
975--9665[label="0.0361446;3pkt 3fpkt"];
975--10335[label="0.0240964;2pkt 2fpkt"];
975--10874[label="1;1pkt 1fpkt"];
975--11643[label="0.0120482;1pkt 1fpkt"];
975--11669[label="0.0240964;2pkt 2fpkt"];
975--11815[label="1;1pkt 1fpkt"];
975--12113[label="1;1pkt 1fpkt"];
975--13231[label="0.0240964;2pkt 2fpkt"];
975--13616[label="0.0240964;2pkt 2fpkt"];
2019--5598[label="1;1pkt 1fpkt"];
2019--5926[label="1;1pkt 1fpkt"];
2019--9360[label="1;1pkt 1fpkt"];
2019--12113[label="1;1pkt 1fpkt"];
3551--7140[label="1;1pkt 1fpkt"];
5345--8803[label="1;1pkt 1fpkt"];
5345--11815[label="1;1pkt 1fpkt"];
5598--5768[label="0.0526316;2pkt 2fpkt"];
5598--5810[label="0.0263158;1pkt 1fpkt"];
5598--5926[label="1;1pkt 1fpkt"];
5598--6054[label="0.0526316;2pkt 2fpkt"];
5598--6349[label="0.0263158;1pkt 1fpkt"];
5598--6384[label="0.0526316;2pkt 2fpkt"];
5598--6387[label="0.0263158;1pkt 1fpkt"];
5598--6609[label="0.0526316;2pkt 2fpkt"];
5598--6659[label="0.0526316;2pkt 2fpkt"];
5598--6687[label="0.0526316;2pkt 2fpkt"];
5598--6917[label="0.0263158;1pkt 1fpkt"];
5598--7217[label="0.0526316;2pkt 2fpkt"];
5598--7234[label="0.0789474;3pkt 3fpkt"];
5598--7669[label="0.0263158;1pkt 1fpkt"];
5598--7878[label="0.0526316;2pkt 2fpkt"];
5598--8268[label="0.0526316;2pkt 2fpkt"];
5598--8272[label="0.0526316;2pkt 2fpkt"];
5598--8275[label="0.0526316;2pkt 2fpkt"];
5598--8286[label="0.0526316;2pkt 2fpkt"];
5598--8290[label="0.0526316;2pkt 2fpkt"];
5598--8293[label="0.0526316;2pkt 2fpkt"];
5598--8399[label="0.0263158;1pkt 1fpkt"];
5598--8414[label="0.0526316;2pkt 2fpkt"];
5598--8470[label="0.0263158;1pkt 1fpkt"];
5598--8501[label="0.0263158;1pkt 1fpkt"];
5598--8530[label="0.0526316;2pkt 2fpkt"];
5598--9360[label="1;1pkt 1fpkt"];
5598--9638[label="0.0263158;1pkt 1fpkt"];
5598--9665[label="0.0526316;2pkt 2fpkt"];
5598--10335[label="0.0526316;2pkt 2fpkt"];
5598--10874[label="1;1pkt 1fpkt"];
5598--11643[label="0.0263158;1pkt 1fpkt"];
5598--11669[label="0.0526316;2pkt 2fpkt"];
5598--12113[label="1;1pkt 1fpkt"];
5598--13231[label="0.0526316;2pkt 2fpkt"];
5598--13616[label="0.0526316;2pkt 2fpkt"];
5926--9360[label="1;1pkt 1fpkt"];
5926--12113[label="1;1pkt 1fpkt"];
8803--11815[label="1;1pkt 1fpkt"];
9360--12113[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.140.49" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.142.86"/>
    </slice>
    <from sec="1165900455" usec="0"/>
    <to sec="1165900481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.8.193.86"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.188.1.88"/>
    </slice>
    <from sec="1165900264" usec="0"/>
    <to sec="1165900266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.16.88"/>
    </slice>
    <from sec="1165900355" usec="0"/>
    <to sec="1165900487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.249.46.88"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165900127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.33.86.88"/>
    </slice>
    <from sec="1165900480" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16245,2.12164,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
59[label="151.227.155.89s;1pkt 1fpkt", shape=rectangle, color=red];
9594[label="151.227.155.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12219[label="151.227.155.89;2pkt 2fpkt", shape=invtriangle, color=brown];
13447[label="151.227.155.89;2pkt 2fpkt", shape=invhouse, color=bisque];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.155.89:3820, 42.126.197.140:80}[50%]&lt;BR/&gt;{151.227.155.89:3727, 44.165.160.168:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3727: (28.5714%)&lt;BR/&gt; 3820: (21.4286%)&gt;];
}
59--9594[label="1;1pkt 1fpkt"];
59--12219[label="1;1pkt 1fpkt"];
59--13447[label="1;1pkt 1fpkt"];
9594--12219[label="1;2pkt 2fpkt"];
9594--13447[label="1;2pkt 2fpkt"];
12219--13447[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="44.165.160.168" dst_port="80" src_ip="151.227.155.89" src_port="3727"/>
      <filter dst_ip="42.126.197.140" dst_port="80" src_ip="151.227.155.89" src_port="3820"/>
    </slice>
    <from sec="1165899640" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.55.166.89"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.56.23.91"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.84.32.91"/>
    </slice>
    <from sec="1165899733" usec="0"/>
    <to sec="1165899930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.148.91"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
5357[label="129.202.220.91;s;3pkt 3fpkt", shape=diamond, color=yellow];
9629[label="129.202.220.91;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12240[label="129.202.220.91;3pkt 3fpkt", shape=invtriangle, color=brown];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.202.220.91:1396, 205.0.2.173:80}[33.3333%]&lt;BR/&gt;{129.202.220.91:1399, 205.0.2.173:80}[33.3333%]&lt;BR/&gt;{129.202.220.91:1400, 205.0.2.173:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1400: (16.6667%)&lt;BR/&gt; 1399: (16.6667%)&lt;BR/&gt; 1396: (16.6667%)&gt;];
}
5357--9629[label="1;3pkt 3fpkt"];
5357--12240[label="1;3pkt 3fpkt"];
9629--12240[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.0.2.173" dst_port="80" src_ip="129.202.220.91" src_port="1400"/>
      <filter dst_ip="205.0.2.173" dst_port="80" src_ip="129.202.220.91" src_port="1399"/>
      <filter dst_ip="205.0.2.173" dst_port="80" src_ip="129.202.220.91" src_port="1396"/>
    </slice>
    <from sec="1165900347" usec="0"/>
    <to sec="1165900366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.92.92"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.105.133.93"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.136.22.94"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.137.79.94"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.176.128.95"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.204.95"/>
    </slice>
    <from sec="1165900293" usec="0"/>
    <to sec="1165900295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.116.96"/>
    </slice>
    <from sec="1165899624" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.119.203.96"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
1748[label="150.105.32.97;s;141pkt 141fpkt", shape=diamond, color=yellow];
1924[label="208.119.219.16;d;87pkt 87fpkt", shape=diamond, color=yellow];
9695[label="150.105.32.97;175pkt 175fpkt", shape=pentagon, color=darkviolet];
12273[label="150.105.32.97;175pkt 175fpkt", shape=invtriangle, color=brown];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.105.32.97:80, 213.11.218.35:*}[33.3333%]&lt;BR/&gt;{150.105.32.97:80, 208.119.219.16:*}[30.3483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33762: (0.346021%)&lt;BR/&gt; 33714: (0.346021%)&lt;BR/&gt; 33711: (0.346021%)&lt;BR/&gt; 33710: (0.346021%)&gt;];
}
1748--1924[label="0.701149;61pkt 61fpkt"];
1748--9695[label="1;141pkt 141fpkt"];
1748--12273[label="1;141pkt 141fpkt"];
1924--9695[label="0.701149;61pkt 61fpkt"];
1924--12273[label="0.701149;61pkt 61fpkt"];
9695--12273[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_ip="208.119.219.16" src_ip="150.105.32.97" src_port="80"/>
      <filter dst_ip="213.11.218.35" src_ip="150.105.32.97" src_port="80"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.206.44.97"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.46.106.98"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
5389[label="43.99.211.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
9722[label="43.99.211.98;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12287[label="43.99.211.98;2pkt 2fpkt", shape=invtriangle, color=brown];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.99.211.98:80, 205.249.45.139:59907}[50%]&lt;BR/&gt;{43.99.211.98:80, 205.249.45.139:61270}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59907: (30%)&lt;BR/&gt; 61270: (20%)&gt;];
}
5389--9722[label="1;1pkt 1fpkt"];
5389--12287[label="1;1pkt 1fpkt"];
9722--12287[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.45.139" dst_port="61270" src_ip="43.99.211.98" src_port="80"/>
      <filter dst_ip="205.249.45.139" dst_port="59907" src_ip="43.99.211.98" src_port="80"/>
    </slice>
    <from sec="1165900390" usec="0"/>
    <to sec="1165900431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.220.114.101"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.119.203.101"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.20.17.102"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165899925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.8.57.102"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.151.102"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.202.179.102"/>
    </slice>
    <from sec="1165899611" usec="0"/>
    <to sec="1165900490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.12.232.102"/>
    </slice>
    <from sec="1165899764" usec="0"/>
    <to sec="1165900448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.0.21.103"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.148.104"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.10.31.105"/>
    </slice>
    <from sec="1165899618" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.83.104.105"/>
    </slice>
    <from sec="1165900460" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.6.143.105"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.148.105"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.164.105"/>
    </slice>
    <from sec="1165899708" usec="0"/>
    <to sec="1165900192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16245,2.12164,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
209[label="64.151.139.106s;195pkt 195fpkt", shape=rectangle, color=red];
9807[label="64.151.139.106;195pkt 195fpkt", shape=pentagon, color=darkviolet];
12327[label="64.151.139.106;195pkt 195fpkt", shape=invtriangle, color=brown];
13495[label="64.151.139.106;195pkt 195fpkt", shape=invhouse, color=bisque];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.151.139.106:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51022: (0.25641%)&lt;BR/&gt; 51020: (0.25641%)&lt;BR/&gt; 51018: (0.25641%)&lt;BR/&gt; 51016: (0.25641%)&gt;];
}
209--9807[label="1;195pkt 195fpkt"];
209--12327[label="1;195pkt 195fpkt"];
209--13495[label="1;195pkt 195fpkt"];
9807--12327[label="1;195pkt 195fpkt"];
9807--13495[label="1;195pkt 195fpkt"];
12327--13495[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="64.151.139.106"/>
    </slice>
    <from sec="1165900411" usec="0"/>
    <to sec="1165900425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.250.133.107"/>
    </slice>
    <from sec="1165899616" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.61.192.107"/>
    </slice>
    <from sec="1165899612" usec="0"/>
    <to sec="1165900084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.132.108"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165899707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.41.183.110"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.16.45.111"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.208.122.111"/>
    </slice>
    <from sec="1165899748" usec="0"/>
    <to sec="1165899792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.41.113"/>
    </slice>
    <from sec="1165899675" usec="0"/>
    <to sec="1165900468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621137,2.15718,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
2164[label="193.80.166.113;s;81pkt 81fpkt", shape=diamond, color=yellow];
9884[label="193.80.166.113;87pkt 87fpkt", shape=pentagon, color=darkviolet];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.80.166.113:6667, *:*}[31.0345%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (16.0714%)&lt;BR/&gt; 6663: (4.7619%)&lt;BR/&gt; 113: (4.46429%)&lt;BR/&gt; 6668: (3.57143%)&lt;BR/&gt; 6665: (3.57143%)&gt;];
}
2164--9884[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter src_ip="193.80.166.113" src_port="6667"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.226.94.114"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.151.93.116"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.80.166.116"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.101.44.117"/>
    </slice>
    <from sec="1165900330" usec="0"/>
    <to sec="1165900335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.151.89.118"/>
    </slice>
    <from sec="1165900456" usec="0"/>
    <to sec="1165900485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.130.214.121"/>
    </slice>
    <from sec="1165899732" usec="0"/>
    <to sec="1165899742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.202.131.123"/>
    </slice>
    <from sec="1165899907" usec="0"/>
    <to sec="1165900460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.0.125"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.113.125"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.209.33.126"/>
    </slice>
    <from sec="1165899695" usec="0"/>
    <to sec="1165899915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.167.159.126"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
10001[label="209.137.8.127;166pkt 166fpkt", shape=pentagon, color=darkviolet];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.137.8.127:34131, *:1026}[55.4217%]&lt;BR/&gt;{209.137.8.127:34131, *:1027}[44.5783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34131: (50%)&lt;BR/&gt; 1026: (27.7108%)&lt;BR/&gt; 1027: (22.2892%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1026" src_ip="209.137.8.127" src_port="34131"/>
      <filter dst_port="1027" src_ip="209.137.8.127" src_port="34131"/>
    </slice>
    <from sec="1165899633" usec="0"/>
    <to sec="1165899634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.0.1.128"/>
    </slice>
    <from sec="1165900455" usec="0"/>
    <to sec="1165900485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.13.128"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.125.128"/>
    </slice>
    <from sec="1165899612" usec="0"/>
    <to sec="1165900487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.29.254.128"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.107.129"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.92.130"/>
    </slice>
    <from sec="1165900372" usec="0"/>
    <to sec="1165900389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.0.172.130"/>
    </slice>
    <from sec="1165900355" usec="0"/>
    <to sec="1165900360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.11.161.131"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.149.132"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.222.132"/>
    </slice>
    <from sec="1165899939" usec="0"/>
    <to sec="1165900312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.170.133"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.194.203.133"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.136.134"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.220.134"/>
    </slice>
    <from sec="1165899934" usec="0"/>
    <to sec="1165899953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.61.106.135"/>
    </slice>
    <from sec="1165899629" usec="0"/>
    <to sec="1165900477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.206.14.137"/>
    </slice>
    <from sec="1165899629" usec="0"/>
    <to sec="1165899631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.85.130.138"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.220.138"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.206.0.139"/>
    </slice>
    <from sec="1165900375" usec="0"/>
    <to sec="1165900381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.109.103.139"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.212.139"/>
    </slice>
    <from sec="1165899774" usec="0"/>
    <to sec="1165899790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.13.45.140"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.176.93.142"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.115.142"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.155.142"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.208.101.143"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.34.144"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.149.144"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.93.25.145"/>
    </slice>
    <from sec="1165899725" usec="0"/>
    <to sec="1165899843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
4970[label="34.36.144.145;s;19pkt 19fpkt", shape=diamond, color=yellow];
5328[label="145.229.175.50;d;19pkt 19fpkt", shape=diamond, color=yellow];
7855[label="34.36.144.145;s;6pkt 6fpkt", shape=hexagon, color=black];
10269[label="34.36.144.145;28pkt 28fpkt", shape=pentagon, color=darkviolet];
12554[label="34.36.144.145;28pkt 28fpkt", shape=invtriangle, color=brown];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.36.144.145:80, 145.229.175.50:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2534: (2.5%)&lt;BR/&gt; 2532: (2.5%)&lt;BR/&gt; 2530: (2.5%)&lt;BR/&gt; 2528: (2.5%)&gt;];
}
4970--5328[label="1;19pkt 19fpkt"];
4970--7855[label="1;6pkt 6fpkt"];
4970--8275[label="0.210526;4pkt 4fpkt"];
4970--8293[label="0.210526;4pkt 4fpkt"];
4970--10269[label="1;19pkt 19fpkt"];
4970--12554[label="1;19pkt 19fpkt"];
5328--7855[label="1;6pkt 6fpkt"];
5328--8275[label="0.210526;4pkt 4fpkt"];
5328--8293[label="0.210526;4pkt 4fpkt"];
5328--10269[label="1;19pkt 19fpkt"];
5328--12554[label="1;19pkt 19fpkt"];
7855--8275[label="0.666667;4pkt 4fpkt"];
7855--8293[label="0.666667;4pkt 4fpkt"];
7855--10269[label="1;6pkt 6fpkt"];
7855--12554[label="1;6pkt 6fpkt"];
10269--12554[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.175.50" src_ip="34.36.144.145" src_port="80"/>
    </slice>
    <from sec="1165900300" usec="0"/>
    <to sec="1165900476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.149.146"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.13.44.147"/>
    </slice>
    <from sec="1165900411" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.246.69.147"/>
    </slice>
    <from sec="1165899619" usec="0"/>
    <to sec="1165900492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.85.126.147"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.61.148"/>
    </slice>
    <from sec="1165900150" usec="0"/>
    <to sec="1165900174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.148.148"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.25.153.148"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.66.185.148"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.144.124.149"/>
    </slice>
    <from sec="1165899807" usec="0"/>
    <to sec="1165900488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.48.207.149"/>
    </slice>
    <from sec="1165900216" usec="0"/>
    <to sec="1165900217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.212.149"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.226.149"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165900487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.111.209.150"/>
    </slice>
    <from sec="1165900352" usec="0"/>
    <to sec="1165900372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.142.191.151"/>
    </slice>
    <from sec="1165899615" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.118.197.151"/>
    </slice>
    <from sec="1165900468" usec="0"/>
    <to sec="1165900473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.36.153"/>
    </slice>
    <from sec="1165899616" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.165.23.154"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.93.154"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.169.154"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.44.157"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.246.71.157"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.68.95.157"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.239.108.158"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.113.134.158"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.214.158"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.163.213.159"/>
    </slice>
    <from sec="1165899920" usec="0"/>
    <to sec="1165899935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.10.161"/>
    </slice>
    <from sec="1165899840" usec="0"/>
    <to sec="1165899861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621137,2.15718,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
3662[label="145.248.34.161;s;119pkt 119fpkt", shape=diamond, color=yellow];
10497[label="145.248.34.161;124pkt 124fpkt", shape=pentagon, color=darkviolet];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.34.161:63472, *:53}[97.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63472: (48.9712%)&lt;BR/&gt; 53: (48.9712%)&lt;BR/&gt; 0: (2.05761%)&gt;];
}
3662--5067[label="0.00869565;1pkt 1fpkt"];
3662--5971[label="0.00840336;1pkt 1fpkt"];
3662--5993[label="0.00840336;1pkt 1fpkt"];
3662--7579[label="0.00840336;1pkt 1fpkt"];
3662--10497[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="145.248.34.161" src_port="63472"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.138.42.161"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.12.106.161"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.84.183.161"/>
    </slice>
    <from sec="1165900465" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.93.30.165"/>
    </slice>
    <from sec="1165900426" usec="0"/>
    <to sec="1165900434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.34.165"/>
    </slice>
    <from sec="1165899618" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.141.164.165"/>
    </slice>
    <from sec="1165899807" usec="0"/>
    <to sec="1165899887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.230.24.166"/>
    </slice>
    <from sec="1165899985" usec="0"/>
    <to sec="1165899989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.208.126.166"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.44.167"/>
    </slice>
    <from sec="1165899612" usec="0"/>
    <to sec="1165900448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.208.126.167"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.85.64.168"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.621137,2.15718,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
5343[label="216.239.109.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
10611[label="216.239.109.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.239.109.168:80, 205.249.45.139:57299}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57299: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5343--10611[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.45.139" dst_port="57299" src_ip="216.239.109.168" src_port="80"/>
    </slice>
    <from sec="1165900326" usec="0"/>
    <to sec="1165900393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.209.42.169"/>
    </slice>
    <from sec="1165900024" usec="0"/>
    <to sec="1165900045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.43.62.169"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.132.233.169"/>
    </slice>
    <from sec="1165899702" usec="0"/>
    <to sec="1165900395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08697,2.12875,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
106[label="139.152.122.170s;2pkt 2fpkt", shape=rectangle, color=red];
5361[label="218.209.35.34;d;6pkt 6fpkt", shape=diamond, color=yellow];
5362[label="139.152.122.170;s;6pkt 6fpkt", shape=diamond, color=yellow];
10655[label="139.152.122.170;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.122.170:*, 218.209.35.34:80}[77.7778%]&lt;BR/&gt;{139.152.122.170:*, 219.206.22.4:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32965: (8.69565%)&lt;BR/&gt; 32982: (6.52174%)&lt;BR/&gt; 32972: (6.52174%)&lt;BR/&gt; 32935: (6.52174%)&gt;];
}
106--5361[label="0.5;1pkt 1fpkt"];
106--5362[label="0.5;1pkt 1fpkt"];
106--10655[label="1;2pkt 2fpkt"];
5361--5362[label="1;6pkt 6fpkt"];
5361--10655[label="1;6pkt 6fpkt"];
5362--10655[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="218.209.35.34" dst_port="80" src_ip="139.152.122.170"/>
      <filter dst_ip="219.206.22.4" dst_port="80" src_ip="139.152.122.170"/>
    </slice>
    <from sec="1165900064" usec="0"/>
    <to sec="1165900465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.163.168.170"/>
    </slice>
    <from sec="1165899613" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.234.94.172"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892483,2.09447,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
5370[label="45.115.3.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
10686[label="45.115.3.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12742[label="45.115.3.173;1pkt 1fpkt", shape=invtriangle, color=brown];
13681[label="45.115.3.173;1pkt 1fpkt", shape=invhouse, color=bisque];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.115.3.173:80, 205.249.45.139:58589}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58589: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5370--10686[label="1;1pkt 1fpkt"];
5370--12742[label="1;1pkt 1fpkt"];
5370--13681[label="1;1pkt 1fpkt"];
10686--12742[label="1;1pkt 1fpkt"];
10686--13681[label="1;1pkt 1fpkt"];
12742--13681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.45.139" dst_port="58589" src_ip="45.115.3.173" src_port="80"/>
    </slice>
    <from sec="1165900364" usec="0"/>
    <to sec="1165900375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.9.173"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.211.13.175"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.202.27.176"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.36.176"/>
    </slice>
    <from sec="1165899952" usec="0"/>
    <to sec="1165900469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.168.178"/>
    </slice>
    <from sec="1165900223" usec="0"/>
    <to sec="1165900317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.96.210.178"/>
    </slice>
    <from sec="1165899611" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.65.216.178"/>
    </slice>
    <from sec="1165899660" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.69.40.179"/>
    </slice>
    <from sec="1165900173" usec="0"/>
    <to sec="1165900206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892483,2.09447,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
3100[label="151.227.116.54;s;94pkt 94fpkt", shape=diamond, color=yellow];
3521[label="44.165.162.85;d;3pkt 3fpkt", shape=diamond, color=yellow];
9121[label="151.227.116.54;110pkt 110fpkt", shape=pentagon, color=darkviolet];
11978[label="151.227.116.54;110pkt 110fpkt", shape=invtriangle, color=brown];
13344[label="151.227.116.54;110pkt 110fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.116.54:*, 44.165.160.138:80}[61.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2436%)&lt;BR/&gt; 1935: (1.17096%)&lt;BR/&gt; 4428: (0.58548%)&lt;BR/&gt; 4394: (0.58548%)&lt;BR/&gt; 4390: (0.58548%)&gt;];
}
3100--3521[label="1;3pkt 3fpkt"];
3100--9121[label="1;94pkt 94fpkt"];
3100--11978[label="1;94pkt 94fpkt"];
3100--13344[label="1;94pkt 94fpkt"];
3521--9121[label="1;3pkt 3fpkt"];
3521--11978[label="1;3pkt 3fpkt"];
3521--13344[label="1;3pkt 3fpkt"];
9121--11978[label="1;110pkt 110fpkt"];
9121--13344[label="1;110pkt 110fpkt"];
11978--13344[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_ip="44.165.160.138" dst_port="80" src_ip="151.227.116.54"/>
    </slice>
    <from sec="1165899626" usec="0"/>
    <to sec="1165900470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.75.51.181"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.133.69.183"/>
    </slice>
    <from sec="1165900364" usec="0"/>
    <to sec="1165900389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.27.184"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.32.84.184"/>
    </slice>
    <from sec="1165899695" usec="0"/>
    <to sec="1165900481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.105.141.184"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.70.153.184"/>
    </slice>
    <from sec="1165900156" usec="0"/>
    <to sec="1165900175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.216.184"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.18.220.184"/>
    </slice>
    <from sec="1165900221" usec="0"/>
    <to sec="1165900471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.150.32.186"/>
    </slice>
    <from sec="1165899654" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.170.186"/>
    </slice>
    <from sec="1165899615" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.30.187"/>
    </slice>
    <from sec="1165899818" usec="0"/>
    <to sec="1165899844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.4.42.188"/>
    </slice>
    <from sec="1165900302" usec="0"/>
    <to sec="1165900460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.43.35.190"/>
    </slice>
    <from sec="1165899739" usec="0"/>
    <to sec="1165899819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.64.37.190"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165900488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.177.146.191"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.239.64.192"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.13.225.193"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.80.252.196"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.251.209.197"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.133.143.198"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.84.199"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.248.241.201"/>
    </slice>
    <from sec="1165900126" usec="0"/>
    <to sec="1165900130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.137.72.202"/>
    </slice>
    <from sec="1165900406" usec="0"/>
    <to sec="1165900436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.66.102.202"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.890312,2.10955,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
2315[label="169.230.211.100;d;265pkt 265fpkt", shape=diamond, color=yellow];
3338[label="219.105.221.88;s;180pkt 180fpkt", shape=diamond, color=yellow];
6088[label="169.230.211.100;d;265pkt 265fpkt", shape=hexagon, color=black];
7335[label="219.105.221.88;s;180pkt 180fpkt", shape=hexagon, color=black];
9585[label="219.105.221.88;180pkt 180fpkt", shape=pentagon, color=darkviolet];
11067[label="218.4.4.203;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.221.88:80, 169.230.211.100:*}[66.6667%]&lt;BR/&gt;{218.4.4.203:80, 169.230.211.100:*}[20.5993%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2889%)&lt;BR/&gt; 8985: (0.444444%)&lt;BR/&gt; 53: (0.266667%)&lt;BR/&gt; 4086: (0.222222%)&lt;BR/&gt; 4084: (0.222222%)&gt;];
}
2315--3338[label="0.988889;178pkt 178fpkt"];
2315--4881[label="0.091954;8pkt 8fpkt"];
2315--6088[label="1;265pkt 265fpkt"];
2315--6346[label="0.00909091;2pkt 2fpkt"];
2315--6824[label="0.00754717;2pkt 2fpkt"];
2315--6960[label="0.0106383;2pkt 2fpkt"];
2315--7335[label="0.988889;178pkt 178fpkt"];
2315--8268[label="0.0150943;4pkt 4fpkt"];
2315--8272[label="0.0113208;3pkt 3fpkt"];
2315--8275[label="0.00754717;2pkt 2fpkt"];
2315--8286[label="0.0150943;4pkt 4fpkt"];
2315--8290[label="0.0113208;3pkt 3fpkt"];
2315--8293[label="0.00754717;2pkt 2fpkt"];
2315--9585[label="0.988889;178pkt 178fpkt"];
2315--9946[label="0.0147059;1pkt 1fpkt"];
2315--11067[label="1;55pkt 55fpkt"];
2315--11157[label="0.00754717;2pkt 2fpkt"];
3338--6088[label="0.988889;178pkt 178fpkt"];
3338--6652[label="0.00555556;1pkt 1fpkt"];
3338--6879[label="0.00555556;1pkt 1fpkt"];
3338--7335[label="1;180pkt 180fpkt"];
3338--8267[label="0.00555556;1pkt 1fpkt"];
3338--8285[label="0.00555556;1pkt 1fpkt"];
3338--9585[label="1;180pkt 180fpkt"];
6088--6346[label="0.00909091;2pkt 2fpkt"];
6088--6824[label="0.00754717;2pkt 2fpkt"];
6088--6960[label="0.0106383;2pkt 2fpkt"];
6088--7335[label="0.988889;178pkt 178fpkt"];
6088--8268[label="0.0150943;4pkt 4fpkt"];
6088--8272[label="0.0113208;3pkt 3fpkt"];
6088--8275[label="0.00754717;2pkt 2fpkt"];
6088--8286[label="0.0150943;4pkt 4fpkt"];
6088--8290[label="0.0113208;3pkt 3fpkt"];
6088--8293[label="0.00754717;2pkt 2fpkt"];
6088--9585[label="0.988889;178pkt 178fpkt"];
6088--9946[label="0.0147059;1pkt 1fpkt"];
6088--11067[label="1;55pkt 55fpkt"];
6088--11157[label="0.00754717;2pkt 2fpkt"];
7335--8267[label="0.00555556;1pkt 1fpkt"];
7335--8285[label="0.00555556;1pkt 1fpkt"];
7335--9585[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.211.100" src_ip="219.105.221.88" src_port="80"/>
      <filter dst_ip="169.230.211.100" src_ip="218.4.4.203" src_port="80"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02335,2.1511,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
122[label="129.202.50.203s;1pkt 1fpkt", shape=rectangle, color=red];
11070[label="129.202.50.203;18pkt 18fpkt", shape=pentagon, color=darkviolet];
12944[label="129.202.50.203;18pkt 18fpkt", shape=invtriangle, color=brown];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.202.50.203:*, 68.119.203.101:80}[33.3333%]&lt;BR/&gt;{129.202.50.203:*, 68.119.203.97:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.8919%)&lt;BR/&gt; 1198: (4.05405%)&lt;BR/&gt; 19524: (2.7027%)&lt;BR/&gt; 10242: (2.7027%)&lt;BR/&gt; 10083: (2.7027%)&gt;];
}
122--11070[label="1;1pkt 1fpkt"];
122--12944[label="1;1pkt 1fpkt"];
11070--12944[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="68.119.203.101" dst_port="80" src_ip="129.202.50.203"/>
      <filter dst_ip="68.119.203.97" dst_port="80" src_ip="129.202.50.203"/>
    </slice>
    <from sec="1165900393" usec="0"/>
    <to sec="1165900472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.148.204"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.43.58.207"/>
    </slice>
    <from sec="1165900044" usec="0"/>
    <to sec="1165900176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.91.207"/>
    </slice>
    <from sec="1165899672" usec="0"/>
    <to sec="1165900293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.74.101.207"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.43.100.208"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.220.6.209"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.19.194.209"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.185.151.210"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.239.223.210"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.90.211"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165899983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
11184[label="44.165.104.212;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.165.104.212:*, 204.6.236.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42220: (1.28205%)&lt;BR/&gt; 41887: (1.28205%)&lt;BR/&gt; 41404: (1.28205%)&lt;BR/&gt; 41008: (1.28205%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="204.6.236.24" dst_port="80" src_ip="44.165.104.212"/>
    </slice>
    <from sec="1165899624" usec="0"/>
    <to sec="1165900495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.6.231.212"/>
    </slice>
    <from sec="1165899620" usec="0"/>
    <to sec="1165900274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.239.110.213"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.119.145.213"/>
    </slice>
    <from sec="1165899615" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
471[label="151.227.240.142;d;1158pkt 1158fpkt", shape=diamond, color=yellow];
474[label="52.197.11.83;s;3pkt 3fpkt", shape=diamond, color=yellow];
916[label="113.217.189.185;s;8pkt 8fpkt", shape=diamond, color=yellow];
1607[label="65.2.30.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
1713[label="204.225.74.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
2103[label="52.233.202.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
2650[label="44.194.210.50;s;11pkt 11fpkt", shape=diamond, color=yellow];
2935[label="42.205.206.213;s;6pkt 6fpkt", shape=diamond, color=yellow];
3325[label="215.234.94.172;s;8pkt 8fpkt", shape=diamond, color=yellow];
3421[label="53.211.87.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
3425[label="58.99.107.235;s;12pkt 12fpkt", shape=diamond, color=yellow];
3896[label="48.61.7.182;s;6pkt 6fpkt", shape=diamond, color=yellow];
3897[label="55.133.176.130;s;1pkt 1fpkt", shape=diamond, color=yellow];
4702[label="54.37.167.163;s;4pkt 4fpkt", shape=diamond, color=yellow];
5456[label="151.227.240.142;d;171pkt 171fpkt", shape=hexagon, color=black];
5457[label="52.197.11.83;s;1pkt 1fpkt", shape=hexagon, color=black];
5579[label="113.217.189.185;s;1pkt 1fpkt", shape=hexagon, color=black];
6041[label="65.2.30.2;s;1pkt 1fpkt", shape=hexagon, color=black];
6271[label="44.194.210.50;s;11pkt 11fpkt", shape=hexagon, color=black];
6454[label="42.205.206.213;s;6pkt 6fpkt", shape=hexagon, color=black];
6694[label="215.234.94.172;s;8pkt 8fpkt", shape=hexagon, color=black];
7087[label="55.133.176.130;s;1pkt 1fpkt", shape=hexagon, color=black];
7413[label="58.99.107.235;s;12pkt 12fpkt", shape=hexagon, color=black];
8475[label="48.214.34.10;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9055[label="44.165.181.49;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9499[label="52.197.11.83;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9670[label="59.226.179.95;11pkt 11fpkt", shape=pentagon, color=darkviolet];
10542[label="54.37.167.163;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10593[label="49.15.180.167;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10805[label="48.61.7.182;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11204[label="42.205.206.213;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11415[label="58.99.107.235;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11647[label="48.214.34.10;4pkt 4fpkt", shape=invtriangle, color=brown];
11942[label="44.165.181.49;5pkt 5fpkt", shape=invtriangle, color=brown];
12680[label="54.37.167.163;3pkt 3fpkt", shape=invtriangle, color=brown];
12808[label="48.61.7.182;6pkt 6fpkt", shape=invtriangle, color=brown];
13007[label="42.205.206.213;7pkt 7fpkt", shape=invtriangle, color=brown];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.227.240.142:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (3.62797%)&lt;BR/&gt; 25377: (2.96834%)&lt;BR/&gt; 0: (2.90237%)&lt;BR/&gt; 6882: (1.97889%)&lt;BR/&gt; 80: (1.87995%)&gt;];
}
471--474[label="1;3pkt 3fpkt"];
471--891[label="0.010929;2pkt 2fpkt"];
471--916[label="1;8pkt 8fpkt"];
471--1131[label="0.015873;2pkt 2fpkt"];
471--1607[label="1;1pkt 1fpkt"];
471--1713[label="1;1pkt 1fpkt"];
471--1766[label="0.0645161;4pkt 4fpkt"];
471--1989[label="0.00421941;1pkt 1fpkt"];
471--2103[label="1;1pkt 1fpkt"];
471--2111[label="0.00185529;1pkt 1fpkt"];
471--2130[label="0.00241546;1pkt 1fpkt"];
471--2650[label="1;11pkt 11fpkt"];
471--2935[label="1;6pkt 6fpkt"];
471--3325[label="1;8pkt 8fpkt"];
471--3421[label="1;1pkt 1fpkt"];
471--3425[label="1;12pkt 12fpkt"];
471--3896[label="1;6pkt 6fpkt"];
471--3897[label="1;1pkt 1fpkt"];
471--4063[label="0.0833333;1pkt 1fpkt"];
471--4702[label="1;4pkt 4fpkt"];
471--5058[label="0.0217391;2pkt 2fpkt"];
471--5456[label="1;171pkt 171fpkt"];
471--5457[label="1;1pkt 1fpkt"];
471--5579[label="1;1pkt 1fpkt"];
471--5848[label="0.015873;2pkt 2fpkt"];
471--5919[label="0.00421941;1pkt 1fpkt"];
471--6041[label="1;1pkt 1fpkt"];
471--6260[label="0.00598802;1pkt 1fpkt"];
471--6271[label="1;11pkt 11fpkt"];
471--6454[label="1;6pkt 6fpkt"];
471--6694[label="1;8pkt 8fpkt"];
471--7019[label="0.0754717;4pkt 4fpkt"];
471--7087[label="1;1pkt 1fpkt"];
471--7413[label="1;12pkt 12fpkt"];
471--7911[label="0.0217391;2pkt 2fpkt"];
471--8268[label="0.00172712;2pkt 2fpkt"];
471--8272[label="0.00172712;2pkt 2fpkt"];
471--8275[label="0.00259067;3pkt 3fpkt"];
471--8286[label="0.00172712;2pkt 2fpkt"];
471--8290[label="0.00172712;2pkt 2fpkt"];
471--8293[label="0.00259067;3pkt 3fpkt"];
471--8475[label="1;4pkt 4fpkt"];
471--9055[label="1;5pkt 5fpkt"];
471--9140[label="0.0645161;4pkt 4fpkt"];
471--9499[label="1;3pkt 3fpkt"];
471--9670[label="1;11pkt 11fpkt"];
471--10542[label="1;3pkt 3fpkt"];
471--10593[label="1;7pkt 7fpkt"];
471--10805[label="1;6pkt 6fpkt"];
471--11197[label="0.0344828;1pkt 1fpkt"];
471--11204[label="0.857143;6pkt 6fpkt"];
471--11227[label="0.0833333;1pkt 1fpkt"];
471--11242[label="1;2pkt 2fpkt"];
471--11415[label="1;12pkt 12fpkt"];
471--11647[label="1;4pkt 4fpkt"];
471--11942[label="1;5pkt 5fpkt"];
471--12680[label="1;3pkt 3fpkt"];
471--12808[label="1;6pkt 6fpkt"];
471--13007[label="0.857143;6pkt 6fpkt"];
471--13647[label="0.00228833;1pkt 1fpkt"];
474--5456[label="0.333333;1pkt 1fpkt"];
474--5457[label="1;1pkt 1fpkt"];
474--9499[label="1;3pkt 3fpkt"];
916--5456[label="0.25;2pkt 2fpkt"];
916--5579[label="1;1pkt 1fpkt"];
1607--5456[label="1;1pkt 1fpkt"];
1607--6041[label="1;1pkt 1fpkt"];
1713--5456[label="1;1pkt 1fpkt"];
2103--5456[label="1;1pkt 1fpkt"];
2650--5456[label="0.818182;9pkt 9fpkt"];
2650--6271[label="1;11pkt 11fpkt"];
2935--5456[label="1;6pkt 6fpkt"];
2935--6454[label="1;6pkt 6fpkt"];
2935--11204[label="1;6pkt 6fpkt"];
2935--13007[label="1;6pkt 6fpkt"];
3325--5456[label="1;8pkt 8fpkt"];
3325--6694[label="1;8pkt 8fpkt"];
3421--5456[label="1;1pkt 1fpkt"];
3425--5456[label="0.666667;8pkt 8fpkt"];
3425--7413[label="1;12pkt 12fpkt"];
3425--11415[label="1;12pkt 12fpkt"];
3896--5456[label="0.833333;5pkt 5fpkt"];
3896--10805[label="1;6pkt 6fpkt"];
3896--12808[label="1;6pkt 6fpkt"];
3897--5456[label="1;1pkt 1fpkt"];
3897--7087[label="1;1pkt 1fpkt"];
4702--5456[label="1;4pkt 4fpkt"];
4702--10542[label="1;3pkt 3fpkt"];
4702--12680[label="1;3pkt 3fpkt"];
5456--5457[label="1;1pkt 1fpkt"];
5456--5579[label="1;1pkt 1fpkt"];
5456--5848[label="0.015873;2pkt 2fpkt"];
5456--5919[label="0.00584795;1pkt 1fpkt"];
5456--6041[label="1;1pkt 1fpkt"];
5456--6260[label="0.00598802;1pkt 1fpkt"];
5456--6271[label="0.818182;9pkt 9fpkt"];
5456--6454[label="1;6pkt 6fpkt"];
5456--6694[label="1;8pkt 8fpkt"];
5456--7019[label="0.0754717;4pkt 4fpkt"];
5456--7087[label="1;1pkt 1fpkt"];
5456--7413[label="0.666667;8pkt 8fpkt"];
5456--7911[label="0.0217391;2pkt 2fpkt"];
5456--8268[label="0.0116959;2pkt 2fpkt"];
5456--8272[label="0.0116959;2pkt 2fpkt"];
5456--8286[label="0.0116959;2pkt 2fpkt"];
5456--8290[label="0.0116959;2pkt 2fpkt"];
5456--8475[label="1;4pkt 4fpkt"];
5456--9055[label="1;5pkt 5fpkt"];
5456--9140[label="0.0645161;4pkt 4fpkt"];
5456--9499[label="0.333333;1pkt 1fpkt"];
5456--9670[label="0.545455;6pkt 6fpkt"];
5456--10542[label="1;3pkt 3fpkt"];
5456--10593[label="0.714286;5pkt 5fpkt"];
5456--10805[label="0.833333;5pkt 5fpkt"];
5456--11197[label="0.0344828;1pkt 1fpkt"];
5456--11204[label="0.857143;6pkt 6fpkt"];
5456--11415[label="0.666667;8pkt 8fpkt"];
5456--11647[label="1;4pkt 4fpkt"];
5456--11942[label="1;5pkt 5fpkt"];
5456--12680[label="1;3pkt 3fpkt"];
5456--12808[label="0.833333;5pkt 5fpkt"];
5456--13007[label="0.857143;6pkt 6fpkt"];
5456--13647[label="0.00584795;1pkt 1fpkt"];
5457--9499[label="1;1pkt 1fpkt"];
6454--11204[label="1;6pkt 6fpkt"];
6454--13007[label="1;6pkt 6fpkt"];
7413--11415[label="1;12pkt 12fpkt"];
8475--11647[label="1;4pkt 4fpkt"];
9055--11942[label="1;5pkt 5fpkt"];
10542--12680[label="1;3pkt 3fpkt"];
10805--12808[label="1;6pkt 6fpkt"];
11204--13007[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.240.142"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.17.113.215"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.203.215"/>
    </slice>
    <from sec="1165899712" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.57.196.216"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.108.91.218"/>
    </slice>
    <from sec="1165899661" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.46.220"/>
    </slice>
    <from sec="1165900447" usec="0"/>
    <to sec="1165900477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892483,2.09447,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
5055[label="193.183.59.220;s;381pkt 381fpkt", shape=diamond, color=yellow];
11262[label="193.183.59.220;408pkt 408fpkt", shape=pentagon, color=darkviolet];
13037[label="193.183.59.220;408pkt 408fpkt", shape=invtriangle, color=brown];
13830[label="193.183.59.220;408pkt 408fpkt", shape=invhouse, color=bisque];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.183.59.220:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.3333%)&lt;BR/&gt; 32768: (3.76947%)&lt;BR/&gt; 32769: (1.24611%)&lt;BR/&gt; 1050: (0.623053%)&lt;BR/&gt; 1040: (0.623053%)&gt;];
}
5055--8267[label="0.0997375;38pkt 38fpkt"];
5055--8271[label="0.0734908;28pkt 28fpkt"];
5055--8285[label="0.0997375;38pkt 38fpkt"];
5055--8289[label="0.0734908;28pkt 28fpkt"];
5055--11262[label="1;381pkt 381fpkt"];
5055--13037[label="1;381pkt 381fpkt"];
5055--13830[label="1;381pkt 381fpkt"];
11262--13037[label="1;408pkt 408fpkt"];
11262--13830[label="1;408pkt 408fpkt"];
13037--13830[label="1;408pkt 408fpkt"];
</description>
    <slice>
      <filter src_ip="193.183.59.220" src_port="53"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.230.79.220"/>
    </slice>
    <from sec="1165899620" usec="0"/>
    <to sec="1165900492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.139.113.220"/>
    </slice>
    <from sec="1165899883" usec="0"/>
    <to sec="1165899888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.6.227.220"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.105.35.222"/>
    </slice>
    <from sec="1165899720" usec="0"/>
    <to sec="1165900453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.4.36.227"/>
    </slice>
    <from sec="1165899708" usec="0"/>
    <to sec="1165900259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
2150[label="33.27.195.56;d;96pkt 96fpkt", shape=diamond, color=yellow];
3152[label="48.178.209.83;d;218pkt 218fpkt", shape=diamond, color=yellow];
3642[label="195.19.194.209;d;185pkt 185fpkt", shape=diamond, color=yellow];
4223[label="205.246.68.80;s;29pkt 29fpkt", shape=diamond, color=yellow];
4273[label="145.41.202.123;s;39pkt 39fpkt", shape=diamond, color=yellow];
4403[label="218.144.134.8;s;11pkt 11fpkt", shape=diamond, color=yellow];
4487[label="207.204.65.238;d;11pkt 11fpkt", shape=diamond, color=yellow];
4608[label="145.41.201.176;s;288pkt 288fpkt", shape=diamond, color=yellow];
4612[label="213.196.128.241;d;316pkt 316fpkt", shape=diamond, color=yellow];
4632[label="68.33.150.145;d;264pkt 264fpkt", shape=diamond, color=yellow];
4638[label="210.128.186.194;d;261pkt 261fpkt", shape=diamond, color=yellow];
4826[label="204.6.230.169;s;24pkt 24fpkt", shape=diamond, color=yellow];
5052[label="68.13.185.6;d;268pkt 268fpkt", shape=diamond, color=yellow];
6558[label="48.178.209.83;d;218pkt 218fpkt", shape=hexagon, color=black];
6860[label="195.19.194.209;d;173pkt 173fpkt", shape=hexagon, color=black];
7913[label="205.246.68.80;s;29pkt 29fpkt", shape=hexagon, color=black];
8020[label="204.6.230.169;s;24pkt 24fpkt", shape=hexagon, color=black];
8446[label="218.144.134.8;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8681[label="204.6.227.24;54pkt 54fpkt", shape=pentagon, color=darkviolet];
8738[label="193.182.234.28;49pkt 49fpkt", shape=pentagon, color=darkviolet];
8781[label="145.229.153.32;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9450[label="205.246.68.80;32pkt 32fpkt", shape=pentagon, color=darkviolet];
9771[label="151.227.227.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9973[label="145.41.202.123;40pkt 40fpkt", shape=pentagon, color=darkviolet];
10520[label="151.227.100.162;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10641[label="204.6.230.169;25pkt 25fpkt", shape=pentagon, color=darkviolet];
10865[label="204.6.224.186;24pkt 24fpkt", shape=pentagon, color=darkviolet];
11085[label="204.6.227.204;29pkt 29fpkt", shape=pentagon, color=darkviolet];
11092[label="151.227.82.205;46pkt 46fpkt", shape=pentagon, color=darkviolet];
11747[label="204.6.227.24;53pkt 53fpkt", shape=invtriangle, color=brown];
12411[label="145.41.202.123;40pkt 40fpkt", shape=invtriangle, color=brown];
13536[label="145.41.202.123;40pkt 40fpkt", shape=invhouse, color=bisque];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[86.6546%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (82.3409%)&lt;BR/&gt; 6667: (2.9603%)&lt;BR/&gt; 80: (2.17317%)&lt;BR/&gt; 1024: (1.81383%)&lt;BR/&gt; 3072: (1.6256%)&gt;];
}
2150--2207[label="0.0104167;1pkt 1fpkt"];
2150--2722[label="0.0104167;1pkt 1fpkt"];
2150--2943[label="0.0333333;1pkt 1fpkt"];
2150--3384[label="0.0104167;1pkt 1fpkt"];
2150--3720[label="0.0238095;1pkt 1fpkt"];
2150--3799[label="0.0104167;1pkt 1fpkt"];
2150--3841[label="0.0104167;1pkt 1fpkt"];
2150--4223[label="0.0344828;1pkt 1fpkt"];
2150--4273[label="0.025641;1pkt 1fpkt"];
2150--4403[label="0.0909091;1pkt 1fpkt"];
2150--4657[label="0.0227273;1pkt 1fpkt"];
2150--5020[label="0.0104167;1pkt 1fpkt"];
2150--6328[label="0.0104167;1pkt 1fpkt"];
2150--7734[label="0.0384615;1pkt 1fpkt"];
2150--7892[label="0.0104167;1pkt 1fpkt"];
2150--7913[label="0.0344828;1pkt 1fpkt"];
2150--7934[label="0.0104167;1pkt 1fpkt"];
2150--8393[label="0.0104167;1pkt 1fpkt"];
2150--8446[label="0.0769231;1pkt 1fpkt"];
2150--8781[label="0.111111;1pkt 1fpkt"];
2150--8979[label="0.047619;1pkt 1fpkt"];
2150--9184[label="0.0104167;1pkt 1fpkt"];
2150--9450[label="0.03125;1pkt 1fpkt"];
2150--9771[label="1;1pkt 1fpkt"];
2150--9973[label="0.025;1pkt 1fpkt"];
2150--10438[label="0.142857;1pkt 1fpkt"];
2150--10981[label="0.0263158;1pkt 1fpkt"];
2150--11610[label="0.0104167;1pkt 1fpkt"];
2150--11901[label="0.047619;1pkt 1fpkt"];
2150--12013[label="0.0104167;1pkt 1fpkt"];
2150--12411[label="0.025;1pkt 1fpkt"];
2150--12633[label="0.142857;1pkt 1fpkt"];
2150--13317[label="0.05;1pkt 1fpkt"];
2150--13536[label="0.025;1pkt 1fpkt"];
3152--3180[label="0.010101;1pkt 1fpkt"];
3152--5552[label="0.00458716;1pkt 1fpkt"];
3152--6558[label="1;218pkt 218fpkt"];
3152--6684[label="0.00952381;1pkt 1fpkt"];
3152--6948[label="0.00458716;1pkt 1fpkt"];
3152--7551[label="0.00458716;1pkt 1fpkt"];
3152--8681[label="0.0185185;1pkt 1fpkt"];
3152--9186[label="0.0119048;1pkt 1fpkt"];
3152--9659[label="0.00458716;1pkt 1fpkt"];
3152--9693[label="0.016129;1pkt 1fpkt"];
3152--10491[label="0.00458716;1pkt 1fpkt"];
3152--10641[label="0.04;1pkt 1fpkt"];
3152--10865[label="0.0416667;1pkt 1fpkt"];
3152--11085[label="0.0344828;1pkt 1fpkt"];
3152--11702[label="0.00458716;1pkt 1fpkt"];
3152--11747[label="0.0188679;1pkt 1fpkt"];
3152--12272[label="0.016129;1pkt 1fpkt"];
3642--3841[label="0.00645161;1pkt 1fpkt"];
3642--3864[label="0.0322581;1pkt 1fpkt"];
3642--3904[label="0.0588235;1pkt 1fpkt"];
3642--4198[label="0.00628931;1pkt 1fpkt"];
3642--4223[label="0.0344828;1pkt 1fpkt"];
3642--4273[label="0.025641;1pkt 1fpkt"];
3642--5743[label="0.00540541;1pkt 1fpkt"];
3642--6860[label="1;173pkt 173fpkt"];
3642--7595[label="0.00628931;1pkt 1fpkt"];
3642--7913[label="0.0344828;1pkt 1fpkt"];
3642--8002[label="0.0588235;1pkt 1fpkt"];
3642--8393[label="0.00625;1pkt 1fpkt"];
3642--8446[label="0.0769231;1pkt 1fpkt"];
3642--8681[label="0.0185185;1pkt 1fpkt"];
3642--9081[label="0.0153846;1pkt 1fpkt"];
3642--9450[label="0.03125;1pkt 1fpkt"];
3642--9973[label="0.025;1pkt 1fpkt"];
3642--10012[label="0.0625;1pkt 1fpkt"];
3642--10325[label="0.00571429;1pkt 1fpkt"];
3642--10491[label="0.00540541;1pkt 1fpkt"];
3642--10520[label="0.0769231;1pkt 1fpkt"];
3642--10865[label="0.0416667;1pkt 1fpkt"];
3642--10981[label="0.0263158;1pkt 1fpkt"];
3642--11092[label="0.0217391;1pkt 1fpkt"];
3642--11589[label="0.0166667;1pkt 1fpkt"];
3642--11610[label="0.00625;1pkt 1fpkt"];
3642--11747[label="0.0188679;1pkt 1fpkt"];
3642--11955[label="0.0153846;1pkt 1fpkt"];
3642--12411[label="0.025;1pkt 1fpkt"];
3642--13201[label="0.0166667;1pkt 1fpkt"];
3642--13536[label="0.025;1pkt 1fpkt"];
3642--13545[label="0.00540541;1pkt 1fpkt"];
4223--6860[label="0.0344828;1pkt 1fpkt"];
4223--7913[label="1;29pkt 29fpkt"];
4223--9450[label="1;29pkt 29fpkt"];
4273--4487[label="0.0909091;1pkt 1fpkt"];
4273--6860[label="0.025641;1pkt 1fpkt"];
4273--9973[label="1;39pkt 39fpkt"];
4273--12411[label="1;39pkt 39fpkt"];
4273--13536[label="1;39pkt 39fpkt"];
4403--4487[label="0.0909091;1pkt 1fpkt"];
4403--5052[label="0.0909091;1pkt 1fpkt"];
4403--8446[label="0.909091;10pkt 10fpkt"];
4487--4608[label="0.0909091;1pkt 1fpkt"];
4487--8446[label="0.0909091;1pkt 1fpkt"];
4487--9973[label="0.0909091;1pkt 1fpkt"];
4487--12411[label="0.0909091;1pkt 1fpkt"];
4487--13536[label="0.0909091;1pkt 1fpkt"];
4608--4670[label="0.0123457;1pkt 1fpkt"];
4608--4738[label="0.047619;1pkt 1fpkt"];
4608--5067[label="0.00869565;1pkt 1fpkt"];
4608--5113[label="0.0108696;1pkt 1fpkt"];
4608--5127[label="0.0151515;1pkt 1fpkt"];
4608--6063[label="0.00347222;1pkt 1fpkt"];
4608--6654[label="0.00347222;1pkt 1fpkt"];
4608--6873[label="0.00347222;1pkt 1fpkt"];
4608--6913[label="0.00675676;1pkt 1fpkt"];
4608--6957[label="0.0416667;1pkt 1fpkt"];
4608--7618[label="0.00347222;1pkt 1fpkt"];
4608--7632[label="0.00347222;1pkt 1fpkt"];
4608--7649[label="0.0140845;1pkt 1fpkt"];
4608--7992[label="0.0192308;1pkt 1fpkt"];
4608--8162[label="0.00347222;1pkt 1fpkt"];
4608--8267[label="0.0347222;10pkt 10fpkt"];
4608--8271[label="0.0104167;3pkt 3fpkt"];
4608--8285[label="0.0347222;10pkt 10fpkt"];
4608--8289[label="0.0104167;3pkt 3fpkt"];
4612--5020[label="0.003861;1pkt 1fpkt"];
4612--6328[label="0.00746269;1pkt 1fpkt"];
4612--7892[label="0.003861;1pkt 1fpkt"];
4612--10491[label="0.00316456;1pkt 1fpkt"];
4612--10865[label="0.0416667;1pkt 1fpkt"];
4612--10981[label="0.0263158;1pkt 1fpkt"];
4612--13545[label="0.00316456;1pkt 1fpkt"];
4632--5020[label="0.003861;1pkt 1fpkt"];
4632--6328[label="0.00746269;1pkt 1fpkt"];
4632--7892[label="0.003861;1pkt 1fpkt"];
4632--8446[label="0.0769231;1pkt 1fpkt"];
4632--10491[label="0.00378788;1pkt 1fpkt"];
4632--10981[label="0.0263158;1pkt 1fpkt"];
4638--5020[label="0.003861;1pkt 1fpkt"];
4638--6328[label="0.00746269;1pkt 1fpkt"];
4638--7892[label="0.003861;1pkt 1fpkt"];
4638--8738[label="0.0204082;1pkt 1fpkt"];
4638--10491[label="0.00383142;1pkt 1fpkt"];
4638--10981[label="0.0263158;1pkt 1fpkt"];
4826--8020[label="1;24pkt 24fpkt"];
4826--8268[label="0.0833333;2pkt 2fpkt"];
4826--8275[label="0.25;6pkt 6fpkt"];
4826--8286[label="0.0833333;2pkt 2fpkt"];
4826--8293[label="0.25;6pkt 6fpkt"];
4826--10641[label="1;24pkt 24fpkt"];
5052--6328[label="0.00746269;1pkt 1fpkt"];
5052--7892[label="0.003861;1pkt 1fpkt"];
5052--8446[label="0.0769231;1pkt 1fpkt"];
5052--8738[label="0.0204082;1pkt 1fpkt"];
5052--10491[label="0.00373134;1pkt 1fpkt"];
5052--10865[label="0.0416667;1pkt 1fpkt"];
5052--10981[label="0.0263158;1pkt 1fpkt"];
6558--6684[label="0.00952381;1pkt 1fpkt"];
6558--6948[label="0.00458716;1pkt 1fpkt"];
6558--7551[label="0.00458716;1pkt 1fpkt"];
6558--8681[label="0.0185185;1pkt 1fpkt"];
6558--9186[label="0.0119048;1pkt 1fpkt"];
6558--9659[label="0.00458716;1pkt 1fpkt"];
6558--9693[label="0.016129;1pkt 1fpkt"];
6558--10491[label="0.00458716;1pkt 1fpkt"];
6558--10641[label="0.04;1pkt 1fpkt"];
6558--10865[label="0.0416667;1pkt 1fpkt"];
6558--11085[label="0.0344828;1pkt 1fpkt"];
6558--11702[label="0.00458716;1pkt 1fpkt"];
6558--11747[label="0.0188679;1pkt 1fpkt"];
6558--12272[label="0.016129;1pkt 1fpkt"];
6860--7595[label="0.00628931;1pkt 1fpkt"];
6860--7913[label="0.0344828;1pkt 1fpkt"];
6860--8002[label="0.0588235;1pkt 1fpkt"];
6860--8393[label="0.00625;1pkt 1fpkt"];
6860--8446[label="0.0769231;1pkt 1fpkt"];
6860--8681[label="0.0185185;1pkt 1fpkt"];
6860--9081[label="0.0153846;1pkt 1fpkt"];
6860--9450[label="0.03125;1pkt 1fpkt"];
6860--9973[label="0.025;1pkt 1fpkt"];
6860--10012[label="0.0625;1pkt 1fpkt"];
6860--10325[label="0.00578035;1pkt 1fpkt"];
6860--10491[label="0.00578035;1pkt 1fpkt"];
6860--10520[label="0.0769231;1pkt 1fpkt"];
6860--10865[label="0.0416667;1pkt 1fpkt"];
6860--10981[label="0.0263158;1pkt 1fpkt"];
6860--11092[label="0.0217391;1pkt 1fpkt"];
6860--11589[label="0.0166667;1pkt 1fpkt"];
6860--11610[label="0.00625;1pkt 1fpkt"];
6860--11747[label="0.0188679;1pkt 1fpkt"];
6860--11955[label="0.0153846;1pkt 1fpkt"];
6860--12411[label="0.025;1pkt 1fpkt"];
6860--13201[label="0.0166667;1pkt 1fpkt"];
6860--13536[label="0.025;1pkt 1fpkt"];
6860--13545[label="0.00578035;1pkt 1fpkt"];
7913--9450[label="1;29pkt 29fpkt"];
8020--8268[label="0.0833333;2pkt 2fpkt"];
8020--8275[label="0.25;6pkt 6fpkt"];
8020--8286[label="0.0833333;2pkt 2fpkt"];
8020--8293[label="0.25;6pkt 6fpkt"];
8020--10641[label="1;24pkt 24fpkt"];
8681--11747[label="1;53pkt 53fpkt"];
9973--12411[label="1;40pkt 40fpkt"];
9973--13536[label="1;40pkt 40fpkt"];
12411--13536[label="1;40pkt 40fpkt"];
</description>
    <slice/>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.130.228"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.41.230.228"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.227.72.230"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.4.119.230"/>
    </slice>
    <from sec="1165899804" usec="0"/>
    <to sec="1165899936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.79.209.230"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.202.104.231"/>
    </slice>
    <from sec="1165899606" usec="0"/>
    <to sec="1165900494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.198.169.231"/>
    </slice>
    <from sec="1165899846" usec="0"/>
    <to sec="1165899905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.173.232"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.206.178.232"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.89.101.233"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.45.141.233"/>
    </slice>
    <from sec="1165900478" usec="0"/>
    <to sec="1165900486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.130.136.234"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.225.80.235"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.228.218.235"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.221.235"/>
    </slice>
    <from sec="1165900348" usec="0"/>
    <to sec="1165900358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.229.82.237"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.200.238"/>
    </slice>
    <from sec="1165899621" usec="0"/>
    <to sec="1165899824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
5303[label="194.180.81.239;s;5pkt 5fpkt", shape=diamond, color=yellow];
11439[label="194.180.81.239;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13126[label="194.180.81.239;5pkt 5fpkt", shape=invtriangle, color=brown];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.180.81.239:80, 169.230.26.10:2263}[20%]&lt;BR/&gt;{194.180.81.239:80, 169.230.26.10:2264}[20%]&lt;BR/&gt;{194.180.81.239:80, 169.230.26.10:2265}[20%]&lt;BR/&gt;{194.180.81.239:80, 169.230.26.10:2268}[20%]&lt;BR/&gt;{194.180.81.239:80, 169.230.26.10:2270}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2270: (10%)&lt;BR/&gt; 2268: (10%)&lt;BR/&gt; 2265: (10%)&lt;BR/&gt; 2264: (10%)&gt;];
}
5303--8275[label="0.2;1pkt 1fpkt"];
5303--8293[label="0.2;1pkt 1fpkt"];
5303--11439[label="1;5pkt 5fpkt"];
5303--13126[label="1;5pkt 5fpkt"];
11439--13126[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.26.10" dst_port="2270" src_ip="194.180.81.239" src_port="80"/>
      <filter dst_ip="169.230.26.10" dst_port="2268" src_ip="194.180.81.239" src_port="80"/>
      <filter dst_ip="169.230.26.10" dst_port="2265" src_ip="194.180.81.239" src_port="80"/>
      <filter dst_ip="169.230.26.10" dst_port="2264" src_ip="194.180.81.239" src_port="80"/>
      <filter dst_ip="169.230.26.10" dst_port="2263" src_ip="194.180.81.239" src_port="80"/>
    </slice>
    <from sec="1165900245" usec="0"/>
    <to sec="1165900285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.206.44.242"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.145.86.242"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.208.118.242"/>
    </slice>
    <from sec="1165900216" usec="0"/>
    <to sec="1165900350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892483,2.09447,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
5170[label="205.246.71.243;s;242pkt 242fpkt", shape=diamond, color=yellow];
11481[label="205.246.71.243;242pkt 242fpkt", shape=pentagon, color=darkviolet];
13152[label="205.246.71.243;242pkt 242fpkt", shape=invtriangle, color=brown];
13880[label="205.246.71.243;242pkt 242fpkt", shape=invhouse, color=bisque];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.246.71.243:11281, *:*}[57.438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11281: (28.719%)&lt;BR/&gt; 80: (3.30579%)&lt;BR/&gt; 11282: (1.65289%)&lt;BR/&gt; 6346: (1.03306%)&lt;BR/&gt; 36004: (0.619835%)&gt;];
}
5170--11481[label="1;242pkt 242fpkt"];
5170--13152[label="1;242pkt 242fpkt"];
5170--13880[label="1;242pkt 242fpkt"];
11481--13152[label="1;242pkt 242fpkt"];
11481--13880[label="1;242pkt 242fpkt"];
13152--13880[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter src_ip="205.246.71.243" src_port="11281"/>
    </slice>
    <from sec="1165899614" usec="0"/>
    <to sec="1165900421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.23.207.243"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.36.45.244"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.24.0.245"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.240.15.245"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.185.124.245"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.152.131.245"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165899730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.236.145.251"/>
    </slice>
    <from sec="1165899953" usec="0"/>
    <to sec="1165900001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.32.97.252"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.11.35.255"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380632,2.21131,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.58.234.255"/>
    </slice>
    <from sec="1165899635" usec="0"/>
    <to sec="1165899971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
8303[label="69.170.82.0;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11564[label="69.170.82.0;4pkt 4fpkt", shape=invtriangle, color=brown];
13189[label="69.170.82.0;4pkt 4fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.170.82.0:80, 169.230.0.96:2210}[25%]&lt;BR/&gt;{69.170.82.0:80, 169.230.0.96:2211}[25%]&lt;BR/&gt;{69.170.82.0:80, 205.249.45.139:64268}[25%]&lt;BR/&gt;{69.170.82.0:80, 205.249.45.139:64270}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64270: (12.5%)&lt;BR/&gt; 64268: (12.5%)&lt;BR/&gt; 2211: (12.5%)&lt;BR/&gt; 2210: (12.5%)&gt;];
}
8303--11564[label="1;4pkt 4fpkt"];
8303--13189[label="1;4pkt 4fpkt"];
11564--13189[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.45.139" dst_port="64270" src_ip="69.170.82.0" src_port="80"/>
      <filter dst_ip="205.249.45.139" dst_port="64268" src_ip="69.170.82.0" src_port="80"/>
      <filter dst_ip="169.230.0.96" dst_port="2211" src_ip="69.170.82.0" src_port="80"/>
      <filter dst_ip="169.230.0.96" dst_port="2210" src_ip="69.170.82.0" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
1423[label="145.229.74.217;d;1010pkt 1010fpkt", shape=diamond, color=yellow];
1817[label="64.25.138.144;s;3pkt 3fpkt", shape=diamond, color=yellow];
2482[label="113.53.152.91;s;2pkt 2fpkt", shape=diamond, color=yellow];
4214[label="151.227.177.164;d;133pkt 133fpkt", shape=diamond, color=yellow];
4404[label="113.69.222.81;s;28pkt 28fpkt", shape=diamond, color=yellow];
4865[label="221.161.12.158;s;19pkt 19fpkt", shape=diamond, color=yellow];
5860[label="64.25.138.144;s;3pkt 3fpkt", shape=hexagon, color=black];
6838[label="145.229.74.217;d;707pkt 707fpkt", shape=hexagon, color=black];
8319[label="71.126.218.0;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8420[label="204.73.5.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9480[label="113.69.222.81;28pkt 28fpkt", shape=pentagon, color=darkviolet];
9525[label="218.131.208.84;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9789[label="71.129.43.105;25pkt 25fpkt", shape=pentagon, color=darkviolet];
10810[label="42.179.92.182;107pkt 107fpkt", shape=pentagon, color=darkviolet];
10940[label="113.43.30.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11305[label="41.126.205.225;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11397[label="113.228.30.234;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11471[label="192.51.172.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11573[label="71.126.218.0;3pkt 3fpkt", shape=invtriangle, color=brown];
12812[label="42.179.92.182;107pkt 107fpkt", shape=invtriangle, color=brown];
13064[label="41.126.205.225;10pkt 10fpkt", shape=invtriangle, color=brown];
13144[label="192.51.172.242;3pkt 3fpkt", shape=invtriangle, color=brown];
13193[label="71.126.218.0;2pkt 2fpkt", shape=invhouse, color=bisque];
13722[label="42.179.92.182;107pkt 107fpkt", shape=invhouse, color=bisque];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.229.74.217:80}[65.5681%]&lt;BR/&gt;{*:80, 145.229.74.217:*}[22.2897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5281%)&lt;BR/&gt; 443: (0.23595%)&lt;BR/&gt; 11744: (0.1716%)&lt;BR/&gt; 36552: (0.10725%)&lt;BR/&gt; 35951: (0.10725%)&gt;];
}
1423--1546[label="0.00320513;1pkt 1fpkt"];
1423--1694[label="0.00387597;1pkt 1fpkt"];
1423--1817[label="1;3pkt 3fpkt"];
1423--2271[label="0.0143885;2pkt 2fpkt"];
1423--2482[label="1;2pkt 2fpkt"];
1423--3401[label="0.166667;2pkt 2fpkt"];
1423--3805[label="0.125;1pkt 1fpkt"];
1423--4101[label="0.00344828;1pkt 1fpkt"];
1423--4382[label="0.0166667;1pkt 1fpkt"];
1423--4404[label="1;28pkt 28fpkt"];
1423--4865[label="1;19pkt 19fpkt"];
1423--5860[label="1;3pkt 3fpkt"];
1423--6687[label="0.00843373;7pkt 7fpkt"];
1423--6838[label="1;707pkt 707fpkt"];
1423--6959[label="0.0143885;2pkt 2fpkt"];
1423--6960[label="0.00531915;1pkt 1fpkt"];
1423--7738[label="0.0185185;1pkt 1fpkt"];
1423--7939[label="0.125;1pkt 1fpkt"];
1423--8268[label="0.0217822;22pkt 22fpkt"];
1423--8272[label="0.00594059;6pkt 6fpkt"];
1423--8275[label="0.00792079;8pkt 8fpkt"];
1423--8286[label="0.0217822;22pkt 22fpkt"];
1423--8290[label="0.00594059;6pkt 6fpkt"];
1423--8293[label="0.00792079;8pkt 8fpkt"];
1423--8319[label="1;3pkt 3fpkt"];
1423--8420[label="0.5;1pkt 1fpkt"];
1423--9092[label="0.125;2pkt 2fpkt"];
1423--9480[label="1;28pkt 28fpkt"];
1423--9525[label="1;13pkt 13fpkt"];
1423--9789[label="0.76;19pkt 19fpkt"];
1423--10335[label="0.00693069;7pkt 7fpkt"];
1423--10810[label="0.0280374;3pkt 3fpkt"];
1423--10940[label="1;1pkt 1fpkt"];
1423--11157[label="0.00371747;1pkt 1fpkt"];
1423--11287[label="0.0147059;1pkt 1fpkt"];
1423--11305[label="0.8;8pkt 8fpkt"];
1423--11397[label="1;2pkt 2fpkt"];
1423--11471[label="1;3pkt 3fpkt"];
1423--11573[label="1;3pkt 3fpkt"];
1423--11961[label="0.125;2pkt 2fpkt"];
1423--12812[label="0.0280374;3pkt 3fpkt"];
1423--13064[label="0.8;8pkt 8fpkt"];
1423--13144[label="1;3pkt 3fpkt"];
1423--13193[label="1;2pkt 2fpkt"];
1423--13722[label="0.0280374;3pkt 3fpkt"];
1817--5860[label="1;3pkt 3fpkt"];
1817--6838[label="1;3pkt 3fpkt"];
2482--6838[label="1;2pkt 2fpkt"];
4214--5589[label="0.0150376;2pkt 2fpkt"];
4214--6582[label="0.0075188;1pkt 1fpkt"];
4214--8272[label="0.0150376;2pkt 2fpkt"];
4214--8275[label="0.0225564;3pkt 3fpkt"];
4214--8290[label="0.0150376;2pkt 2fpkt"];
4214--8293[label="0.0225564;3pkt 3fpkt"];
4214--8558[label="0.0166667;2pkt 2fpkt"];
4214--9596[label="0.0150376;2pkt 2fpkt"];
4214--10810[label="0.962617;103pkt 103fpkt"];
4214--11480[label="0.0150376;2pkt 2fpkt"];
4214--11682[label="0.0168067;2pkt 2fpkt"];
4214--12220[label="0.0150376;2pkt 2fpkt"];
4214--12812[label="0.962617;103pkt 103fpkt"];
4214--13151[label="0.0150376;2pkt 2fpkt"];
4214--13448[label="0.0150376;2pkt 2fpkt"];
4214--13722[label="0.962617;103pkt 103fpkt"];
4404--6838[label="0.857143;24pkt 24fpkt"];
4404--9480[label="1;28pkt 28fpkt"];
4865--6838[label="0.105263;2pkt 2fpkt"];
4865--8272[label="0.0526316;1pkt 1fpkt"];
4865--8275[label="0.263158;5pkt 5fpkt"];
4865--8290[label="0.0526316;1pkt 1fpkt"];
4865--8293[label="0.263158;5pkt 5fpkt"];
5860--6838[label="1;3pkt 3fpkt"];
6838--6959[label="0.00719424;1pkt 1fpkt"];
6838--6960[label="0.00531915;1pkt 1fpkt"];
6838--7738[label="0.0185185;1pkt 1fpkt"];
6838--7939[label="0.125;1pkt 1fpkt"];
6838--8268[label="0.0311174;22pkt 22fpkt"];
6838--8272[label="0.00848656;6pkt 6fpkt"];
6838--8286[label="0.0311174;22pkt 22fpkt"];
6838--8290[label="0.00848656;6pkt 6fpkt"];
6838--8319[label="1;3pkt 3fpkt"];
6838--8420[label="0.5;1pkt 1fpkt"];
6838--9092[label="0.125;2pkt 2fpkt"];
6838--9480[label="0.857143;24pkt 24fpkt"];
6838--9525[label="0.692308;9pkt 9fpkt"];
6838--9789[label="0.08;2pkt 2fpkt"];
6838--10335[label="0.00990099;7pkt 7fpkt"];
6838--10810[label="0.0280374;3pkt 3fpkt"];
6838--10940[label="1;1pkt 1fpkt"];
6838--11157[label="0.00371747;1pkt 1fpkt"];
6838--11287[label="0.0147059;1pkt 1fpkt"];
6838--11305[label="0.6;6pkt 6fpkt"];
6838--11397[label="1;2pkt 2fpkt"];
6838--11573[label="1;3pkt 3fpkt"];
6838--11961[label="0.125;2pkt 2fpkt"];
6838--12812[label="0.0280374;3pkt 3fpkt"];
6838--13064[label="0.6;6pkt 6fpkt"];
6838--13193[label="1;2pkt 2fpkt"];
6838--13722[label="0.0280374;3pkt 3fpkt"];
8319--11573[label="1;3pkt 3fpkt"];
8319--13193[label="1;2pkt 2fpkt"];
10810--12812[label="1;107pkt 107fpkt"];
10810--13722[label="1;107pkt 107fpkt"];
11305--13064[label="1;10pkt 10fpkt"];
11471--13144[label="1;3pkt 3fpkt"];
11573--13193[label="1;2pkt 2fpkt"];
12812--13722[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.74.217" src_port="80"/>
      <filter dst_ip="145.229.74.217" dst_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.206.33.1"/>
    </slice>
    <from sec="1165900367" usec="0"/>
    <to sec="1165900392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
2190[label="195.222.135.66;d;18pkt 18fpkt", shape=diamond, color=yellow];
3693[label="214.29.254.140;d;21pkt 21fpkt", shape=diamond, color=yellow];
4180[label="172.239.69.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
4652[label="172.239.25.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
5097[label="172.239.112.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
6315[label="195.222.135.66;d;18pkt 18fpkt", shape=hexagon, color=black];
6924[label="214.29.254.140;d;21pkt 21fpkt", shape=hexagon, color=black];
8332[label="172.239.76.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9754[label="172.239.24.102;39pkt 39fpkt", shape=pentagon, color=darkviolet];
11579[label="172.239.76.1;2pkt 2fpkt", shape=invtriangle, color=brown];
12302[label="172.239.24.102;39pkt 39fpkt", shape=invtriangle, color=brown];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.29.254.140:5050}[28.5714%]&lt;BR/&gt;{172.239.24.102:*, 216.217.73.135:6667}[26.9841%]&lt;BR/&gt;{172.239.24.102:*, 195.222.135.66:6667}[26.9841%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (30.6748%)&lt;BR/&gt; 5050: (12.2699%)&lt;BR/&gt; 2677: (1.22699%)&lt;BR/&gt; 2650: (1.22699%)&lt;BR/&gt; 2640: (1.22699%)&gt;];
}
2190--4180[label="1;1pkt 1fpkt"];
2190--4652[label="1;1pkt 1fpkt"];
2190--5097[label="1;1pkt 1fpkt"];
2190--6315[label="1;18pkt 18fpkt"];
2190--9754[label="0.833333;15pkt 15fpkt"];
2190--12302[label="0.833333;15pkt 15fpkt"];
3693--6047[label="0.047619;1pkt 1fpkt"];
3693--6924[label="1;21pkt 21fpkt"];
3693--8332[label="0.5;1pkt 1fpkt"];
3693--9754[label="0.047619;1pkt 1fpkt"];
3693--11579[label="0.5;1pkt 1fpkt"];
3693--12302[label="0.047619;1pkt 1fpkt"];
4180--6315[label="1;1pkt 1fpkt"];
4652--6315[label="1;1pkt 1fpkt"];
5097--6315[label="1;1pkt 1fpkt"];
6315--9754[label="0.833333;15pkt 15fpkt"];
6315--12302[label="0.833333;15pkt 15fpkt"];
6924--8332[label="0.5;1pkt 1fpkt"];
6924--9754[label="0.047619;1pkt 1fpkt"];
6924--11579[label="0.5;1pkt 1fpkt"];
6924--12302[label="0.047619;1pkt 1fpkt"];
8332--11579[label="1;2pkt 2fpkt"];
9754--12302[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="214.29.254.140" dst_port="5050"/>
      <filter dst_ip="195.222.135.66" dst_port="6667" src_ip="172.239.24.102"/>
      <filter dst_ip="216.217.73.135" dst_port="6667" src_ip="172.239.24.102"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
8343[label="145.229.174.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11581[label="145.229.174.1;2pkt 2fpkt", shape=invtriangle, color=brown];
13196[label="145.229.174.1;2pkt 2fpkt", shape=invhouse, color=bisque];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.174.1:4384, 216.239.110.89:80}[50%]&lt;BR/&gt;{145.229.174.1:4385, 216.239.110.209:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4385: (25%)&lt;BR/&gt; 4384: (25%)&gt;];
}
8343--11581[label="1;2pkt 2fpkt"];
8343--13196[label="1;2pkt 2fpkt"];
11581--13196[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.239.110.209" dst_port="80" src_ip="145.229.174.1" src_port="4385"/>
      <filter dst_ip="216.239.110.89" dst_port="80" src_ip="145.229.174.1" src_port="4384"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
8344[label="41.132.226.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11582[label="41.132.226.1;1pkt 1fpkt", shape=invtriangle, color=brown];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.132.226.1:48155, 204.6.224.72:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48155: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8344--11582[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.224.72" dst_port="80" src_ip="41.132.226.1" src_port="48155"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
8352[label="151.227.86.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11588[label="151.227.86.2;1pkt 1fpkt", shape=invtriangle, color=brown];
13200[label="151.227.86.2;1pkt 1fpkt", shape=invhouse, color=bisque];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.86.2:80, 215.208.139.239:49987}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49987: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8352--11588[label="1;1pkt 1fpkt"];
8352--13200[label="1;1pkt 1fpkt"];
11588--13200[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.208.139.239" dst_port="49987" src_ip="151.227.86.2" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
8359[label="215.95.148.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11593[label="215.95.148.2;1pkt 1fpkt", shape=invtriangle, color=brown];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.2:22, 145.229.241.90:33562}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33562: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
8359--11593[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="33562" src_ip="215.95.148.2" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.142.239.2"/>
    </slice>
    <from sec="1165899884" usec="0"/>
    <to sec="1165899923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
8373[label="215.95.149.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11600[label="215.95.149.3;1pkt 1fpkt", shape=invtriangle, color=brown];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.3:22, 145.229.241.90:43801}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43801: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
8373--11600[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="43801" src_ip="215.95.149.3" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
8380[label="32.4.42.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11603[label="32.4.42.4;1pkt 1fpkt", shape=invtriangle, color=brown];
13209[label="32.4.42.4;1pkt 1fpkt", shape=invhouse, color=bisque];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.4.42.4:48139, 204.6.224.44:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48139: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8380--11603[label="1;1pkt 1fpkt"];
8380--13209[label="1;1pkt 1fpkt"];
11603--13209[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.224.44" dst_port="80" src_ip="32.4.42.4" src_port="48139"/>
    </slice>
    <from sec="1165899768" usec="0"/>
    <to sec="1165899771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
8402[label="44.117.242.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11613[label="44.117.242.5;1pkt 1fpkt", shape=invtriangle, color=brown];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.117.242.5:54210, 204.6.252.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54210: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8402--11613[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.252.106" dst_port="80" src_ip="44.117.242.5" src_port="54210"/>
    </slice>
    <from sec="1165900365" usec="0"/>
    <to sec="1165900403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
8410[label="69.32.170.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11617[label="69.32.170.6;1pkt 1fpkt", shape=invtriangle, color=brown];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.32.170.6:1027, 169.230.158.80:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
8410--11617[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.158.80" dst_port="3127" src_ip="69.32.170.6" src_port="1027"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.239.46.7"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.25.116.7"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.229.181.7"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
8432[label="145.248.228.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11627[label="145.248.228.7;2pkt 2fpkt", shape=invtriangle, color=brown];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.228.7:2092, 204.28.194.38:80}[50%]&lt;BR/&gt;{145.248.228.7:2095, 204.28.194.38:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2095: (25%)&lt;BR/&gt; 2092: (25%)&gt;];
}
8432--11627[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.28.194.38" dst_port="80" src_ip="145.248.228.7" src_port="2095"/>
      <filter dst_ip="204.28.194.38" dst_port="80" src_ip="145.248.228.7" src_port="2092"/>
    </slice>
    <from sec="1165900379" usec="0"/>
    <to sec="1165900454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
8433[label="120.27.245.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11628[label="120.27.245.7;1pkt 1fpkt", shape=invtriangle, color=brown];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{120.27.245.7:80, 151.227.120.87:47484}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47484: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8433--11628[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.120.87" dst_port="47484" src_ip="120.27.245.7" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.178.219.9"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.220.96.10"/>
    </slice>
    <from sec="1165899612" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
8485[label="128.20.209.10;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11651[label="128.20.209.10;2pkt 2fpkt", shape=invtriangle, color=brown];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.20.209.10:8854, 205.55.222.67:53}[50%]&lt;BR/&gt;{128.20.209.10:2710, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 8854: (25%)&lt;BR/&gt; 2710: (25%)&gt;];
}
8485--11651[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="128.20.209.10" src_port="2710"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="128.20.209.10" src_port="8854"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
8531[label="41.132.226.13;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11670[label="41.132.226.13;15pkt 15fpkt", shape=invtriangle, color=brown];
13232[label="41.132.226.13;15pkt 15fpkt", shape=invhouse, color=bisque];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.132.226.13:*, 145.229.202.91:80}[60%]&lt;BR/&gt;{41.132.226.13:*, 151.227.86.17:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64795: (3.33333%)&lt;BR/&gt; 64444: (3.33333%)&lt;BR/&gt; 60953: (3.33333%)&lt;BR/&gt; 57642: (3.33333%)&gt;];
}
8531--11670[label="1;15pkt 15fpkt"];
8531--13232[label="1;15pkt 15fpkt"];
11670--13232[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.202.91" dst_port="80" src_ip="41.132.226.13"/>
      <filter dst_ip="151.227.86.17" dst_port="80" src_ip="41.132.226.13"/>
    </slice>
    <from sec="1165899631" usec="0"/>
    <to sec="1165900407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
8544[label="215.95.148.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11676[label="215.95.148.14;1pkt 1fpkt", shape=invtriangle, color=brown];
13233[label="215.95.148.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.14:22, 145.229.241.90:50350}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50350: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
8544--11676[label="1;1pkt 1fpkt"];
8544--13233[label="1;1pkt 1fpkt"];
11676--13233[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="50350" src_ip="215.95.148.14" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
8546[label="150.12.213.14;39pkt 39fpkt", shape=pentagon, color=darkviolet];
11678[label="150.12.213.14;39pkt 39fpkt", shape=invtriangle, color=brown];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.12.213.14:*, 219.1.238.22:80}[56.4103%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5897%)&lt;BR/&gt; 443: (6.41026%)&lt;BR/&gt; 35058: (1.28205%)&lt;BR/&gt; 35049: (1.28205%)&lt;BR/&gt; 35045: (1.28205%)&gt;];
}
8546--11678[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="219.1.238.22" dst_port="80" src_ip="150.12.213.14"/>
    </slice>
    <from sec="1165899618" usec="0"/>
    <to sec="1165900417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="10.105.0.17"/>
    </slice>
    <from sec="1165899730" usec="0"/>
    <to sec="1165899849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
8576[label="200.88.101.17;26pkt 26fpkt", shape=pentagon, color=darkviolet];
11689[label="200.88.101.17;26pkt 26fpkt", shape=invtriangle, color=brown];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.88.101.17:80, 205.246.71.157:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4553: (1.92308%)&lt;BR/&gt; 4518: (1.92308%)&lt;BR/&gt; 4451: (1.92308%)&lt;BR/&gt; 4448: (1.92308%)&gt;];
}
8576--11689[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.157" src_ip="200.88.101.17" src_port="80"/>
    </slice>
    <from sec="1165900413" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
8578[label="215.95.148.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11690[label="215.95.148.17;1pkt 1fpkt", shape=invtriangle, color=brown];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.17:22, 145.229.241.90:58616}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58616: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
8578--11690[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="58616" src_ip="215.95.148.17" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.96.13.18"/>
    </slice>
    <from sec="1165899639" usec="0"/>
    <to sec="1165900480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.95815,2.16668,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
4850[label="120.27.245.40;d;183pkt 183fpkt", shape=diamond, color=yellow];
5256[label="169.230.16.138;s;300pkt 300fpkt", shape=diamond, color=yellow];
8023[label="169.230.16.138;s;300pkt 300fpkt", shape=hexagon, color=black];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.16.138:*, 120.27.245.40:443}[92%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.8723%)&lt;BR/&gt; 123: (0.255428%)&lt;BR/&gt; 49336: (0.191571%)&lt;BR/&gt; 49335: (0.191571%)&lt;BR/&gt; 49334: (0.191571%)&gt;];
}
4850--5256[label="0.863388;158pkt 158fpkt"];
4850--6822[label="0.131148;24pkt 24fpkt"];
4850--8023[label="0.863388;158pkt 158fpkt"];
4850--8599[label="0.0277778;1pkt 1fpkt"];
4850--11701[label="0.0277778;1pkt 1fpkt"];
5256--8023[label="1;300pkt 300fpkt"];
</description>
    <slice>
      <filter dst_ip="120.27.245.40" dst_port="443" src_ip="169.230.16.138"/>
    </slice>
    <from sec="1165900001" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
8613[label="58.104.117.19;255pkt 255fpkt", shape=pentagon, color=darkviolet];
11707[label="58.104.117.19;255pkt 255fpkt", shape=invtriangle, color=brown];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.104.117.19:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
8613--11707[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="58.104.117.19" src_port="1027"/>
    </slice>
    <from sec="1165900426" usec="0"/>
    <to sec="1165900440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
8617[label="150.151.214.19;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11710[label="150.151.214.19;14pkt 14fpkt", shape=invtriangle, color=brown];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.151.214.19:110, 151.227.8.212:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 1973: (3.57143%)&lt;BR/&gt; 1972: (3.57143%)&lt;BR/&gt; 1971: (3.57143%)&lt;BR/&gt; 1970: (3.57143%)&gt;];
}
8617--11710[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.8.212" src_ip="150.151.214.19" src_port="110"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
8620[label="41.77.63.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11713[label="41.77.63.20;5pkt 5fpkt", shape=invtriangle, color=brown];
13246[label="41.77.63.20;4pkt 4fpkt", shape=invhouse, color=bisque];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.77.63.20:42850, 204.6.226.116:53}[20%]&lt;BR/&gt;{41.77.63.20:8702, 205.55.222.67:53}[20%]&lt;BR/&gt;{41.77.63.20:58762, 205.55.222.67:53}[20%]&lt;BR/&gt;{41.77.63.20:13883, 205.55.222.77:53}[20%]&lt;BR/&gt;{41.77.63.20:26622, 205.55.222.77:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 58762: (11.5385%)&lt;BR/&gt; 26622: (11.5385%)&lt;BR/&gt; 13883: (11.5385%)&lt;BR/&gt; 8702: (11.5385%)&gt;];
}
8620--11713[label="1;4pkt 4fpkt"];
8620--13246[label="1;4pkt 4fpkt"];
11713--13246[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="41.77.63.20" src_port="26622"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="41.77.63.20" src_port="13883"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="41.77.63.20" src_port="58762"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="41.77.63.20" src_port="8702"/>
      <filter dst_ip="204.6.226.116" dst_port="53" src_ip="41.77.63.20" src_port="42850"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
8629[label="145.20.216.20;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11718[label="145.20.216.20;5pkt 5fpkt", shape=invtriangle, color=brown];
13248[label="145.20.216.20;5pkt 5fpkt", shape=invhouse, color=bisque];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.20.216.20:1455, 42.10.140.19:12041}[20%]&lt;BR/&gt;{145.20.216.20:1607, 47.48.76.22:10354}[20%]&lt;BR/&gt;{145.20.216.20:1031, 88.86.52.82:161}[20%]&lt;BR/&gt;{145.20.216.20:1031, 88.86.52.94:161}[20%]&lt;BR/&gt;{145.20.216.20:1607, 214.244.204.206:53225}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1607: (20%)&lt;BR/&gt; 1031: (20%)&lt;BR/&gt; 161: (20%)&lt;BR/&gt; 53225: (10%)&lt;BR/&gt; 12041: (10%)&gt;];
}
8629--11718[label="1;5pkt 5fpkt"];
8629--13248[label="1;5pkt 5fpkt"];
11718--13248[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="214.244.204.206" dst_port="53225" src_ip="145.20.216.20" src_port="1607"/>
      <filter dst_ip="88.86.52.94" dst_port="161" src_ip="145.20.216.20" src_port="1031"/>
      <filter dst_ip="88.86.52.82" dst_port="161" src_ip="145.20.216.20" src_port="1031"/>
      <filter dst_ip="47.48.76.22" dst_port="10354" src_ip="145.20.216.20" src_port="1607"/>
      <filter dst_ip="42.10.140.19" dst_port="12041" src_ip="145.20.216.20" src_port="1455"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
8631[label="47.136.227.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11720[label="47.136.227.20;4pkt 4fpkt", shape=invtriangle, color=brown];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.136.227.20:43276, 169.230.158.2:80}[25%]&lt;BR/&gt;{47.136.227.20:43278, 169.230.158.2:80}[25%]&lt;BR/&gt;{47.136.227.20:43280, 169.230.158.2:80}[25%]&lt;BR/&gt;{47.136.227.20:43282, 169.230.158.2:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43282: (12.5%)&lt;BR/&gt; 43280: (12.5%)&lt;BR/&gt; 43278: (12.5%)&lt;BR/&gt; 43276: (12.5%)&gt;];
}
8631--11720[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="47.136.227.20" src_port="43282"/>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="47.136.227.20" src_port="43280"/>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="47.136.227.20" src_port="43278"/>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="47.136.227.20" src_port="43276"/>
    </slice>
    <from sec="1165900241" usec="0"/>
    <to sec="1165900494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
8636[label="151.227.86.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11722[label="151.227.86.21;2pkt 2fpkt", shape=invtriangle, color=brown];
13249[label="151.227.86.21;2pkt 2fpkt", shape=invhouse, color=bisque];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.86.21:25, 49.220.102.97:59378}[50%]&lt;BR/&gt;{151.227.86.21:25, 54.85.102.168:63171}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63171: (25%)&lt;BR/&gt; 59378: (25%)&gt;];
}
8636--11722[label="1;2pkt 2fpkt"];
8636--13249[label="1;2pkt 2fpkt"];
11722--13249[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="54.85.102.168" dst_port="63171" src_ip="151.227.86.21" src_port="25"/>
      <filter dst_ip="49.220.102.97" dst_port="59378" src_ip="151.227.86.21" src_port="25"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.115.6.22"/>
    </slice>
    <from sec="1165900405" usec="0"/>
    <to sec="1165900410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
8645[label="41.77.63.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11727[label="41.77.63.22;2pkt 2fpkt", shape=invtriangle, color=brown];
13254[label="41.77.63.22;2pkt 2fpkt", shape=invhouse, color=bisque];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.77.63.22:39737, 205.55.222.67:53}[50%]&lt;BR/&gt;{41.77.63.22:28194, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 39737: (25%)&lt;BR/&gt; 28194: (25%)&gt;];
}
8645--11727[label="1;2pkt 2fpkt"];
8645--13254[label="1;2pkt 2fpkt"];
11727--13254[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="41.77.63.22" src_port="28194"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="41.77.63.22" src_port="39737"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.239.110.22"/>
    </slice>
    <from sec="1165900109" usec="0"/>
    <to sec="1165900307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
8661[label="151.227.246.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11735[label="151.227.246.23;1pkt 1fpkt", shape=invtriangle, color=brown];
13257[label="151.227.246.23;1pkt 1fpkt", shape=invhouse, color=bisque];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.246.23:3376, 205.198.34.180:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3376: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8661--11735[label="1;1pkt 1fpkt"];
8661--13257[label="1;1pkt 1fpkt"];
11735--13257[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.198.34.180" dst_port="80" src_ip="151.227.246.23" src_port="3376"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
8664[label="220.146.3.24;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11738[label="220.146.3.24;6pkt 6fpkt", shape=invtriangle, color=brown];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.146.3.24:80, 151.227.238.242:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2043: (8.33333%)&lt;BR/&gt; 2041: (8.33333%)&lt;BR/&gt; 2037: (8.33333%)&lt;BR/&gt; 2035: (8.33333%)&gt;];
}
8664--11738[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.238.242" src_ip="220.146.3.24" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.141.18.24"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.99.211.24"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165899777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
8705[label="218.106.103.26;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11756[label="218.106.103.26;7pkt 7fpkt", shape=invtriangle, color=brown];
13261[label="218.106.103.26;8pkt 8fpkt", shape=invhouse, color=bisque];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.106.103.26:51767, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51767: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
8705--11756[label="1;7pkt 7fpkt"];
8705--13261[label="1;8pkt 8fpkt"];
11756--13261[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="218.106.103.26" src_port="51767"/>
    </slice>
    <from sec="1165899611" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.216.152.26"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
8716[label="212.172.213.26;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11764[label="212.172.213.26;21pkt 21fpkt", shape=invtriangle, color=brown];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.172.213.26:80, 151.227.26.109:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4414: (2.38095%)&lt;BR/&gt; 4411: (2.38095%)&lt;BR/&gt; 4408: (2.38095%)&lt;BR/&gt; 4403: (2.38095%)&gt;];
}
8716--11764[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.26.109" src_ip="212.172.213.26" src_port="80"/>
    </slice>
    <from sec="1165900456" usec="0"/>
    <to sec="1165900476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.29.114.30"/>
    </slice>
    <from sec="1165899641" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701777,2.1243,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
2301[label="204.6.226.97;d;117pkt 117fpkt", shape=diamond, color=yellow];
8754[label="109.61.167.30;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11781[label="109.61.167.30;5pkt 5fpkt", shape=invtriangle, color=brown];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 204.6.226.97:25}[65.5462%]&lt;BR/&gt;{*:113, 204.6.226.97:*}[31.9328%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.6457%)&lt;BR/&gt; 113: (14.9606%)&lt;BR/&gt; 45899: (1.1811%)&lt;BR/&gt; 45856: (1.1811%)&lt;BR/&gt; 45855: (1.1811%)&gt;];
}
2301--6207[label="0.00854701;1pkt 1fpkt"];
2301--8754[label="0.6;3pkt 3fpkt"];
2301--9508[label="0.00854701;1pkt 1fpkt"];
2301--11781[label="0.6;3pkt 3fpkt"];
8754--11781[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.226.97" src_port="113"/>
      <filter dst_ip="204.6.226.97" dst_port="25"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
8755[label="204.6.225.30;23pkt 23fpkt", shape=pentagon, color=darkviolet];
11782[label="204.6.225.30;23pkt 23fpkt", shape=invtriangle, color=brown];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.225.30:*, *:80}[39.1304%]&lt;BR/&gt;{204.6.225.30:*, 149.218.36.140:443}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.5652%)&lt;BR/&gt; 443: (17.3913%)&lt;BR/&gt; 1863: (8.69565%)&lt;BR/&gt; 1025: (4.34783%)&lt;BR/&gt; 161: (4.34783%)&gt;];
}
8755--11782[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="204.6.225.30"/>
      <filter dst_ip="149.218.36.140" dst_port="443" src_ip="204.6.225.30"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
1439[label="145.229.169.31;s;601pkt 601fpkt", shape=diamond, color=yellow];
5737[label="145.229.169.31;s;426pkt 426fpkt", shape=hexagon, color=black];
8763[label="145.229.169.31;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11787[label="145.229.169.31;3pkt 3fpkt", shape=invtriangle, color=brown];
13277[label="145.229.169.31;4pkt 4fpkt", shape=invhouse, color=bisque];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.169.31:*, *:6881}[47.6821%]&lt;BR/&gt;{145.229.169.31:6881, *:*}[27.649%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (38.5728%)&lt;BR/&gt; 0: (13.1148%)&lt;BR/&gt; 6882: (0.337512%)&lt;BR/&gt; 62227: (0.192864%)&lt;BR/&gt; 4608: (0.192864%)&gt;];
}
1439--5737[label="1;426pkt 426fpkt"];
1439--13277[label="0.25;1pkt 1fpkt"];
8763--11787[label="1;3pkt 3fpkt"];
8763--13277[label="1;3pkt 3fpkt"];
11787--13277[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="145.229.169.31" src_port="6881"/>
      <filter dst_port="6881" src_ip="145.229.169.31"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
8792[label="145.248.11.33;26pkt 26fpkt", shape=pentagon, color=darkviolet];
11808[label="145.248.11.33;26pkt 26fpkt", shape=invtriangle, color=brown];
13285[label="145.248.11.33;25pkt 25fpkt", shape=invhouse, color=bisque];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.11.33:*, 219.242.113.13:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2059: (1.94805%)&lt;BR/&gt; 2058: (1.94805%)&lt;BR/&gt; 2057: (1.94805%)&lt;BR/&gt; 2056: (1.94805%)&gt;];
}
8792--11808[label="1;26pkt 26fpkt"];
8792--13285[label="1;25pkt 25fpkt"];
11808--13285[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="219.242.113.13" dst_port="80" src_ip="145.248.11.33"/>
    </slice>
    <from sec="1165899687" usec="0"/>
    <to sec="1165899702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.171.161.33"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
8811[label="151.227.120.34;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11820[label="151.227.120.34;2pkt 2fpkt", shape=invtriangle, color=brown];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.120.34:25, 71.173.156.63:2193}[50%]&lt;BR/&gt;{151.227.120.34:25, 46.170.82.235:2597}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2597: (25%)&lt;BR/&gt; 2193: (25%)&gt;];
}
8811--11820[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="46.170.82.235" dst_port="2597" src_ip="151.227.120.34" src_port="25"/>
      <filter dst_ip="71.173.156.63" dst_port="2193" src_ip="151.227.120.34" src_port="25"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
8815[label="205.111.162.34;127pkt 127fpkt", shape=pentagon, color=darkviolet];
11821[label="205.111.162.34;127pkt 127fpkt", shape=invtriangle, color=brown];
13289[label="205.111.162.34;126pkt 126fpkt", shape=invhouse, color=bisque];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.111.162.34:39111, *:1026}[68.5039%]&lt;BR/&gt;{205.111.162.34:39111, *:1027}[31.4961%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39111: (50%)&lt;BR/&gt; 1026: (34.2105%)&lt;BR/&gt; 1027: (15.7895%)&gt;];
}
8815--11821[label="1;127pkt 127fpkt"];
8815--13289[label="1;126pkt 126fpkt"];
11821--13289[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="205.111.162.34" src_port="39111"/>
      <filter dst_port="1027" src_ip="205.111.162.34" src_port="39111"/>
    </slice>
    <from sec="1165899765" usec="0"/>
    <to sec="1165899766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
8851[label="215.95.148.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11839[label="215.95.148.36;1pkt 1fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.36:22, 145.229.241.90:36588}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36588: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
8851--11839[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="36588" src_ip="215.95.148.36" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
8873[label="219.206.9.38;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11852[label="219.206.9.38;6pkt 6fpkt", shape=invtriangle, color=brown];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.206.9.38:80, 151.227.17.192:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38378: (8.33333%)&lt;BR/&gt; 38373: (8.33333%)&lt;BR/&gt; 38372: (8.33333%)&lt;BR/&gt; 38371: (8.33333%)&gt;];
}
8873--11852[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.17.192" src_ip="219.206.9.38" src_port="80"/>
    </slice>
    <from sec="1165899909" usec="0"/>
    <to sec="1165899914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.115.41.38"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
8882[label="215.95.148.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11860[label="215.95.148.38;1pkt 1fpkt", shape=invtriangle, color=brown];
13303[label="215.95.148.38;1pkt 1fpkt", shape=invhouse, color=bisque];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.38:22, 145.229.241.90:40509}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40509: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
8882--11860[label="1;1pkt 1fpkt"];
8882--13303[label="1;1pkt 1fpkt"];
11860--13303[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="40509" src_ip="215.95.148.38" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
8893[label="217.199.106.39;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11864[label="217.199.106.39;3pkt 3fpkt", shape=invtriangle, color=brown];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.199.106.39:80, 205.246.71.154:54615}[33.3333%]&lt;BR/&gt;{217.199.106.39:80, 205.246.71.154:54836}[33.3333%]&lt;BR/&gt;{217.199.106.39:80, 205.246.71.154:54879}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54879: (16.6667%)&lt;BR/&gt; 54836: (16.6667%)&lt;BR/&gt; 54615: (16.6667%)&gt;];
}
8893--11864[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.154" dst_port="54879" src_ip="217.199.106.39" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54836" src_ip="217.199.106.39" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54615" src_ip="217.199.106.39" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_672{
style=filled;
color=gray75;
8897[label="205.249.136.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11866[label="205.249.136.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat672[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.249.136.39:25, 212.99.104.229:3765}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3765: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
8897--11866[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.99.104.229" dst_port="3765" src_ip="205.249.136.39" src_port="25"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.247.185.39"/>
    </slice>
    <from sec="1165899762" usec="0"/>
    <to sec="1165899766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
8929[label="172.239.121.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11880[label="172.239.121.41;2pkt 2fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.239.121.41:80, 41.132.233.112:62766}[50%]&lt;BR/&gt;{172.239.121.41:25, 217.119.88.243:30727}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62766: (25%)&lt;BR/&gt; 30727: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
8929--11880[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.119.88.243" dst_port="30727" src_ip="172.239.121.41" src_port="25"/>
      <filter dst_ip="41.132.233.112" dst_port="62766" src_ip="172.239.121.41" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30193,2.04636,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
229[label="151.227.155.72s;16pkt 16fpkt", shape=rectangle, color=red];
923[label="145.229.172.164;s;141pkt 141fpkt", shape=diamond, color=yellow];
1114[label="213.17.43.180;d;326pkt 326fpkt", shape=diamond, color=yellow];
1208[label="151.227.81.209;s;225pkt 225fpkt", shape=diamond, color=yellow];
1828[label="68.119.208.19;d;84pkt 84fpkt", shape=diamond, color=yellow];
5247[label="151.227.155.72;s;99pkt 99fpkt", shape=diamond, color=yellow];
5638[label="213.17.43.180;d;261pkt 261fpkt", shape=hexagon, color=black];
5659[label="151.227.81.209;s;225pkt 225fpkt", shape=hexagon, color=black];
6317[label="145.229.172.164;s;141pkt 141fpkt", shape=hexagon, color=black];
8017[label="151.227.155.72;s;99pkt 99fpkt", shape=hexagon, color=black];
10555[label="145.229.172.164;146pkt 146fpkt", shape=pentagon, color=darkviolet];
12687[label="145.229.172.164;146pkt 146fpkt", shape=invtriangle, color=brown];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.81.209:*, 68.119.208.19:80}[30.1852%]&lt;BR/&gt;{145.229.172.164:*, 213.17.43.180:80}[25.5556%]&lt;BR/&gt;{151.227.155.72:*, 213.17.43.180:80}[24.8148%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7381%)&lt;BR/&gt; 3697: (0.209534%)&lt;BR/&gt; 3696: (0.209534%)&lt;BR/&gt; 3695: (0.209534%)&lt;BR/&gt; 3694: (0.209534%)&gt;];
}
229--1114[label="1;16pkt 16fpkt"];
229--5247[label="1;16pkt 16fpkt"];
229--8017[label="1;16pkt 16fpkt"];
923--1114[label="0.978723;138pkt 138fpkt"];
923--5638[label="0.978723;138pkt 138fpkt"];
923--6317[label="1;141pkt 141fpkt"];
923--7197[label="0.0070922;1pkt 1fpkt"];
923--10555[label="0.992908;140pkt 140fpkt"];
923--12687[label="0.992908;140pkt 140fpkt"];
1114--1208[label="0.24;54pkt 54fpkt"];
1114--5247[label="0.656566;65pkt 65fpkt"];
1114--5638[label="1;261pkt 261fpkt"];
1114--5659[label="0.24;54pkt 54fpkt"];
1114--6317[label="0.978723;138pkt 138fpkt"];
1114--8017[label="0.656566;65pkt 65fpkt"];
1114--10555[label="0.945205;138pkt 138fpkt"];
1114--12687[label="0.945205;138pkt 138fpkt"];
1208--1828[label="1;84pkt 84fpkt"];
1208--2108[label="0.0107527;2pkt 2fpkt"];
1208--5638[label="0.24;54pkt 54fpkt"];
1208--5659[label="1;225pkt 225fpkt"];
1828--5659[label="1;84pkt 84fpkt"];
5247--8017[label="1;99pkt 99fpkt"];
5638--5659[label="0.24;54pkt 54fpkt"];
5638--6317[label="0.978723;138pkt 138fpkt"];
5638--10555[label="0.945205;138pkt 138fpkt"];
5638--12687[label="0.945205;138pkt 138fpkt"];
6317--7197[label="0.0070922;1pkt 1fpkt"];
6317--10555[label="0.992908;140pkt 140fpkt"];
6317--12687[label="0.992908;140pkt 140fpkt"];
10555--12687[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_ip="68.119.208.19" dst_port="80" src_ip="151.227.81.209"/>
      <filter dst_ip="213.17.43.180" dst_port="80" src_ip="151.227.155.72"/>
      <filter dst_ip="213.17.43.180" dst_port="80" src_ip="145.229.172.164"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
8942[label="50.60.84.42;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11887[label="50.60.84.42;15pkt 15fpkt", shape=invtriangle, color=brown];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.60.84.42:80, 205.246.71.240:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63745: (3.33333%)&lt;BR/&gt; 63744: (3.33333%)&lt;BR/&gt; 63739: (3.33333%)&lt;BR/&gt; 63733: (3.33333%)&gt;];
}
8942--11887[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.240" src_ip="50.60.84.42" src_port="80"/>
    </slice>
    <from sec="1165900468" usec="0"/>
    <to sec="1165900480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
8946[label="109.41.107.42;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11888[label="109.41.107.42;2pkt 2fpkt", shape=invtriangle, color=brown];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.41.107.42:80, 205.246.71.154:54769}[50%]&lt;BR/&gt;{109.41.107.42:80, 205.246.71.154:54804}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54804: (25%)&lt;BR/&gt; 54769: (25%)&gt;];
}
8946--11888[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.154" dst_port="54804" src_ip="109.41.107.42" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54769" src_ip="109.41.107.42" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
8960[label="48.49.28.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11892[label="48.49.28.43;1pkt 1fpkt", shape=invtriangle, color=brown];
13316[label="48.49.28.43;1pkt 1fpkt", shape=invhouse, color=bisque];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.49.28.43:80, 205.246.71.154:54790}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54790: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8960--11892[label="1;1pkt 1fpkt"];
8960--13316[label="1;1pkt 1fpkt"];
11892--13316[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.154" dst_port="54790" src_ip="48.49.28.43" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.82.24.44"/>
    </slice>
    <from sec="1165900298" usec="0"/>
    <to sec="1165900348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786058,2.18105,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
4186[label="145.229.137.44;s;709pkt 709fpkt", shape=diamond, color=yellow];
11900[label="145.229.137.44;764pkt 764fpkt", shape=invtriangle, color=brown];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.137.44:*, 113.193.128.57:53}[46.6234%]&lt;BR/&gt;{145.229.137.44:*, 113.193.128.63:53}[46.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.5927%)&lt;BR/&gt; 0: (0.610998%)&lt;BR/&gt; 65458: (0.135777%)&lt;BR/&gt; 26686: (0.135777%)&lt;BR/&gt; 30644: (0.101833%)&gt;];
}
4186--6334[label="0.01;1pkt 1fpkt"];
4186--11900[label="0.991537;703pkt 703fpkt"];
</description>
    <slice>
      <filter dst_ip="113.193.128.57" dst_port="53" src_ip="145.229.137.44"/>
      <filter dst_ip="113.193.128.63" dst_port="53" src_ip="145.229.137.44"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.4.33.46"/>
    </slice>
    <from sec="1165900246" usec="0"/>
    <to sec="1165900248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
9014[label="139.152.170.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11923[label="139.152.170.46;1pkt 1fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.170.46:2650, 219.242.104.5:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2650: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9014--11923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.242.104.5" dst_port="80" src_ip="139.152.170.46" src_port="2650"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.208.27.48"/>
    </slice>
    <from sec="1165899697" usec="0"/>
    <to sec="1165899727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
9036[label="32.4.58.48;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11933[label="32.4.58.48;4pkt 4fpkt", shape=invtriangle, color=brown];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.4.58.48:46827, 145.229.228.159:80}[25%]&lt;BR/&gt;{32.4.58.48:43922, 169.230.218.227:80}[25%]&lt;BR/&gt;{32.4.58.48:43334, 204.6.229.19:80}[25%]&lt;BR/&gt;{32.4.58.48:43603, 204.6.229.19:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46827: (12.5%)&lt;BR/&gt; 43922: (12.5%)&lt;BR/&gt; 43603: (12.5%)&lt;BR/&gt; 43334: (12.5%)&gt;];
}
9036--11933[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.229.19" dst_port="80" src_ip="32.4.58.48" src_port="43603"/>
      <filter dst_ip="204.6.229.19" dst_port="80" src_ip="32.4.58.48" src_port="43334"/>
      <filter dst_ip="169.230.218.227" dst_port="80" src_ip="32.4.58.48" src_port="43922"/>
      <filter dst_ip="145.229.228.159" dst_port="80" src_ip="32.4.58.48" src_port="46827"/>
    </slice>
    <from sec="1165900196" usec="0"/>
    <to sec="1165900326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
9083[label="139.152.9.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11956[label="139.152.9.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.9.52:1269, 219.206.36.20:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1269: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9083--11956[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.206.36.20" dst_port="80" src_ip="139.152.9.52" src_port="1269"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
9110[label="41.147.217.53;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11973[label="41.147.217.53;4pkt 4fpkt", shape=invtriangle, color=brown];
13340[label="41.147.217.53;4pkt 4fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.147.217.53:80, 205.249.45.139:57614}[25%]&lt;BR/&gt;{41.147.217.53:80, 205.249.45.139:57622}[25%]&lt;BR/&gt;{41.147.217.53:80, 205.249.45.139:57755}[25%]&lt;BR/&gt;{41.147.217.53:80, 205.249.45.139:61203}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61203: (12.5%)&lt;BR/&gt; 57755: (12.5%)&lt;BR/&gt; 57622: (12.5%)&lt;BR/&gt; 57614: (12.5%)&gt;];
}
9110--11973[label="1;4pkt 4fpkt"];
9110--13340[label="1;4pkt 4fpkt"];
11973--13340[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.45.139" dst_port="61203" src_ip="41.147.217.53" src_port="80"/>
      <filter dst_ip="205.249.45.139" dst_port="57755" src_ip="41.147.217.53" src_port="80"/>
      <filter dst_ip="205.249.45.139" dst_port="57622" src_ip="41.147.217.53" src_port="80"/>
      <filter dst_ip="205.249.45.139" dst_port="57614" src_ip="41.147.217.53" src_port="80"/>
    </slice>
    <from sec="1165900332" usec="0"/>
    <to sec="1165900430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
9115[label="212.116.16.54;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11975[label="212.116.16.54;3pkt 3fpkt", shape=invtriangle, color=brown];
13342[label="212.116.16.54;3pkt 3fpkt", shape=invhouse, color=bisque];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.116.16.54:1235, 145.41.48.11:1434}[33.3333%]&lt;BR/&gt;{212.116.16.54:1235, 145.74.102.25:1434}[33.3333%]&lt;BR/&gt;{212.116.16.54:1235, 145.252.198.72:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1235: (50%)&gt;];
}
9115--11975[label="1;3pkt 3fpkt"];
9115--13342[label="1;3pkt 3fpkt"];
11975--13342[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.252.198.72" dst_port="1434" src_ip="212.116.16.54" src_port="1235"/>
      <filter dst_ip="145.74.102.25" dst_port="1434" src_ip="212.116.16.54" src_port="1235"/>
      <filter dst_ip="145.41.48.11" dst_port="1434" src_ip="212.116.16.54" src_port="1235"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.20.17.54"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.81.53.55"/>
    </slice>
    <from sec="1165900245" usec="0"/>
    <to sec="1165900418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.208.122.56"/>
    </slice>
    <from sec="1165899996" usec="0"/>
    <to sec="1165900005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
9148[label="145.229.173.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11991[label="145.229.173.56;1pkt 1fpkt", shape=invtriangle, color=brown];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.173.56:2998, 214.82.100.200:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2998: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9148--11991[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.82.100.200" dst_port="80" src_ip="145.229.173.56" src_port="2998"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
9156[label="172.239.28.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11996[label="172.239.28.57;1pkt 1fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.239.28.57:80, 34.163.156.11:46756}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46756: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9156--11996[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.163.156.11" dst_port="46756" src_ip="172.239.28.57" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
9158[label="50.109.42.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11998[label="50.109.42.57;1pkt 1fpkt", shape=invtriangle, color=brown];
13351[label="50.109.42.57;1pkt 1fpkt", shape=invhouse, color=bisque];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.109.42.57:24450, 205.55.222.77:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24450: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
9158--11998[label="1;1pkt 1fpkt"];
9158--13351[label="1;1pkt 1fpkt"];
11998--13351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="50.109.42.57" src_port="24450"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
9160[label="219.113.87.57;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12000[label="219.113.87.57;2pkt 2fpkt", shape=invtriangle, color=brown];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.113.87.57:4464, 193.182.230.180:53}[50%]&lt;BR/&gt;{219.113.87.57:14923, 193.182.230.180:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 14923: (25%)&lt;BR/&gt; 4464: (25%)&gt;];
}
9160--12000[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.182.230.180" dst_port="53" src_ip="219.113.87.57" src_port="14923"/>
      <filter dst_ip="193.182.230.180" dst_port="53" src_ip="219.113.87.57" src_port="4464"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
9162[label="32.74.124.57;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12001[label="32.74.124.57;2pkt 2fpkt", shape=invtriangle, color=brown];
13352[label="32.74.124.57;2pkt 2fpkt", shape=invhouse, color=bisque];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.74.124.57:3696, 151.227.73.12:80}[50%]&lt;BR/&gt;{32.74.124.57:3698, 151.227.73.12:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3698: (25%)&lt;BR/&gt; 3696: (25%)&gt;];
}
9162--12001[label="1;2pkt 2fpkt"];
9162--13352[label="1;2pkt 2fpkt"];
12001--13352[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.73.12" dst_port="80" src_ip="32.74.124.57" src_port="3698"/>
      <filter dst_ip="151.227.73.12" dst_port="80" src_ip="32.74.124.57" src_port="3696"/>
    </slice>
    <from sec="1165900431" usec="0"/>
    <to sec="1165900454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
9192[label="215.177.108.60;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12018[label="215.177.108.60;2pkt 2fpkt", shape=invtriangle, color=brown];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.177.108.60:41818, 205.55.222.67:53}[50%]&lt;BR/&gt;{215.177.108.60:38252, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 41818: (25%)&lt;BR/&gt; 38252: (25%)&gt;];
}
9192--12018[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="215.177.108.60" src_port="38252"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="215.177.108.60" src_port="41818"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
9204[label="221.223.144.61;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12024[label="221.223.144.61;8pkt 8fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.223.144.61:*, 205.55.222.77:53}[62.5%]&lt;BR/&gt;{221.223.144.61:*, 205.55.222.67:53}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 60400: (6.25%)&lt;BR/&gt; 53791: (6.25%)&lt;BR/&gt; 50518: (6.25%)&lt;BR/&gt; 49749: (6.25%)&gt;];
}
9204--12024[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="221.223.144.61"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="221.223.144.61"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.249.152.62"/>
    </slice>
    <from sec="1165900464" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
9212[label="169.230.179.62;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12030[label="169.230.179.62;20pkt 20fpkt", shape=invtriangle, color=brown];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.179.62:58489, *:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58489: (45%)&lt;BR/&gt; 61240: (2.5%)&lt;BR/&gt; 59453: (2.5%)&lt;BR/&gt; 56718: (2.5%)&lt;BR/&gt; 50579: (2.5%)&gt;];
}
9212--12030[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="169.230.179.62" src_port="58489"/>
    </slice>
    <from sec="1165899614" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
9263[label="218.209.53.66;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12053[label="218.209.53.66;20pkt 20fpkt", shape=invtriangle, color=brown];
13369[label="218.209.53.66;20pkt 20fpkt", shape=invhouse, color=bisque];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.209.53.66:80, 145.229.151.104:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41320: (2.5%)&lt;BR/&gt; 41317: (2.5%)&lt;BR/&gt; 41316: (2.5%)&lt;BR/&gt; 41315: (2.5%)&gt;];
}
9263--12053[label="1;20pkt 20fpkt"];
9263--13369[label="1;20pkt 20fpkt"];
12053--13369[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.151.104" src_ip="218.209.53.66" src_port="80"/>
    </slice>
    <from sec="1165899638" usec="0"/>
    <to sec="1165900409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
9265[label="151.227.105.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12055[label="151.227.105.66;1pkt 1fpkt", shape=invtriangle, color=brown];
13370[label="151.227.105.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.105.66:2359, 43.55.179.217:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2359: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9265--12055[label="1;1pkt 1fpkt"];
9265--13370[label="1;1pkt 1fpkt"];
12055--13370[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="43.55.179.217" dst_port="80" src_ip="151.227.105.66" src_port="2359"/>
    </slice>
    <from sec="1165900449" usec="0"/>
    <to sec="1165900452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.99.239.66"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
9288[label="169.230.134.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12070[label="169.230.134.67;2pkt 2fpkt", shape=invtriangle, color=brown];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.134.67:1038, 69.170.82.0:80}[50%]&lt;BR/&gt;{169.230.134.67:4962, 41.74.22.123:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4962: (25%)&lt;BR/&gt; 1038: (25%)&gt;];
}
9288--12070[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="41.74.22.123" dst_port="80" src_ip="169.230.134.67" src_port="4962"/>
      <filter dst_ip="69.170.82.0" dst_port="80" src_ip="169.230.134.67" src_port="1038"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.162.18.68"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
9296[label="145.229.48.68;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12076[label="145.229.48.68;3pkt 3fpkt", shape=invtriangle, color=brown];
13385[label="145.229.48.68;3pkt 3fpkt", shape=invhouse, color=bisque];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.48.68:49332, 216.132.16.160:80}[33.3333%]&lt;BR/&gt;{145.229.48.68:49333, 216.132.16.160:80}[33.3333%]&lt;BR/&gt;{145.229.48.68:49334, 216.132.16.160:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49334: (16.6667%)&lt;BR/&gt; 49333: (16.6667%)&lt;BR/&gt; 49332: (16.6667%)&gt;];
}
9296--12076[label="1;3pkt 3fpkt"];
9296--13385[label="1;3pkt 3fpkt"];
12076--13385[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.132.16.160" dst_port="80" src_ip="145.229.48.68" src_port="49334"/>
      <filter dst_ip="216.132.16.160" dst_port="80" src_ip="145.229.48.68" src_port="49333"/>
      <filter dst_ip="216.132.16.160" dst_port="80" src_ip="145.229.48.68" src_port="49332"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.137.173.68"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
9309[label="45.115.40.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12081[label="45.115.40.69;2pkt 2fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.115.40.69:8620, 145.41.240.72:3323}[50%]&lt;BR/&gt;{45.115.40.69:0, 145.41.201.176:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 8620: (25%)&lt;BR/&gt; 3323: (25%)&gt;];
}
9309--12081[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.41.201.176" src_ip="45.115.40.69"/>
      <filter dst_ip="145.41.240.72" dst_port="3323" src_ip="45.115.40.69" src_port="8620"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
9310[label="145.229.48.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12082[label="145.229.48.69;2pkt 2fpkt", shape=invtriangle, color=brown];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.48.69:1725, 214.82.100.153:80}[50%]&lt;BR/&gt;{145.229.48.69:1727, 214.82.100.153:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1727: (25%)&lt;BR/&gt; 1725: (25%)&gt;];
}
9310--12082[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.82.100.153" dst_port="80" src_ip="145.229.48.69" src_port="1727"/>
      <filter dst_ip="214.82.100.153" dst_port="80" src_ip="145.229.48.69" src_port="1725"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
9314[label="215.95.148.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12086[label="215.95.148.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.69:22, 145.229.241.90:35782}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35782: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
9314--12086[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="35782" src_ip="215.95.148.69" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
9315[label="145.229.169.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12087[label="145.229.169.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.169.69:40099, 44.83.58.119:22073}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40099: (50%)&lt;BR/&gt; 22073: (50%)&gt;];
}
9315--12087[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="44.83.58.119" dst_port="22073" src_ip="145.229.169.69" src_port="40099"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.208.21.70"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
9322[label="221.167.38.70;239pkt 239fpkt", shape=pentagon, color=darkviolet];
12092[label="221.167.38.70;239pkt 239fpkt", shape=invtriangle, color=brown];
13388[label="221.167.38.70;239pkt 239fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.167.38.70:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
9322--12092[label="1;239pkt 239fpkt"];
9322--13388[label="1;239pkt 239fpkt"];
12092--13388[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="221.167.38.70" src_port="1025"/>
    </slice>
    <from sec="1165900405" usec="0"/>
    <to sec="1165900441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
9353[label="205.111.162.72;175pkt 175fpkt", shape=pentagon, color=darkviolet];
12110[label="205.111.162.72;175pkt 175fpkt", shape=invtriangle, color=brown];
13397[label="205.111.162.72;175pkt 175fpkt", shape=invhouse, color=bisque];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.111.162.72:53872, *:1026}[53.7143%]&lt;BR/&gt;{205.111.162.72:53872, *:1027}[46.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53872: (50%)&lt;BR/&gt; 1026: (26.8571%)&lt;BR/&gt; 1027: (23.1429%)&gt;];
}
9353--12110[label="1;175pkt 175fpkt"];
9353--13397[label="1;175pkt 175fpkt"];
12110--13397[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="205.111.162.72" src_port="53872"/>
      <filter dst_port="1027" src_ip="205.111.162.72" src_port="53872"/>
    </slice>
    <from sec="1165899821" usec="0"/>
    <to sec="1165899822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.73.94.73"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165899677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
9375[label="59.226.27.74;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12122[label="59.226.27.74;3pkt 3fpkt", shape=invtriangle, color=brown];
13401[label="59.226.27.74;3pkt 3fpkt", shape=invhouse, color=bisque];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.226.27.74:7862, 205.55.222.77:53}[33.3333%]&lt;BR/&gt;{59.226.27.74:42297, 205.55.222.77:53}[33.3333%]&lt;BR/&gt;{59.226.27.74:53092, 205.55.222.77:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 53092: (16.6667%)&lt;BR/&gt; 42297: (16.6667%)&lt;BR/&gt; 7862: (16.6667%)&gt;];
}
9375--12122[label="1;3pkt 3fpkt"];
9375--13401[label="1;3pkt 3fpkt"];
12122--13401[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="59.226.27.74" src_port="53092"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="59.226.27.74" src_port="42297"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="59.226.27.74" src_port="7862"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.70.178.75"/>
    </slice>
    <from sec="1165899932" usec="0"/>
    <to sec="1165899996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
9397[label="169.230.211.75;34pkt 34fpkt", shape=pentagon, color=darkviolet];
12131[label="169.230.211.75;34pkt 34fpkt", shape=invtriangle, color=brown];
13405[label="169.230.211.75;34pkt 34fpkt", shape=invhouse, color=bisque];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.211.75:15956, *:*}[79.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15956: (39.7059%)&lt;BR/&gt; 80: (7.35294%)&lt;BR/&gt; 63779: (1.47059%)&lt;BR/&gt; 59518: (1.47059%)&lt;BR/&gt; 55856: (1.47059%)&gt;];
}
9397--12131[label="1;34pkt 34fpkt"];
9397--13405[label="1;34pkt 34fpkt"];
12131--13405[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="169.230.211.75" src_port="15956"/>
    </slice>
    <from sec="1165900188" usec="0"/>
    <to sec="1165900372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.184.116.76"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
364[label="145.229.5.118;d;190pkt 190fpkt", shape=diamond, color=yellow];
1371[label="42.75.51.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
1584[label="218.228.218.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
2468[label="207.102.219.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
4849[label="40.100.86.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
5710[label="145.229.5.118;d;174pkt 174fpkt", shape=hexagon, color=black];
5711[label="42.75.51.181;s;1pkt 1fpkt", shape=hexagon, color=black];
7089[label="207.102.219.126;s;1pkt 1fpkt", shape=hexagon, color=black];
9419[label="205.6.142.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11220[label="210.141.133.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12143[label="205.6.142.77;1pkt 1fpkt", shape=invtriangle, color=brown];
13015[label="210.141.133.215;1pkt 1fpkt", shape=invtriangle, color=brown];
13412[label="205.6.142.77;1pkt 1fpkt", shape=invhouse, color=bisque];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4672, 145.229.5.118:17977}[32.1053%]&lt;BR/&gt;{*:*, 145.229.5.118:13274}[27.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17977: (30.8%)&lt;BR/&gt; 4672: (15.4667%)&lt;BR/&gt; 13274: (14.5333%)&lt;BR/&gt; 0: (4.8%)&lt;BR/&gt; 4662: (1.06667%)&gt;];
}
364--1371[label="1;1pkt 1fpkt"];
364--1584[label="1;1pkt 1fpkt"];
364--2468[label="1;1pkt 1fpkt"];
364--4849[label="1;1pkt 1fpkt"];
364--5710[label="1;174pkt 174fpkt"];
364--5711[label="1;1pkt 1fpkt"];
364--7089[label="1;1pkt 1fpkt"];
364--9419[label="1;1pkt 1fpkt"];
364--11220[label="1;1pkt 1fpkt"];
364--12143[label="1;1pkt 1fpkt"];
364--13015[label="1;1pkt 1fpkt"];
364--13412[label="1;1pkt 1fpkt"];
1371--5710[label="1;1pkt 1fpkt"];
1371--5711[label="1;1pkt 1fpkt"];
1584--5710[label="1;1pkt 1fpkt"];
2468--5710[label="1;1pkt 1fpkt"];
2468--7089[label="1;1pkt 1fpkt"];
4849--5710[label="1;1pkt 1fpkt"];
5710--5711[label="1;1pkt 1fpkt"];
5710--7089[label="1;1pkt 1fpkt"];
5710--9419[label="1;1pkt 1fpkt"];
5710--11220[label="1;1pkt 1fpkt"];
5710--12143[label="1;1pkt 1fpkt"];
5710--13015[label="1;1pkt 1fpkt"];
5710--13412[label="1;1pkt 1fpkt"];
9419--12143[label="1;1pkt 1fpkt"];
9419--13412[label="1;1pkt 1fpkt"];
11220--13015[label="1;1pkt 1fpkt"];
12143--13412[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.5.118" dst_port="13274"/>
      <filter dst_ip="145.229.5.118" dst_port="17977" src_port="4672"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.140.16.78"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
9433[label="203.66.67.79;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12152[label="203.66.67.79;3pkt 3fpkt", shape=invtriangle, color=brown];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.66.67.79:80, 169.230.174.39:3507}[33.3333%]&lt;BR/&gt;{203.66.67.79:80, 169.230.174.39:3509}[33.3333%]&lt;BR/&gt;{203.66.67.79:80, 169.230.174.39:3511}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3511: (16.6667%)&lt;BR/&gt; 3509: (16.6667%)&lt;BR/&gt; 3507: (16.6667%)&gt;];
}
9433--12152[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.174.39" dst_port="3511" src_ip="203.66.67.79" src_port="80"/>
      <filter dst_ip="169.230.174.39" dst_port="3509" src_ip="203.66.67.79" src_port="80"/>
      <filter dst_ip="169.230.174.39" dst_port="3507" src_ip="203.66.67.79" src_port="80"/>
    </slice>
    <from sec="1165900455" usec="0"/>
    <to sec="1165900476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
9435[label="40.0.153.79;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12154[label="40.0.153.79;4pkt 4fpkt", shape=invtriangle, color=brown];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.0.153.79:22120, 205.55.222.67:53}[25%]&lt;BR/&gt;{40.0.153.79:54391, 205.55.222.67:53}[25%]&lt;BR/&gt;{40.0.153.79:50493, 205.55.222.77:53}[25%]&lt;BR/&gt;{40.0.153.79:53725, 205.55.222.77:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 54391: (12.5%)&lt;BR/&gt; 53725: (12.5%)&lt;BR/&gt; 50493: (12.5%)&lt;BR/&gt; 22120: (12.5%)&gt;];
}
9435--12154[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="40.0.153.79" src_port="53725"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="40.0.153.79" src_port="50493"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="40.0.153.79" src_port="54391"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="40.0.153.79" src_port="22120"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.74.190.79"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
9464[label="217.138.192.80;27pkt 27fpkt", shape=pentagon, color=darkviolet];
12166[label="217.138.192.80;27pkt 27fpkt", shape=invtriangle, color=brown];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.138.192.80:*, 145.229.137.115:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2762: (1.85185%)&lt;BR/&gt; 2761: (1.85185%)&lt;BR/&gt; 2757: (1.85185%)&lt;BR/&gt; 2756: (1.85185%)&gt;];
}
9464--12166[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.137.115" dst_port="80" src_ip="217.138.192.80"/>
    </slice>
    <from sec="1165899871" usec="0"/>
    <to sec="1165900036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
9477[label="54.82.176.81;117pkt 117fpkt", shape=pentagon, color=darkviolet];
12172[label="54.82.176.81;117pkt 117fpkt", shape=invtriangle, color=brown];
13427[label="54.82.176.81;117pkt 117fpkt", shape=invhouse, color=bisque];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.82.176.81:11482, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11482: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
9477--12172[label="1;117pkt 117fpkt"];
9477--13427[label="1;117pkt 117fpkt"];
12172--13427[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="54.82.176.81" src_port="11482"/>
    </slice>
    <from sec="1165900184" usec="0"/>
    <to sec="1165900202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.48.99.85"/>
    </slice>
    <from sec="1165900288" usec="0"/>
    <to sec="1165900298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
9542[label="54.251.122.85;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12198[label="54.251.122.85;12pkt 12fpkt", shape=invtriangle, color=brown];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.251.122.85:80, 145.229.65.32:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 53: (8.33333%)&lt;BR/&gt; 57769: (4.16667%)&lt;BR/&gt; 57768: (4.16667%)&lt;BR/&gt; 57767: (4.16667%)&gt;];
}
9542--12198[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.65.32" src_ip="54.251.122.85" src_port="80"/>
    </slice>
    <from sec="1165899639" usec="0"/>
    <to sec="1165900450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.188.1.88"/>
    </slice>
    <from sec="1165900264" usec="0"/>
    <to sec="1165900266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
9588[label="216.221.72.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12215[label="216.221.72.89;2pkt 2fpkt", shape=invtriangle, color=brown];
13444[label="216.221.72.89;2pkt 2fpkt", shape=invhouse, color=bisque];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.221.72.89:80, 151.227.231.153:61838}[50%]&lt;BR/&gt;{216.221.72.89:80, 151.227.231.153:62614}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62614: (25%)&lt;BR/&gt; 61838: (25%)&gt;];
}
9588--12215[label="1;2pkt 2fpkt"];
9588--13444[label="1;2pkt 2fpkt"];
12215--13444[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.231.153" dst_port="62614" src_ip="216.221.72.89" src_port="80"/>
      <filter dst_ip="151.227.231.153" dst_port="61838" src_ip="216.221.72.89" src_port="80"/>
    </slice>
    <from sec="1165900476" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
9591[label="216.239.110.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12217[label="216.239.110.89;1pkt 1fpkt", shape=invtriangle, color=brown];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.239.110.89:80, 145.229.174.1:4384}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4384: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9591--12217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.174.1" dst_port="4384" src_ip="216.239.110.89" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
9606[label="200.88.100.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12226[label="200.88.100.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.88.100.90:80, 205.246.71.154:54763}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54763: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9606--12226[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.154" dst_port="54763" src_ip="200.88.100.90" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
9613[label="215.95.148.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12231[label="215.95.148.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.90:22, 145.229.241.90:43494}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43494: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
9613--12231[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="43494" src_ip="215.95.148.90" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="153.84.32.91"/>
    </slice>
    <from sec="1165899733" usec="0"/>
    <to sec="1165899930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
9623[label="221.223.154.91;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12235[label="221.223.154.91;2pkt 2fpkt", shape=invtriangle, color=brown];
13454[label="221.223.154.91;2pkt 2fpkt", shape=invhouse, color=bisque];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.223.154.91:17697, 205.55.222.67:53}[50%]&lt;BR/&gt;{221.223.154.91:33238, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 33238: (25%)&lt;BR/&gt; 17697: (25%)&gt;];
}
9623--12235[label="1;2pkt 2fpkt"];
9623--13454[label="1;2pkt 2fpkt"];
12235--13454[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="221.223.154.91" src_port="33238"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="221.223.154.91" src_port="17697"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
9630[label="204.6.229.91;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12241[label="204.6.229.91;3pkt 3fpkt", shape=invtriangle, color=brown];
13456[label="204.6.229.91;3pkt 3fpkt", shape=invhouse, color=bisque];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.229.91:443, 41.132.226.79:41200}[33.3333%]&lt;BR/&gt;{204.6.229.91:80, 32.4.32.91:50597}[33.3333%]&lt;BR/&gt;{204.6.229.91:80, 69.37.175.195:58449}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 58449: (16.6667%)&lt;BR/&gt; 50597: (16.6667%)&lt;BR/&gt; 41200: (16.6667%)&lt;BR/&gt; 443: (16.6667%)&gt;];
}
9630--12241[label="1;3pkt 3fpkt"];
9630--13456[label="1;3pkt 3fpkt"];
12241--13456[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="69.37.175.195" dst_port="58449" src_ip="204.6.229.91" src_port="80"/>
      <filter dst_ip="32.4.32.91" dst_port="50597" src_ip="204.6.229.91" src_port="80"/>
      <filter dst_ip="41.132.226.79" dst_port="41200" src_ip="204.6.229.91" src_port="443"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
9639[label="215.95.148.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12246[label="215.95.148.92;2pkt 2fpkt", shape=invtriangle, color=brown];
13460[label="215.95.148.92;2pkt 2fpkt", shape=invhouse, color=bisque];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.92:22, 145.229.241.90:49589}[50%]&lt;BR/&gt;{215.95.148.92:22, 145.229.241.90:49684}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 49684: (25%)&lt;BR/&gt; 49589: (25%)&gt;];
}
9639--12246[label="1;2pkt 2fpkt"];
9639--13460[label="1;2pkt 2fpkt"];
12246--13460[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="49684" src_ip="215.95.148.92" src_port="22"/>
      <filter dst_ip="145.229.241.90" dst_port="49589" src_ip="215.95.148.92" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.105.133.93"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
9654[label="145.229.169.93;24pkt 24fpkt", shape=pentagon, color=darkviolet];
12253[label="145.229.169.93;24pkt 24fpkt", shape=invtriangle, color=brown];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.169.93:31716, *:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31716: (45.8333%)&lt;BR/&gt; 61457: (2.08333%)&lt;BR/&gt; 61165: (2.08333%)&lt;BR/&gt; 59070: (2.08333%)&lt;BR/&gt; 48002: (2.08333%)&gt;];
}
9654--12253[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="145.229.169.93" src_port="31716"/>
    </slice>
    <from sec="1165899614" usec="0"/>
    <to sec="1165900487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.136.22.94"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
9673[label="169.230.0.96;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12261[label="169.230.0.96;4pkt 4fpkt", shape=invtriangle, color=brown];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.0.96:2211, 69.170.82.0:80}[25%]&lt;BR/&gt;{169.230.0.96:2212, 69.170.82.5:80}[25%]&lt;BR/&gt;{169.230.0.96:2213, 193.44.65.96:80}[25%]&lt;BR/&gt;{169.230.0.96:2209, 201.206.178.232:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2213: (12.5%)&lt;BR/&gt; 2212: (12.5%)&lt;BR/&gt; 2211: (12.5%)&lt;BR/&gt; 2209: (12.5%)&gt;];
}
9673--12261[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.206.178.232" dst_port="80" src_ip="169.230.0.96" src_port="2209"/>
      <filter dst_ip="193.44.65.96" dst_port="80" src_ip="169.230.0.96" src_port="2213"/>
      <filter dst_ip="69.170.82.5" dst_port="80" src_ip="169.230.0.96" src_port="2212"/>
      <filter dst_ip="69.170.82.0" dst_port="80" src_ip="169.230.0.96" src_port="2211"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
9674[label="68.33.29.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12262[label="68.33.29.96;2pkt 2fpkt", shape=invtriangle, color=brown];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.33.29.96:0, 205.24.209.0:0}[50%]&lt;BR/&gt;{68.33.29.96:0, 205.24.215.49:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9674--12262[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.24.215.49" src_ip="68.33.29.96"/>
      <filter dst_ip="205.24.209.0" src_ip="68.33.29.96"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
9681[label="205.138.108.96;101pkt 101fpkt", shape=pentagon, color=darkviolet];
12266[label="205.138.108.96;101pkt 101fpkt", shape=invtriangle, color=brown];
13467[label="205.138.108.96;101pkt 101fpkt", shape=invhouse, color=bisque];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.138.108.96:1100, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1100: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
9681--12266[label="1;101pkt 101fpkt"];
9681--13467[label="1;101pkt 101fpkt"];
12266--13467[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.138.108.96" src_port="1100"/>
    </slice>
    <from sec="1165899959" usec="0"/>
    <to sec="1165899975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
9704[label="204.6.226.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12277[label="204.6.226.97;1pkt 1fpkt", shape=invtriangle, color=brown];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.226.97:25, 68.220.12.189:8753}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8753: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9704--12277[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="68.220.12.189" dst_port="8753" src_ip="204.6.226.97" src_port="25"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
1442[label="145.252.92.168;d;606pkt 606fpkt", shape=diamond, color=yellow];
2784[label="11.5.166.230;s;247pkt 247fpkt", shape=diamond, color=yellow];
5197[label="68.71.74.113;s;99pkt 99fpkt", shape=diamond, color=yellow];
5975[label="145.252.92.168;d;334pkt 334fpkt", shape=hexagon, color=black];
7912[label="11.5.166.230;s;247pkt 247fpkt", shape=hexagon, color=black];
7980[label="68.71.74.113;s;99pkt 99fpkt", shape=hexagon, color=black];
9283[label="68.71.72.67;98pkt 98fpkt", shape=pentagon, color=darkviolet];
9706[label="59.168.244.97;24pkt 24fpkt", shape=pentagon, color=darkviolet];
11361[label="11.5.166.230;280pkt 280fpkt", shape=pentagon, color=darkviolet];
12279[label="59.168.244.97;24pkt 24fpkt", shape=invtriangle, color=brown];
13088[label="11.5.166.230;280pkt 280fpkt", shape=invtriangle, color=brown];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{11.5.166.230:*, 145.252.92.168:8080}[42.5532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (49.7434%)&lt;BR/&gt; 4281: (0.213858%)&lt;BR/&gt; 2592: (0.213858%)&lt;BR/&gt; 80: (0.213858%)&lt;BR/&gt; 4260: (0.192472%)&gt;];
}
1442--2784[label="1;247pkt 247fpkt"];
1442--5197[label="1;99pkt 99fpkt"];
1442--5975[label="1;334pkt 334fpkt"];
1442--7912[label="1;247pkt 247fpkt"];
1442--7980[label="1;99pkt 99fpkt"];
1442--8583[label="0.0416667;1pkt 1fpkt"];
1442--9283[label="0.959184;94pkt 94fpkt"];
1442--9706[label="0.375;9pkt 9fpkt"];
1442--11361[label="0.882143;247pkt 247fpkt"];
1442--11692[label="0.0434783;1pkt 1fpkt"];
1442--12279[label="0.375;9pkt 9fpkt"];
1442--13088[label="0.882143;247pkt 247fpkt"];
2784--5975[label="0.538462;133pkt 133fpkt"];
2784--7912[label="1;247pkt 247fpkt"];
2784--11361[label="1;247pkt 247fpkt"];
2784--13088[label="1;247pkt 247fpkt"];
5197--5975[label="0.525253;52pkt 52fpkt"];
5197--7980[label="1;99pkt 99fpkt"];
5975--7912[label="0.538462;133pkt 133fpkt"];
5975--7980[label="0.525253;52pkt 52fpkt"];
5975--8583[label="0.0416667;1pkt 1fpkt"];
5975--9283[label="0.540816;53pkt 53fpkt"];
5975--9706[label="0.166667;4pkt 4fpkt"];
5975--11361[label="0.475;133pkt 133fpkt"];
5975--11692[label="0.0434783;1pkt 1fpkt"];
5975--12279[label="0.166667;4pkt 4fpkt"];
5975--13088[label="0.475;133pkt 133fpkt"];
7912--11361[label="1;247pkt 247fpkt"];
7912--13088[label="1;247pkt 247fpkt"];
9706--12279[label="1;24pkt 24fpkt"];
11361--13088[label="1;280pkt 280fpkt"];
</description>
    <slice>
      <filter dst_ip="145.252.92.168" dst_port="8080" src_ip="11.5.166.230"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
9716[label="41.183.112.98;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12284[label="41.183.112.98;6pkt 6fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.183.112.98:143, 145.41.183.116:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (50%)&lt;BR/&gt; 57232: (8.33333%)&lt;BR/&gt; 57225: (8.33333%)&lt;BR/&gt; 57218: (8.33333%)&lt;BR/&gt; 57211: (8.33333%)&gt;];
}
9716--12284[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="145.41.183.116" src_ip="41.183.112.98" src_port="143"/>
    </slice>
    <from sec="1165899611" usec="0"/>
    <to sec="1165900452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
9734[label="215.95.148.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12294[label="215.95.148.100;2pkt 2fpkt", shape=invtriangle, color=brown];
13479[label="215.95.148.100;2pkt 2fpkt", shape=invhouse, color=bisque];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.100:22, 145.229.241.90:56884}[50%]&lt;BR/&gt;{215.95.148.100:22, 145.229.241.90:56983}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 56983: (25%)&lt;BR/&gt; 56884: (25%)&gt;];
}
9734--12294[label="1;2pkt 2fpkt"];
9734--13479[label="1;2pkt 2fpkt"];
12294--13479[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="56983" src_ip="215.95.148.100" src_port="22"/>
      <filter dst_ip="145.229.241.90" dst_port="56884" src_ip="215.95.148.100" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
2316[label="169.230.211.100;s;324pkt 324fpkt", shape=diamond, color=yellow];
2842[label="219.105.221.88;d;179pkt 179fpkt", shape=diamond, color=yellow];
6392[label="169.230.211.100;s;174pkt 174fpkt", shape=hexagon, color=black];
6701[label="219.105.221.88;d;179pkt 179fpkt", shape=hexagon, color=black];
9739[label="169.230.211.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12297[label="169.230.211.100;2pkt 2fpkt", shape=invtriangle, color=brown];
13482[label="169.230.211.100;2pkt 2fpkt", shape=invhouse, color=bisque];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.211.100:*, 219.105.221.88:80}[54.1284%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1578%)&lt;BR/&gt; 82: (1.56613%)&lt;BR/&gt; 8985: (0.406032%)&lt;BR/&gt; 4429: (0.232019%)&lt;BR/&gt; 3874: (0.232019%)&gt;];
}
2316--2685[label="0.00408163;1pkt 1fpkt"];
2316--2842[label="0.988827;177pkt 177fpkt"];
2316--3422[label="0.0344828;4pkt 4fpkt"];
2316--5626[label="0.09375;3pkt 3fpkt"];
2316--5829[label="0.00729927;2pkt 2fpkt"];
2316--6392[label="1;174pkt 174fpkt"];
2316--6406[label="0.0123457;4pkt 4fpkt"];
2316--6654[label="0.0123457;4pkt 4fpkt"];
2316--6701[label="0.988827;177pkt 177fpkt"];
2316--6841[label="0.00308642;1pkt 1fpkt"];
2316--7410[label="0.0493827;4pkt 4fpkt"];
2316--8162[label="0.0123457;4pkt 4fpkt"];
2316--9739[label="0.5;1pkt 1fpkt"];
2316--12297[label="0.5;1pkt 1fpkt"];
2316--13482[label="0.5;1pkt 1fpkt"];
2842--5544[label="0.00558659;1pkt 1fpkt"];
2842--6392[label="0.522989;91pkt 91fpkt"];
2842--6701[label="1;179pkt 179fpkt"];
2842--13291[label="0.00558659;1pkt 1fpkt"];
6392--6406[label="0.0229885;4pkt 4fpkt"];
6392--6654[label="0.0229885;4pkt 4fpkt"];
6392--6701[label="0.522989;91pkt 91fpkt"];
6392--7410[label="0.0493827;4pkt 4fpkt"];
6392--8162[label="0.0229885;4pkt 4fpkt"];
6701--13291[label="0.00558659;1pkt 1fpkt"];
9739--12297[label="1;2pkt 2fpkt"];
9739--13482[label="1;2pkt 2fpkt"];
12297--13482[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.105.221.88" dst_port="80" src_ip="169.230.211.100"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
9745[label="215.95.148.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12299[label="215.95.148.101;2pkt 2fpkt", shape=invtriangle, color=brown];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.101:22, 145.229.241.90:40300}[50%]&lt;BR/&gt;{215.95.148.101:22, 145.229.241.90:40398}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 40398: (25%)&lt;BR/&gt; 40300: (25%)&gt;];
}
9745--12299[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="40398" src_ip="215.95.148.101" src_port="22"/>
      <filter dst_ip="145.229.241.90" dst_port="40300" src_ip="215.95.148.101" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.12.232.102"/>
    </slice>
    <from sec="1165899764" usec="0"/>
    <to sec="1165900448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.0.21.103"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
9797[label="41.221.195.105;33pkt 33fpkt", shape=pentagon, color=darkviolet];
12320[label="41.221.195.105;33pkt 33fpkt", shape=invtriangle, color=brown];
13490[label="41.221.195.105;33pkt 33fpkt", shape=invhouse, color=bisque];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.221.195.105:80, 151.227.3.88:*}[57.5758%]&lt;BR/&gt;{41.221.195.105:443, 151.227.3.28:*}[42.4242%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.7879%)&lt;BR/&gt; 443: (21.2121%)&lt;BR/&gt; 3849: (1.51515%)&lt;BR/&gt; 3846: (1.51515%)&lt;BR/&gt; 3842: (1.51515%)&gt;];
}
9797--12320[label="1;33pkt 33fpkt"];
9797--13490[label="1;33pkt 33fpkt"];
12320--13490[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.3.88" src_ip="41.221.195.105" src_port="80"/>
      <filter dst_ip="151.227.3.28" src_ip="41.221.195.105" src_port="443"/>
    </slice>
    <from sec="1165899628" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
9829[label="212.172.213.108;26pkt 26fpkt", shape=pentagon, color=darkviolet];
12336[label="212.172.213.108;26pkt 26fpkt", shape=invtriangle, color=brown];
13499[label="212.172.213.108;26pkt 26fpkt", shape=invhouse, color=bisque];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.172.213.108:80, 151.227.26.109:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4416: (1.92308%)&lt;BR/&gt; 4413: (1.92308%)&lt;BR/&gt; 4410: (1.92308%)&lt;BR/&gt; 4407: (1.92308%)&gt;];
}
9829--12336[label="1;26pkt 26fpkt"];
9829--13499[label="1;26pkt 26fpkt"];
12336--13499[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.26.109" src_ip="212.172.213.108" src_port="80"/>
    </slice>
    <from sec="1165900322" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
9831[label="204.6.236.108;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12338[label="204.6.236.108;4pkt 4fpkt", shape=invtriangle, color=brown];
13500[label="204.6.236.108;4pkt 4fpkt", shape=invhouse, color=bisque];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.236.108:54112, 201.110.193.4:1863}[25%]&lt;BR/&gt;{204.6.236.108:39543, 43.107.239.48:1863}[25%]&lt;BR/&gt;{204.6.236.108:35731, 201.110.129.69:1863}[25%]&lt;BR/&gt;{204.6.236.108:60484, 201.110.129.78:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 60484: (12.5%)&lt;BR/&gt; 54112: (12.5%)&lt;BR/&gt; 39543: (12.5%)&lt;BR/&gt; 35731: (12.5%)&gt;];
}
9831--12338[label="1;4pkt 4fpkt"];
9831--13500[label="1;4pkt 4fpkt"];
12338--13500[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.110.129.78" dst_port="1863" src_ip="204.6.236.108" src_port="60484"/>
      <filter dst_ip="201.110.129.69" dst_port="1863" src_ip="204.6.236.108" src_port="35731"/>
      <filter dst_ip="43.107.239.48" dst_port="1863" src_ip="204.6.236.108" src_port="39543"/>
      <filter dst_ip="201.110.193.4" dst_port="1863" src_ip="204.6.236.108" src_port="54112"/>
    </slice>
    <from sec="1165899611" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
9846[label="215.95.148.110;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12345[label="215.95.148.110;2pkt 2fpkt", shape=invtriangle, color=brown];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.110:22, 145.229.241.90:57554}[50%]&lt;BR/&gt;{215.95.148.110:22, 145.229.241.90:57654}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 57654: (25%)&lt;BR/&gt; 57554: (25%)&gt;];
}
9846--12345[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="57654" src_ip="215.95.148.110" src_port="22"/>
      <filter dst_ip="145.229.241.90" dst_port="57554" src_ip="215.95.148.110" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.41.183.110"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
9851[label="217.229.28.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12347[label="217.229.28.111;1pkt 1fpkt", shape=invtriangle, color=brown];
13505[label="217.229.28.111;1pkt 1fpkt", shape=invhouse, color=bisque];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.229.28.111:80, 205.246.71.240:63995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63995: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9851--12347[label="1;1pkt 1fpkt"];
9851--13505[label="1;1pkt 1fpkt"];
12347--13505[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.240" dst_port="63995" src_ip="217.229.28.111" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.208.122.111"/>
    </slice>
    <from sec="1165899748" usec="0"/>
    <to sec="1165899792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
9861[label="139.152.249.111;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12354[label="139.152.249.111;12pkt 12fpkt", shape=invtriangle, color=brown];
13511[label="139.152.249.111;12pkt 12fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.249.111:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37987: (4.16667%)&lt;BR/&gt; 37733: (4.16667%)&lt;BR/&gt; 37717: (4.16667%)&lt;BR/&gt; 37587: (4.16667%)&gt;];
}
9861--12354[label="1;12pkt 12fpkt"];
9861--13511[label="1;12pkt 12fpkt"];
12354--13511[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="139.152.249.111"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
9870[label="139.152.122.112;18pkt 18fpkt", shape=pentagon, color=darkviolet];
12359[label="139.152.122.112;18pkt 18fpkt", shape=invtriangle, color=brown];
13515[label="139.152.122.112;18pkt 18fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.122.112:*, 213.17.32.64:80}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 37252: (2.77778%)&lt;BR/&gt; 1266: (2.77778%)&lt;BR/&gt; 1265: (2.77778%)&lt;BR/&gt; 1264: (2.77778%)&gt;];
}
9870--12359[label="1;18pkt 18fpkt"];
9870--13515[label="1;18pkt 18fpkt"];
12359--13515[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="213.17.32.64" dst_port="80" src_ip="139.152.122.112"/>
    </slice>
    <from sec="1165900235" usec="0"/>
    <to sec="1165900296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
9876[label="172.239.21.113;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12363[label="172.239.21.113;3pkt 3fpkt", shape=invtriangle, color=brown];
13517[label="172.239.21.113;3pkt 3fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.239.21.113:80, 32.4.56.33:56262}[33.3333%]&lt;BR/&gt;{172.239.21.113:80, 205.164.54.53:1067}[33.3333%]&lt;BR/&gt;{172.239.21.113:80, 32.4.58.245:47984}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56262: (16.6667%)&lt;BR/&gt; 47984: (16.6667%)&lt;BR/&gt; 1067: (16.6667%)&gt;];
}
9876--12363[label="1;3pkt 3fpkt"];
9876--13517[label="1;3pkt 3fpkt"];
12363--13517[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="32.4.58.245" dst_port="47984" src_ip="172.239.21.113" src_port="80"/>
      <filter dst_ip="205.164.54.53" dst_port="1067" src_ip="172.239.21.113" src_port="80"/>
      <filter dst_ip="32.4.56.33" dst_port="56262" src_ip="172.239.21.113" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
9889[label="32.4.59.114;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12371[label="32.4.59.114;2pkt 2fpkt", shape=invtriangle, color=brown];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.4.59.114:60522, 169.230.218.19:80}[50%]&lt;BR/&gt;{32.4.59.114:55675, 169.230.24.166:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60522: (25%)&lt;BR/&gt; 55675: (25%)&gt;];
}
9889--12371[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.24.166" dst_port="80" src_ip="32.4.59.114" src_port="55675"/>
      <filter dst_ip="169.230.218.19" dst_port="80" src_ip="32.4.59.114" src_port="60522"/>
    </slice>
    <from sec="1165899986" usec="0"/>
    <to sec="1165900163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
9902[label="151.227.149.115;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12378[label="151.227.149.115;9pkt 9fpkt", shape=invtriangle, color=brown];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.149.115:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 33253: (5.55556%)&lt;BR/&gt; 16397: (5.55556%)&lt;BR/&gt; 4323: (5.55556%)&lt;BR/&gt; 3223: (5.55556%)&gt;];
}
9902--12378[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="151.227.149.115" src_port="25"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
9908[label="145.248.12.116;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12380[label="145.248.12.116;8pkt 8fpkt", shape=invtriangle, color=brown];
13525[label="145.248.12.116;8pkt 8fpkt", shape=invhouse, color=bisque];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.12.116:*, 219.242.123.19:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62796: (6.25%)&lt;BR/&gt; 62692: (6.25%)&lt;BR/&gt; 62562: (6.25%)&lt;BR/&gt; 62548: (6.25%)&gt;];
}
9908--12380[label="1;8pkt 8fpkt"];
9908--13525[label="1;8pkt 8fpkt"];
12380--13525[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="219.242.123.19" dst_port="80" src_ip="145.248.12.116"/>
    </slice>
    <from sec="1165899622" usec="0"/>
    <to sec="1165899713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.151.93.116"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
9920[label="193.71.177.116;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12385[label="193.71.177.116;2pkt 2fpkt", shape=invtriangle, color=brown];
13527[label="193.71.177.116;2pkt 2fpkt", shape=invhouse, color=bisque];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.71.177.116:53, 205.110.211.217:47639}[50%]&lt;BR/&gt;{193.71.177.116:53, 195.101.84.230:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (75%)&lt;BR/&gt; 47639: (25%)&gt;];
}
9920--12385[label="1;2pkt 2fpkt"];
9920--13527[label="1;2pkt 2fpkt"];
12385--13527[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.101.84.230" dst_port="53" src_ip="193.71.177.116" src_port="53"/>
      <filter dst_ip="205.110.211.217" dst_port="47639" src_ip="193.71.177.116" src_port="53"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
9927[label="215.95.148.117;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12388[label="215.95.148.117;1pkt 1fpkt", shape=invtriangle, color=brown];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.117:22, 145.229.241.90:46139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46139: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
9927--12388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="46139" src_ip="215.95.148.117" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
9940[label="215.95.149.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12396[label="215.95.149.119;1pkt 1fpkt", shape=invtriangle, color=brown];
13530[label="215.95.149.119;1pkt 1fpkt", shape=invhouse, color=bisque];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.119:22, 145.229.241.90:33456}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33456: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
9940--12396[label="1;1pkt 1fpkt"];
9940--13530[label="1;1pkt 1fpkt"];
12396--13530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="33456" src_ip="215.95.149.119" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
9947[label="215.95.149.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12399[label="215.95.149.120;1pkt 1fpkt", shape=invtriangle, color=brown];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.120:22, 145.229.241.90:52718}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52718: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
9947--12399[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="52718" src_ip="215.95.149.120" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
9962[label="209.51.92.122;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12406[label="209.51.92.122;1pkt 1fpkt", shape=invtriangle, color=brown];
13534[label="209.51.92.122;1pkt 1fpkt", shape=invhouse, color=bisque];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.51.92.122:47115, 204.6.227.105:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47115: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9962--12406[label="1;1pkt 1fpkt"];
9962--13534[label="1;1pkt 1fpkt"];
12406--13534[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.227.105" dst_port="80" src_ip="209.51.92.122" src_port="47115"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_773{
style=filled;
color=gray75;
9977[label="148.118.96.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12412[label="148.118.96.124;1pkt 1fpkt", shape=invtriangle, color=brown];
13537[label="148.118.96.124;1pkt 1fpkt", shape=invhouse, color=bisque];
stat773[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.118.96.124:80, 151.227.246.96:53336}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53336: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9977--12412[label="1;1pkt 1fpkt"];
9977--13537[label="1;1pkt 1fpkt"];
12412--13537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.246.96" dst_port="53336" src_ip="148.118.96.124" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_774{
style=filled;
color=gray75;
10028[label="204.6.228.128;81pkt 81fpkt", shape=pentagon, color=darkviolet];
12434[label="204.6.228.128;81pkt 81fpkt", shape=invtriangle, color=brown];
stat774[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.228.128:20190, *:*}[76.5432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20190: (38.2716%)&lt;BR/&gt; 31175: (1.85185%)&lt;BR/&gt; 60189: (1.23457%)&lt;BR/&gt; 51412: (1.23457%)&lt;BR/&gt; 41710: (1.23457%)&gt;];
}
10028--12434[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter src_ip="204.6.228.128" src_port="20190"/>
    </slice>
    <from sec="1165899623" usec="0"/>
    <to sec="1165900488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
10032[label="201.165.23.129;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12436[label="201.165.23.129;6pkt 6fpkt", shape=invtriangle, color=brown];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.165.23.129:*, 205.55.222.77:53}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 58273: (8.33333%)&lt;BR/&gt; 44771: (8.33333%)&lt;BR/&gt; 41857: (8.33333%)&lt;BR/&gt; 35933: (8.33333%)&gt;];
}
10032--12436[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="201.165.23.129"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
10045[label="201.165.23.130;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12443[label="201.165.23.130;7pkt 7fpkt", shape=invtriangle, color=brown];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.165.23.130:*, 205.55.222.77:53}[57.1429%]&lt;BR/&gt;{201.165.23.130:*, 205.55.222.67:53}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 56284: (7.14286%)&lt;BR/&gt; 44396: (7.14286%)&lt;BR/&gt; 41691: (7.14286%)&lt;BR/&gt; 34798: (7.14286%)&gt;];
}
10045--12443[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="201.165.23.130"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="201.165.23.130"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.0.172.130"/>
    </slice>
    <from sec="1165900355" usec="0"/>
    <to sec="1165900360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
10061[label="216.132.16.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12451[label="216.132.16.131;1pkt 1fpkt", shape=invtriangle, color=brown];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.132.16.131:80, 151.227.120.84:53784}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53784: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10061--12451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.120.84" dst_port="53784" src_ip="216.132.16.131" src_port="80"/>
    </slice>
    <from sec="1165900352" usec="0"/>
    <to sec="1165900361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.11.161.131"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
10099[label="151.227.84.133;28pkt 28fpkt", shape=pentagon, color=darkviolet];
12471[label="151.227.84.133;28pkt 28fpkt", shape=invtriangle, color=brown];
13561[label="151.227.84.133;28pkt 28fpkt", shape=invhouse, color=bisque];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.84.133:*, 50.60.6.160:80}[21.4286%]&lt;BR/&gt;{151.227.84.133:*, 42.126.197.191:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2143%)&lt;BR/&gt; 3939: (1.78571%)&lt;BR/&gt; 3937: (1.78571%)&lt;BR/&gt; 3936: (1.78571%)&lt;BR/&gt; 3935: (1.78571%)&gt;];
}
10099--12471[label="1;28pkt 28fpkt"];
10099--13561[label="1;28pkt 28fpkt"];
12471--13561[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="42.126.197.191" src_ip="151.227.84.133"/>
      <filter dst_ip="50.60.6.160" dst_port="80" src_ip="151.227.84.133"/>
    </slice>
    <from sec="1165900436" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
10103[label="215.95.149.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12474[label="215.95.149.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.133:22, 145.229.241.90:55865}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55865: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
10103--12474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="55865" src_ip="215.95.149.133" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
10106[label="145.229.169.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12475[label="145.229.169.133;3pkt 3fpkt", shape=invtriangle, color=brown];
13564[label="145.229.169.133;3pkt 3fpkt", shape=invhouse, color=bisque];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.169.133:19992, 113.26.132.4:2066}[33.3333%]&lt;BR/&gt;{145.229.169.133:19992, 55.3.124.14:1769}[33.3333%]&lt;BR/&gt;{145.229.169.133:19992, 113.188.41.77:9428}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19992: (50%)&lt;BR/&gt; 9428: (16.6667%)&lt;BR/&gt; 2066: (16.6667%)&lt;BR/&gt; 1769: (16.6667%)&gt;];
}
10106--12475[label="1;3pkt 3fpkt"];
10106--13564[label="1;3pkt 3fpkt"];
12475--13564[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="113.188.41.77" dst_port="9428" src_ip="145.229.169.133" src_port="19992"/>
      <filter dst_ip="55.3.124.14" dst_port="1769" src_ip="145.229.169.133" src_port="19992"/>
      <filter dst_ip="113.26.132.4" dst_port="2066" src_ip="145.229.169.133" src_port="19992"/>
    </slice>
    <from sec="1165899614" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
10113[label="41.132.233.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12477[label="41.132.233.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.132.233.133:35684, 145.229.151.219:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35684: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10113--12477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.151.219" dst_port="80" src_ip="41.132.233.133" src_port="35684"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
10120[label="41.220.110.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12483[label="41.220.110.134;1pkt 1fpkt", shape=invtriangle, color=brown];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.220.110.134:2703, 204.6.229.68:34627}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34627: (50%)&lt;BR/&gt; 2703: (50%)&gt;];
}
10120--12483[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.229.68" dst_port="34627" src_ip="41.220.110.134" src_port="2703"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.99.220.134"/>
    </slice>
    <from sec="1165899934" usec="0"/>
    <to sec="1165899953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
10141[label="169.230.243.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12494[label="169.230.243.135;1pkt 1fpkt", shape=invtriangle, color=brown];
13572[label="169.230.243.135;1pkt 1fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.243.135:25, 49.70.52.221:1398}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1398: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
10141--12494[label="1;1pkt 1fpkt"];
10141--13572[label="1;1pkt 1fpkt"];
12494--13572[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="49.70.52.221" dst_port="1398" src_ip="169.230.243.135" src_port="25"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.85.130.138"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.99.220.138"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
3833[label="169.230.153.141;d;41pkt 41fpkt", shape=diamond, color=yellow];
7678[label="169.230.153.141;d;41pkt 41fpkt", shape=hexagon, color=black];
9387[label="58.100.224.74;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10100[label="34.196.87.133;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10177[label="45.34.32.139;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11015[label="54.234.158.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12511[label="45.34.32.139;9pkt 9fpkt", shape=invtriangle, color=brown];
13584[label="45.34.32.139;9pkt 9fpkt", shape=invhouse, color=bisque];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.230.153.141:54045}[53.4483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54045: (27.8689%)&lt;BR/&gt; 21777: (11.8852%)&lt;BR/&gt; 12350: (5.7377%)&lt;BR/&gt; 60081: (3.68852%)&lt;BR/&gt; 38897: (2.45902%)&gt;];
}
3833--7678[label="1;41pkt 41fpkt"];
3833--9387[label="0.25;1pkt 1fpkt"];
3833--10100[label="0.142857;1pkt 1fpkt"];
3833--10177[label="0.111111;1pkt 1fpkt"];
3833--11015[label="1;2pkt 2fpkt"];
3833--12511[label="0.111111;1pkt 1fpkt"];
3833--13584[label="0.111111;1pkt 1fpkt"];
7678--9387[label="0.25;1pkt 1fpkt"];
7678--10100[label="0.142857;1pkt 1fpkt"];
7678--10177[label="0.111111;1pkt 1fpkt"];
7678--11015[label="1;2pkt 2fpkt"];
7678--12511[label="0.111111;1pkt 1fpkt"];
7678--13584[label="0.111111;1pkt 1fpkt"];
10177--12511[label="1;9pkt 9fpkt"];
10177--13584[label="1;9pkt 9fpkt"];
12511--13584[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.153.141" dst_port="54045"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.109.103.139"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
10198[label="218.164.169.140;22pkt 22fpkt", shape=pentagon, color=darkviolet];
12518[label="218.164.169.140;22pkt 22fpkt", shape=invtriangle, color=brown];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.164.169.140:80, 151.227.92.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1523: (2.27273%)&lt;BR/&gt; 1522: (2.27273%)&lt;BR/&gt; 1518: (2.27273%)&lt;BR/&gt; 1516: (2.27273%)&gt;];
}
10198--12518[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.92.42" src_ip="218.164.169.140" src_port="80"/>
    </slice>
    <from sec="1165900409" usec="0"/>
    <to sec="1165900477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
10200[label="192.184.232.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12520[label="192.184.232.140;1pkt 1fpkt", shape=invtriangle, color=brown];
13589[label="192.184.232.140;1pkt 1fpkt", shape=invhouse, color=bisque];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.184.232.140:554, 151.227.240.30:1051}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1051: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
10200--12520[label="1;1pkt 1fpkt"];
10200--13589[label="1;1pkt 1fpkt"];
12520--13589[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.240.30" dst_port="1051" src_ip="192.184.232.140" src_port="554"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165899740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.227.115.142"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
4579[label="43.107.238.114;d;4pkt 4fpkt", shape=diamond, color=yellow];
7536[label="43.107.238.114;d;4pkt 4fpkt", shape=hexagon, color=black];
10227[label="145.229.169.142;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12534[label="145.229.169.142;3pkt 3fpkt", shape=invtriangle, color=brown];
13597[label="145.229.169.142;3pkt 3fpkt", shape=invhouse, color=bisque];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 43.107.238.114:1863}[66.6667%]&lt;BR/&gt;{145.229.169.142:*, *:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1501: (14.7059%)&lt;BR/&gt; 1478: (8.82353%)&lt;BR/&gt; 1063: (8.82353%)&lt;BR/&gt; 2792: (5.88235%)&gt;];
}
4579--7536[label="1;4pkt 4fpkt"];
4579--10227[label="0.333333;1pkt 1fpkt"];
4579--12534[label="0.333333;1pkt 1fpkt"];
4579--13597[label="0.333333;1pkt 1fpkt"];
7536--10227[label="0.333333;1pkt 1fpkt"];
7536--12534[label="0.333333;1pkt 1fpkt"];
7536--13597[label="0.333333;1pkt 1fpkt"];
10227--12534[label="1;3pkt 3fpkt"];
10227--13597[label="1;3pkt 3fpkt"];
12534--13597[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="145.229.169.142"/>
      <filter dst_ip="43.107.238.114" dst_port="1863"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.99.216.144"/>
    </slice>
    <from sec="1165899621" usec="0"/>
    <to sec="1165899632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
10268[label="169.230.114.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12553[label="169.230.114.145;1pkt 1fpkt", shape=invtriangle, color=brown];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.114.145:4812, 34.43.22.116:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4812: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10268--12553[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.43.22.116" dst_port="80" src_ip="169.230.114.145" src_port="4812"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
10272[label="139.152.178.145;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12555[label="139.152.178.145;4pkt 4fpkt", shape=invtriangle, color=brown];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.178.145:2633, 219.242.126.36:80}[25%]&lt;BR/&gt;{139.152.178.145:2634, 219.242.126.36:80}[25%]&lt;BR/&gt;{139.152.178.145:2638, 219.242.126.36:80}[25%]&lt;BR/&gt;{139.152.178.145:2639, 219.242.126.36:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2639: (12.5%)&lt;BR/&gt; 2638: (12.5%)&lt;BR/&gt; 2634: (12.5%)&lt;BR/&gt; 2633: (12.5%)&gt;];
}
10272--12555[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="219.242.126.36" dst_port="80" src_ip="139.152.178.145" src_port="2639"/>
      <filter dst_ip="219.242.126.36" dst_port="80" src_ip="139.152.178.145" src_port="2638"/>
      <filter dst_ip="219.242.126.36" dst_port="80" src_ip="139.152.178.145" src_port="2634"/>
      <filter dst_ip="219.242.126.36" dst_port="80" src_ip="139.152.178.145" src_port="2633"/>
    </slice>
    <from sec="1165900129" usec="0"/>
    <to sec="1165900162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
10292[label="41.132.233.146;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12567[label="41.132.233.146;8pkt 8fpkt", shape=invtriangle, color=brown];
13611[label="41.132.233.146;8pkt 8fpkt", shape=invhouse, color=bisque];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.132.233.146:*, 145.229.53.46:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60522: (6.25%)&lt;BR/&gt; 57558: (6.25%)&lt;BR/&gt; 55730: (6.25%)&lt;BR/&gt; 46481: (6.25%)&gt;];
}
10292--12567[label="1;8pkt 8fpkt"];
10292--13611[label="1;8pkt 8fpkt"];
12567--13611[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.53.46" dst_port="80" src_ip="41.132.233.146"/>
    </slice>
    <from sec="1165899610" usec="0"/>
    <to sec="1165900421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.85.126.147"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
10310[label="41.243.254.147;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12575[label="41.243.254.147;3pkt 3fpkt", shape=invtriangle, color=brown];
13614[label="41.243.254.147;3pkt 3fpkt", shape=invhouse, color=bisque];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.243.254.147:2554, 205.55.222.77:53}[33.3333%]&lt;BR/&gt;{41.243.254.147:12408, 205.55.222.77:53}[33.3333%]&lt;BR/&gt;{41.243.254.147:64837, 205.55.222.77:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 64837: (16.6667%)&lt;BR/&gt; 12408: (16.6667%)&lt;BR/&gt; 2554: (16.6667%)&gt;];
}
10310--12575[label="1;3pkt 3fpkt"];
10310--13614[label="1;3pkt 3fpkt"];
12575--13614[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="41.243.254.147" src_port="64837"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="41.243.254.147" src_port="12408"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="41.243.254.147" src_port="2554"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.66.185.148"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
10327[label="169.230.34.149;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12583[label="169.230.34.149;7pkt 7fpkt", shape=invtriangle, color=brown];
13618[label="169.230.34.149;7pkt 7fpkt", shape=invhouse, color=bisque];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.34.149:*, 205.228.135.227:80}[57.1429%]&lt;BR/&gt;{169.230.34.149:*, 200.55.84.4:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1700: (7.14286%)&lt;BR/&gt; 1699: (7.14286%)&lt;BR/&gt; 1698: (7.14286%)&lt;BR/&gt; 1688: (7.14286%)&gt;];
}
10327--12583[label="1;7pkt 7fpkt"];
10327--13618[label="1;7pkt 7fpkt"];
12583--13618[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="205.228.135.227" dst_port="80" src_ip="169.230.34.149"/>
      <filter dst_ip="200.55.84.4" dst_port="80" src_ip="169.230.34.149"/>
    </slice>
    <from sec="1165900078" usec="0"/>
    <to sec="1165900151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
10351[label="169.230.24.150;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12590[label="169.230.24.150;6pkt 6fpkt", shape=invtriangle, color=brown];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.24.150:*, 149.218.55.88:443}[50%]&lt;BR/&gt;{169.230.24.150:*, 214.6.71.105:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2742: (8.33333%)&lt;BR/&gt; 2741: (8.33333%)&lt;BR/&gt; 2740: (8.33333%)&lt;BR/&gt; 2739: (8.33333%)&gt;];
}
10351--12590[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="214.6.71.105" dst_port="443" src_ip="169.230.24.150"/>
      <filter dst_ip="149.218.55.88" dst_port="443" src_ip="169.230.24.150"/>
    </slice>
    <from sec="1165900268" usec="0"/>
    <to sec="1165900387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
10365[label="145.248.212.150;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12595[label="145.248.212.150;5pkt 5fpkt", shape=invtriangle, color=brown];
13624[label="145.248.212.150;5pkt 5fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.212.150:2779, 68.82.187.71:80}[20%]&lt;BR/&gt;{145.248.212.150:2780, 68.82.187.71:80}[20%]&lt;BR/&gt;{145.248.212.150:2770, 68.82.187.88:80}[20%]&lt;BR/&gt;{145.248.212.150:2885, 68.82.187.88:80}[20%]&lt;BR/&gt;{145.248.212.150:2890, 68.82.187.88:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2890: (10%)&lt;BR/&gt; 2885: (10%)&lt;BR/&gt; 2780: (10%)&lt;BR/&gt; 2779: (10%)&gt;];
}
10365--12595[label="1;5pkt 5fpkt"];
10365--13624[label="1;5pkt 5fpkt"];
12595--13624[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="68.82.187.88" dst_port="80" src_ip="145.248.212.150" src_port="2890"/>
      <filter dst_ip="68.82.187.88" dst_port="80" src_ip="145.248.212.150" src_port="2885"/>
      <filter dst_ip="68.82.187.88" dst_port="80" src_ip="145.248.212.150" src_port="2770"/>
      <filter dst_ip="68.82.187.71" dst_port="80" src_ip="145.248.212.150" src_port="2780"/>
      <filter dst_ip="68.82.187.71" dst_port="80" src_ip="145.248.212.150" src_port="2779"/>
    </slice>
    <from sec="1165900294" usec="0"/>
    <to sec="1165900494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
10370[label="215.95.149.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12596[label="215.95.149.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.151:22, 145.229.241.90:59658}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59658: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
10370--12596[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="59658" src_ip="215.95.149.151" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.142.191.151"/>
    </slice>
    <from sec="1165899615" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
10390[label="215.95.149.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12606[label="215.95.149.152;1pkt 1fpkt", shape=invtriangle, color=brown];
13627[label="215.95.149.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.152:22, 145.229.241.90:43697}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43697: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
10390--12606[label="1;1pkt 1fpkt"];
10390--13627[label="1;1pkt 1fpkt"];
12606--13627[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="43697" src_ip="215.95.149.152" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
10391[label="151.227.155.152;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12607[label="151.227.155.152;6pkt 6fpkt", shape=invtriangle, color=brown];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.155.152:*, 218.209.53.31:80}[33.3333%]&lt;BR/&gt;{151.227.155.152:*, 214.23.60.131:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2713: (8.33333%)&lt;BR/&gt; 2712: (8.33333%)&lt;BR/&gt; 2711: (8.33333%)&lt;BR/&gt; 2710: (8.33333%)&gt;];
}
10391--12607[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="214.23.60.131" dst_port="80" src_ip="151.227.155.152"/>
      <filter dst_ip="218.209.53.31" dst_port="80" src_ip="151.227.155.152"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
10396[label="151.227.231.152;90pkt 90fpkt", shape=pentagon, color=darkviolet];
12610[label="151.227.231.152;90pkt 90fpkt", shape=invtriangle, color=brown];
13628[label="151.227.231.152;90pkt 90fpkt", shape=invhouse, color=bisque];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.231.152:1025, *:53}[55.5556%]&lt;BR/&gt;{151.227.231.152:53, *:*}[41.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.8889%)&lt;BR/&gt; 1025: (27.7778%)&lt;BR/&gt; 0: (3.33333%)&lt;BR/&gt; 32768: (1.11111%)&lt;BR/&gt; 60746: (0.555556%)&gt;];
}
10396--12610[label="1;90pkt 90fpkt"];
10396--13628[label="1;90pkt 90fpkt"];
12610--13628[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter src_ip="151.227.231.152" src_port="53"/>
      <filter dst_port="53" src_ip="151.227.231.152" src_port="1025"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
10409[label="219.206.17.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12616[label="219.206.17.154;1pkt 1fpkt", shape=invtriangle, color=brown];
13630[label="219.206.17.154;1pkt 1fpkt", shape=invhouse, color=bisque];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.206.17.154:80, 145.229.42.138:2872}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2872: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10409--12616[label="1;1pkt 1fpkt"];
10409--13630[label="1;1pkt 1fpkt"];
12616--13630[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.42.138" dst_port="2872" src_ip="219.206.17.154" src_port="80"/>
    </slice>
    <from sec="1165900211" usec="0"/>
    <to sec="1165900232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
10418[label="145.229.151.154;25pkt 25fpkt", shape=pentagon, color=darkviolet];
12621[label="145.229.151.154;25pkt 25fpkt", shape=invtriangle, color=brown];
13633[label="145.229.151.154;25pkt 25fpkt", shape=invhouse, color=bisque];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.151.154:993, 68.106.38.16:*}[36%]&lt;BR/&gt;{145.229.151.154:443, 175.146.171.38:*}[36%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (28%)&lt;BR/&gt; 443: (22%)&lt;BR/&gt; 54015: (2%)&lt;BR/&gt; 53998: (2%)&lt;BR/&gt; 50389: (2%)&gt;];
}
10418--12621[label="1;25pkt 25fpkt"];
10418--13633[label="1;25pkt 25fpkt"];
12621--13633[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="175.146.171.38" src_ip="145.229.151.154" src_port="443"/>
      <filter dst_ip="68.106.38.16" src_ip="145.229.151.154" src_port="993"/>
    </slice>
    <from sec="1165899626" usec="0"/>
    <to sec="1165900371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
500[label="194.183.115.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
501[label="151.227.235.53;s;20pkt 20fpkt", shape=diamond, color=yellow];
1162[label="205.249.154.43;s;109pkt 109fpkt", shape=diamond, color=yellow];
1674[label="151.227.151.100;s;387pkt 387fpkt", shape=diamond, color=yellow];
1786[label="70.130.98.1;d;54pkt 54fpkt", shape=diamond, color=yellow];
2392[label="151.227.248.145;s;116pkt 116fpkt", shape=diamond, color=yellow];
2425[label="151.227.177.194;s;55pkt 55fpkt", shape=diamond, color=yellow];
2660[label="214.208.75.68;d;107pkt 107fpkt", shape=diamond, color=yellow];
2828[label="34.43.26.178;d;62pkt 62fpkt", shape=diamond, color=yellow];
2946[label="34.36.89.198;d;102pkt 102fpkt", shape=diamond, color=yellow];
3333[label="169.230.179.161;s;67pkt 67fpkt", shape=diamond, color=yellow];
3403[label="42.126.212.161;d;31pkt 31fpkt", shape=diamond, color=yellow];
3477[label="149.218.32.11;d;37pkt 37fpkt", shape=diamond, color=yellow];
3478[label="151.227.30.210;s;55pkt 55fpkt", shape=diamond, color=yellow];
3915[label="145.229.172.197;s;90pkt 90fpkt", shape=diamond, color=yellow];
4469[label="45.78.219.182;d;76pkt 76fpkt", shape=diamond, color=yellow];
4670[label="149.218.56.120;d;81pkt 81fpkt", shape=diamond, color=yellow];
4674[label="214.29.254.176;d;16pkt 16fpkt", shape=diamond, color=yellow];
5181[label="151.227.119.200;s;66pkt 66fpkt", shape=diamond, color=yellow];
5465[label="194.183.115.156;d;1pkt 1fpkt", shape=hexagon, color=black];
5724[label="151.227.235.53;s;18pkt 18fpkt", shape=hexagon, color=black];
6107[label="70.130.98.1;d;54pkt 54fpkt", shape=hexagon, color=black];
6116[label="151.227.248.145;s;77pkt 77fpkt", shape=hexagon, color=black];
6450[label="151.227.177.194;s;49pkt 49fpkt", shape=hexagon, color=black];
6772[label="151.227.30.210;s;53pkt 53fpkt", shape=hexagon, color=black];
6954[label="151.227.151.100;s;267pkt 267fpkt", shape=hexagon, color=black];
7006[label="34.43.26.178;d;62pkt 62fpkt", shape=hexagon, color=black];
7432[label="145.229.172.197;s;83pkt 83fpkt", shape=hexagon, color=black];
7487[label="45.78.219.182;d;76pkt 76fpkt", shape=hexagon, color=black];
7649[label="149.218.56.120;d;71pkt 71fpkt", shape=hexagon, color=black];
7941[label="169.230.179.161;s;67pkt 67fpkt", shape=hexagon, color=black];
7956[label="205.249.154.43;s;109pkt 109fpkt", shape=hexagon, color=black];
7972[label="151.227.119.200;s;66pkt 66fpkt", shape=hexagon, color=black];
8966[label="205.249.154.43;128pkt 128fpkt", shape=pentagon, color=darkviolet];
9113[label="151.227.235.53;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9305[label="204.6.251.68;36pkt 36fpkt", shape=pentagon, color=darkviolet];
9735[label="151.227.151.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10276[label="151.227.248.145;116pkt 116fpkt", shape=pentagon, color=darkviolet];
10513[label="169.230.179.161;70pkt 70fpkt", shape=pentagon, color=darkviolet];
10982[label="145.229.172.197;98pkt 98fpkt", shape=pentagon, color=darkviolet];
11028[label="151.227.119.200;70pkt 70fpkt", shape=pentagon, color=darkviolet];
11290[label="172.239.68.223;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11894[label="205.249.154.43;128pkt 128fpkt", shape=invtriangle, color=brown];
11974[label="151.227.235.53;2pkt 2fpkt", shape=invtriangle, color=brown];
12559[label="151.227.248.145;116pkt 116fpkt", shape=invtriangle, color=brown];
12664[label="169.230.179.161;70pkt 70fpkt", shape=invtriangle, color=brown];
12902[label="145.229.172.197;98pkt 98fpkt", shape=invtriangle, color=brown];
12922[label="151.227.119.200;70pkt 70fpkt", shape=invtriangle, color=brown];
13055[label="172.239.68.223;2pkt 2fpkt", shape=invtriangle, color=brown];
13341[label="151.227.235.53;2pkt 2fpkt", shape=invhouse, color=bisque];
13766[label="145.229.172.197;98pkt 98fpkt", shape=invhouse, color=bisque];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[73.913%]&lt;BR/&gt;{151.227.151.100:*, *:*}[31.8294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.9986%)&lt;BR/&gt; 443: (3.85656%)&lt;BR/&gt; 995: (2.73342%)&lt;BR/&gt; 0: (0.514208%)&lt;BR/&gt; 61425: (0.500677%)&gt;];
}
500--501[label="1;1pkt 1fpkt"];
500--5465[label="1;1pkt 1fpkt"];
500--5724[label="1;1pkt 1fpkt"];
500--9113[label="1;1pkt 1fpkt"];
500--11974[label="1;1pkt 1fpkt"];
500--13341[label="1;1pkt 1fpkt"];
501--616[label="0.1;2pkt 2fpkt"];
501--786[label="0.05;1pkt 1fpkt"];
501--1042[label="0.05;1pkt 1fpkt"];
501--1428[label="0.05;1pkt 1fpkt"];
501--1988[label="0.05;1pkt 1fpkt"];
501--2828[label="0.15;3pkt 3fpkt"];
501--5465[label="1;1pkt 1fpkt"];
501--5505[label="0.05;1pkt 1fpkt"];
501--5724[label="1;18pkt 18fpkt"];
501--6483[label="0.05;1pkt 1fpkt"];
501--6841[label="0.05;1pkt 1fpkt"];
501--7006[label="0.15;3pkt 3fpkt"];
501--9113[label="1;2pkt 2fpkt"];
501--11974[label="1;2pkt 2fpkt"];
501--13341[label="1;2pkt 2fpkt"];
1162--1786[label="0.981481;53pkt 53fpkt"];
1162--2108[label="0.0550459;6pkt 6fpkt"];
1162--2660[label="0.0280374;3pkt 3fpkt"];
1162--4222[label="0.00917431;1pkt 1fpkt"];
1162--6107[label="0.981481;53pkt 53fpkt"];
1162--7956[label="1;109pkt 109fpkt"];
1162--8966[label="1;109pkt 109fpkt"];
1162--11894[label="1;109pkt 109fpkt"];
1674--1675[label="0.00865801;2pkt 2fpkt"];
1674--1699[label="0.009375;3pkt 3fpkt"];
1674--1708[label="0.0307692;6pkt 6fpkt"];
1674--1793[label="0.0516796;20pkt 20fpkt"];
1674--1990[label="0.0357143;8pkt 8fpkt"];
1674--2394[label="0.038835;4pkt 4fpkt"];
1674--2828[label="0.306452;19pkt 19fpkt"];
1674--4469[label="1;76pkt 76fpkt"];
1674--5135[label="0.0266667;2pkt 2fpkt"];
1674--5505[label="0.0594315;23pkt 23fpkt"];
1674--5626[label="0.03125;1pkt 1fpkt"];
1674--5821[label="0.0277778;2pkt 2fpkt"];
1674--6063[label="0.00516796;2pkt 2fpkt"];
1674--6954[label="1;267pkt 267fpkt"];
1674--6971[label="0.0307692;6pkt 6fpkt"];
1674--7006[label="0.306452;19pkt 19fpkt"];
1674--7197[label="0.0103359;4pkt 4fpkt"];
1674--7250[label="0.0187793;4pkt 4fpkt"];
1674--7375[label="0.038835;4pkt 4fpkt"];
1674--7487[label="1;76pkt 76fpkt"];
1674--7958[label="0.0266667;2pkt 2fpkt"];
1674--9735[label="0.5;1pkt 1fpkt"];
1786--5466[label="0.0185185;1pkt 1fpkt"];
1786--6107[label="1;54pkt 54fpkt"];
1786--7956[label="0.981481;53pkt 53fpkt"];
1786--8966[label="0.981481;53pkt 53fpkt"];
1786--11894[label="0.981481;53pkt 53fpkt"];
2392--2660[label="0.0841121;9pkt 9fpkt"];
2392--2946[label="0.745098;76pkt 76fpkt"];
2392--3265[label="0.0120482;1pkt 1fpkt"];
2392--5505[label="0.0172414;2pkt 2fpkt"];
2392--6116[label="1;77pkt 77fpkt"];
2392--7546[label="0.0172414;2pkt 2fpkt"];
2392--10276[label="1;116pkt 116fpkt"];
2392--12559[label="1;116pkt 116fpkt"];
2425--2828[label="0.218182;12pkt 12fpkt"];
2425--3307[label="0.109091;6pkt 6fpkt"];
2425--3403[label="0.903226;28pkt 28fpkt"];
2425--3820[label="0.0363636;2pkt 2fpkt"];
2425--4674[label="0.0625;1pkt 1fpkt"];
2425--6450[label="1;49pkt 49fpkt"];
2425--6987[label="0.109091;6pkt 6fpkt"];
2425--7006[label="0.218182;12pkt 12fpkt"];
2425--7349[label="0.0181818;1pkt 1fpkt"];
2425--7675[label="0.0363636;2pkt 2fpkt"];
2660--3333[label="0.283582;19pkt 19fpkt"];
2660--3858[label="0.00952381;1pkt 1fpkt"];
2660--3915[label="0.0222222;2pkt 2fpkt"];
2660--5181[label="0.0757576;5pkt 5fpkt"];
2660--5422[label="0.140187;15pkt 15fpkt"];
2660--5718[label="0.00934579;1pkt 1fpkt"];
2660--5728[label="0.046729;5pkt 5fpkt"];
2660--5808[label="0.00934579;1pkt 1fpkt"];
2660--6116[label="0.0779221;6pkt 6fpkt"];
2660--6350[label="0.00934579;1pkt 1fpkt"];
2660--6559[label="0.00934579;1pkt 1fpkt"];
2660--6949[label="0.00934579;1pkt 1fpkt"];
2660--7050[label="0.0149254;1pkt 1fpkt"];
2660--7432[label="0.0240964;2pkt 2fpkt"];
2660--7941[label="0.283582;19pkt 19fpkt"];
2660--7956[label="0.0280374;3pkt 3fpkt"];
2660--7972[label="0.0757576;5pkt 5fpkt"];
2660--8167[label="0.0747664;8pkt 8fpkt"];
2660--8966[label="0.0280374;3pkt 3fpkt"];
2660--8977[label="0.0294118;1pkt 1fpkt"];
2660--9593[label="0.153846;6pkt 6fpkt"];
2660--9669[label="0.0625;2pkt 2fpkt"];
2660--9781[label="0.0280374;3pkt 3fpkt"];
2660--10017[label="0.025641;2pkt 2fpkt"];
2660--10276[label="0.0841121;9pkt 9fpkt"];
2660--10414[label="0.140187;15pkt 15fpkt"];
2660--10513[label="0.271429;19pkt 19fpkt"];
2660--10679[label="0.0454545;1pkt 1fpkt"];
2660--10705[label="0.0186916;2pkt 2fpkt"];
2660--10890[label="0.037037;1pkt 1fpkt"];
2660--10982[label="0.0204082;2pkt 2fpkt"];
2660--11028[label="0.0714286;5pkt 5fpkt"];
2660--11033[label="0.0280374;3pkt 3fpkt"];
2660--11062[label="0.128571;9pkt 9fpkt"];
2660--11357[label="0.00934579;1pkt 1fpkt"];
2660--11894[label="0.0280374;3pkt 3fpkt"];
2660--11899[label="0.0294118;1pkt 1fpkt"];
2660--12218[label="0.153846;6pkt 6fpkt"];
2660--12259[label="0.0625;2pkt 2fpkt"];
2660--12430[label="0.025641;2pkt 2fpkt"];
2660--12559[label="0.0841121;9pkt 9fpkt"];
2660--12664[label="0.271429;19pkt 19fpkt"];
2660--12750[label="0.0186916;2pkt 2fpkt"];
2660--12852[label="0.037037;1pkt 1fpkt"];
2660--12902[label="0.0204082;2pkt 2fpkt"];
2660--12922[label="0.0714286;5pkt 5fpkt"];
2660--13547[label="0.025641;2pkt 2fpkt"];
2660--13742[label="0.037037;1pkt 1fpkt"];
2660--13766[label="0.0204082;2pkt 2fpkt"];
2828--5432[label="0.0322581;2pkt 2fpkt"];
2828--5724[label="0.111111;2pkt 2fpkt"];
2828--6399[label="0.0322581;2pkt 2fpkt"];
2828--6450[label="0.244898;12pkt 12fpkt"];
2828--6692[label="0.0322581;2pkt 2fpkt"];
2828--6954[label="0.241935;15pkt 15fpkt"];
2828--7006[label="1;62pkt 62fpkt"];
2828--9305[label="0.0833333;3pkt 3fpkt"];
2828--11431[label="0.0483871;3pkt 3fpkt"];
2828--11732[label="0.0483871;3pkt 3fpkt"];
2946--4372[label="0.00980392;1pkt 1fpkt"];
2946--4608[label="0.00980392;1pkt 1fpkt"];
2946--5473[label="0.00980392;1pkt 1fpkt"];
2946--6116[label="0.805195;62pkt 62fpkt"];
2946--6350[label="0.00980392;1pkt 1fpkt"];
2946--6559[label="0.00980392;1pkt 1fpkt"];
2946--7884[label="0.0322581;1pkt 1fpkt"];
2946--9167[label="0.03125;1pkt 1fpkt"];
2946--9781[label="0.00980392;1pkt 1fpkt"];
2946--10276[label="0.745098;76pkt 76fpkt"];
2946--10475[label="0.030303;1pkt 1fpkt"];
2946--11037[label="0.00980392;1pkt 1fpkt"];
2946--12559[label="0.745098;76pkt 76fpkt"];
3333--4670[label="0.462687;31pkt 31fpkt"];
3333--5505[label="0.0149254;1pkt 1fpkt"];
3333--7649[label="0.41791;28pkt 28fpkt"];
3333--7941[label="1;67pkt 67fpkt"];
3333--10513[label="1;67pkt 67fpkt"];
3333--12664[label="1;67pkt 67fpkt"];
3403--5924[label="0.285714;2pkt 2fpkt"];
3403--6450[label="0.774194;24pkt 24fpkt"];
3403--8689[label="0.25;3pkt 3fpkt"];
3477--3478[label="0.594595;22pkt 22fpkt"];
3477--3858[label="0.0540541;2pkt 2fpkt"];
3477--6772[label="0.594595;22pkt 22fpkt"];
3477--7050[label="0.0540541;2pkt 2fpkt"];
3477--7194[label="0.0540541;2pkt 2fpkt"];
3477--7203[label="0.108108;4pkt 4fpkt"];
3477--10778[label="0.027027;1pkt 1fpkt"];
3477--12789[label="0.027027;1pkt 1fpkt"];
3478--4670[label="0.290909;16pkt 16fpkt"];
3478--6772[label="1;53pkt 53fpkt"];
3478--7649[label="0.290909;16pkt 16fpkt"];
3915--4222[label="0.0111111;1pkt 1fpkt"];
3915--6608[label="0.0111111;1pkt 1fpkt"];
3915--6841[label="0.0111111;1pkt 1fpkt"];
3915--7366[label="0.0111111;1pkt 1fpkt"];
3915--7432[label="1;83pkt 83fpkt"];
3915--7632[label="0.0111111;1pkt 1fpkt"];
3915--10982[label="1;90pkt 90fpkt"];
3915--12902[label="1;90pkt 90fpkt"];
3915--13766[label="1;90pkt 90fpkt"];
4469--6954[label="0.75;57pkt 57fpkt"];
4469--7487[label="1;76pkt 76fpkt"];
4670--5181[label="0.0909091;6pkt 6fpkt"];
4670--5422[label="0.0740741;6pkt 6fpkt"];
4670--5469[label="0.0123457;1pkt 1fpkt"];
4670--5596[label="0.0123457;1pkt 1fpkt"];
4670--6772[label="0.301887;16pkt 16fpkt"];
4670--6890[label="0.037037;3pkt 3fpkt"];
4670--7194[label="0.037037;3pkt 3fpkt"];
4670--7203[label="0.0123457;1pkt 1fpkt"];
4670--7649[label="1;71pkt 71fpkt"];
4670--7941[label="0.462687;31pkt 31fpkt"];
4670--7972[label="0.0909091;6pkt 6fpkt"];
4670--8167[label="0.0617284;5pkt 5fpkt"];
4670--10414[label="0.0740741;6pkt 6fpkt"];
4670--10513[label="0.442857;31pkt 31fpkt"];
4670--11028[label="0.0857143;6pkt 6fpkt"];
4670--11062[label="0.0571429;4pkt 4fpkt"];
4670--12664[label="0.442857;31pkt 31fpkt"];
4670--12922[label="0.0857143;6pkt 6fpkt"];
4674--6450[label="0.0625;1pkt 1fpkt"];
4674--11290[label="0.5;1pkt 1fpkt"];
4674--13055[label="0.5;1pkt 1fpkt"];
5181--5590[label="0.0151515;1pkt 1fpkt"];
5181--6483[label="0.0454545;3pkt 3fpkt"];
5181--7375[label="0.030303;2pkt 2fpkt"];
5181--7649[label="0.0606061;4pkt 4fpkt"];
5181--7972[label="1;66pkt 66fpkt"];
5181--8174[label="0.0151515;1pkt 1fpkt"];
5181--11028[label="1;66pkt 66fpkt"];
5181--12922[label="1;66pkt 66fpkt"];
5465--5724[label="1;1pkt 1fpkt"];
5465--9113[label="1;1pkt 1fpkt"];
5465--11974[label="1;1pkt 1fpkt"];
5465--13341[label="1;1pkt 1fpkt"];
5724--6483[label="0.0555556;1pkt 1fpkt"];
5724--6841[label="0.0555556;1pkt 1fpkt"];
5724--7006[label="0.111111;2pkt 2fpkt"];
5724--9113[label="1;2pkt 2fpkt"];
5724--11974[label="1;2pkt 2fpkt"];
5724--13341[label="1;2pkt 2fpkt"];
6107--7956[label="0.981481;53pkt 53fpkt"];
6107--8966[label="0.981481;53pkt 53fpkt"];
6107--11894[label="0.981481;53pkt 53fpkt"];
6116--10276[label="1;77pkt 77fpkt"];
6116--12559[label="1;77pkt 77fpkt"];
6450--6987[label="0.122449;6pkt 6fpkt"];
6450--7006[label="0.244898;12pkt 12fpkt"];
6450--7349[label="0.0204082;1pkt 1fpkt"];
6450--7675[label="0.0408163;2pkt 2fpkt"];
6772--7649[label="0.301887;16pkt 16fpkt"];
6954--6971[label="0.0307692;6pkt 6fpkt"];
6954--7006[label="0.241935;15pkt 15fpkt"];
6954--7197[label="0.0149813;4pkt 4fpkt"];
6954--7250[label="0.0140845;3pkt 3fpkt"];
6954--7375[label="0.00970874;1pkt 1fpkt"];
6954--7487[label="0.75;57pkt 57fpkt"];
6954--7958[label="0.0266667;2pkt 2fpkt"];
6954--9735[label="0.5;1pkt 1fpkt"];
7006--9305[label="0.0833333;3pkt 3fpkt"];
7006--11431[label="0.0483871;3pkt 3fpkt"];
7006--11732[label="0.0483871;3pkt 3fpkt"];
7432--7632[label="0.0120482;1pkt 1fpkt"];
7432--10982[label="1;83pkt 83fpkt"];
7432--12902[label="1;83pkt 83fpkt"];
7432--13766[label="1;83pkt 83fpkt"];
7649--7941[label="0.41791;28pkt 28fpkt"];
7649--7972[label="0.0606061;4pkt 4fpkt"];
7649--8167[label="0.0704225;5pkt 5fpkt"];
7649--10414[label="0.084507;6pkt 6fpkt"];
7649--10513[label="0.4;28pkt 28fpkt"];
7649--11028[label="0.0571429;4pkt 4fpkt"];
7649--11062[label="0.0285714;2pkt 2fpkt"];
7649--12664[label="0.4;28pkt 28fpkt"];
7649--12922[label="0.0571429;4pkt 4fpkt"];
7941--10513[label="1;67pkt 67fpkt"];
7941--12664[label="1;67pkt 67fpkt"];
7956--8966[label="1;109pkt 109fpkt"];
7956--11894[label="1;109pkt 109fpkt"];
7972--8174[label="0.0151515;1pkt 1fpkt"];
7972--11028[label="1;66pkt 66fpkt"];
7972--12922[label="1;66pkt 66fpkt"];
8966--11894[label="1;128pkt 128fpkt"];
9113--11974[label="1;2pkt 2fpkt"];
9113--13341[label="1;2pkt 2fpkt"];
10276--12559[label="1;116pkt 116fpkt"];
10513--12664[label="1;70pkt 70fpkt"];
10982--12902[label="1;98pkt 98fpkt"];
10982--13766[label="1;98pkt 98fpkt"];
11028--12922[label="1;70pkt 70fpkt"];
11290--13055[label="1;2pkt 2fpkt"];
11974--13341[label="1;2pkt 2fpkt"];
12902--13766[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter src_ip="151.227.151.100"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
10427[label="172.239.143.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12625[label="172.239.143.155;3pkt 3fpkt", shape=invtriangle, color=brown];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.239.143.155:1843, 44.165.88.33:443}[33.3333%]&lt;BR/&gt;{172.239.143.155:1280, 217.224.147.100:21}[33.3333%]&lt;BR/&gt;{172.239.143.155:1282, 217.224.147.100:21}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (33.3333%)&lt;BR/&gt; 1843: (16.6667%)&lt;BR/&gt; 1282: (16.6667%)&lt;BR/&gt; 1280: (16.6667%)&lt;BR/&gt; 443: (16.6667%)&gt;];
}
10427--12625[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="217.224.147.100" dst_port="21" src_ip="172.239.143.155" src_port="1282"/>
      <filter dst_ip="217.224.147.100" dst_port="21" src_ip="172.239.143.155" src_port="1280"/>
      <filter dst_ip="44.165.88.33" dst_port="443" src_ip="172.239.143.155" src_port="1843"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
10431[label="201.165.23.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12626[label="201.165.23.156;2pkt 2fpkt", shape=invtriangle, color=brown];
13636[label="201.165.23.156;2pkt 2fpkt", shape=invhouse, color=bisque];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.165.23.156:8967, 205.55.222.77:53}[50%]&lt;BR/&gt;{201.165.23.156:51440, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 51440: (25%)&lt;BR/&gt; 8967: (25%)&gt;];
}
10431--12626[label="1;2pkt 2fpkt"];
10431--13636[label="1;2pkt 2fpkt"];
12626--13636[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="201.165.23.156" src_port="51440"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="201.165.23.156" src_port="8967"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
379[label="145.229.173.10;d;55pkt 55fpkt", shape=diamond, color=yellow];
382[label="214.41.205.111;s;7pkt 7fpkt", shape=diamond, color=yellow];
498[label="169.230.163.181;d;174pkt 174fpkt", shape=diamond, color=yellow];
1223[label="219.206.44.39;s;133pkt 133fpkt", shape=diamond, color=yellow];
1224[label="145.229.173.28;d;179pkt 179fpkt", shape=diamond, color=yellow];
1258[label="217.128.2.220;s;3pkt 3fpkt", shape=diamond, color=yellow];
1259[label="151.227.155.96;d;28pkt 28fpkt", shape=diamond, color=yellow];
1868[label="219.206.44.43;s;81pkt 81fpkt", shape=diamond, color=yellow];
2244[label="43.180.43.64;s;77pkt 77fpkt", shape=diamond, color=yellow];
2743[label="41.221.10.174;s;201pkt 201fpkt", shape=diamond, color=yellow];
2891[label="43.180.43.66;s;78pkt 78fpkt", shape=diamond, color=yellow];
4615[label="145.229.168.227;d;27pkt 27fpkt", shape=diamond, color=yellow];
5188[label="145.229.168.85;d;22pkt 22fpkt", shape=diamond, color=yellow];
5399[label="204.7.108.211;s;4pkt 4fpkt", shape=diamond, color=yellow];
5663[label="219.206.44.39;s;121pkt 121fpkt", shape=hexagon, color=black];
6221[label="145.229.173.10;d;49pkt 49fpkt", shape=hexagon, color=black];
6222[label="214.41.205.111;s;7pkt 7fpkt", shape=hexagon, color=black];
6431[label="43.180.43.66;s;55pkt 55fpkt", shape=hexagon, color=black];
6660[label="43.180.43.64;s;55pkt 55fpkt", shape=hexagon, color=black];
6730[label="219.206.44.43;s;44pkt 44fpkt", shape=hexagon, color=black];
7457[label="151.227.155.96;d;28pkt 28fpkt", shape=hexagon, color=black];
7712[label="145.229.173.28;d;179pkt 179fpkt", shape=hexagon, color=black];
7975[label="145.229.168.85;d;22pkt 22fpkt", shape=hexagon, color=black];
8454[label="214.10.215.8;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8806[label="219.206.18.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8878[label="219.206.44.38;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8889[label="219.206.44.39;147pkt 147fpkt", shape=pentagon, color=darkviolet];
9145[label="68.213.136.56;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9301[label="68.213.138.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9453[label="68.213.138.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9859[label="214.41.205.111;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10074[label="45.77.21.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10194[label="201.131.83.140;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10459[label="214.74.173.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10700[label="41.221.10.174;215pkt 215fpkt", shape=pentagon, color=darkviolet];
11171[label="204.7.108.211;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11258[label="217.128.2.220;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11817[label="219.206.18.34;1pkt 1fpkt", shape=invtriangle, color=brown];
11857[label="219.206.44.38;12pkt 12fpkt", shape=invtriangle, color=brown];
11863[label="219.206.44.39;147pkt 147fpkt", shape=invtriangle, color=brown];
12078[label="68.213.138.68;1pkt 1fpkt", shape=invtriangle, color=brown];
12352[label="214.41.205.111;8pkt 8fpkt", shape=invtriangle, color=brown];
12516[label="201.131.83.140;7pkt 7fpkt", shape=invtriangle, color=brown];
12639[label="214.74.173.157;1pkt 1fpkt", shape=invtriangle, color=brown];
12990[label="204.7.108.211;6pkt 6fpkt", shape=invtriangle, color=brown];
13305[label="219.206.44.39;147pkt 147fpkt", shape=invhouse, color=bisque];
13586[label="201.131.83.140;7pkt 7fpkt", shape=invhouse, color=bisque];
13641[label="214.74.173.157;1pkt 1fpkt", shape=invhouse, color=bisque];
13801[label="204.7.108.211;6pkt 6fpkt", shape=invhouse, color=bisque];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.221.10.174:80, *:*}[23.3708%]&lt;BR/&gt;{*:*, 145.229.173.28:*}[20.1124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.6825%)&lt;BR/&gt; 995: (6.34921%)&lt;BR/&gt; 443: (2.38095%)&lt;BR/&gt; 33435: (0.313283%)&lt;BR/&gt; 33436: (0.271512%)&gt;];
}
379--382[label="0.571429;4pkt 4fpkt"];
379--506[label="0.0363636;2pkt 2fpkt"];
379--1670[label="0.0545455;3pkt 3fpkt"];
379--2327[label="0.0363636;2pkt 2fpkt"];
379--2366[label="0.145455;8pkt 8fpkt"];
379--2435[label="0.0181818;1pkt 1fpkt"];
379--2891[label="0.0727273;4pkt 4fpkt"];
379--4244[label="0.0181818;1pkt 1fpkt"];
379--5467[label="0.0363636;2pkt 2fpkt"];
379--6221[label="1;49pkt 49fpkt"];
379--6222[label="0.571429;4pkt 4fpkt"];
379--6415[label="0.145455;8pkt 8fpkt"];
379--6431[label="0.0727273;4pkt 4fpkt"];
379--6456[label="0.0188679;1pkt 1fpkt"];
379--6664[label="0.0545455;3pkt 3fpkt"];
379--7007[label="0.0363636;2pkt 2fpkt"];
379--7930[label="0.0181818;1pkt 1fpkt"];
379--8268[label="0.109091;6pkt 6fpkt"];
379--8272[label="0.109091;6pkt 6fpkt"];
379--8286[label="0.109091;6pkt 6fpkt"];
379--8290[label="0.109091;6pkt 6fpkt"];
379--9596[label="0.0363636;2pkt 2fpkt"];
379--9859[label="0.5;4pkt 4fpkt"];
379--11186[label="0.0181818;1pkt 1fpkt"];
379--12220[label="0.0363636;2pkt 2fpkt"];
379--12352[label="0.5;4pkt 4fpkt"];
379--12381[label="0.0363636;2pkt 2fpkt"];
379--13448[label="0.0363636;2pkt 2fpkt"];
382--498[label="0.285714;2pkt 2fpkt"];
382--5945[label="0.142857;1pkt 1fpkt"];
382--6221[label="0.571429;4pkt 4fpkt"];
382--6222[label="1;7pkt 7fpkt"];
382--8264[label="0.142857;1pkt 1fpkt"];
382--8270[label="0.142857;1pkt 1fpkt"];
382--8282[label="0.142857;1pkt 1fpkt"];
382--8288[label="0.142857;1pkt 1fpkt"];
382--8298[label="0.142857;1pkt 1fpkt"];
382--9859[label="1;7pkt 7fpkt"];
382--12352[label="1;7pkt 7fpkt"];
498--692[label="0.00574713;1pkt 1fpkt"];
498--1148[label="0.111111;1pkt 1fpkt"];
498--1258[label="1;3pkt 3fpkt"];
498--2447[label="0.2;2pkt 2fpkt"];
498--5520[label="0.047619;1pkt 1fpkt"];
498--6137[label="0.2;2pkt 2fpkt"];
498--6222[label="0.285714;2pkt 2fpkt"];
498--8268[label="0.0287356;5pkt 5fpkt"];
498--8286[label="0.0287356;5pkt 5fpkt"];
498--8454[label="1;8pkt 8fpkt"];
498--8806[label="1;1pkt 1fpkt"];
498--8952[label="0.2;1pkt 1fpkt"];
498--9145[label="1;6pkt 6fpkt"];
498--9301[label="1;1pkt 1fpkt"];
498--9453[label="1;2pkt 2fpkt"];
498--9859[label="0.25;2pkt 2fpkt"];
498--10074[label="1;1pkt 1fpkt"];
498--10194[label="1;7pkt 7fpkt"];
498--10459[label="1;1pkt 1fpkt"];
498--11258[label="1;6pkt 6fpkt"];
498--11283[label="1;3pkt 3fpkt"];
498--11444[label="0.00574713;1pkt 1fpkt"];
498--11817[label="1;1pkt 1fpkt"];
498--12078[label="1;1pkt 1fpkt"];
498--12352[label="0.25;2pkt 2fpkt"];
498--12516[label="1;7pkt 7fpkt"];
498--12639[label="1;1pkt 1fpkt"];
498--13049[label="1;3pkt 3fpkt"];
498--13129[label="0.00574713;1pkt 1fpkt"];
498--13586[label="1;7pkt 7fpkt"];
498--13641[label="1;1pkt 1fpkt"];
498--13835[label="1;3pkt 3fpkt"];
498--13872[label="0.00574713;1pkt 1fpkt"];
1223--1224[label="0.887218;118pkt 118fpkt"];
1223--1259[label="0.0357143;1pkt 1fpkt"];
1223--4615[label="0.0740741;2pkt 2fpkt"];
1223--5663[label="1;121pkt 121fpkt"];
1223--7457[label="0.0357143;1pkt 1fpkt"];
1223--7712[label="0.887218;118pkt 118fpkt"];
1223--8272[label="0.0977444;13pkt 13fpkt"];
1223--8290[label="0.0977444;13pkt 13fpkt"];
1223--8889[label="1;133pkt 133fpkt"];
1223--11863[label="1;133pkt 133fpkt"];
1223--13305[label="1;133pkt 133fpkt"];
1224--1868[label="0.345679;28pkt 28fpkt"];
1224--2327[label="0.0111732;2pkt 2fpkt"];
1224--5663[label="0.876033;106pkt 106fpkt"];
1224--6730[label="0.272727;12pkt 12fpkt"];
1224--7007[label="0.0175439;2pkt 2fpkt"];
1224--7712[label="1;179pkt 179fpkt"];
1224--8272[label="0.0837989;15pkt 15fpkt"];
1224--8290[label="0.0837989;15pkt 15fpkt"];
1224--8878[label="0.666667;8pkt 8fpkt"];
1224--8889[label="0.802721;118pkt 118fpkt"];
1224--9596[label="0.0111732;2pkt 2fpkt"];
1224--11857[label="0.666667;8pkt 8fpkt"];
1224--11863[label="0.802721;118pkt 118fpkt"];
1224--12220[label="0.0111732;2pkt 2fpkt"];
1224--13305[label="0.802721;118pkt 118fpkt"];
1224--13448[label="0.0111732;2pkt 2fpkt"];
1258--11258[label="1;3pkt 3fpkt"];
1259--1868[label="0.964286;27pkt 27fpkt"];
1259--5663[label="0.0357143;1pkt 1fpkt"];
1259--6730[label="0.5;14pkt 14fpkt"];
1259--7457[label="1;28pkt 28fpkt"];
1259--8268[label="0.0714286;2pkt 2fpkt"];
1259--8272[label="0.107143;3pkt 3fpkt"];
1259--8286[label="0.0714286;2pkt 2fpkt"];
1259--8290[label="0.107143;3pkt 3fpkt"];
1259--8889[label="0.0357143;1pkt 1fpkt"];
1259--11863[label="0.0357143;1pkt 1fpkt"];
1259--13305[label="0.0357143;1pkt 1fpkt"];
1868--4224[label="0.0263158;1pkt 1fpkt"];
1868--6730[label="1;44pkt 44fpkt"];
1868--7457[label="0.964286;27pkt 27fpkt"];
1868--7549[label="0.0493827;4pkt 4fpkt"];
1868--7712[label="0.345679;28pkt 28fpkt"];
1868--8266[label="0.0123457;1pkt 1fpkt"];
1868--8268[label="0.0246914;2pkt 2fpkt"];
1868--8272[label="0.0617284;5pkt 5fpkt"];
1868--8284[label="0.0123457;1pkt 1fpkt"];
1868--8286[label="0.0246914;2pkt 2fpkt"];
1868--8290[label="0.0617284;5pkt 5fpkt"];
2244--2900[label="0.015625;1pkt 1fpkt"];
2244--4615[label="0.0740741;2pkt 2fpkt"];
2244--5188[label="0.136364;3pkt 3fpkt"];
2244--6660[label="1;55pkt 55fpkt"];
2244--7570[label="0.012987;1pkt 1fpkt"];
2244--7975[label="0.136364;3pkt 3fpkt"];
2743--2918[label="0.0185185;1pkt 1fpkt"];
2743--2923[label="0.04;1pkt 1fpkt"];
2743--4615[label="0.259259;7pkt 7fpkt"];
2743--5187[label="0.037037;2pkt 2fpkt"];
2743--5192[label="0.0212766;2pkt 2fpkt"];
2743--5436[label="0.039801;8pkt 8fpkt"];
2743--5553[label="0.0142857;1pkt 1fpkt"];
2743--5607[label="0.00558659;1pkt 1fpkt"];
2743--5940[label="0.0149254;3pkt 3fpkt"];
2743--5941[label="0.0348259;7pkt 7fpkt"];
2743--5943[label="0.0199005;4pkt 4fpkt"];
2743--6208[label="0.0298507;6pkt 6fpkt"];
2743--6212[label="0.00497512;1pkt 1fpkt"];
2743--6232[label="0.00497512;1pkt 1fpkt"];
2743--6235[label="0.00497512;1pkt 1fpkt"];
2743--6261[label="0.0149254;3pkt 3fpkt"];
2743--6569[label="0.00497512;1pkt 1fpkt"];
2743--7522[label="0.00497512;1pkt 1fpkt"];
2743--7722[label="0.0208333;1pkt 1fpkt"];
2743--8104[label="0.0142857;1pkt 1fpkt"];
2743--8259[label="0.00497512;1pkt 1fpkt"];
2743--8268[label="0.079602;16pkt 16fpkt"];
2743--8272[label="0.0646766;13pkt 13fpkt"];
2743--8275[label="0.0497512;10pkt 10fpkt"];
2743--8278[label="0.00497512;1pkt 1fpkt"];
2743--8286[label="0.079602;16pkt 16fpkt"];
2743--8290[label="0.0646766;13pkt 13fpkt"];
2743--8293[label="0.0497512;10pkt 10fpkt"];
2743--8294[label="0.00497512;1pkt 1fpkt"];
2743--10700[label="0.995025;200pkt 200fpkt"];
2891--4615[label="0.037037;1pkt 1fpkt"];
2891--5188[label="0.409091;9pkt 9fpkt"];
2891--6221[label="0.0816327;4pkt 4fpkt"];
2891--6235[label="0.0897436;7pkt 7fpkt"];
2891--6431[label="1;55pkt 55fpkt"];
2891--7570[label="0.0128205;1pkt 1fpkt"];
2891--7975[label="0.409091;9pkt 9fpkt"];
4615--5663[label="0.0740741;2pkt 2fpkt"];
4615--5828[label="0.148148;4pkt 4fpkt"];
4615--6012[label="0.037037;1pkt 1fpkt"];
4615--6582[label="0.037037;1pkt 1fpkt"];
4615--6660[label="0.0740741;2pkt 2fpkt"];
4615--6664[label="0.037037;1pkt 1fpkt"];
4615--7007[label="0.037037;1pkt 1fpkt"];
4615--8272[label="0.037037;1pkt 1fpkt"];
4615--8275[label="0.0740741;2pkt 2fpkt"];
4615--8290[label="0.037037;1pkt 1fpkt"];
4615--8293[label="0.0740741;2pkt 2fpkt"];
4615--8889[label="0.0740741;2pkt 2fpkt"];
4615--9596[label="0.037037;1pkt 1fpkt"];
4615--10700[label="0.259259;7pkt 7fpkt"];
4615--11863[label="0.0740741;2pkt 2fpkt"];
4615--12220[label="0.037037;1pkt 1fpkt"];
4615--13305[label="0.0740741;2pkt 2fpkt"];
4615--13448[label="0.037037;1pkt 1fpkt"];
5188--5399[label="1;4pkt 4fpkt"];
5188--6431[label="0.318182;7pkt 7fpkt"];
5188--6660[label="0.0909091;2pkt 2fpkt"];
5188--7949[label="0.0909091;2pkt 2fpkt"];
5188--7975[label="1;22pkt 22fpkt"];
5188--11171[label="0.666667;4pkt 4fpkt"];
5188--12990[label="0.666667;4pkt 4fpkt"];
5188--13801[label="0.666667;4pkt 4fpkt"];
5399--7975[label="1;4pkt 4fpkt"];
5399--11171[label="1;4pkt 4fpkt"];
5399--12990[label="1;4pkt 4fpkt"];
5399--13801[label="1;4pkt 4fpkt"];
5663--7457[label="0.0357143;1pkt 1fpkt"];
5663--7712[label="0.876033;106pkt 106fpkt"];
5663--8272[label="0.107438;13pkt 13fpkt"];
5663--8290[label="0.107438;13pkt 13fpkt"];
5663--8889[label="1;121pkt 121fpkt"];
5663--11863[label="1;121pkt 121fpkt"];
5663--13305[label="1;121pkt 121fpkt"];
6221--6222[label="0.571429;4pkt 4fpkt"];
6221--6415[label="0.163265;8pkt 8fpkt"];
6221--6431[label="0.0816327;4pkt 4fpkt"];
6221--6456[label="0.0204082;1pkt 1fpkt"];
6221--6664[label="0.0612245;3pkt 3fpkt"];
6221--7007[label="0.0408163;2pkt 2fpkt"];
6221--7930[label="0.0204082;1pkt 1fpkt"];
6221--8268[label="0.122449;6pkt 6fpkt"];
6221--8272[label="0.122449;6pkt 6fpkt"];
6221--8286[label="0.122449;6pkt 6fpkt"];
6221--8290[label="0.122449;6pkt 6fpkt"];
6221--9596[label="0.0408163;2pkt 2fpkt"];
6221--9859[label="0.5;4pkt 4fpkt"];
6221--11186[label="0.0204082;1pkt 1fpkt"];
6221--12220[label="0.0408163;2pkt 2fpkt"];
6221--12352[label="0.5;4pkt 4fpkt"];
6221--12381[label="0.0408163;2pkt 2fpkt"];
6221--13448[label="0.0408163;2pkt 2fpkt"];
6222--8264[label="0.142857;1pkt 1fpkt"];
6222--8270[label="0.142857;1pkt 1fpkt"];
6222--8282[label="0.142857;1pkt 1fpkt"];
6222--8288[label="0.142857;1pkt 1fpkt"];
6222--8298[label="0.142857;1pkt 1fpkt"];
6222--9859[label="1;7pkt 7fpkt"];
6222--12352[label="1;7pkt 7fpkt"];
6431--7570[label="0.0181818;1pkt 1fpkt"];
6431--7975[label="0.318182;7pkt 7fpkt"];
6660--7975[label="0.0909091;2pkt 2fpkt"];
6730--7457[label="0.5;14pkt 14fpkt"];
6730--7549[label="0.0454545;2pkt 2fpkt"];
6730--7712[label="0.272727;12pkt 12fpkt"];
6730--8266[label="0.0227273;1pkt 1fpkt"];
6730--8268[label="0.0454545;2pkt 2fpkt"];
6730--8284[label="0.0227273;1pkt 1fpkt"];
6730--8286[label="0.0454545;2pkt 2fpkt"];
7457--8268[label="0.0714286;2pkt 2fpkt"];
7457--8272[label="0.107143;3pkt 3fpkt"];
7457--8286[label="0.0714286;2pkt 2fpkt"];
7457--8290[label="0.107143;3pkt 3fpkt"];
7457--8889[label="0.0357143;1pkt 1fpkt"];
7457--11863[label="0.0357143;1pkt 1fpkt"];
7457--13305[label="0.0357143;1pkt 1fpkt"];
7712--8272[label="0.0837989;15pkt 15fpkt"];
7712--8290[label="0.0837989;15pkt 15fpkt"];
7712--8878[label="0.666667;8pkt 8fpkt"];
7712--8889[label="0.802721;118pkt 118fpkt"];
7712--9596[label="0.0111732;2pkt 2fpkt"];
7712--11857[label="0.666667;8pkt 8fpkt"];
7712--11863[label="0.802721;118pkt 118fpkt"];
7712--12220[label="0.0111732;2pkt 2fpkt"];
7712--13305[label="0.802721;118pkt 118fpkt"];
7712--13448[label="0.0111732;2pkt 2fpkt"];
7975--11171[label="0.666667;4pkt 4fpkt"];
7975--12990[label="0.666667;4pkt 4fpkt"];
7975--13801[label="0.666667;4pkt 4fpkt"];
8806--11817[label="1;1pkt 1fpkt"];
8878--11857[label="1;12pkt 12fpkt"];
8889--11863[label="1;147pkt 147fpkt"];
8889--13305[label="1;147pkt 147fpkt"];
9301--12078[label="1;1pkt 1fpkt"];
9859--12352[label="1;8pkt 8fpkt"];
10194--12516[label="1;7pkt 7fpkt"];
10194--13586[label="1;7pkt 7fpkt"];
10459--12639[label="1;1pkt 1fpkt"];
10459--13641[label="1;1pkt 1fpkt"];
11171--12990[label="1;6pkt 6fpkt"];
11171--13801[label="1;6pkt 6fpkt"];
11863--13305[label="1;147pkt 147fpkt"];
12516--13586[label="1;7pkt 7fpkt"];
12639--13641[label="1;1pkt 1fpkt"];
12990--13801[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.173.28"/>
      <filter src_ip="41.221.10.174" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
10462[label="34.43.49.158;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12640[label="34.43.49.158;12pkt 12fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.43.49.158:*, 204.6.229.36:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52597: (4.16667%)&lt;BR/&gt; 52569: (4.16667%)&lt;BR/&gt; 52568: (4.16667%)&lt;BR/&gt; 50869: (4.16667%)&gt;];
}
10462--12640[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.229.36" dst_port="80" src_ip="34.43.49.158"/>
    </slice>
    <from sec="1165899894" usec="0"/>
    <to sec="1165899957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
1477[label="219.64.134.31;d;4pkt 4fpkt", shape=diamond, color=yellow];
1740[label="129.202.171.159;s;18pkt 18fpkt", shape=diamond, color=yellow];
2060[label="219.10.98.73;d;2pkt 2fpkt", shape=diamond, color=yellow];
2135[label="129.202.50.235;s;2pkt 2fpkt", shape=diamond, color=yellow];
6603[label="129.202.50.235;s;2pkt 2fpkt", shape=hexagon, color=black];
7643[label="129.202.171.159;s;18pkt 18fpkt", shape=hexagon, color=black];
10478[label="129.202.171.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12647[label="129.202.171.159;1pkt 1fpkt", shape=invtriangle, color=brown];
13645[label="129.202.171.159;1pkt 1fpkt", shape=invhouse, color=bisque];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.202.171.159:*, 219.10.98.74:443}[45%]&lt;BR/&gt;{129.202.171.159:137, *:137}[20%]&lt;BR/&gt;{129.202.171.159:*, 219.10.98.73:*}[20%]&lt;BR/&gt;{*:*, 219.64.134.31:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (18.3673%)&lt;BR/&gt; 137: (16.3265%)&lt;BR/&gt; 7709: (9.18367%)&lt;BR/&gt; 7711: (6.12245%)&lt;BR/&gt; 4699: (6.12245%)&gt;];
}
1477--1740[label="0.5;2pkt 2fpkt"];
1477--2135[label="1;2pkt 2fpkt"];
1477--6603[label="1;2pkt 2fpkt"];
1477--7643[label="0.5;2pkt 2fpkt"];
1477--10478[label="1;1pkt 1fpkt"];
1477--12647[label="1;1pkt 1fpkt"];
1477--13645[label="1;1pkt 1fpkt"];
1740--2060[label="1;2pkt 2fpkt"];
1740--7643[label="1;18pkt 18fpkt"];
1740--10478[label="1;1pkt 1fpkt"];
1740--12647[label="1;1pkt 1fpkt"];
1740--13645[label="1;1pkt 1fpkt"];
2060--7643[label="1;2pkt 2fpkt"];
2135--6603[label="1;2pkt 2fpkt"];
7643--10478[label="1;1pkt 1fpkt"];
7643--12647[label="1;1pkt 1fpkt"];
7643--13645[label="1;1pkt 1fpkt"];
10478--12647[label="1;1pkt 1fpkt"];
10478--13645[label="1;1pkt 1fpkt"];
12647--13645[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.64.134.31"/>
      <filter dst_ip="219.10.98.73" src_ip="129.202.171.159"/>
      <filter dst_ip="219.10.98.74" dst_port="443" src_ip="129.202.171.159"/>
      <filter dst_port="137" src_ip="129.202.171.159" src_port="137"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
10484[label="216.132.16.160;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12650[label="216.132.16.160;3pkt 3fpkt", shape=invtriangle, color=brown];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.132.16.160:80, 145.229.48.68:49332}[33.3333%]&lt;BR/&gt;{216.132.16.160:80, 145.229.48.68:49333}[33.3333%]&lt;BR/&gt;{216.132.16.160:80, 145.229.48.68:49334}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49334: (16.6667%)&lt;BR/&gt; 49333: (16.6667%)&lt;BR/&gt; 49332: (16.6667%)&gt;];
}
10484--12650[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.48.68" dst_port="49334" src_ip="216.132.16.160" src_port="80"/>
      <filter dst_ip="145.229.48.68" dst_port="49333" src_ip="216.132.16.160" src_port="80"/>
      <filter dst_ip="145.229.48.68" dst_port="49332" src_ip="216.132.16.160" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
3883[label="145.229.175.33;d;14pkt 14fpkt", shape=diamond, color=yellow];
4040[label="48.200.108.18;s;2pkt 2fpkt", shape=diamond, color=yellow];
7478[label="48.200.108.18;s;2pkt 2fpkt", shape=hexagon, color=black];
8596[label="48.200.108.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10487[label="217.97.108.160;11pkt 11fpkt", shape=pentagon, color=darkviolet];
11699[label="48.200.108.18;1pkt 1fpkt", shape=invtriangle, color=brown];
12652[label="217.97.108.160;11pkt 11fpkt", shape=invtriangle, color=brown];
13242[label="48.200.108.18;1pkt 1fpkt", shape=invhouse, color=bisque];
13648[label="217.97.108.160;11pkt 11fpkt", shape=invhouse, color=bisque];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.97.108.160:80, 145.229.175.33:*}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1786: (5.45455%)&lt;BR/&gt; 1820: (3.63636%)&lt;BR/&gt; 1819: (3.63636%)&lt;BR/&gt; 1818: (3.63636%)&gt;];
}
3883--4040[label="1;2pkt 2fpkt"];
3883--7478[label="1;2pkt 2fpkt"];
3883--8596[label="1;2pkt 2fpkt"];
3883--10487[label="1;11pkt 11fpkt"];
3883--11699[label="1;1pkt 1fpkt"];
3883--12652[label="1;11pkt 11fpkt"];
3883--13242[label="1;1pkt 1fpkt"];
3883--13648[label="1;11pkt 11fpkt"];
4040--7478[label="1;2pkt 2fpkt"];
4040--8596[label="1;2pkt 2fpkt"];
4040--11699[label="1;1pkt 1fpkt"];
4040--13242[label="1;1pkt 1fpkt"];
7478--8596[label="1;2pkt 2fpkt"];
7478--11699[label="1;1pkt 1fpkt"];
7478--13242[label="1;1pkt 1fpkt"];
8596--11699[label="1;1pkt 1fpkt"];
8596--13242[label="1;1pkt 1fpkt"];
10487--12652[label="1;11pkt 11fpkt"];
10487--13648[label="1;11pkt 11fpkt"];
11699--13242[label="1;1pkt 1fpkt"];
12652--13648[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.175.33" src_ip="217.97.108.160" src_port="80"/>
    </slice>
    <from sec="1165899636" usec="0"/>
    <to sec="1165900309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
10489[label="145.229.168.160;14pkt 14fpkt", shape=pentagon, color=darkviolet];
12653[label="145.229.168.160;14pkt 14fpkt", shape=invtriangle, color=brown];
13650[label="145.229.168.160;14pkt 14fpkt", shape=invhouse, color=bisque];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.168.160:*, 151.240.133.219:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1402: (3.57143%)&lt;BR/&gt; 1401: (3.57143%)&lt;BR/&gt; 1400: (3.57143%)&lt;BR/&gt; 1399: (3.57143%)&gt;];
}
10489--12653[label="1;14pkt 14fpkt"];
10489--13650[label="1;14pkt 14fpkt"];
12653--13650[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="151.240.133.219" dst_port="80" src_ip="145.229.168.160"/>
    </slice>
    <from sec="1165899663" usec="0"/>
    <to sec="1165899668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
10499[label="205.171.38.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12655[label="205.171.38.161;1pkt 1fpkt", shape=invtriangle, color=brown];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.171.38.161:80, 205.249.45.139:63961}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63961: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10499--12655[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.45.139" dst_port="63961" src_ip="205.171.38.161" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.12.106.161"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
10518[label="169.230.26.162;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12666[label="169.230.26.162;2pkt 2fpkt", shape=invtriangle, color=brown];
13652[label="169.230.26.162;2pkt 2fpkt", shape=invhouse, color=bisque];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.26.162:1218, 201.150.185.17:3557}[50%]&lt;BR/&gt;{169.230.26.162:3597, 54.109.83.252:33278}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33278: (25%)&lt;BR/&gt; 3597: (25%)&lt;BR/&gt; 3557: (25%)&lt;BR/&gt; 1218: (25%)&gt;];
}
10518--12666[label="1;2pkt 2fpkt"];
10518--13652[label="1;2pkt 2fpkt"];
12666--13652[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="54.109.83.252" dst_port="33278" src_ip="169.230.26.162" src_port="3597"/>
      <filter dst_ip="201.150.185.17" dst_port="3557" src_ip="169.230.26.162" src_port="1218"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.141.164.165"/>
    </slice>
    <from sec="1165899807" usec="0"/>
    <to sec="1165899887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
10568[label="151.227.214.165;21pkt 21fpkt", shape=pentagon, color=darkviolet];
12694[label="151.227.214.165;21pkt 21fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.214.165:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62101: (2.38095%)&lt;BR/&gt; 59548: (2.38095%)&lt;BR/&gt; 56277: (2.38095%)&lt;BR/&gt; 55428: (2.38095%)&gt;];
}
10568--12694[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="151.227.214.165" src_port="80"/>
    </slice>
    <from sec="1165899667" usec="0"/>
    <to sec="1165900370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
10620[label="44.165.160.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12717[label="44.165.160.168;1pkt 1fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.165.160.168:80, 151.227.155.89:3727}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3727: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10620--12717[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.155.89" dst_port="3727" src_ip="44.165.160.168" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
10640[label="45.102.225.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12723[label="45.102.225.169;2pkt 2fpkt", shape=invtriangle, color=brown];
13677[label="45.102.225.169;2pkt 2fpkt", shape=invhouse, color=bisque];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.102.225.169:27651, 205.55.222.77:53}[50%]&lt;BR/&gt;{45.102.225.169:42741, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 42741: (25%)&lt;BR/&gt; 27651: (25%)&gt;];
}
10640--12723[label="1;2pkt 2fpkt"];
10640--13677[label="1;2pkt 2fpkt"];
12723--13677[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="45.102.225.169" src_port="42741"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="45.102.225.169" src_port="27651"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.129.240.169"/>
    </slice>
    <from sec="1165900209" usec="0"/>
    <to sec="1165900288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
10669[label="214.207.222.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12737[label="214.207.222.171;1pkt 1fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.207.222.171:28784, 205.55.220.151:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28784: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
10669--12737[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.220.151" dst_port="53" src_ip="214.207.222.171" src_port="28784"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
2672[label="145.229.151.46;d;192pkt 192fpkt", shape=diamond, color=yellow];
6612[label="145.229.151.46;d;192pkt 192fpkt", shape=hexagon, color=black];
10673[label="32.4.36.172;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11332[label="41.132.226.227;84pkt 84fpkt", shape=pentagon, color=darkviolet];
12739[label="32.4.36.172;4pkt 4fpkt", shape=invtriangle, color=brown];
13077[label="41.132.226.227;84pkt 84fpkt", shape=invtriangle, color=brown];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.132.226.227:*, 145.229.151.46:80}[40.5941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9286%)&lt;BR/&gt; 443: (1.07143%)&lt;BR/&gt; 65071: (0.357143%)&lt;BR/&gt; 64599: (0.357143%)&lt;BR/&gt; 64578: (0.357143%)&gt;];
}
2672--6612[label="1;192pkt 192fpkt"];
2672--10673[label="0.25;1pkt 1fpkt"];
2672--11332[label="0.916667;77pkt 77fpkt"];
2672--12739[label="0.25;1pkt 1fpkt"];
2672--13077[label="0.916667;77pkt 77fpkt"];
6612--10673[label="0.25;1pkt 1fpkt"];
6612--11332[label="0.916667;77pkt 77fpkt"];
6612--12739[label="0.25;1pkt 1fpkt"];
6612--13077[label="0.916667;77pkt 77fpkt"];
10673--12739[label="1;4pkt 4fpkt"];
11332--13077[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.151.46" dst_port="80" src_ip="41.132.226.227"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.234.94.172"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
10693[label="215.95.148.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12744[label="215.95.148.173;1pkt 1fpkt", shape=invtriangle, color=brown];
13684[label="215.95.148.173;1pkt 1fpkt", shape=invhouse, color=bisque];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.173:22, 145.229.241.90:53159}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53159: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
10693--12744[label="1;1pkt 1fpkt"];
10693--13684[label="1;1pkt 1fpkt"];
12744--13684[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="53159" src_ip="215.95.148.173" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
10701[label="151.227.14.174;19pkt 19fpkt", shape=pentagon, color=darkviolet];
12748[label="151.227.14.174;19pkt 19fpkt", shape=invtriangle, color=brown];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.14.174:*, 214.212.144.26:80}[47.3684%]&lt;BR/&gt;{151.227.14.174:*, 214.212.144.18:443}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.5789%)&lt;BR/&gt; 443: (18.4211%)&lt;BR/&gt; 1666: (2.63158%)&lt;BR/&gt; 1665: (2.63158%)&lt;BR/&gt; 1664: (2.63158%)&gt;];
}
10701--12748[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="214.212.144.26" dst_port="80" src_ip="151.227.14.174"/>
      <filter dst_ip="214.212.144.18" dst_port="443" src_ip="151.227.14.174"/>
    </slice>
    <from sec="1165899784" usec="0"/>
    <to sec="1165900468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.211.13.175"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
10728[label="50.109.42.176;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12762[label="50.109.42.176;2pkt 2fpkt", shape=invtriangle, color=brown];
13695[label="50.109.42.176;2pkt 2fpkt", shape=invhouse, color=bisque];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.109.42.176:56538, 205.55.222.67:53}[50%]&lt;BR/&gt;{50.109.42.176:58345, 205.55.222.67:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 58345: (25%)&lt;BR/&gt; 56538: (25%)&gt;];
}
10728--12762[label="1;2pkt 2fpkt"];
10728--13695[label="1;2pkt 2fpkt"];
12762--13695[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="50.109.42.176" src_port="58345"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="50.109.42.176" src_port="56538"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
10750[label="215.95.149.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12778[label="215.95.149.177;1pkt 1fpkt", shape=invtriangle, color=brown];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.177:22, 145.229.241.90:54442}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54442: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
10750--12778[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="54442" src_ip="215.95.149.177" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.96.210.178"/>
    </slice>
    <from sec="1165899611" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948333,2.07591,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
2705[label="214.29.254.172;d;67pkt 67fpkt", shape=diamond, color=yellow];
7888[label="214.29.254.172;d;67pkt 67fpkt", shape=hexagon, color=black];
10776[label="172.239.121.179;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12788[label="172.239.121.179;2pkt 2fpkt", shape=invtriangle, color=brown];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.239.46.198:*, 214.29.254.172:5050}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.2029%)&lt;BR/&gt; 23: (2.89855%)&lt;BR/&gt; 1037: (2.17391%)&lt;BR/&gt; 1045: (1.44928%)&lt;BR/&gt; 20: (1.44928%)&gt;];
}
2705--3720[label="0.0238095;1pkt 1fpkt"];
2705--7888[label="1;67pkt 67fpkt"];
2705--10776[label="0.5;1pkt 1fpkt"];
2705--12788[label="0.5;1pkt 1fpkt"];
7888--10776[label="0.5;1pkt 1fpkt"];
7888--12788[label="0.5;1pkt 1fpkt"];
10776--12788[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.29.254.172" dst_port="5050" src_ip="172.239.46.198"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
10781[label="205.198.34.180;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12792[label="205.198.34.180;8pkt 8fpkt", shape=invtriangle, color=brown];
13709[label="205.198.34.180;8pkt 8fpkt", shape=invhouse, color=bisque];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.198.34.180:80, 151.227.246.23:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3376: (6.25%)&lt;BR/&gt; 3375: (6.25%)&lt;BR/&gt; 3374: (6.25%)&lt;BR/&gt; 3373: (6.25%)&gt;];
}
10781--12792[label="1;8pkt 8fpkt"];
10781--13709[label="1;8pkt 8fpkt"];
12792--13709[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="151.227.246.23" src_ip="205.198.34.180" src_port="80"/>
    </slice>
    <from sec="1165900442" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
10787[label="215.95.149.180;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12796[label="215.95.149.180;2pkt 2fpkt", shape=invtriangle, color=brown];
13710[label="215.95.149.180;2pkt 2fpkt", shape=invhouse, color=bisque];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.180:22, 145.229.241.90:40375}[50%]&lt;BR/&gt;{215.95.149.180:22, 145.229.241.90:40475}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 40475: (25%)&lt;BR/&gt; 40375: (25%)&gt;];
}
10787--12796[label="1;2pkt 2fpkt"];
10787--13710[label="1;2pkt 2fpkt"];
12796--13710[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="40475" src_ip="215.95.149.180" src_port="22"/>
      <filter dst_ip="145.229.241.90" dst_port="40375" src_ip="215.95.149.180" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.75.51.181"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
10807[label="169.230.34.182;31pkt 31fpkt", shape=pentagon, color=darkviolet];
12810[label="169.230.34.182;31pkt 31fpkt", shape=invtriangle, color=brown];
13721[label="169.230.34.182;31pkt 31fpkt", shape=invhouse, color=bisque];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.34.182:40360, *:*}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40360: (46.7742%)&lt;BR/&gt; 63011: (1.6129%)&lt;BR/&gt; 60002: (1.6129%)&lt;BR/&gt; 58741: (1.6129%)&lt;BR/&gt; 58546: (1.6129%)&gt;];
}
10807--12810[label="1;31pkt 31fpkt"];
10807--13721[label="1;31pkt 31fpkt"];
12810--13721[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="169.230.34.182" src_port="40360"/>
    </slice>
    <from sec="1165899602" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
10826[label="221.218.235.183;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12818[label="221.218.235.183;2pkt 2fpkt", shape=invtriangle, color=brown];
13724[label="221.218.235.183;2pkt 2fpkt", shape=invhouse, color=bisque];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.218.235.183:44073, 204.6.227.105:57455}[50%]&lt;BR/&gt;{221.218.235.183:55738, 204.6.227.105:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57455: (25%)&lt;BR/&gt; 55738: (25%)&lt;BR/&gt; 44073: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
10826--12818[label="1;2pkt 2fpkt"];
10826--13724[label="1;2pkt 2fpkt"];
12818--13724[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.227.105" dst_port="80" src_ip="221.218.235.183" src_port="55738"/>
      <filter dst_ip="204.6.227.105" dst_port="57455" src_ip="221.218.235.183" src_port="44073"/>
    </slice>
    <from sec="1165900447" usec="0"/>
    <to sec="1165900490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
10841[label="41.171.177.184;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12825[label="41.171.177.184;3pkt 3fpkt", shape=invtriangle, color=brown];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.171.177.184:80, 205.246.71.154:54793}[33.3333%]&lt;BR/&gt;{41.171.177.184:80, 205.246.71.154:54884}[33.3333%]&lt;BR/&gt;{41.171.177.184:80, 205.246.71.154:54887}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54887: (16.6667%)&lt;BR/&gt; 54884: (16.6667%)&lt;BR/&gt; 54793: (16.6667%)&gt;];
}
10841--12825[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.154" dst_port="54887" src_ip="41.171.177.184" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54884" src_ip="41.171.177.184" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54793" src_ip="41.171.177.184" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.99.216.184"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
10866[label="34.43.14.187;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12834[label="34.43.14.187;4pkt 4fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.43.14.187:80, 205.246.71.154:54567}[25%]&lt;BR/&gt;{34.43.14.187:80, 205.246.71.154:54843}[25%]&lt;BR/&gt;{34.43.14.187:80, 205.246.71.154:54872}[25%]&lt;BR/&gt;{34.43.14.187:80, 205.246.71.154:54883}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54883: (12.5%)&lt;BR/&gt; 54872: (12.5%)&lt;BR/&gt; 54843: (12.5%)&lt;BR/&gt; 54567: (12.5%)&gt;];
}
10866--12834[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.154" dst_port="54883" src_ip="34.43.14.187" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54872" src_ip="34.43.14.187" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54843" src_ip="34.43.14.187" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54567" src_ip="34.43.14.187" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.227.30.187"/>
    </slice>
    <from sec="1165899818" usec="0"/>
    <to sec="1165899844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
10872[label="65.94.90.187;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12838[label="65.94.90.187;4pkt 4fpkt", shape=invtriangle, color=brown];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.94.90.187:1044, 145.20.140.40:1434}[25%]&lt;BR/&gt;{65.94.90.187:1044, 145.252.201.161:1434}[25%]&lt;BR/&gt;{65.94.90.187:1044, 204.6.201.201:1434}[25%]&lt;BR/&gt;{65.94.90.187:1044, 145.74.96.210:1434}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1044: (50%)&gt;];
}
10872--12838[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.74.96.210" dst_port="1434" src_ip="65.94.90.187" src_port="1044"/>
      <filter dst_ip="204.6.201.201" dst_port="1434" src_ip="65.94.90.187" src_port="1044"/>
      <filter dst_ip="145.252.201.161" dst_port="1434" src_ip="65.94.90.187" src_port="1044"/>
      <filter dst_ip="145.20.140.40" dst_port="1434" src_ip="65.94.90.187" src_port="1044"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
10885[label="169.230.21.189;43pkt 43fpkt", shape=pentagon, color=darkviolet];
12849[label="169.230.21.189;43pkt 43fpkt", shape=invtriangle, color=brown];
13739[label="169.230.21.189;43pkt 43fpkt", shape=invhouse, color=bisque];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.21.189:*, 148.171.3.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3552: (1.16279%)&lt;BR/&gt; 3551: (1.16279%)&lt;BR/&gt; 3550: (1.16279%)&lt;BR/&gt; 3549: (1.16279%)&gt;];
}
10885--12849[label="1;43pkt 43fpkt"];
10885--13739[label="1;43pkt 43fpkt"];
12849--13739[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="148.171.3.24" dst_port="80" src_ip="169.230.21.189"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.43.35.190"/>
    </slice>
    <from sec="1165899739" usec="0"/>
    <to sec="1165899819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
10896[label="151.227.84.190;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12855[label="151.227.84.190;3pkt 3fpkt", shape=invtriangle, color=brown];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.84.190:2093, 218.150.137.46:80}[33.3333%]&lt;BR/&gt;{151.227.84.190:2094, 218.150.137.46:80}[33.3333%]&lt;BR/&gt;{151.227.84.190:2095, 218.150.137.46:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2095: (16.6667%)&lt;BR/&gt; 2094: (16.6667%)&lt;BR/&gt; 2093: (16.6667%)&gt;];
}
10896--12855[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="218.150.137.46" dst_port="80" src_ip="151.227.84.190" src_port="2095"/>
      <filter dst_ip="218.150.137.46" dst_port="80" src_ip="151.227.84.190" src_port="2094"/>
      <filter dst_ip="218.150.137.46" dst_port="80" src_ip="151.227.84.190" src_port="2093"/>
    </slice>
    <from sec="1165900430" usec="0"/>
    <to sec="1165900453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
10903[label="221.223.144.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12859[label="221.223.144.191;2pkt 2fpkt", shape=invtriangle, color=brown];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.223.144.191:2794, 205.55.222.77:53}[50%]&lt;BR/&gt;{221.223.144.191:51985, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 51985: (25%)&lt;BR/&gt; 2794: (25%)&gt;];
}
10903--12859[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="221.223.144.191" src_port="51985"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="221.223.144.191" src_port="2794"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
10914[label="204.198.116.192;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12866[label="204.198.116.192;2pkt 2fpkt", shape=invtriangle, color=brown];
13746[label="204.198.116.192;2pkt 2fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.198.116.192:62545, 205.55.222.67:53}[50%]&lt;BR/&gt;{204.198.116.192:39542, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 62545: (25%)&lt;BR/&gt; 39542: (25%)&gt;];
}
10914--12866[label="1;2pkt 2fpkt"];
10914--13746[label="1;2pkt 2fpkt"];
12866--13746[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="204.198.116.192" src_port="39542"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="204.198.116.192" src_port="62545"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
10918[label="215.95.149.192;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12869[label="215.95.149.192;2pkt 2fpkt", shape=invtriangle, color=brown];
13748[label="215.95.149.192;2pkt 2fpkt", shape=invhouse, color=bisque];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.149.192:22, 145.229.241.90:60075}[50%]&lt;BR/&gt;{215.95.149.192:22, 145.229.241.90:60174}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 60174: (25%)&lt;BR/&gt; 60075: (25%)&gt;];
}
10918--12869[label="1;2pkt 2fpkt"];
10918--13748[label="1;2pkt 2fpkt"];
12869--13748[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="60174" src_ip="215.95.149.192" src_port="22"/>
      <filter dst_ip="145.229.241.90" dst_port="60075" src_ip="215.95.149.192" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_861{
style=filled;
color=gray75;
10922[label="64.23.190.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12871[label="64.23.190.192;1pkt 1fpkt", shape=invtriangle, color=brown];
13749[label="64.23.190.192;1pkt 1fpkt", shape=invhouse, color=bisque];
stat861[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.23.190.192:80, 145.252.20.11:59436}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59436: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10922--12871[label="1;1pkt 1fpkt"];
10922--13749[label="1;1pkt 1fpkt"];
12871--13749[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.252.20.11" dst_port="59436" src_ip="64.23.190.192" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
10930[label="139.152.86.193;21pkt 21fpkt", shape=pentagon, color=darkviolet];
12875[label="139.152.86.193;21pkt 21fpkt", shape=invtriangle, color=brown];
13752[label="139.152.86.193;21pkt 21fpkt", shape=invhouse, color=bisque];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.86.193:*, 219.206.5.165:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2766: (2.38095%)&lt;BR/&gt; 2765: (2.38095%)&lt;BR/&gt; 2764: (2.38095%)&lt;BR/&gt; 2763: (2.38095%)&gt;];
}
10930--12875[label="1;21pkt 21fpkt"];
10930--13752[label="1;21pkt 21fpkt"];
12875--13752[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="219.206.5.165" dst_port="80" src_ip="139.152.86.193"/>
    </slice>
    <from sec="1165900367" usec="0"/>
    <to sec="1165900441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.13.225.193"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
10939[label="201.165.23.194;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12879[label="201.165.23.194;4pkt 4fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.165.23.194:31740, 205.55.222.67:53}[25%]&lt;BR/&gt;{201.165.23.194:55110, 205.55.222.67:53}[25%]&lt;BR/&gt;{201.165.23.194:16337, 205.55.222.77:53}[25%]&lt;BR/&gt;{201.165.23.194:23334, 205.55.222.77:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 55110: (12.5%)&lt;BR/&gt; 31740: (12.5%)&lt;BR/&gt; 23334: (12.5%)&lt;BR/&gt; 16337: (12.5%)&gt;];
}
10939--12879[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="201.165.23.194" src_port="23334"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="201.165.23.194" src_port="16337"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="201.165.23.194" src_port="55110"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="201.165.23.194" src_port="31740"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_865{
style=filled;
color=gray75;
10965[label="201.165.23.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12891[label="201.165.23.196;2pkt 2fpkt", shape=invtriangle, color=brown];
13759[label="201.165.23.196;2pkt 2fpkt", shape=invhouse, color=bisque];
stat865[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.165.23.196:44204, 205.55.222.77:53}[50%]&lt;BR/&gt;{201.165.23.196:46490, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 46490: (25%)&lt;BR/&gt; 44204: (25%)&gt;];
}
10965--12891[label="1;2pkt 2fpkt"];
10965--13759[label="1;2pkt 2fpkt"];
12891--13759[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="201.165.23.196" src_port="46490"/>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="201.165.23.196" src_port="44204"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892483,2.09447,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
1482[label="205.249.130.14;d;2099pkt 2099fpkt", shape=diamond, color=yellow];
3443[label="208.18.170.40;s;2pkt 2fpkt", shape=diamond, color=yellow];
5132[label="208.16.45.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
8797[label="208.18.122.33;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9730[label="64.6.56.100;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10008[label="206.22.168.127;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10966[label="208.19.31.196;19pkt 19fpkt", shape=pentagon, color=darkviolet];
11453[label="212.133.3.241;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12292[label="64.6.56.100;6pkt 6fpkt", shape=invtriangle, color=brown];
12892[label="208.19.31.196;19pkt 19fpkt", shape=invtriangle, color=brown];
13135[label="212.133.3.241;4pkt 4fpkt", shape=invtriangle, color=brown];
13760[label="208.19.31.196;19pkt 19fpkt", shape=invhouse, color=bisque];
13874[label="212.133.3.241;4pkt 4fpkt", shape=invhouse, color=bisque];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 205.249.130.14:7036}[94.4339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7036: (46.6469%)&lt;BR/&gt; 0: (2.78285%)&lt;BR/&gt; 21588: (0.456204%)&lt;BR/&gt; 32459: (0.342153%)&lt;BR/&gt; 7809: (0.342153%)&gt;];
}
1482--3443[label="1;2pkt 2fpkt"];
1482--5132[label="1;1pkt 1fpkt"];
1482--8797[label="1;3pkt 3fpkt"];
1482--9730[label="0.833333;5pkt 5fpkt"];
1482--10008[label="1;6pkt 6fpkt"];
1482--10966[label="0.947368;18pkt 18fpkt"];
1482--11453[label="0.75;3pkt 3fpkt"];
1482--12292[label="0.833333;5pkt 5fpkt"];
1482--12892[label="0.947368;18pkt 18fpkt"];
1482--13135[label="0.75;3pkt 3fpkt"];
1482--13760[label="0.947368;18pkt 18fpkt"];
1482--13874[label="0.75;3pkt 3fpkt"];
9730--12292[label="1;6pkt 6fpkt"];
10966--12892[label="1;19pkt 19fpkt"];
10966--13760[label="1;19pkt 19fpkt"];
11453--13135[label="1;4pkt 4fpkt"];
11453--13874[label="1;4pkt 4fpkt"];
12892--13760[label="1;19pkt 19fpkt"];
13135--13874[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.130.14" dst_port="7036"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.4.34.197"/>
    </slice>
    <from sec="1165899996" usec="0"/>
    <to sec="1165899998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
10978[label="218.24.105.197;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12899[label="218.24.105.197;3pkt 3fpkt", shape=invtriangle, color=brown];
13765[label="218.24.105.197;3pkt 3fpkt", shape=invhouse, color=bisque];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.24.105.197:45095, 204.6.230.253:80}[33.3333%]&lt;BR/&gt;{218.24.105.197:46560, 204.6.230.253:80}[33.3333%]&lt;BR/&gt;{218.24.105.197:46587, 204.6.230.253:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46587: (16.6667%)&lt;BR/&gt; 46560: (16.6667%)&lt;BR/&gt; 45095: (16.6667%)&gt;];
}
10978--12899[label="1;3pkt 3fpkt"];
10978--13765[label="1;3pkt 3fpkt"];
12899--13765[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.230.253" dst_port="80" src_ip="218.24.105.197" src_port="46587"/>
      <filter dst_ip="204.6.230.253" dst_port="80" src_ip="218.24.105.197" src_port="46560"/>
      <filter dst_ip="204.6.230.253" dst_port="80" src_ip="218.24.105.197" src_port="45095"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
10989[label="204.87.7.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12906[label="204.87.7.198;1pkt 1fpkt", shape=invtriangle, color=brown];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.87.7.198:25271, 169.230.158.2:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25271: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10989--12906[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="204.87.7.198" src_port="25271"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.133.143.198"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
11024[label="151.227.68.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12921[label="151.227.68.200;2pkt 2fpkt", shape=invtriangle, color=brown];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.68.200:4269, 216.239.111.4:80}[50%]&lt;BR/&gt;{151.227.68.200:31536, 43.99.221.226:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31536: (25%)&lt;BR/&gt; 4269: (25%)&gt;];
}
11024--12921[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="43.99.221.226" dst_port="80" src_ip="151.227.68.200" src_port="31536"/>
      <filter dst_ip="216.239.111.4" dst_port="80" src_ip="151.227.68.200" src_port="4269"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
11030[label="215.95.148.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12924[label="215.95.148.200;1pkt 1fpkt", shape=invtriangle, color=brown];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.200:22, 145.229.241.90:37233}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37233: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
11030--12924[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="37233" src_ip="215.95.148.200" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
11050[label="145.229.173.201;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12933[label="145.229.173.201;2pkt 2fpkt", shape=invtriangle, color=brown];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.173.201:2356, 214.212.144.18:443}[50%]&lt;BR/&gt;{145.229.173.201:2355, 214.212.144.26:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2356: (25%)&lt;BR/&gt; 2355: (25%)&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
11050--12933[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.212.144.26" dst_port="80" src_ip="145.229.173.201" src_port="2355"/>
      <filter dst_ip="214.212.144.18" dst_port="443" src_ip="145.229.173.201" src_port="2356"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.251.74.202"/>
    </slice>
    <from sec="1165900338" usec="0"/>
    <to sec="1165900433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
11072[label="215.95.148.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12946[label="215.95.148.203;1pkt 1fpkt", shape=invtriangle, color=brown];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.203:22, 145.229.241.90:59823}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59823: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
11072--12946[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="59823" src_ip="215.95.148.203" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
11091[label="204.156.51.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12954[label="204.156.51.205;2pkt 2fpkt", shape=invtriangle, color=brown];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.156.51.205:2200, 204.6.162.43:1433}[50%]&lt;BR/&gt;{204.156.51.205:3907, 204.6.180.73:1433}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 3907: (25%)&lt;BR/&gt; 2200: (25%)&gt;];
}
11091--12954[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.180.73" dst_port="1433" src_ip="204.156.51.205" src_port="3907"/>
      <filter dst_ip="204.6.162.43" dst_port="1433" src_ip="204.156.51.205" src_port="2200"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
11093[label="204.198.116.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12955[label="204.198.116.205;2pkt 2fpkt", shape=invtriangle, color=brown];
13785[label="204.198.116.205;2pkt 2fpkt", shape=invhouse, color=bisque];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.198.116.205:62279, 205.55.222.67:53}[50%]&lt;BR/&gt;{204.198.116.205:4054, 205.55.222.77:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 62279: (25%)&lt;BR/&gt; 4054: (25%)&gt;];
}
11093--12955[label="1;2pkt 2fpkt"];
11093--13785[label="1;2pkt 2fpkt"];
12955--13785[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.222.77" dst_port="53" src_ip="204.198.116.205" src_port="4054"/>
      <filter dst_ip="205.55.222.67" dst_port="53" src_ip="204.198.116.205" src_port="62279"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
11104[label="145.248.172.206;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12960[label="145.248.172.206;2pkt 2fpkt", shape=invtriangle, color=brown];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.172.206:2832, 205.0.1.75:80}[50%]&lt;BR/&gt;{145.248.172.206:2833, 205.0.1.75:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2833: (25%)&lt;BR/&gt; 2832: (25%)&gt;];
}
11104--12960[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.0.1.75" dst_port="80" src_ip="145.248.172.206" src_port="2833"/>
      <filter dst_ip="205.0.1.75" dst_port="80" src_ip="145.248.172.206" src_port="2832"/>
    </slice>
    <from sec="1165899910" usec="0"/>
    <to sec="1165899931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
11132[label="204.6.227.208;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12972[label="204.6.227.208;6pkt 6fpkt", shape=invtriangle, color=brown];
13792[label="204.6.227.208;6pkt 6fpkt", shape=invhouse, color=bisque];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.227.208:80, 42.127.101.151:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 123: (16.6667%)&lt;BR/&gt; 47992: (8.33333%)&lt;BR/&gt; 21275: (8.33333%)&lt;BR/&gt; 19728: (8.33333%)&gt;];
}
11132--12972[label="1;6pkt 6fpkt"];
11132--13792[label="1;6pkt 6fpkt"];
12972--13792[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="42.127.101.151" src_ip="204.6.227.208" src_port="80"/>
    </slice>
    <from sec="1165899795" usec="0"/>
    <to sec="1165900466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
11133[label="172.239.4.209;39pkt 39fpkt", shape=pentagon, color=darkviolet];
12973[label="172.239.4.209;39pkt 39fpkt", shape=invtriangle, color=brown];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.239.4.209:80, 41.132.226.228:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8718%)&lt;BR/&gt; 52088: (2.5641%)&lt;BR/&gt; 53: (2.5641%)&lt;BR/&gt; 25: (2.5641%)&lt;BR/&gt; 64053: (1.28205%)&gt;];
}
11133--12973[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="41.132.226.228" src_ip="172.239.4.209" src_port="80"/>
    </slice>
    <from sec="1165899642" usec="0"/>
    <to sec="1165900363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
11141[label="216.239.110.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12977[label="216.239.110.209;1pkt 1fpkt", shape=invtriangle, color=brown];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.239.110.209:80, 145.229.174.1:4385}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4385: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11141--12977[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.174.1" dst_port="4385" src_ip="216.239.110.209" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
11147[label="129.157.196.209;61pkt 61fpkt", shape=pentagon, color=darkviolet];
12980[label="129.157.196.209;61pkt 61fpkt", shape=invtriangle, color=brown];
13794[label="129.157.196.209;61pkt 61fpkt", shape=invhouse, color=bisque];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.157.196.209:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11147--12980[label="1;61pkt 61fpkt"];
11147--13794[label="1;61pkt 61fpkt"];
12980--13794[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter src_ip="129.157.196.209"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.185.151.210"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
11199[label="215.95.148.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13002[label="215.95.148.213;2pkt 2fpkt", shape=invtriangle, color=brown];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.213:22, 145.229.241.90:60248}[50%]&lt;BR/&gt;{215.95.148.213:22, 145.229.241.90:60347}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 60347: (25%)&lt;BR/&gt; 60248: (25%)&gt;];
}
11199--13002[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="60347" src_ip="215.95.148.213" src_port="22"/>
      <filter dst_ip="145.229.241.90" dst_port="60248" src_ip="215.95.148.213" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
1860[label="151.227.29.18;d;99pkt 99fpkt", shape=diamond, color=yellow];
2915[label="220.230.128.76;s;17pkt 17fpkt", shape=diamond, color=yellow];
6125[label="151.227.29.18;d;99pkt 99fpkt", shape=hexagon, color=black];
7396[label="220.230.128.76;s;17pkt 17fpkt", shape=hexagon, color=black];
9592[label="220.230.138.89;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9766[label="221.218.38.103;31pkt 31fpkt", shape=pentagon, color=darkviolet];
11176[label="220.124.25.212;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11210[label="220.124.25.214;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11226[label="220.124.25.216;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13011[label="220.124.25.214;10pkt 10fpkt", shape=invtriangle, color=brown];
13019[label="220.124.25.216;4pkt 4fpkt", shape=invtriangle, color=brown];
13815[label="220.124.25.214;10pkt 10fpkt", shape=invhouse, color=bisque];
13820[label="220.124.25.216;4pkt 4fpkt", shape=invhouse, color=bisque];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 151.227.29.18:*}[77.9412%]&lt;BR/&gt;{221.218.38.103:80, *:*}[22.7941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58164: (0.771605%)&lt;BR/&gt; 58161: (0.771605%)&lt;BR/&gt; 58160: (0.771605%)&lt;BR/&gt; 58143: (0.771605%)&gt;];
}
1860--2915[label="1;17pkt 17fpkt"];
1860--6125[label="1;99pkt 99fpkt"];
1860--7396[label="1;17pkt 17fpkt"];
1860--8268[label="0.161616;16pkt 16fpkt"];
1860--8272[label="0.232323;23pkt 23fpkt"];
1860--8275[label="0.272727;27pkt 27fpkt"];
1860--8286[label="0.161616;16pkt 16fpkt"];
1860--8290[label="0.232323;23pkt 23fpkt"];
1860--8293[label="0.272727;27pkt 27fpkt"];
1860--9592[label="0.777778;7pkt 7fpkt"];
1860--9766[label="0.0322581;1pkt 1fpkt"];
1860--11176[label="0.8;8pkt 8fpkt"];
1860--11210[label="0.8;8pkt 8fpkt"];
1860--11226[label="0.75;3pkt 3fpkt"];
1860--13011[label="0.8;8pkt 8fpkt"];
1860--13019[label="0.75;3pkt 3fpkt"];
1860--13815[label="0.8;8pkt 8fpkt"];
1860--13820[label="0.75;3pkt 3fpkt"];
2915--6125[label="1;17pkt 17fpkt"];
2915--7396[label="1;17pkt 17fpkt"];
2915--8268[label="0.294118;5pkt 5fpkt"];
2915--8272[label="0.294118;5pkt 5fpkt"];
2915--8275[label="0.294118;5pkt 5fpkt"];
2915--8286[label="0.294118;5pkt 5fpkt"];
2915--8290[label="0.294118;5pkt 5fpkt"];
2915--8293[label="0.294118;5pkt 5fpkt"];
6125--7396[label="1;17pkt 17fpkt"];
6125--8268[label="0.161616;16pkt 16fpkt"];
6125--8272[label="0.232323;23pkt 23fpkt"];
6125--8275[label="0.272727;27pkt 27fpkt"];
6125--8286[label="0.161616;16pkt 16fpkt"];
6125--8290[label="0.232323;23pkt 23fpkt"];
6125--8293[label="0.272727;27pkt 27fpkt"];
6125--9592[label="0.777778;7pkt 7fpkt"];
6125--9766[label="0.0322581;1pkt 1fpkt"];
6125--11176[label="0.8;8pkt 8fpkt"];
6125--11210[label="0.8;8pkt 8fpkt"];
6125--11226[label="0.75;3pkt 3fpkt"];
6125--13011[label="0.8;8pkt 8fpkt"];
6125--13019[label="0.75;3pkt 3fpkt"];
6125--13815[label="0.8;8pkt 8fpkt"];
6125--13820[label="0.75;3pkt 3fpkt"];
7396--8268[label="0.294118;5pkt 5fpkt"];
7396--8272[label="0.294118;5pkt 5fpkt"];
7396--8275[label="0.294118;5pkt 5fpkt"];
7396--8286[label="0.294118;5pkt 5fpkt"];
7396--8290[label="0.294118;5pkt 5fpkt"];
7396--8293[label="0.294118;5pkt 5fpkt"];
11210--13011[label="1;10pkt 10fpkt"];
11210--13815[label="1;10pkt 10fpkt"];
11226--13019[label="1;4pkt 4fpkt"];
11226--13820[label="1;4pkt 4fpkt"];
13011--13815[label="1;10pkt 10fpkt"];
13019--13820[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="221.218.38.103" src_port="80"/>
      <filter dst_ip="151.227.29.18" src_port="80"/>
    </slice>
    <from sec="1165899607" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.135.203.215"/>
    </slice>
    <from sec="1165899712" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
2189[label="172.239.14.208;s;18pkt 18fpkt", shape=diamond, color=yellow];
2642[label="217.224.147.102;d;114pkt 114fpkt", shape=diamond, color=yellow];
2665[label="43.216.76.120;d;161pkt 161fpkt", shape=diamond, color=yellow];
2694[label="45.144.65.69;d;3pkt 3fpkt", shape=diamond, color=yellow];
2698[label="214.29.254.169;d;60pkt 60fpkt", shape=diamond, color=yellow];
2748[label="214.29.254.170;d;42pkt 42fpkt", shape=diamond, color=yellow];
2885[label="43.20.183.228;d;129pkt 129fpkt", shape=diamond, color=yellow];
3256[label="43.180.43.64;d;60pkt 60fpkt", shape=diamond, color=yellow];
3702[label="221.241.73.149;d;79pkt 79fpkt", shape=diamond, color=yellow];
4248[label="217.224.147.100;d;83pkt 83fpkt", shape=diamond, color=yellow];
5160[label="172.239.70.195;s;21pkt 21fpkt", shape=diamond, color=yellow];
5212[label="172.239.10.6;s;74pkt 74fpkt", shape=diamond, color=yellow];
6030[label="172.239.14.208;s;18pkt 18fpkt", shape=hexagon, color=black];
6358[label="214.29.254.170;d;35pkt 35fpkt", shape=hexagon, color=black];
6911[label="45.144.65.69;d;3pkt 3fpkt", shape=hexagon, color=black];
7044[label="43.20.183.228;d;110pkt 110fpkt", shape=hexagon, color=black];
7534[label="217.224.147.102;d;114pkt 114fpkt", shape=hexagon, color=black];
7640[label="217.224.147.100;d;81pkt 81fpkt", shape=hexagon, color=black];
8403[label="172.239.10.6;76pkt 76fpkt", shape=pentagon, color=darkviolet];
8752[label="172.239.117.30;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8850[label="172.239.123.36;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10218[label="172.239.46.142;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10398[label="172.239.5.153;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10433[label="172.239.66.156;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10827[label="172.239.13.184;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10877[label="172.239.46.188;11pkt 11fpkt", shape=pentagon, color=darkviolet];
10956[label="172.239.70.195;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11228[label="172.239.125.216;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11614[label="172.239.10.6;77pkt 77fpkt", shape=invtriangle, color=brown];
11838[label="172.239.123.36;6pkt 6fpkt", shape=invtriangle, color=brown];
12628[label="172.239.66.156;3pkt 3fpkt", shape=invtriangle, color=brown];
12819[label="172.239.13.184;8pkt 8fpkt", shape=invtriangle, color=brown];
12841[label="172.239.46.188;11pkt 11fpkt", shape=invtriangle, color=brown];
13020[label="172.239.125.216;10pkt 10fpkt", shape=invtriangle, color=brown];
13216[label="172.239.10.6;76pkt 76fpkt", shape=invhouse, color=bisque];
13637[label="172.239.66.156;3pkt 3fpkt", shape=invhouse, color=bisque];
13725[label="172.239.13.184;8pkt 8fpkt", shape=invhouse, color=bisque];
13821[label="172.239.125.216;10pkt 10fpkt", shape=invhouse, color=bisque];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:21}[73.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (39.3557%)&lt;BR/&gt; 5050: (4.57991%)&lt;BR/&gt; 995: (2.24258%)&lt;BR/&gt; 443: (1.57928%)&lt;BR/&gt; 80: (1.07391%)&gt;];
}
2189--2694[label="1;3pkt 3fpkt"];
2189--2885[label="0.222222;4pkt 4fpkt"];
2189--6030[label="1;18pkt 18fpkt"];
2189--6911[label="1;3pkt 3fpkt"];
2189--7044[label="0.222222;4pkt 4fpkt"];
2642--5212[label="0.0540541;4pkt 4fpkt"];
2642--7534[label="1;114pkt 114fpkt"];
2642--8403[label="0.0526316;4pkt 4fpkt"];
2642--8752[label="0.384615;5pkt 5fpkt"];
2642--10218[label="0.444444;4pkt 4fpkt"];
2642--11614[label="0.0519481;4pkt 4fpkt"];
2642--13216[label="0.0526316;4pkt 4fpkt"];
2665--5212[label="0.162162;12pkt 12fpkt"];
2665--8403[label="0.157895;12pkt 12fpkt"];
2665--10827[label="0.5;4pkt 4fpkt"];
2665--10877[label="0.454545;5pkt 5fpkt"];
2665--11614[label="0.155844;12pkt 12fpkt"];
2665--12819[label="0.5;4pkt 4fpkt"];
2665--12841[label="0.454545;5pkt 5fpkt"];
2665--13216[label="0.157895;12pkt 12fpkt"];
2665--13725[label="0.5;4pkt 4fpkt"];
2694--6030[label="1;3pkt 3fpkt"];
2694--6911[label="1;3pkt 3fpkt"];
2698--8850[label="0.166667;1pkt 1fpkt"];
2698--10433[label="0.333333;1pkt 1fpkt"];
2698--10877[label="0.0909091;1pkt 1fpkt"];
2698--11838[label="0.166667;1pkt 1fpkt"];
2698--12628[label="0.333333;1pkt 1fpkt"];
2698--12841[label="0.0909091;1pkt 1fpkt"];
2698--13637[label="0.333333;1pkt 1fpkt"];
2748--5160[label="0.047619;1pkt 1fpkt"];
2748--6358[label="1;35pkt 35fpkt"];
2748--10398[label="0.111111;1pkt 1fpkt"];
2748--10956[label="0.047619;1pkt 1fpkt"];
2748--11228[label="0.1;1pkt 1fpkt"];
2748--13020[label="0.1;1pkt 1fpkt"];
2748--13821[label="0.1;1pkt 1fpkt"];
2885--3720[label="0.0714286;3pkt 3fpkt"];
2885--5212[label="0.22973;17pkt 17fpkt"];
2885--6030[label="0.222222;4pkt 4fpkt"];
2885--7044[label="1;110pkt 110fpkt"];
2885--8403[label="0.210526;16pkt 16fpkt"];
2885--11228[label="0.4;4pkt 4fpkt"];
2885--11614[label="0.220779;17pkt 17fpkt"];
2885--13020[label="0.4;4pkt 4fpkt"];
2885--13216[label="0.210526;16pkt 16fpkt"];
2885--13821[label="0.4;4pkt 4fpkt"];
3256--3380[label="0.0166667;1pkt 1fpkt"];
3256--5026[label="0.0465116;2pkt 2fpkt"];
3256--5102[label="0.0333333;2pkt 2fpkt"];
3256--5994[label="0.0333333;2pkt 2fpkt"];
3256--7052[label="0.0166667;1pkt 1fpkt"];
3256--7895[label="0.0465116;2pkt 2fpkt"];
3256--7938[label="0.0333333;2pkt 2fpkt"];
3256--8565[label="0.0434783;1pkt 1fpkt"];
3256--9383[label="0.0294118;1pkt 1fpkt"];
3256--9545[label="0.0769231;2pkt 2fpkt"];
3256--10218[label="0.111111;1pkt 1fpkt"];
3256--10796[label="0.0652174;3pkt 3fpkt"];
3256--10823[label="0.047619;1pkt 1fpkt"];
3256--10827[label="0.25;2pkt 2fpkt"];
3256--12126[label="0.0294118;1pkt 1fpkt"];
3256--12199[label="0.0769231;2pkt 2fpkt"];
3256--12800[label="0.0652174;3pkt 3fpkt"];
3256--12819[label="0.25;2pkt 2fpkt"];
3256--13403[label="0.0294118;1pkt 1fpkt"];
3256--13434[label="0.0769231;2pkt 2fpkt"];
3256--13713[label="0.0652174;3pkt 3fpkt"];
3256--13725[label="0.25;2pkt 2fpkt"];
3702--5212[label="0.216216;16pkt 16fpkt"];
3702--8403[label="0.210526;16pkt 16fpkt"];
3702--11614[label="0.207792;16pkt 16fpkt"];
3702--13216[label="0.210526;16pkt 16fpkt"];
4248--5212[label="0.0540541;4pkt 4fpkt"];
4248--7640[label="1;81pkt 81fpkt"];
4248--8403[label="0.0526316;4pkt 4fpkt"];
4248--11614[label="0.0519481;4pkt 4fpkt"];
4248--13216[label="0.0526316;4pkt 4fpkt"];
5160--6358[label="0.047619;1pkt 1fpkt"];
5160--10956[label="1;21pkt 21fpkt"];
5212--7044[label="0.22973;17pkt 17fpkt"];
5212--7534[label="0.0540541;4pkt 4fpkt"];
5212--7640[label="0.0540541;4pkt 4fpkt"];
5212--8403[label="0.986486;73pkt 73fpkt"];
5212--11614[label="1;74pkt 74fpkt"];
5212--13216[label="0.986486;73pkt 73fpkt"];
6030--6911[label="1;3pkt 3fpkt"];
6030--7044[label="0.222222;4pkt 4fpkt"];
6358--10398[label="0.111111;1pkt 1fpkt"];
6358--10956[label="0.047619;1pkt 1fpkt"];
6358--11228[label="0.1;1pkt 1fpkt"];
6358--13020[label="0.1;1pkt 1fpkt"];
6358--13821[label="0.1;1pkt 1fpkt"];
7044--8403[label="0.210526;16pkt 16fpkt"];
7044--11228[label="0.4;4pkt 4fpkt"];
7044--11614[label="0.220779;17pkt 17fpkt"];
7044--13020[label="0.4;4pkt 4fpkt"];
7044--13216[label="0.210526;16pkt 16fpkt"];
7044--13821[label="0.4;4pkt 4fpkt"];
7534--8403[label="0.0526316;4pkt 4fpkt"];
7534--8752[label="0.384615;5pkt 5fpkt"];
7534--10218[label="0.444444;4pkt 4fpkt"];
7534--11614[label="0.0519481;4pkt 4fpkt"];
7534--13216[label="0.0526316;4pkt 4fpkt"];
7640--8403[label="0.0526316;4pkt 4fpkt"];
7640--11614[label="0.0519481;4pkt 4fpkt"];
7640--13216[label="0.0526316;4pkt 4fpkt"];
8403--11614[label="1;76pkt 76fpkt"];
8403--13216[label="1;76pkt 76fpkt"];
8850--11838[label="1;6pkt 6fpkt"];
10433--12628[label="1;3pkt 3fpkt"];
10433--13637[label="1;3pkt 3fpkt"];
10827--12819[label="1;8pkt 8fpkt"];
10827--13725[label="1;8pkt 8fpkt"];
10877--12841[label="1;11pkt 11fpkt"];
11228--13020[label="1;10pkt 10fpkt"];
11228--13821[label="1;10pkt 10fpkt"];
11614--13216[label="1;76pkt 76fpkt"];
12628--13637[label="1;3pkt 3fpkt"];
12819--13725[label="1;8pkt 8fpkt"];
13020--13821[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="21"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
11229[label="145.41.166.216;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13021[label="145.41.166.216;3pkt 3fpkt", shape=invtriangle, color=brown];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.41.166.216:1561, 201.110.112.208:80}[33.3333%]&lt;BR/&gt;{145.41.166.216:1557, 43.107.246.32:80}[33.3333%]&lt;BR/&gt;{145.41.166.216:1558, 43.107.246.32:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1561: (16.6667%)&lt;BR/&gt; 1558: (16.6667%)&lt;BR/&gt; 1557: (16.6667%)&gt;];
}
11229--13021[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="43.107.246.32" dst_port="80" src_ip="145.41.166.216" src_port="1558"/>
      <filter dst_ip="43.107.246.32" dst_port="80" src_ip="145.41.166.216" src_port="1557"/>
      <filter dst_ip="201.110.112.208" dst_port="80" src_ip="145.41.166.216" src_port="1561"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,053,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
11256[label="41.132.226.219;45pkt 45fpkt", shape=pentagon, color=darkviolet];
13034[label="41.132.226.219;45pkt 45fpkt", shape=invtriangle, color=brown];
13828[label="41.132.226.219;44pkt 44fpkt", shape=invhouse, color=bisque];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.132.226.219:*, 204.6.227.131:21}[75.5556%]&lt;BR/&gt;{41.132.226.219:*, *:80}[24.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (37.6866%)&lt;BR/&gt; 80: (12.3134%)&lt;BR/&gt; 65094: (1.1194%)&lt;BR/&gt; 64924: (1.1194%)&lt;BR/&gt; 63557: (1.1194%)&gt;];
}
11256--13034[label="1;45pkt 45fpkt"];
11256--13828[label="1;44pkt 44fpkt"];
13034--13828[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="41.132.226.219"/>
      <filter dst_ip="204.6.227.131" dst_port="21" src_ip="41.132.226.219"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
11260[label="150.105.35.220;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13036[label="150.105.35.220;4pkt 4fpkt", shape=invtriangle, color=brown];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.105.35.220:443, 68.197.97.19:51340}[25%]&lt;BR/&gt;{150.105.35.220:443, 219.131.204.52:2175}[25%]&lt;BR/&gt;{150.105.35.220:443, 219.131.204.52:2189}[25%]&lt;BR/&gt;{150.105.35.220:443, 219.131.204.52:2190}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 51340: (12.5%)&lt;BR/&gt; 2190: (12.5%)&lt;BR/&gt; 2189: (12.5%)&lt;BR/&gt; 2175: (12.5%)&gt;];
}
11260--13036[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="219.131.204.52" dst_port="2190" src_ip="150.105.35.220" src_port="443"/>
      <filter dst_ip="219.131.204.52" dst_port="2189" src_ip="150.105.35.220" src_port="443"/>
      <filter dst_ip="219.131.204.52" dst_port="2175" src_ip="150.105.35.220" src_port="443"/>
      <filter dst_ip="68.197.97.19" dst_port="51340" src_ip="150.105.35.220" src_port="443"/>
    </slice>
    <from sec="1165899757" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.230.79.220"/>
    </slice>
    <from sec="1165899620" usec="0"/>
    <to sec="1165900492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="150.139.113.220"/>
    </slice>
    <from sec="1165899883" usec="0"/>
    <to sec="1165899888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
11265[label="129.202.122.220;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13040[label="129.202.122.220;8pkt 8fpkt", shape=invtriangle, color=brown];
13832[label="129.202.122.220;8pkt 8fpkt", shape=invhouse, color=bisque];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.202.122.220:*, 204.7.184.175:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 52554: (6.25%)&lt;BR/&gt; 52553: (6.25%)&lt;BR/&gt; 52552: (6.25%)&lt;BR/&gt; 52551: (6.25%)&gt;];
}
11265--13040[label="1;8pkt 8fpkt"];
11265--13832[label="1;8pkt 8fpkt"];
13040--13832[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="204.7.184.175" dst_port="443" src_ip="129.202.122.220"/>
    </slice>
    <from sec="1165899797" usec="0"/>
    <to sec="1165899858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.205.232.223"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.32.34.226"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
436[label="205.246.71.155;d;1791pkt 1791fpkt", shape=diamond, color=yellow];
1608[label="44.165.120.232;s;61pkt 61fpkt", shape=diamond, color=yellow];
1871[label="205.134.211.237;s;18pkt 18fpkt", shape=diamond, color=yellow];
3517[label="205.64.52.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
4327[label="217.199.96.179;s;58pkt 58fpkt", shape=diamond, color=yellow];
4394[label="200.88.100.66;s;35pkt 35fpkt", shape=diamond, color=yellow];
4445[label="193.148.173.107;s;4pkt 4fpkt", shape=diamond, color=yellow];
5251[label="48.13.44.227;s;102pkt 102fpkt", shape=diamond, color=yellow];
5873[label="205.134.211.237;s;18pkt 18fpkt", shape=hexagon, color=black];
6569[label="205.246.71.155;d;1373pkt 1373fpkt", shape=hexagon, color=black];
8000[label="200.88.100.66;s;35pkt 35fpkt", shape=hexagon, color=black];
8659[label="44.165.96.23;100pkt 100fpkt", shape=pentagon, color=darkviolet];
9011[label="205.131.34.46;16pkt 16fpkt", shape=pentagon, color=darkviolet];
9264[label="200.88.100.66;35pkt 35fpkt", shape=pentagon, color=darkviolet];
9325[label="217.199.124.70;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9504[label="200.88.100.83;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10013[label="48.13.44.128;75pkt 75fpkt", shape=pentagon, color=darkviolet];
10584[label="204.188.226.166;19pkt 19fpkt", shape=pentagon, color=darkviolet];
10742[label="205.64.52.177;31pkt 31fpkt", shape=pentagon, color=darkviolet];
10771[label="205.128.37.179;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10774[label="217.199.96.179;70pkt 70fpkt", shape=pentagon, color=darkviolet];
11060[label="200.88.101.202;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11255[label="48.13.44.219;44pkt 44fpkt", shape=pentagon, color=darkviolet];
11322[label="48.13.44.227;115pkt 115fpkt", shape=pentagon, color=darkviolet];
11433[label="205.134.211.237;42pkt 42fpkt", shape=pentagon, color=darkviolet];
11922[label="205.131.34.46;16pkt 16fpkt", shape=invtriangle, color=brown];
12054[label="200.88.100.66;35pkt 35fpkt", shape=invtriangle, color=brown];
12093[label="217.199.124.70;8pkt 8fpkt", shape=invtriangle, color=brown];
12184[label="200.88.100.83;8pkt 8fpkt", shape=invtriangle, color=brown];
12773[label="205.64.52.177;31pkt 31fpkt", shape=invtriangle, color=brown];
12786[label="205.128.37.179;12pkt 12fpkt", shape=invtriangle, color=brown];
12787[label="217.199.96.179;70pkt 70fpkt", shape=invtriangle, color=brown];
13070[label="48.13.44.227;115pkt 115fpkt", shape=invtriangle, color=brown];
13389[label="217.199.124.70;8pkt 8fpkt", shape=invhouse, color=bisque];
13703[label="205.64.52.177;31pkt 31fpkt", shape=invhouse, color=bisque];
13707[label="205.128.37.179;12pkt 12fpkt", shape=invhouse, color=bisque];
13845[label="48.13.44.227;115pkt 115fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 205.246.71.155:*}[91.4212%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2332%)&lt;BR/&gt; 2095: (1.69753%)&lt;BR/&gt; 443: (0.848765%)&lt;BR/&gt; 1026: (0.110229%)&lt;BR/&gt; 57479: (0.0881834%)&gt;];
}
436--463[label="0.0530099;59pkt 59fpkt"];
436--515[label="0.0545455;15pkt 15fpkt"];
436--683[label="0.0238429;17pkt 17fpkt"];
436--846[label="0.0144928;1pkt 1fpkt"];
436--850[label="0.0598592;17pkt 17fpkt"];
436--851[label="0.137931;4pkt 4fpkt"];
436--1388[label="0.0233766;9pkt 9fpkt"];
436--1396[label="0.0569395;16pkt 16fpkt"];
436--1401[label="0.204913;367pkt 367fpkt"];
436--1498[label="0.0904348;52pkt 52fpkt"];
436--1608[label="0.704918;43pkt 43fpkt"];
436--1871[label="0.722222;13pkt 13fpkt"];
436--2098[label="0.0734341;34pkt 34fpkt"];
436--2141[label="0.0538922;18pkt 18fpkt"];
436--2349[label="0.0638298;6pkt 6fpkt"];
436--2615[label="0.0187793;4pkt 4fpkt"];
436--2663[label="0.0418251;11pkt 11fpkt"];
436--2743[label="0.00497512;1pkt 1fpkt"];
436--2837[label="0.0882353;3pkt 3fpkt"];
436--3227[label="0.0131579;1pkt 1fpkt"];
436--3242[label="0.0235294;2pkt 2fpkt"];
436--3410[label="0.12069;7pkt 7fpkt"];
436--3517[label="1;1pkt 1fpkt"];
436--3627[label="0.164021;31pkt 31fpkt"];
436--3628[label="0.143541;30pkt 30fpkt"];
436--3631[label="0.239437;17pkt 17fpkt"];
436--3638[label="0.144231;30pkt 30fpkt"];
436--3645[label="0.037037;4pkt 4fpkt"];
436--3667[label="0.140777;29pkt 29fpkt"];
436--3673[label="0.144928;30pkt 30fpkt"];
436--3694[label="0.141463;29pkt 29fpkt"];
436--3758[label="0.150485;31pkt 31fpkt"];
436--3827[label="0.129032;4pkt 4fpkt"];
436--3831[label="0.00813008;1pkt 1fpkt"];
436--3860[label="0.194444;7pkt 7fpkt"];
436--4246[label="0.00869565;1pkt 1fpkt"];
436--4327[label="0.672414;39pkt 39fpkt"];
436--4394[label="0.4;14pkt 14fpkt"];
436--4445[label="1;4pkt 4fpkt"];
436--4585[label="0.0625;1pkt 1fpkt"];
436--4614[label="0.0298507;2pkt 2fpkt"];
436--4694[label="0.0117647;1pkt 1fpkt"];
436--4989[label="0.0350877;2pkt 2fpkt"];
436--5156[label="0.00943396;1pkt 1fpkt"];
436--5157[label="0.155556;7pkt 7fpkt"];
436--5204[label="0.0648148;7pkt 7fpkt"];
436--5251[label="0.823529;84pkt 84fpkt"];
436--5561[label="0.015873;1pkt 1fpkt"];
436--5562[label="0.0714286;3pkt 3fpkt"];
436--5761[label="0.0904348;52pkt 52fpkt"];
436--5873[label="0.722222;13pkt 13fpkt"];
436--5965[label="0.0777778;14pkt 14fpkt"];
436--5991[label="0.00398406;1pkt 1fpkt"];
436--6211[label="0.0502513;90pkt 90fpkt"];
436--6236[label="0.0530099;59pkt 59fpkt"];
436--6301[label="0.1875;3pkt 3fpkt"];
436--6401[label="0.1;3pkt 3fpkt"];
436--6405[label="0.0714286;6pkt 6fpkt"];
436--6567[label="0.0230415;5pkt 5fpkt"];
436--6569[label="1;1373pkt 1373fpkt"];
436--6573[label="0.0774194;12pkt 12fpkt"];
436--6575[label="0.204913;367pkt 367fpkt"];
436--6648[label="0.0204082;1pkt 1fpkt"];
436--6731[label="0.12766;6pkt 6fpkt"];
436--6818[label="0.0222222;4pkt 4fpkt"];
436--6852[label="0.174194;27pkt 27fpkt"];
436--6897[label="0.15508;29pkt 29fpkt"];
436--6967[label="0.19403;26pkt 26fpkt"];
436--7517[label="0.239437;17pkt 17fpkt"];
436--7594[label="0.0357143;2pkt 2fpkt"];
436--7677[label="0.00925926;1pkt 1fpkt"];
436--7957[label="0.129032;4pkt 4fpkt"];
436--8000[label="0.4;14pkt 14fpkt"];
436--8267[label="0.000558347;1pkt 1fpkt"];
436--8268[label="0.0519263;93pkt 93fpkt"];
436--8271[label="0.000558347;1pkt 1fpkt"];
436--8272[label="0.0569514;102pkt 102fpkt"];
436--8275[label="0.0692351;124pkt 124fpkt"];
436--8285[label="0.000558347;1pkt 1fpkt"];
436--8286[label="0.0519263;93pkt 93fpkt"];
436--8289[label="0.000558347;1pkt 1fpkt"];
436--8290[label="0.0569514;102pkt 102fpkt"];
436--8293[label="0.0692351;124pkt 124fpkt"];
436--8371[label="0.333333;4pkt 4fpkt"];
436--8382[label="0.0491667;59pkt 59fpkt"];
436--8462[label="0.0681818;3pkt 3fpkt"];
436--8659[label="0.97;97pkt 97fpkt"];
436--8922[label="0.137615;30pkt 30fpkt"];
436--8926[label="0.0179372;4pkt 4fpkt"];
436--9011[label="0.875;14pkt 14fpkt"];
436--9101[label="0.136986;30pkt 30fpkt"];
436--9264[label="0.4;14pkt 14fpkt"];
436--9325[label="0.625;5pkt 5fpkt"];
436--9353[label="0.00571429;1pkt 1fpkt"];
436--9504[label="0.25;2pkt 2fpkt"];
436--9952[label="0.1;3pkt 3fpkt"];
436--10005[label="0.111111;1pkt 1fpkt"];
436--10013[label="0.786667;59pkt 59fpkt"];
436--10018[label="0.0645161;2pkt 2fpkt"];
436--10070[label="0.12;3pkt 3fpkt"];
436--10501[label="0.0569106;7pkt 7fpkt"];
436--10584[label="1;19pkt 19fpkt"];
436--10670[label="0.421053;8pkt 8fpkt"];
436--10699[label="0.0769231;1pkt 1fpkt"];
436--10700[label="0.00465116;1pkt 1fpkt"];
436--10742[label="0.967742;30pkt 30fpkt"];
436--10771[label="0.666667;8pkt 8fpkt"];
436--10774[label="0.557143;39pkt 39fpkt"];
436--10970[label="0.0555556;1pkt 1fpkt"];
436--11038[label="0.00431034;1pkt 1fpkt"];
436--11060[label="1;4pkt 4fpkt"];
436--11076[label="0.114754;7pkt 7fpkt"];
436--11255[label="1;44pkt 44fpkt"];
436--11322[label="0.721739;83pkt 83fpkt"];
436--11351[label="0.0410023;18pkt 18fpkt"];
436--11372[label="0.00436681;2pkt 2fpkt"];
436--11405[label="0.0034965;1pkt 1fpkt"];
436--11433[label="0.833333;35pkt 35fpkt"];
436--11528[label="0.0487805;2pkt 2fpkt"];
436--11598[label="0.272727;3pkt 3fpkt"];
436--11605[label="0.0483736;58pkt 58fpkt"];
436--11638[label="0.0888889;4pkt 4fpkt"];
436--11891[label="0.129032;4pkt 4fpkt"];
436--11922[label="0.875;14pkt 14fpkt"];
436--11968[label="0.136986;30pkt 30fpkt"];
436--12054[label="0.4;14pkt 14fpkt"];
436--12093[label="0.625;5pkt 5fpkt"];
436--12110[label="0.00571429;1pkt 1fpkt"];
436--12184[label="0.25;2pkt 2fpkt"];
436--12456[label="0.12;3pkt 3fpkt"];
436--12656[label="0.0569106;7pkt 7fpkt"];
436--12738[label="0.421053;8pkt 8fpkt"];
436--12773[label="0.967742;30pkt 30fpkt"];
436--12786[label="0.666667;8pkt 8fpkt"];
436--12787[label="0.557143;39pkt 39fpkt"];
436--13070[label="0.721739;83pkt 83fpkt"];
436--13095[label="0.00436681;2pkt 2fpkt"];
436--13108[label="0.0034965;1pkt 1fpkt"];
436--13123[label="0.105263;2pkt 2fpkt"];
436--13175[label="0.0487805;2pkt 2fpkt"];
436--13205[label="0.333333;4pkt 4fpkt"];
436--13339[label="0.136986;30pkt 30fpkt"];
436--13389[label="0.625;5pkt 5fpkt"];
436--13397[label="0.00571429;1pkt 1fpkt"];
436--13703[label="0.967742;30pkt 30fpkt"];
436--13707[label="0.666667;8pkt 8fpkt"];
436--13762[label="0.0625;1pkt 1fpkt"];
436--13845[label="0.721739;83pkt 83fpkt"];
436--13857[label="0.00436681;2pkt 2fpkt"];
436--13894[label="0.0487805;2pkt 2fpkt"];
1608--6208[label="0.295082;18pkt 18fpkt"];
1608--6569[label="0.704918;43pkt 43fpkt"];
1871--5873[label="1;18pkt 18fpkt"];
1871--8275[label="0.222222;4pkt 4fpkt"];
1871--8293[label="0.222222;4pkt 4fpkt"];
1871--11433[label="1;18pkt 18fpkt"];
3517--6569[label="1;1pkt 1fpkt"];
3517--10742[label="1;1pkt 1fpkt"];
3517--12773[label="1;1pkt 1fpkt"];
3517--13703[label="1;1pkt 1fpkt"];
4327--6208[label="0.327586;19pkt 19fpkt"];
4327--6569[label="0.310345;18pkt 18fpkt"];
4327--8268[label="0.0344828;2pkt 2fpkt"];
4327--8272[label="0.0517241;3pkt 3fpkt"];
4327--8275[label="0.0689655;4pkt 4fpkt"];
4327--8286[label="0.0344828;2pkt 2fpkt"];
4327--8290[label="0.0517241;3pkt 3fpkt"];
4327--8293[label="0.0689655;4pkt 4fpkt"];
4327--10774[label="1;58pkt 58fpkt"];
4327--12787[label="1;58pkt 58fpkt"];
4394--6208[label="0.142857;5pkt 5fpkt"];
4394--8000[label="1;35pkt 35fpkt"];
4394--8268[label="0.114286;4pkt 4fpkt"];
4394--8272[label="0.0571429;2pkt 2fpkt"];
4394--8275[label="0.0285714;1pkt 1fpkt"];
4394--8286[label="0.114286;4pkt 4fpkt"];
4394--8290[label="0.0571429;2pkt 2fpkt"];
4394--8293[label="0.0285714;1pkt 1fpkt"];
4394--9264[label="1;35pkt 35fpkt"];
4394--12054[label="1;35pkt 35fpkt"];
4445--6569[label="0.75;3pkt 3fpkt"];
4445--8272[label="0.25;1pkt 1fpkt"];
4445--8275[label="0.25;1pkt 1fpkt"];
4445--8290[label="0.25;1pkt 1fpkt"];
4445--8293[label="0.25;1pkt 1fpkt"];
5251--6569[label="0.470588;48pkt 48fpkt"];
5251--8268[label="0.0882353;9pkt 9fpkt"];
5251--8272[label="0.0882353;9pkt 9fpkt"];
5251--8275[label="0.117647;12pkt 12fpkt"];
5251--8286[label="0.0882353;9pkt 9fpkt"];
5251--8290[label="0.0882353;9pkt 9fpkt"];
5251--8293[label="0.117647;12pkt 12fpkt"];
5251--11322[label="0.990196;101pkt 101fpkt"];
5251--13070[label="0.990196;101pkt 101fpkt"];
5251--13845[label="0.990196;101pkt 101fpkt"];
5873--8275[label="0.222222;4pkt 4fpkt"];
5873--8293[label="0.222222;4pkt 4fpkt"];
5873--11433[label="1;18pkt 18fpkt"];
6569--6573[label="0.0774194;12pkt 12fpkt"];
6569--6575[label="0.20976;288pkt 288fpkt"];
6569--6648[label="0.0204082;1pkt 1fpkt"];
6569--6731[label="0.0851064;4pkt 4fpkt"];
6569--6818[label="0.0222222;4pkt 4fpkt"];
6569--6852[label="0.16129;25pkt 25fpkt"];
6569--6897[label="0.128342;24pkt 24fpkt"];
6569--6967[label="0.19403;26pkt 26fpkt"];
6569--7517[label="0.239437;17pkt 17fpkt"];
6569--7594[label="0.0178571;1pkt 1fpkt"];
6569--7677[label="0.00925926;1pkt 1fpkt"];
6569--7957[label="0.129032;4pkt 4fpkt"];
6569--8267[label="0.000728332;1pkt 1fpkt"];
6569--8268[label="0.0677349;93pkt 93fpkt"];
6569--8271[label="0.000728332;1pkt 1fpkt"];
6569--8272[label="0.0742899;102pkt 102fpkt"];
6569--8275[label="0.00436999;6pkt 6fpkt"];
6569--8285[label="0.000728332;1pkt 1fpkt"];
6569--8286[label="0.0677349;93pkt 93fpkt"];
6569--8289[label="0.000728332;1pkt 1fpkt"];
6569--8290[label="0.0742899;102pkt 102fpkt"];
6569--8293[label="0.00436999;6pkt 6fpkt"];
6569--8371[label="0.166667;2pkt 2fpkt"];
6569--8382[label="0.0391667;47pkt 47fpkt"];
6569--8659[label="0.81;81pkt 81fpkt"];
6569--8922[label="0.114679;25pkt 25fpkt"];
6569--8926[label="0.0179372;4pkt 4fpkt"];
6569--9011[label="0.375;6pkt 6fpkt"];
6569--9101[label="0.114155;25pkt 25fpkt"];
6569--9325[label="0.375;3pkt 3fpkt"];
6569--9353[label="0.00571429;1pkt 1fpkt"];
6569--9504[label="0.25;2pkt 2fpkt"];
6569--9952[label="0.1;3pkt 3fpkt"];
6569--10013[label="0.306667;23pkt 23fpkt"];
6569--10070[label="0.12;3pkt 3fpkt"];
6569--10501[label="0.0162602;2pkt 2fpkt"];
6569--10584[label="0.473684;9pkt 9fpkt"];
6569--10670[label="0.157895;3pkt 3fpkt"];
6569--10699[label="0.0769231;1pkt 1fpkt"];
6569--10700[label="0.00465116;1pkt 1fpkt"];
6569--10742[label="0.967742;30pkt 30fpkt"];
6569--10771[label="0.666667;8pkt 8fpkt"];
6569--10774[label="0.257143;18pkt 18fpkt"];
6569--10970[label="0.0555556;1pkt 1fpkt"];
6569--11038[label="0.00431034;1pkt 1fpkt"];
6569--11060[label="1;4pkt 4fpkt"];
6569--11076[label="0.0655738;4pkt 4fpkt"];
6569--11255[label="1;44pkt 44fpkt"];
6569--11322[label="0.408696;47pkt 47fpkt"];
6569--11351[label="0.0296128;13pkt 13fpkt"];
6569--11372[label="0.00436681;2pkt 2fpkt"];
6569--11405[label="0.0034965;1pkt 1fpkt"];
6569--11433[label="0.52381;22pkt 22fpkt"];
6569--11598[label="0.0909091;1pkt 1fpkt"];
6569--11605[label="0.0383653;46pkt 46fpkt"];
6569--11891[label="0.129032;4pkt 4fpkt"];
6569--11922[label="0.375;6pkt 6fpkt"];
6569--11968[label="0.114155;25pkt 25fpkt"];
6569--12093[label="0.375;3pkt 3fpkt"];
6569--12110[label="0.00571429;1pkt 1fpkt"];
6569--12184[label="0.25;2pkt 2fpkt"];
6569--12456[label="0.12;3pkt 3fpkt"];
6569--12656[label="0.0162602;2pkt 2fpkt"];
6569--12738[label="0.157895;3pkt 3fpkt"];
6569--12773[label="0.967742;30pkt 30fpkt"];
6569--12786[label="0.666667;8pkt 8fpkt"];
6569--12787[label="0.257143;18pkt 18fpkt"];
6569--13070[label="0.408696;47pkt 47fpkt"];
6569--13095[label="0.00436681;2pkt 2fpkt"];
6569--13108[label="0.0034965;1pkt 1fpkt"];
6569--13123[label="0.0526316;1pkt 1fpkt"];
6569--13205[label="0.166667;2pkt 2fpkt"];
6569--13339[label="0.114155;25pkt 25fpkt"];
6569--13389[label="0.375;3pkt 3fpkt"];
6569--13397[label="0.00571429;1pkt 1fpkt"];
6569--13703[label="0.967742;30pkt 30fpkt"];
6569--13707[label="0.666667;8pkt 8fpkt"];
6569--13762[label="0.0625;1pkt 1fpkt"];
6569--13845[label="0.408696;47pkt 47fpkt"];
6569--13857[label="0.00436681;2pkt 2fpkt"];
8000--8268[label="0.114286;4pkt 4fpkt"];
8000--8272[label="0.0571429;2pkt 2fpkt"];
8000--8275[label="0.0285714;1pkt 1fpkt"];
8000--8286[label="0.114286;4pkt 4fpkt"];
8000--8290[label="0.0571429;2pkt 2fpkt"];
8000--8293[label="0.0285714;1pkt 1fpkt"];
8000--9264[label="1;35pkt 35fpkt"];
8000--12054[label="1;35pkt 35fpkt"];
9011--11922[label="1;16pkt 16fpkt"];
9264--12054[label="1;35pkt 35fpkt"];
9325--12093[label="1;8pkt 8fpkt"];
9325--13389[label="1;8pkt 8fpkt"];
9504--12184[label="1;8pkt 8fpkt"];
10742--12773[label="1;31pkt 31fpkt"];
10742--13703[label="1;31pkt 31fpkt"];
10771--12786[label="1;12pkt 12fpkt"];
10771--13707[label="1;12pkt 12fpkt"];
10774--12787[label="1;70pkt 70fpkt"];
11322--13070[label="1;115pkt 115fpkt"];
11322--13845[label="1;115pkt 115fpkt"];
12093--13389[label="1;8pkt 8fpkt"];
12773--13703[label="1;31pkt 31fpkt"];
12786--13707[label="1;12pkt 12fpkt"];
13070--13845[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.155" src_port="80"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.41.230.228"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
11362[label="145.229.174.230;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13089[label="145.229.174.230;4pkt 4fpkt", shape=invtriangle, color=brown];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.174.230:1619, 43.107.239.7:1863}[25%]&lt;BR/&gt;{145.229.174.230:1085, 201.110.128.22:1863}[25%]&lt;BR/&gt;{145.229.174.230:1720, 201.110.193.67:1863}[25%]&lt;BR/&gt;{145.229.174.230:1604, 42.126.165.96:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1720: (12.5%)&lt;BR/&gt; 1619: (12.5%)&lt;BR/&gt; 1604: (12.5%)&lt;BR/&gt; 1085: (12.5%)&gt;];
}
11362--13089[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="42.126.165.96" dst_port="1863" src_ip="145.229.174.230" src_port="1604"/>
      <filter dst_ip="201.110.193.67" dst_port="1863" src_ip="145.229.174.230" src_port="1720"/>
      <filter dst_ip="201.110.128.22" dst_port="1863" src_ip="145.229.174.230" src_port="1085"/>
      <filter dst_ip="43.107.239.7" dst_port="1863" src_ip="145.229.174.230" src_port="1619"/>
    </slice>
    <from sec="1165899625" usec="0"/>
    <to sec="1165900468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.79.209.230"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
11369[label="204.134.139.231;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13093[label="204.134.139.231;3pkt 3fpkt", shape=invtriangle, color=brown];
13855[label="204.134.139.231;3pkt 3fpkt", shape=invhouse, color=bisque];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.134.139.231:1650, 169.230.158.2:80}[33.3333%]&lt;BR/&gt;{204.134.139.231:1664, 169.230.158.2:80}[33.3333%]&lt;BR/&gt;{204.134.139.231:1669, 169.230.158.2:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1669: (16.6667%)&lt;BR/&gt; 1664: (16.6667%)&lt;BR/&gt; 1650: (16.6667%)&gt;];
}
11369--13093[label="1;3pkt 3fpkt"];
11369--13855[label="1;3pkt 3fpkt"];
13093--13855[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="204.134.139.231" src_port="1669"/>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="204.134.139.231" src_port="1664"/>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="204.134.139.231" src_port="1650"/>
    </slice>
    <from sec="1165900366" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.198.169.231"/>
    </slice>
    <from sec="1165899846" usec="0"/>
    <to sec="1165899905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
11390[label="11.43.135.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13101[label="11.43.135.233;1pkt 1fpkt", shape=invtriangle, color=brown];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{11.43.135.233:80, 145.229.170.16:2135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2135: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11390--13101[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.170.16" dst_port="2135" src_ip="11.43.135.233" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
11396[label="150.105.9.234;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13104[label="150.105.9.234;2pkt 2fpkt", shape=invtriangle, color=brown];
13861[label="150.105.9.234;2pkt 2fpkt", shape=invhouse, color=bisque];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.105.9.234:62253, 150.44.192.16:61861}[50%]&lt;BR/&gt;{150.105.9.234:62568, 150.44.192.16:61861}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61861: (50%)&lt;BR/&gt; 62568: (25%)&lt;BR/&gt; 62253: (25%)&gt;];
}
11396--13104[label="1;2pkt 2fpkt"];
11396--13861[label="1;2pkt 2fpkt"];
13104--13861[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.44.192.16" dst_port="61861" src_ip="150.105.9.234" src_port="62568"/>
      <filter dst_ip="150.44.192.16" dst_port="61861" src_ip="150.105.9.234" src_port="62253"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.130.136.234"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
11407[label="145.229.169.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13110[label="145.229.169.234;1pkt 1fpkt", shape=invtriangle, color=brown];
13862[label="145.229.169.234;1pkt 1fpkt", shape=invhouse, color=bisque];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.169.234:1788, 214.82.100.192:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1788: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11407--13110[label="1;1pkt 1fpkt"];
11407--13862[label="1;1pkt 1fpkt"];
13110--13862[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.82.100.192" dst_port="80" src_ip="145.229.169.234" src_port="1788"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
11410[label="169.230.211.234;20pkt 20fpkt", shape=pentagon, color=darkviolet];
13111[label="169.230.211.234;20pkt 20fpkt", shape=invtriangle, color=brown];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.211.234:61676, *:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61676: (45%)&lt;BR/&gt; 60384: (2.5%)&lt;BR/&gt; 56820: (2.5%)&lt;BR/&gt; 53718: (2.5%)&lt;BR/&gt; 51906: (2.5%)&gt;];
}
11410--13111[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="169.230.211.234" src_port="61676"/>
    </slice>
    <from sec="1165899608" usec="0"/>
    <to sec="1165900498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.225.80.235"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.228.218.235"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.99.221.235"/>
    </slice>
    <from sec="1165900348" usec="0"/>
    <to sec="1165900358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
11449[label="215.95.148.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13133[label="215.95.148.240;2pkt 2fpkt", shape=invtriangle, color=brown];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.95.148.240:22, 145.229.241.90:52168}[50%]&lt;BR/&gt;{215.95.148.240:22, 145.229.241.90:52265}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 52265: (25%)&lt;BR/&gt; 52168: (25%)&gt;];
}
11449--13133[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.229.241.90" dst_port="52265" src_ip="215.95.148.240" src_port="22"/>
      <filter dst_ip="145.229.241.90" dst_port="52168" src_ip="215.95.148.240" src_port="22"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
11460[label="151.227.227.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13138[label="151.227.227.241;1pkt 1fpkt", shape=invtriangle, color=brown];
13876[label="151.227.227.241;1pkt 1fpkt", shape=invhouse, color=bisque];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.227.241:49416, 201.17.158.140:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49416: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11460--13138[label="1;1pkt 1fpkt"];
11460--13876[label="1;1pkt 1fpkt"];
13138--13876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.17.158.140" dst_port="80" src_ip="151.227.227.241" src_port="49416"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.208.118.242"/>
    </slice>
    <from sec="1165900216" usec="0"/>
    <to sec="1165900350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
11472[label="151.227.177.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13145[label="151.227.177.242;1pkt 1fpkt", shape=invtriangle, color=brown];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.227.177.242:25, 204.181.116.188:4542}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4542: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
11472--13145[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.181.116.188" dst_port="4542" src_ip="151.227.177.242" src_port="25"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
11477[label="145.41.229.242;73pkt 73fpkt", shape=pentagon, color=darkviolet];
13149[label="145.41.229.242;73pkt 73fpkt", shape=invtriangle, color=brown];
13879[label="145.41.229.242;73pkt 73fpkt", shape=invhouse, color=bisque];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.41.229.242:*, 104.228.12.44:80}[41.0959%]&lt;BR/&gt;{145.41.229.242:*, 192.149.6.71:80}[27.3973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2514: (0.684932%)&lt;BR/&gt; 2513: (0.684932%)&lt;BR/&gt; 2512: (0.684932%)&lt;BR/&gt; 2511: (0.684932%)&gt;];
}
11477--13149[label="1;73pkt 73fpkt"];
11477--13879[label="1;73pkt 73fpkt"];
13149--13879[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="104.228.12.44" dst_port="80" src_ip="145.41.229.242"/>
      <filter dst_ip="192.149.6.71" dst_port="80" src_ip="145.41.229.242"/>
    </slice>
    <from sec="1165899661" usec="0"/>
    <to sec="1165900397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
11483[label="218.200.135.243;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13154[label="218.200.135.243;18pkt 18fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.200.135.243:80, 205.249.132.104:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2409: (2.77778%)&lt;BR/&gt; 2408: (2.77778%)&lt;BR/&gt; 2407: (2.77778%)&lt;BR/&gt; 2406: (2.77778%)&gt;];
}
11483--13154[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="205.249.132.104" src_ip="218.200.135.243" src_port="80"/>
    </slice>
    <from sec="1165899678" usec="0"/>
    <to sec="1165899692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09698,2.04537,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
967[label="169.230.112.28;d;133pkt 133fpkt", shape=diamond, color=yellow];
1622[label="34.43.21.24;s;365pkt 365fpkt", shape=diamond, color=yellow];
1896[label="151.227.155.80;d;25pkt 25fpkt", shape=diamond, color=yellow];
2177[label="209.154.228.239;s;2965pkt 2965fpkt", shape=diamond, color=yellow];
4911[label="205.70.144.96;s;4pkt 4fpkt", shape=diamond, color=yellow];
5008[label="169.230.114.129;d;77pkt 77fpkt", shape=diamond, color=yellow];
5271[label="151.227.105.46;d;7pkt 7fpkt", shape=diamond, color=yellow];
6139[label="151.227.155.80;d;23pkt 23fpkt", shape=hexagon, color=black];
6621[label="209.154.228.239;s;1874pkt 1874fpkt", shape=hexagon, color=black];
8669[label="34.43.21.24;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9273[label="41.77.174.66;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9685[label="205.70.144.96;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11443[label="209.154.228.239;3586pkt 3586fpkt", shape=pentagon, color=darkviolet];
12268[label="205.70.144.96;4pkt 4fpkt", shape=invtriangle, color=brown];
13159[label="194.75.4.246;11pkt 11fpkt", shape=invtriangle, color=brown];
13306[label="201.247.185.39;1pkt 1fpkt", shape=invhouse, color=bisque];
13468[label="205.70.144.96;4pkt 4fpkt", shape=invhouse, color=bisque];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.154.228.239:3010, *:1434}[85.9536%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (46.3692%)&lt;BR/&gt; 3010: (46.3637%)&lt;BR/&gt; 80: (3.42172%)&lt;BR/&gt; 443: (0.176037%)&lt;BR/&gt; 2030: (0.0330069%)&gt;];
}
967--996[label="0.0150376;2pkt 2fpkt"];
967--1606[label="0.0075188;1pkt 1fpkt"];
967--1622[label="0.0150376;2pkt 2fpkt"];
967--2667[label="0.0075188;1pkt 1fpkt"];
967--3645[label="0.0185185;2pkt 2fpkt"];
967--4635[label="0.0150376;2pkt 2fpkt"];
967--5725[label="0.0150376;2pkt 2fpkt"];
967--6346[label="0.0150376;2pkt 2fpkt"];
967--7612[label="0.0150376;2pkt 2fpkt"];
967--8226[label="0.0150376;2pkt 2fpkt"];
967--9273[label="1;4pkt 4fpkt"];
967--9399[label="0.047619;1pkt 1fpkt"];
967--9414[label="0.0909091;4pkt 4fpkt"];
967--10678[label="0.0150376;2pkt 2fpkt"];
967--12132[label="0.047619;1pkt 1fpkt"];
967--12139[label="0.0909091;4pkt 4fpkt"];
967--13306[label="1;1pkt 1fpkt"];
1622--1635[label="0.00273973;1pkt 1fpkt"];
1622--1689[label="0.027027;2pkt 2fpkt"];
1622--1692[label="0.0238095;3pkt 3fpkt"];
1622--1695[label="0.016129;2pkt 2fpkt"];
1622--1811[label="0.00628931;1pkt 1fpkt"];
1622--1878[label="0.00645161;1pkt 1fpkt"];
1622--1896[label="0.28;7pkt 7fpkt"];
1622--1965[label="0.0223464;4pkt 4fpkt"];
1622--2073[label="0.00900901;1pkt 1fpkt"];
1622--2089[label="0.00632911;1pkt 1fpkt"];
1622--2138[label="0.0193548;3pkt 3fpkt"];
1622--2181[label="0.010929;2pkt 2fpkt"];
1622--2238[label="0.0285714;1pkt 1fpkt"];
1622--2329[label="0.00961538;1pkt 1fpkt"];
1622--2340[label="0.0194175;2pkt 2fpkt"];
1622--2410[label="0.0138889;1pkt 1fpkt"];
1622--2520[label="0.0641026;5pkt 5fpkt"];
1622--2645[label="0.00934579;3pkt 3fpkt"];
1622--2883[label="0.0175439;2pkt 2fpkt"];
1622--2918[label="0.037037;2pkt 2fpkt"];
1622--3169[label="0.0102041;1pkt 1fpkt"];
1622--3189[label="0.021978;2pkt 2fpkt"];
1622--3251[label="0.0288462;3pkt 3fpkt"];
1622--3278[label="0.0121951;1pkt 1fpkt"];
1622--3299[label="0.0285714;5pkt 5fpkt"];
1622--3310[label="0.00657895;1pkt 1fpkt"];
1622--3321[label="0.0144928;1pkt 1fpkt"];
1622--3354[label="0.0232558;1pkt 1fpkt"];
1622--3388[label="0.00909091;1pkt 1fpkt"];
1622--3484[label="0.00746269;1pkt 1fpkt"];
1622--3813[label="0.0190476;4pkt 4fpkt"];
1622--4374[label="0.0540541;2pkt 2fpkt"];
1622--4766[label="0.0606061;2pkt 2fpkt"];
1622--4853[label="0.0434783;2pkt 2fpkt"];
1622--5008[label="0.220779;17pkt 17fpkt"];
1622--5187[label="0.0185185;1pkt 1fpkt"];
1622--5442[label="0.00273973;1pkt 1fpkt"];
1622--5553[label="0.0142857;1pkt 1fpkt"];
1622--5607[label="0.0111732;2pkt 2fpkt"];
1622--5787[label="0.0153846;1pkt 1fpkt"];
1622--5940[label="0.0136986;5pkt 5fpkt"];
1622--6053[label="0.0285714;1pkt 1fpkt"];
1622--6092[label="0.0103093;1pkt 1fpkt"];
1622--6139[label="0.304348;7pkt 7fpkt"];
1622--6232[label="0.0383562;14pkt 14fpkt"];
1622--6235[label="0.00273973;1pkt 1fpkt"];
1622--6689[label="0.00657895;1pkt 1fpkt"];
1622--7096[label="0.0223464;4pkt 4fpkt"];
1622--7198[label="0.00900901;1pkt 1fpkt"];
1622--7208[label="0.00689655;1pkt 1fpkt"];
1622--7258[label="0.00502513;1pkt 1fpkt"];
1622--7387[label="0.0103093;1pkt 1fpkt"];
1622--7391[label="0.0138889;1pkt 1fpkt"];
1622--7404[label="0.00645161;1pkt 1fpkt"];
1622--7570[label="0.010929;2pkt 2fpkt"];
1622--7604[label="0.0434783;1pkt 1fpkt"];
1622--7615[label="0.018018;2pkt 2fpkt"];
1622--7663[label="0.0190476;4pkt 4fpkt"];
1622--7722[label="0.0416667;2pkt 2fpkt"];
1622--7757[label="0.0641026;5pkt 5fpkt"];
1622--8104[label="0.0142857;1pkt 1fpkt"];
1622--8248[label="0.00657895;1pkt 1fpkt"];
1622--8268[label="0.0958904;35pkt 35fpkt"];
1622--8272[label="0.115068;42pkt 42fpkt"];
1622--8275[label="0.139726;51pkt 51fpkt"];
1622--8286[label="0.0958904;35pkt 35fpkt"];
1622--8290[label="0.115068;42pkt 42fpkt"];
1622--8293[label="0.139726;51pkt 51fpkt"];
1622--8669[label="0.5;1pkt 1fpkt"];
1896--2130[label="0.16;4pkt 4fpkt"];
1896--2177[label="0.04;1pkt 1fpkt"];
1896--4911[label="1;4pkt 4fpkt"];
1896--6139[label="1;23pkt 23fpkt"];
1896--6621[label="0.04;1pkt 1fpkt"];
1896--7002[label="0.4;8pkt 8fpkt"];
1896--8268[label="0.04;1pkt 1fpkt"];
1896--8272[label="0.04;1pkt 1fpkt"];
1896--8275[label="0.04;1pkt 1fpkt"];
1896--8286[label="0.04;1pkt 1fpkt"];
1896--8290[label="0.04;1pkt 1fpkt"];
1896--8293[label="0.04;1pkt 1fpkt"];
1896--9131[label="0.4;8pkt 8fpkt"];
1896--9685[label="1;4pkt 4fpkt"];
1896--11443[label="0.04;1pkt 1fpkt"];
1896--12268[label="1;4pkt 4fpkt"];
1896--13468[label="1;4pkt 4fpkt"];
1896--13647[label="0.16;4pkt 4fpkt"];
2177--2726[label="0.00806452;1pkt 1fpkt"];
2177--5271[label="0.142857;1pkt 1fpkt"];
2177--6139[label="0.0434783;1pkt 1fpkt"];
2177--6621[label="1;1874pkt 1874fpkt"];
2177--7275[label="0.00806452;1pkt 1fpkt"];
2177--8225[label="0.00806452;1pkt 1fpkt"];
2177--11443[label="0.997976;2959pkt 2959fpkt"];
4911--6139[label="0.5;2pkt 2fpkt"];
4911--9685[label="1;4pkt 4fpkt"];
4911--12268[label="1;4pkt 4fpkt"];
4911--13468[label="1;4pkt 4fpkt"];
5008--5589[label="0.0519481;4pkt 4fpkt"];
5008--5803[label="0.012987;1pkt 1fpkt"];
5008--5855[label="0.012987;1pkt 1fpkt"];
5008--6346[label="0.0649351;5pkt 5fpkt"];
5008--6575[label="0.038961;3pkt 3fpkt"];
5008--6648[label="0.0816327;4pkt 4fpkt"];
5008--7339[label="0.025974;2pkt 2fpkt"];
5008--8268[label="0.012987;1pkt 1fpkt"];
5008--8272[label="0.012987;1pkt 1fpkt"];
5008--8275[label="0.012987;1pkt 1fpkt"];
5008--8286[label="0.012987;1pkt 1fpkt"];
5008--8290[label="0.012987;1pkt 1fpkt"];
5008--8293[label="0.012987;1pkt 1fpkt"];
5008--8854[label="0.0645161;2pkt 2fpkt"];
5008--9925[label="0.111111;2pkt 2fpkt"];
5008--10630[label="0.012987;1pkt 1fpkt"];
5008--13647[label="0.012987;1pkt 1fpkt"];
5271--11443[label="0.142857;1pkt 1fpkt"];
5271--13159[label="0.571429;4pkt 4fpkt"];
6139--6621[label="0.0434783;1pkt 1fpkt"];
6139--7002[label="0.4;8pkt 8fpkt"];
6139--8268[label="0.0434783;1pkt 1fpkt"];
6139--8272[label="0.0434783;1pkt 1fpkt"];
6139--8275[label="0.0434783;1pkt 1fpkt"];
6139--8286[label="0.0434783;1pkt 1fpkt"];
6139--8290[label="0.0434783;1pkt 1fpkt"];
6139--8293[label="0.0434783;1pkt 1fpkt"];
6139--9131[label="0.4;8pkt 8fpkt"];
6139--9685[label="0.5;2pkt 2fpkt"];
6139--11443[label="0.0434783;1pkt 1fpkt"];
6139--12268[label="0.5;2pkt 2fpkt"];
6139--13468[label="0.5;2pkt 2fpkt"];
6139--13647[label="0.173913;4pkt 4fpkt"];
6621--7275[label="0.00806452;1pkt 1fpkt"];
6621--8225[label="0.00806452;1pkt 1fpkt"];
6621--11443[label="0.996798;1868pkt 1868fpkt"];
9685--12268[label="1;4pkt 4fpkt"];
9685--13468[label="1;4pkt 4fpkt"];
12268--13468[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.154.228.239" src_port="3010"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
11506[label="43.23.74.246;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13160[label="43.23.74.246;4pkt 4fpkt", shape=invtriangle, color=brown];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.23.74.246:80, 205.246.71.154:54731}[25%]&lt;BR/&gt;{43.23.74.246:80, 205.246.71.154:54755}[25%]&lt;BR/&gt;{43.23.74.246:80, 205.246.71.154:54779}[25%]&lt;BR/&gt;{43.23.74.246:80, 205.246.71.154:54852}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54852: (12.5%)&lt;BR/&gt; 54779: (12.5%)&lt;BR/&gt; 54755: (12.5%)&lt;BR/&gt; 54731: (12.5%)&gt;];
}
11506--13160[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.246.71.154" dst_port="54852" src_ip="43.23.74.246" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54779" src_ip="43.23.74.246" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54755" src_ip="43.23.74.246" src_port="80"/>
      <filter dst_ip="205.246.71.154" dst_port="54731" src_ip="43.23.74.246" src_port="80"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_922{
style=filled;
color=gray75;
11511[label="210.69.167.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13165[label="210.69.167.246;1pkt 1fpkt", shape=invtriangle, color=brown];
13888[label="210.69.167.246;1pkt 1fpkt", shape=invhouse, color=bisque];
stat922[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.69.167.246:40780, 169.230.158.2:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40780: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11511--13165[label="1;1pkt 1fpkt"];
11511--13888[label="1;1pkt 1fpkt"];
13165--13888[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.230.158.2" dst_port="80" src_ip="210.69.167.246" src_port="40780"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
11521[label="205.186.98.248;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13171[label="205.186.98.248;4pkt 4fpkt", shape=invtriangle, color=brown];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.186.98.248:80, 204.6.225.105:60916}[25%]&lt;BR/&gt;{205.186.98.248:80, 204.6.225.105:60944}[25%]&lt;BR/&gt;{205.186.98.248:80, 204.6.225.105:60945}[25%]&lt;BR/&gt;{205.186.98.248:80, 204.6.225.105:60946}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60946: (12.5%)&lt;BR/&gt; 60945: (12.5%)&lt;BR/&gt; 60944: (12.5%)&lt;BR/&gt; 60916: (12.5%)&gt;];
}
11521--13171[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.225.105" dst_port="60946" src_ip="205.186.98.248" src_port="80"/>
      <filter dst_ip="204.6.225.105" dst_port="60945" src_ip="205.186.98.248" src_port="80"/>
      <filter dst_ip="204.6.225.105" dst_port="60944" src_ip="205.186.98.248" src_port="80"/>
      <filter dst_ip="204.6.225.105" dst_port="60916" src_ip="205.186.98.248" src_port="80"/>
    </slice>
    <from sec="1165900466" usec="0"/>
    <to sec="1165900494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
11538[label="219.9.80.251;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13179[label="219.9.80.251;4pkt 4fpkt", shape=invtriangle, color=brown];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.9.80.251:21542, 205.55.220.151:53}[25%]&lt;BR/&gt;{219.9.80.251:56636, 205.55.220.151:53}[25%]&lt;BR/&gt;{219.9.80.251:58695, 205.55.220.151:53}[25%]&lt;BR/&gt;{219.9.80.251:62693, 205.55.220.151:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 62693: (12.5%)&lt;BR/&gt; 58695: (12.5%)&lt;BR/&gt; 56636: (12.5%)&lt;BR/&gt; 21542: (12.5%)&gt;];
}
11538--13179[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.220.151" dst_port="53" src_ip="219.9.80.251" src_port="62693"/>
      <filter dst_ip="205.55.220.151" dst_port="53" src_ip="219.9.80.251" src_port="58695"/>
      <filter dst_ip="205.55.220.151" dst_port="53" src_ip="219.9.80.251" src_port="56636"/>
      <filter dst_ip="205.55.220.151" dst_port="53" src_ip="219.9.80.251" src_port="21542"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.32.97.252"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.501558,2.17924,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_926{
style=filled;
color=gray75;
11551[label="145.229.168.253;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13184[label="145.229.168.253;3pkt 3fpkt", shape=invtriangle, color=brown];
stat926[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.229.168.253:3054, 43.150.173.0:80}[33.3333%]&lt;BR/&gt;{145.229.168.253:1103, 201.110.128.86:1863}[33.3333%]&lt;BR/&gt;{145.229.168.253:3198, 42.126.165.102:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (33.3333%)&lt;BR/&gt; 3198: (16.6667%)&lt;BR/&gt; 3054: (16.6667%)&lt;BR/&gt; 1103: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
11551--13184[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="42.126.165.102" dst_port="1863" src_ip="145.229.168.253" src_port="3198"/>
      <filter dst_ip="201.110.128.86" dst_port="1863" src_ip="145.229.168.253" src_port="1103"/>
      <filter dst_ip="43.150.173.0" dst_port="80" src_ip="145.229.168.253" src_port="3054"/>
    </slice>
    <from sec="1165899639" usec="0"/>
    <to sec="1165900496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.745383,2.15017,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
11558[label="145.248.124.254;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13187[label="145.248.124.254;6pkt 6fpkt", shape=invtriangle, color=brown];
13897[label="145.248.124.254;6pkt 6fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.248.124.254:*, 219.131.247.59:80}[66.6667%]&lt;BR/&gt;{145.248.124.254:*, 219.131.247.58:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1630: (8.33333%)&lt;BR/&gt; 1629: (8.33333%)&lt;BR/&gt; 1628: (8.33333%)&lt;BR/&gt; 1615: (8.33333%)&gt;];
}
11558--13187[label="1;6pkt 6fpkt"];
11558--13897[label="1;6pkt 6fpkt"];
13187--13897[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="219.131.247.59" dst_port="80" src_ip="145.248.124.254"/>
      <filter dst_ip="219.131.247.58" dst_port="80" src_ip="145.248.124.254"/>
    </slice>
    <from sec="1165899653" usec="0"/>
    <to sec="1165899888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613967,2.23459,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.58.234.255"/>
    </slice>
    <from sec="1165899635" usec="0"/>
    <to sec="1165899971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.222.0"/>
    </slice>
    <from sec="1165900154" usec="0"/>
    <to sec="1165900178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.142.239.2"/>
    </slice>
    <from sec="1165899884" usec="0"/>
    <to sec="1165899923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.211.9"/>
    </slice>
    <from sec="1165900138" usec="0"/>
    <to sec="1165900474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.77.244.11"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.105.43.15"/>
    </slice>
    <from sec="1165899604" usec="0"/>
    <to sec="1165899879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.207.101.15"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.115.6.22"/>
    </slice>
    <from sec="1165900405" usec="0"/>
    <to sec="1165900410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.223.27"/>
    </slice>
    <from sec="1165900194" usec="0"/>
    <to sec="1165900289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.239.111.31"/>
    </slice>
    <from sec="1165899600" usec="0"/>
    <to sec="1165899633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.171.161.33"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.211.33"/>
    </slice>
    <from sec="1165900137" usec="0"/>
    <to sec="1165900271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.115.41.38"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.4.58.45"/>
    </slice>
    <from sec="1165900041" usec="0"/>
    <to sec="1165900062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="11.20.17.54"/>
    </slice>
    <from sec="1165899605" usec="0"/>
    <to sec="1165900482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="11.99.239.66"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.162.18.68"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.184.116.76"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.229.168.76"/>
    </slice>
    <from sec="1165900074" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.140.16.78"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.46.106.98"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.41.183.110"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.208.122.111"/>
    </slice>
    <from sec="1165899748" usec="0"/>
    <to sec="1165899792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.151.93.116"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.0.172.130"/>
    </slice>
    <from sec="1165900355" usec="0"/>
    <to sec="1165900360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.220.134"/>
    </slice>
    <from sec="1165899934" usec="0"/>
    <to sec="1165899953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="171.85.130.138"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.220.138"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.109.103.139"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="151.227.115.142"/>
    </slice>
    <from sec="1165899617" usec="0"/>
    <to sec="1165900491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.216.144"/>
    </slice>
    <from sec="1165899621" usec="0"/>
    <to sec="1165899632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.85.126.147"/>
    </slice>
    <from sec="1165899609" usec="0"/>
    <to sec="1165900499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.235.194.156"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.141.164.165"/>
    </slice>
    <from sec="1165899807" usec="0"/>
    <to sec="1165899887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.234.94.172"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.75.51.181"/>
    </slice>
    <from sec="1165899601" usec="0"/>
    <to sec="1165900205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.221.182"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165899795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="151.227.30.187"/>
    </slice>
    <from sec="1165899818" usec="0"/>
    <to sec="1165899844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.99.222.187"/>
    </slice>
    <from sec="1165899621" usec="0"/>
    <to sec="1165899630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.43.35.190"/>
    </slice>
    <from sec="1165899739" usec="0"/>
    <to sec="1165899819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.13.225.193"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.251.209.197"/>
    </slice>
    <from sec="1165899603" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.133.143.198"/>
    </slice>
    <from sec="1165899684" usec="0"/>
    <to sec="1165900500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.185.151.210"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.135.203.215"/>
    </slice>
    <from sec="1165899712" usec="0"/>
    <to sec="1165900497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="150.139.113.220"/>
    </slice>
    <from sec="1165899883" usec="0"/>
    <to sec="1165899888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.79.209.230"/>
    </slice>
    <from sec="1165900500" usec="0"/>
    <to sec="1165900501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757833,2.23793,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.45.141.233"/>
    </slice>
    <from sec="1165900479" usec="0"/>
    <to sec="1165900485" usec="0"/>
  </anomaly>

</admd:annotation>
