<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="185.196.21.17" src_port="53"/>
      <filter dst_port="80" proto="udp" src_ip="185.196.21.17" src_port="53"/>
      <filter dst_port="53" proto="tcp" src_ip="185.196.21.17" src_port="53"/>
      <filter dst_port="53" proto="udp" src_ip="185.196.21.17" src_port="53"/>
      <from sec="1172898009" usec="0"/>
      <to sec="1172898013" usec="0"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="53" proto="tcp" src_ip="214.125.67.55" src_port="80"/>
      <filter dst_port="53" proto="udp" src_ip="214.125.67.55" src_port="80"/>
      <filter dst_port="80" proto="tcp" src_ip="214.125.67.55" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="214.125.67.55" src_port="80"/>
      <from sec="1172898009" usec="0"/>
      <to sec="1172898852" usec="0"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="53" proto="tcp" src_ip="153.21.195.212" src_port="80"/>
      <filter dst_port="53" proto="udp" src_ip="153.21.195.212" src_port="80"/>
      <filter dst_port="80" proto="tcp" src_ip="153.21.195.212" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="153.21.195.212" src_port="80"/>
      <from sec="1172898009" usec="0"/>
      <to sec="1172898852" usec="0"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.140.34.81" dst_port="53" proto="tcp" src_ip="172.169.41.220"/>
      <filter dst_ip="215.140.34.81" dst_port="53" proto="udp" src_ip="172.169.41.220"/>
      <filter dst_ip="215.140.34.81" dst_port="80" proto="tcp" src_ip="172.169.41.220"/>
      <filter dst_ip="215.140.34.81" dst_port="80" proto="udp" src_ip="172.169.41.220"/>
      <filter dst_ip="215.140.34.81" dst_port="25" proto="tcp" src_ip="172.169.41.220"/>
      <filter dst_ip="215.140.34.81" dst_port="25" proto="udp" src_ip="172.169.41.220"/>
      <from sec="1172898317" usec="0"/>
      <to sec="1172898743" usec="0"/>
    </slice>
    <from sec="1172898317" usec="0"/>
    <to sec="1172898743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.140.32.140" dst_port="53" proto="udp" src_ip="215.140.32.140"/>
      <filter dst_ip="215.140.32.140" dst_port="53" proto="udp" src_ip="215.140.32.140"/>
      <filter dst_ip="215.140.32.140" dst_port="53" proto="udp" src_ip="215.140.32.140"/>
      <filter dst_ip="215.140.32.140" dst_port="53" proto="udp" src_ip="215.140.32.140"/>
      <from sec="1172898009" usec="0"/>
      <to sec="1172898878" usec="0"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="tcp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="udp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="tcp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="udp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="tcp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="udp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="tcp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="udp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="tcp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="udp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="tcp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="udp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="tcp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="udp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="tcp" src_ip="153.21.195.212"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="udp" src_ip="153.21.195.212"/>
      <from sec="1172898009" usec="0"/>
      <to sec="1172898704" usec="0"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="tcp" src_ip="172.169.41.62"/>
      <filter dst_ip="153.21.195.212" dst_port="80" proto="udp" src_ip="172.169.41.62"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="tcp" src_ip="172.169.41.62"/>
      <filter dst_ip="153.21.195.212" dst_port="53" proto="udp" src_ip="172.169.41.62"/>
      <filter dst_ip="153.21.195.212" dst_port="25" proto="tcp" src_ip="172.169.41.62"/>
      <filter dst_ip="153.21.195.212" dst_port="25" proto="udp" src_ip="172.169.41.62"/>
      <filter dst_ip="214.125.67.55" dst_port="80" proto="tcp" src_ip="172.169.41.62"/>
      <filter dst_ip="214.125.67.55" dst_port="80" proto="udp" src_ip="172.169.41.62"/>
      <filter dst_ip="214.125.67.55" dst_port="53" proto="tcp" src_ip="172.169.41.62"/>
      <filter dst_ip="214.125.67.55" dst_port="53" proto="udp" src_ip="172.169.41.62"/>
      <filter dst_ip="214.125.67.55" dst_port="25" proto="tcp" src_ip="172.169.41.62"/>
      <filter dst_ip="214.125.67.55" dst_port="25" proto="udp" src_ip="172.169.41.62"/>
      <from sec="1172898873" usec="0"/>
      <to sec="1172898878" usec="0"/>
    </slice>
    <from sec="1172898873" usec="0"/>
    <to sec="1172898878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.140.34.81" dst_port="80" proto="tcp" src_ip="215.28.81.72"/>
      <filter dst_ip="215.140.34.81" dst_port="80" proto="udp" src_ip="215.28.81.72"/>
      <filter dst_ip="215.140.34.81" dst_port="53" proto="tcp" src_ip="215.28.81.72"/>
      <filter dst_ip="215.140.34.81" dst_port="53" proto="udp" src_ip="215.28.81.72"/>
      <from sec="1172898716" usec="0"/>
      <to sec="1172898722" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.140.34.81" dst_port="80" proto="tcp" src_ip="215.28.81.73"/>
      <filter dst_ip="215.140.34.81" dst_port="80" proto="udp" src_ip="215.28.81.73"/>
      <filter dst_ip="215.140.34.81" dst_port="53" proto="tcp" src_ip="215.28.81.73"/>
      <filter dst_ip="215.140.34.81" dst_port="53" proto="udp" src_ip="215.28.81.73"/>
      <from sec="1172898716" usec="0"/>
      <to sec="1172898722" usec="0"/>
    </slice>
    <from sec="1172898716" usec="0"/>
    <to sec="1172898722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="74.54.10.57"/>
      <from sec="1172898215" usec="0"/>
      <to sec="1172898216" usec="0"/>
    </slice>
    <from sec="1172898215" usec="0"/>
    <to sec="1172898216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.28.81.57" dst_port="139" proto="tcp" src_ip="0.124.104.66" src_port="80"/>
      <from sec="1172898762" usec="0"/>
      <to sec="1172898774" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.28.81.57" dst_port="139" proto="tcp" src_ip="24.85.36.66" src_port="80"/>
      <from sec="1172898762" usec="0"/>
      <to sec="1172898774" usec="0"/>
    </slice>
    <from sec="1172898762" usec="0"/>
    <to sec="1172898774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.60332,2.8515,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="27.75.191.183"/>
      <filter dst_port="53" proto="udp" src_ip="27.75.191.183"/>
      <from sec="1172898516" usec="0"/>
      <to sec="1172898517" usec="0"/>
    </slice>
    <from sec="1172898515" usec="0"/>
    <to sec="1172898517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="43938584" usec="0"/>
    <to sec="44200024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
311[label="170.123.68.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
312[label="209.37.118.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
3963[label="170.123.68.122;d;1pkt 1fpkt", shape=hexagon, color=black];
6271[label="209.37.118.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.37.118.32:80, 170.123.68.122:49188}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49188: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
311--312[label="1;1pkt 1fpkt"];
311--3963[label="1;1pkt 1fpkt"];
311--6271[label="1;1pkt 1fpkt"];
312--3963[label="1;1pkt 1fpkt"];
312--6271[label="1;1pkt 1fpkt"];
3963--6271[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.68.122" dst_port="49188" src_ip="209.37.118.32" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
296[label="214.125.72.79;s;38pkt 38fpkt", shape=diamond, color=yellow];
411[label="26.96.238.1;d;21pkt 21fpkt", shape=diamond, color=yellow];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.72.79:*, 26.96.238.1:12043}[52.6316%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12043: (33.8983%)&lt;BR/&gt; 993: (5.08475%)&lt;BR/&gt; 57278: (4.23729%)&lt;BR/&gt; 1863: (2.54237%)&lt;BR/&gt; 53170: (1.69492%)&gt;];
}
296--411[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="26.96.238.1" dst_port="12043" src_ip="214.125.72.79"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
436[label="96.133.166.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
437[label="215.17.8.42;s;2pkt 2fpkt", shape=diamond, color=yellow];
4511[label="215.17.8.42;s;2pkt 2fpkt", shape=hexagon, color=black];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.17.8.42:1273, 96.133.166.36:8585}[50%]&lt;BR/&gt;{215.17.8.42:1278, 96.133.166.43:8586}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8585: (30%)&lt;BR/&gt; 1273: (30%)&lt;BR/&gt; 8586: (20%)&lt;BR/&gt; 1278: (20%)&gt;];
}
436--437[label="1;1pkt 1fpkt"];
436--4511[label="1;1pkt 1fpkt"];
437--4511[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="96.133.166.43" dst_port="8586" src_ip="215.17.8.42" src_port="1278"/>
      <filter dst_ip="96.133.166.36" dst_port="8585" src_ip="215.17.8.42" src_port="1273"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
482[label="172.169.4.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
484[label="26.233.220.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.233.220.107:32931, 172.169.4.253:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32931: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
482--484[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.169.4.253" dst_port="8000" src_ip="26.233.220.107" src_port="32931"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="25.7.7.140"/>
      <from sec="1172898300" usec="0"/>
      <to sec="1172898582" usec="0"/>
    </slice>
    <from sec="1172898300" usec="0"/>
    <to sec="1172898582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
696[label="185.196.152.177;s;37pkt 37fpkt", shape=diamond, color=yellow];
730[label="37.139.75.43;d;2pkt 2fpkt", shape=diamond, color=yellow];
2338[label="192.32.51.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
2648[label="96.53.220.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
2772[label="37.139.77.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
2781[label="37.139.213.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
5211[label="192.32.51.117;d;1pkt 1fpkt", shape=hexagon, color=black];
5314[label="37.139.213.202;d;1pkt 1fpkt", shape=hexagon, color=black];
9282[label="185.196.152.177;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.152.177:55561, *:*}[40.5405%]&lt;BR/&gt;{185.196.152.177:*, *:4662}[24.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55561: (18.2927%)&lt;BR/&gt; 4662: (15.2439%)&lt;BR/&gt; 4672: (3.65854%)&lt;BR/&gt; 56805: (2.43902%)&lt;BR/&gt; 7777: (2.43902%)&gt;];
}
696--730[label="1;2pkt 2fpkt"];
696--2338[label="1;1pkt 1fpkt"];
696--2648[label="1;1pkt 1fpkt"];
696--2772[label="1;1pkt 1fpkt"];
696--2781[label="1;1pkt 1fpkt"];
696--5211[label="1;1pkt 1fpkt"];
696--5314[label="1;1pkt 1fpkt"];
696--9282[label="1;37pkt 37fpkt"];
730--9282[label="1;2pkt 2fpkt"];
2338--5211[label="1;1pkt 1fpkt"];
2338--9282[label="1;1pkt 1fpkt"];
2648--9282[label="1;1pkt 1fpkt"];
2772--9282[label="1;1pkt 1fpkt"];
2781--5314[label="1;1pkt 1fpkt"];
2781--9282[label="1;1pkt 1fpkt"];
5211--9282[label="1;1pkt 1fpkt"];
5314--9282[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="185.196.152.177" src_port="55561"/>
      <filter dst_port="4662" src_ip="185.196.152.177"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
605[label="153.21.195.218;s;5pkt 5fpkt", shape=diamond, color=yellow];
833[label="101.129.55.147;d;2pkt 2fpkt", shape=diamond, color=yellow];
1705[label="192.48.173.199;d;2pkt 2fpkt", shape=diamond, color=yellow];
10023[label="153.21.195.218;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13109[label="153.21.195.218;4pkt 4fpkt", shape=invtriangle, color=brown];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.195.218:80, 17.3.210.252:33585}[20%]&lt;BR/&gt;{153.21.195.218:34108, 101.129.55.147:4718}[20%]&lt;BR/&gt;{153.21.195.218:21, 101.129.55.147:4717}[20%]&lt;BR/&gt;{153.21.195.218:4172, 192.48.173.199:24335}[20%]&lt;BR/&gt;{153.21.195.218:21, 192.48.173.199:24334}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (19.4444%)&lt;BR/&gt; 34108: (11.1111%)&lt;BR/&gt; 24335: (11.1111%)&lt;BR/&gt; 24334: (11.1111%)&lt;BR/&gt; 4718: (11.1111%)&gt;];
}
605--833[label="1;2pkt 2fpkt"];
605--1705[label="1;2pkt 2fpkt"];
605--10023[label="1;5pkt 5fpkt"];
605--13109[label="1;4pkt 4fpkt"];
833--10023[label="1;2pkt 2fpkt"];
833--13109[label="0.5;1pkt 1fpkt"];
1705--10023[label="1;2pkt 2fpkt"];
1705--13109[label="1;2pkt 2fpkt"];
10023--13109[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.48.173.199" dst_port="24334" src_ip="153.21.195.218" src_port="21"/>
      <filter dst_ip="192.48.173.199" dst_port="24335" src_ip="153.21.195.218" src_port="4172"/>
      <filter dst_ip="101.129.55.147" dst_port="4717" src_ip="153.21.195.218" src_port="21"/>
      <filter dst_ip="101.129.55.147" dst_port="4718" src_ip="153.21.195.218" src_port="34108"/>
      <filter dst_ip="17.3.210.252" dst_port="33585" src_ip="153.21.195.218" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.44.249.28"/>
      <from sec="1172898574" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898574" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
293[label="11.53.219.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
890[label="214.125.66.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
4098[label="214.125.66.87;s;1pkt 1fpkt", shape=hexagon, color=black];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.66.87:57913, 11.53.219.101:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57913: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
293--890[label="1;1pkt 1fpkt"];
293--4098[label="1;1pkt 1fpkt"];
890--4098[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="11.53.219.101" dst_port="22" src_ip="214.125.66.87" src_port="57913"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
914[label="214.125.74.149;d;795pkt 795fpkt", shape=diamond, color=yellow];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 214.125.74.149:*}[82.1384%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41.0692%)&lt;BR/&gt; 0: (17.4843%)&lt;BR/&gt; 4057: (0.188679%)&lt;BR/&gt; 2066: (0.188679%)&lt;BR/&gt; 2062: (0.188679%)&gt;];
}
914--6239[label="0.00125786;1pkt 1fpkt"];
914--10987[label="0.00125786;1pkt 1fpkt"];
914--13601[label="0.00125786;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.74.149" src_port="53"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.28.82.181"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
950[label="170.123.62.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
951[label="200.52.139.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
4298[label="170.123.62.129;s;1pkt 1fpkt", shape=hexagon, color=black];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.62.129:1427, 200.52.139.197:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1427: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
950--951[label="1;1pkt 1fpkt"];
950--4298[label="1;1pkt 1fpkt"];
951--4298[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.52.139.197" dst_port="554" src_ip="170.123.62.129" src_port="1427"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
1012[label="153.21.64.242;d;2pkt 2fpkt", shape=diamond, color=yellow];
1013[label="200.52.148.126;s;2pkt 2fpkt", shape=diamond, color=yellow];
3993[label="200.52.148.126;s;2pkt 2fpkt", shape=hexagon, color=black];
8185[label="200.52.148.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12054[label="200.52.148.126;1pkt 1fpkt", shape=invtriangle, color=brown];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.52.148.126:554, 153.21.64.242:2212}[50%]&lt;BR/&gt;{200.52.148.126:23496, 153.21.64.242:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2212: (31.25%)&lt;BR/&gt; 554: (31.25%)&lt;BR/&gt; 23496: (18.75%)&lt;BR/&gt; 6970: (18.75%)&gt;];
}
1012--1013[label="1;2pkt 2fpkt"];
1012--3993[label="1;2pkt 2fpkt"];
1012--8185[label="1;1pkt 1fpkt"];
1012--12054[label="1;1pkt 1fpkt"];
1013--3993[label="1;2pkt 2fpkt"];
1013--8185[label="1;1pkt 1fpkt"];
1013--12054[label="1;1pkt 1fpkt"];
3993--8185[label="1;1pkt 1fpkt"];
3993--12054[label="1;1pkt 1fpkt"];
8185--12054[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.64.242" dst_port="6970" src_ip="200.52.148.126" src_port="23496"/>
      <filter dst_ip="153.21.64.242" dst_port="2212" src_ip="200.52.148.126" src_port="554"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
563[label="205.107.64.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
1029[label="153.21.64.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
4721[label="153.21.64.150;d;1pkt 1fpkt", shape=hexagon, color=black];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.107.64.65:9416, 153.21.64.150:55940}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55940: (50%)&lt;BR/&gt; 9416: (50%)&gt;];
}
563--1029[label="1;1pkt 1fpkt"];
563--4721[label="1;1pkt 1fpkt"];
1029--4721[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.64.150" dst_port="55940" src_ip="205.107.64.65" src_port="9416"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
612[label="217.107.231.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
1078[label="215.140.34.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
4734[label="217.107.231.238;s;1pkt 1fpkt", shape=hexagon, color=black];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.107.231.238:0, 215.140.34.26:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
612--1078[label="1;1pkt 1fpkt"];
612--4734[label="1;1pkt 1fpkt"];
1078--4734[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.140.34.26" src_ip="217.107.231.238"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
468[label="172.169.135.80;s;881pkt 881fpkt", shape=diamond, color=yellow];
539[label="5.182.128.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1092[label="8.8.133.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
1829[label="193.72.231.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
2445[label="0.217.71.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
3415[label="5.65.206.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
3992[label="5.182.128.217;d;1pkt 1fpkt", shape=hexagon, color=black];
4711[label="193.72.231.1;d;1pkt 1fpkt", shape=hexagon, color=black];
7280[label="172.169.135.80;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.135.80:*, *:4662}[42.7119%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (21.6276%)&lt;BR/&gt; 17977: (4.96098%)&lt;BR/&gt; 4672: (2.34114%)&lt;BR/&gt; 4661: (0.83612%)&lt;BR/&gt; 85: (0.501672%)&gt;];
}
468--539[label="1;1pkt 1fpkt"];
468--1092[label="1;1pkt 1fpkt"];
468--1829[label="1;1pkt 1fpkt"];
468--2445[label="1;1pkt 1fpkt"];
468--3415[label="1;1pkt 1fpkt"];
468--3992[label="1;1pkt 1fpkt"];
468--4711[label="1;1pkt 1fpkt"];
468--7280[label="0.555556;5pkt 5fpkt"];
539--3992[label="1;1pkt 1fpkt"];
539--7280[label="1;1pkt 1fpkt"];
1092--7280[label="1;1pkt 1fpkt"];
1829--4711[label="1;1pkt 1fpkt"];
1829--7280[label="1;1pkt 1fpkt"];
2445--7280[label="1;1pkt 1fpkt"];
3415--7280[label="1;1pkt 1fpkt"];
3992--7280[label="1;1pkt 1fpkt"];
4711--7280[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="172.169.135.80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
628[label="214.42.102.32;d;9pkt 9fpkt", shape=diamond, color=yellow];
1096[label="214.125.75.32;s;11pkt 11fpkt", shape=diamond, color=yellow];
4013[label="214.125.75.32;s;5pkt 5fpkt", shape=hexagon, color=black];
4988[label="214.42.102.32;d;9pkt 9fpkt", shape=hexagon, color=black];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.75.32:119, 214.42.102.32:*}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (47.0588%)&lt;BR/&gt; 58452: (5.88235%)&lt;BR/&gt; 51205: (5.88235%)&lt;BR/&gt; 41322: (5.88235%)&lt;BR/&gt; 36902: (5.88235%)&gt;];
}
628--1096[label="1;9pkt 9fpkt"];
628--4013[label="1;5pkt 5fpkt"];
628--4988[label="1;9pkt 9fpkt"];
1096--4013[label="1;5pkt 5fpkt"];
1096--4988[label="1;9pkt 9fpkt"];
4013--4988[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="214.42.102.32" src_ip="214.125.75.32" src_port="119"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
1130[label="2.145.32.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
1131[label="156.139.165.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
4755[label="2.145.32.81;d;1pkt 1fpkt", shape=hexagon, color=black];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.165.115:5001, 2.145.32.81:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
1130--1131[label="1;1pkt 1fpkt"];
1130--4755[label="1;1pkt 1fpkt"];
1131--4755[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.145.32.81" dst_port="20" src_ip="156.139.165.115" src_port="5001"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.56.16.127"/>
      <from sec="1172898486" usec="0"/>
      <to sec="1172898798" usec="0"/>
    </slice>
    <from sec="1172898486" usec="0"/>
    <to sec="1172898798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="3.219.89.113"/>
      <from sec="1172898570" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898570" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="28.85.97.69"/>
      <from sec="1172898576" usec="0"/>
      <to sec="1172898728" usec="0"/>
    </slice>
    <from sec="1172898576" usec="0"/>
    <to sec="1172898728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
1329[label="112.119.40.0;d;4pkt 4fpkt", shape=diamond, color=yellow];
1330[label="171.209.50.173;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.209.50.173:1394, 112.119.40.0:80}[25%]&lt;BR/&gt;{171.209.50.173:1395, 112.119.40.0:80}[25%]&lt;BR/&gt;{171.209.50.173:1396, 112.119.40.0:80}[25%]&lt;BR/&gt;{171.209.50.173:1410, 112.119.40.0:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1410: (12.5%)&lt;BR/&gt; 1396: (12.5%)&lt;BR/&gt; 1395: (12.5%)&lt;BR/&gt; 1394: (12.5%)&gt;];
}
1329--1330[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="112.119.40.0" dst_port="80" src_ip="171.209.50.173" src_port="1410"/>
      <filter dst_ip="112.119.40.0" dst_port="80" src_ip="171.209.50.173" src_port="1396"/>
      <filter dst_ip="112.119.40.0" dst_port="80" src_ip="171.209.50.173" src_port="1395"/>
      <filter dst_ip="112.119.40.0" dst_port="80" src_ip="171.209.50.173" src_port="1394"/>
    </slice>
    <from sec="1172898100" usec="0"/>
    <to sec="1172898212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="24.85.42.206"/>
      <from sec="1172898693" usec="0"/>
      <to sec="1172898731" usec="0"/>
    </slice>
    <from sec="1172898693" usec="0"/>
    <to sec="1172898731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
909[label="172.169.50.123;d;19pkt 19fpkt", shape=diamond, color=yellow];
1378[label="205.233.185.117;s;5pkt 5fpkt", shape=diamond, color=yellow];
4872[label="172.169.50.123;d;19pkt 19fpkt", shape=hexagon, color=black];
8032[label="205.233.185.117;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11962[label="205.233.185.117;5pkt 5fpkt", shape=invtriangle, color=brown];
14043[label="205.233.185.117;5pkt 5fpkt", shape=invhouse, color=bisque];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.233.185.117:*, 172.169.50.123:80}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57354: (5.17241%)&lt;BR/&gt; 56972: (5.17241%)&lt;BR/&gt; 56958: (5.17241%)&lt;BR/&gt; 56946: (5.17241%)&gt;];
}
909--1378[label="1;5pkt 5fpkt"];
909--4872[label="1;19pkt 19fpkt"];
909--8032[label="1;5pkt 5fpkt"];
909--11962[label="1;5pkt 5fpkt"];
909--14043[label="1;5pkt 5fpkt"];
1378--4872[label="1;5pkt 5fpkt"];
1378--8032[label="1;5pkt 5fpkt"];
1378--11962[label="1;5pkt 5fpkt"];
1378--14043[label="1;5pkt 5fpkt"];
4872--8032[label="1;5pkt 5fpkt"];
4872--11962[label="1;5pkt 5fpkt"];
4872--14043[label="1;5pkt 5fpkt"];
8032--11962[label="1;5pkt 5fpkt"];
8032--14043[label="1;5pkt 5fpkt"];
11962--14043[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="172.169.50.123" dst_port="80" src_ip="205.233.185.117"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
483[label="26.233.220.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
1442[label="172.169.4.253;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.4.253:18000, 36.226.33.35:1626}[50%]&lt;BR/&gt;{172.169.4.253:8000, 26.233.220.107:32931}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32931: (33.3333%)&lt;BR/&gt; 8000: (33.3333%)&lt;BR/&gt; 18000: (16.6667%)&lt;BR/&gt; 1626: (16.6667%)&gt;];
}
483--1442[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="26.233.220.107" dst_port="32931" src_ip="172.169.4.253" src_port="8000"/>
      <filter dst_ip="36.226.33.35" dst_port="1626" src_ip="172.169.4.253" src_port="18000"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
1498[label="215.196.211.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
1499[label="185.196.25.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
4146[label="215.196.211.49;d;1pkt 1fpkt", shape=hexagon, color=black];
4349[label="185.196.25.62;s;1pkt 1fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.25.62:1075, 215.196.211.49:40560}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40560: (50%)&lt;BR/&gt; 1075: (50%)&gt;];
}
1498--1499[label="1;1pkt 1fpkt"];
1498--4146[label="1;1pkt 1fpkt"];
1498--4349[label="1;1pkt 1fpkt"];
1499--4146[label="1;1pkt 1fpkt"];
1499--4349[label="1;1pkt 1fpkt"];
4146--4349[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.196.211.49" dst_port="40560" src_ip="185.196.25.62" src_port="1075"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="156.139.230.128"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="3.219.89.113"/>
      <from sec="1172898570" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898570" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="41.139.66.216"/>
      <from sec="1172898668" usec="0"/>
      <to sec="1172898697" usec="0"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
1775[label="169.43.85.16;d;4pkt 4fpkt", shape=diamond, color=yellow];
1776[label="170.123.92.85;s;4pkt 4fpkt", shape=diamond, color=yellow];
7404[label="170.123.92.85;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11605[label="170.123.92.85;4pkt 4fpkt", shape=invtriangle, color=brown];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.92.85:1040, 169.43.85.16:8080}[25%]&lt;BR/&gt;{170.123.92.85:1041, 169.43.85.16:8080}[25%]&lt;BR/&gt;{170.123.92.85:1042, 169.43.85.16:8080}[25%]&lt;BR/&gt;{170.123.92.85:1043, 169.43.85.16:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (37.5%)&lt;BR/&gt; 1043: (12.5%)&lt;BR/&gt; 1042: (12.5%)&lt;BR/&gt; 1041: (12.5%)&lt;BR/&gt; 1040: (12.5%)&gt;];
}
1775--1776[label="1;4pkt 4fpkt"];
1775--7404[label="1;4pkt 4fpkt"];
1775--11605[label="1;4pkt 4fpkt"];
1776--7404[label="1;4pkt 4fpkt"];
1776--11605[label="1;4pkt 4fpkt"];
7404--11605[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.43.85.16" dst_port="80" src_ip="170.123.92.85" src_port="1043"/>
      <filter dst_ip="169.43.85.16" dst_port="8080" src_ip="170.123.92.85" src_port="1042"/>
      <filter dst_ip="169.43.85.16" dst_port="8080" src_ip="170.123.92.85" src_port="1041"/>
      <filter dst_ip="169.43.85.16" dst_port="8080" src_ip="170.123.92.85" src_port="1040"/>
    </slice>
    <from sec="1172898240" usec="0"/>
    <to sec="1172898301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
952[label="200.52.139.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
1814[label="170.123.62.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
5149[label="170.123.62.129;d;1pkt 1fpkt", shape=hexagon, color=black];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.52.139.197:554, 170.123.62.129:1427}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1427: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
952--1814[label="1;1pkt 1fpkt"];
952--5149[label="1;1pkt 1fpkt"];
1814--5149[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.62.129" dst_port="1427" src_ip="200.52.139.197" src_port="554"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,901,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
426[label="172.179.197.232;s;19pkt 19fpkt", shape=diamond, color=yellow];
1109[label="100.21.33.193;d;16pkt 16fpkt", shape=diamond, color=yellow];
1818[label="33.138.128.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
4559[label="100.21.33.193;d;16pkt 16fpkt", shape=hexagon, color=black];
10270[label="172.179.197.232;20pkt 20fpkt", shape=pentagon, color=darkviolet];
13233[label="172.179.197.232;19pkt 19fpkt", shape=invtriangle, color=brown];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.197.232:21, 100.21.33.193:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (21.978%)&lt;BR/&gt; 873: (3.84615%)&lt;BR/&gt; 40399: (2.74725%)&lt;BR/&gt; 40398: (2.74725%)&lt;BR/&gt; 40397: (2.74725%)&gt;];
}
426--1109[label="1;16pkt 16fpkt"];
426--1818[label="1;1pkt 1fpkt"];
426--4559[label="1;16pkt 16fpkt"];
426--10270[label="1;19pkt 19fpkt"];
426--13233[label="0.947368;18pkt 18fpkt"];
1109--4559[label="1;16pkt 16fpkt"];
1109--10270[label="1;16pkt 16fpkt"];
1109--13233[label="1;16pkt 16fpkt"];
1818--10270[label="1;1pkt 1fpkt"];
1818--13233[label="1;1pkt 1fpkt"];
4559--10270[label="1;16pkt 16fpkt"];
4559--13233[label="1;16pkt 16fpkt"];
10270--13233[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="100.21.33.193" src_ip="172.179.197.232" src_port="21"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="185.196.144.89"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="182.246.53.171"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898468" usec="0"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="3.141.120.117"/>
      <from sec="1172898485" usec="0"/>
      <to sec="1172898705" usec="0"/>
    </slice>
    <from sec="1172898485" usec="0"/>
    <to sec="1172898705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="3.141.120.117"/>
      <from sec="1172898485" usec="0"/>
      <to sec="1172898822" usec="0"/>
    </slice>
    <from sec="1172898485" usec="0"/>
    <to sec="1172898822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
1506[label="36.127.61.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
1908[label="153.21.8.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
4748[label="36.127.61.134;s;1pkt 1fpkt", shape=hexagon, color=black];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.127.61.134:10131, 153.21.8.177:2611}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10131: (50%)&lt;BR/&gt; 2611: (50%)&gt;];
}
1506--1908[label="1;1pkt 1fpkt"];
1506--4748[label="1;1pkt 1fpkt"];
1908--4748[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.8.177" dst_port="2611" src_ip="36.127.61.134" src_port="10131"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
1505[label="36.127.61.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
1909[label="153.21.8.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.8.177:2611, 36.127.61.134:10131}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10131: (50%)&lt;BR/&gt; 2611: (50%)&gt;];
}
1505--1909[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.127.61.134" dst_port="10131" src_ip="153.21.8.177" src_port="2611"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="154.200.40.199"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.179.242.194"/>
      <from sec="1172898001" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="170.123.13.100"/>
      <from sec="1172898030" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898030" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
1754[label="172.179.145.29;s;11pkt 11fpkt", shape=diamond, color=yellow];
2119[label="215.160.51.83;d;11pkt 11fpkt", shape=diamond, color=yellow];
4458[label="172.179.145.29;s;10pkt 10fpkt", shape=hexagon, color=black];
4646[label="215.160.51.83;d;11pkt 11fpkt", shape=hexagon, color=black];
6226[label="172.179.145.29;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.145.29:*, 215.160.51.83:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2315: (4.62963%)&lt;BR/&gt; 2314: (4.62963%)&lt;BR/&gt; 2312: (4.62963%)&lt;BR/&gt; 2311: (4.62963%)&gt;];
}
1754--2119[label="1;11pkt 11fpkt"];
1754--4458[label="1;10pkt 10fpkt"];
1754--4646[label="1;11pkt 11fpkt"];
1754--6226[label="1;11pkt 11fpkt"];
2119--4458[label="1;10pkt 10fpkt"];
2119--4646[label="1;11pkt 11fpkt"];
2119--6226[label="1;11pkt 11fpkt"];
4458--4646[label="1;10pkt 10fpkt"];
4458--6226[label="1;10pkt 10fpkt"];
4646--6226[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.51.83" dst_port="80" src_ip="172.179.145.29"/>
    </slice>
    <from sec="1172898222" usec="0"/>
    <to sec="1172898457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,901,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
2126[label="215.221.18.161;d;74pkt 74fpkt", shape=diamond, color=yellow];
2127[label="172.179.88.244;s;74pkt 74fpkt", shape=diamond, color=yellow];
10436[label="172.179.88.244;74pkt 74fpkt", shape=pentagon, color=darkviolet];
13334[label="172.179.88.244;73pkt 73fpkt", shape=invtriangle, color=brown];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.88.244:*, 215.221.18.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62754: (0.677966%)&lt;BR/&gt; 62752: (0.677966%)&lt;BR/&gt; 62717: (0.677966%)&lt;BR/&gt; 62716: (0.677966%)&gt;];
}
2126--2127[label="1;74pkt 74fpkt"];
2126--10436[label="1;74pkt 74fpkt"];
2126--13334[label="1;73pkt 73fpkt"];
2127--10436[label="1;74pkt 74fpkt"];
2127--13334[label="1;73pkt 73fpkt"];
10436--13334[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="215.221.18.161" dst_port="80" src_ip="172.179.88.244"/>
    </slice>
    <from sec="1172898230" usec="0"/>
    <to sec="1172898374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
1969[label="170.123.47.152;s;27pkt 27fpkt", shape=diamond, color=yellow];
2155[label="96.134.54.137;d;8pkt 8fpkt", shape=diamond, color=yellow];
8733[label="170.123.47.152;28pkt 28fpkt", shape=pentagon, color=darkviolet];
12372[label="170.123.47.152;28pkt 28fpkt", shape=invtriangle, color=brown];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.47.152:*, 26.96.213.44:80}[67.8571%]&lt;BR/&gt;{170.123.47.152:*, 96.134.54.137:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9011%)&lt;BR/&gt; 4951: (2.1978%)&lt;BR/&gt; 4950: (2.1978%)&lt;BR/&gt; 4949: (2.1978%)&lt;BR/&gt; 4948: (2.1978%)&gt;];
}
1969--2155[label="1;8pkt 8fpkt"];
1969--5470[label="0.0740741;2pkt 2fpkt"];
1969--5500[label="0.0740741;2pkt 2fpkt"];
1969--5527[label="0.0740741;2pkt 2fpkt"];
1969--8733[label="1;27pkt 27fpkt"];
1969--12372[label="1;27pkt 27fpkt"];
2155--8733[label="1;8pkt 8fpkt"];
2155--12372[label="1;8pkt 8fpkt"];
8733--12372[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="26.96.213.44" dst_port="80" src_ip="170.123.47.152"/>
      <filter dst_ip="96.134.54.137" dst_port="80" src_ip="170.123.47.152"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
1912[label="193.164.214.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
2282[label="182.246.183.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
4560[label="193.164.214.102;d;1pkt 1fpkt", shape=hexagon, color=black];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.183.30:3077, 193.164.214.102:1843}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3077: (50%)&lt;BR/&gt; 1843: (50%)&gt;];
}
1912--2282[label="1;1pkt 1fpkt"];
1912--4560[label="1;1pkt 1fpkt"];
2282--4560[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.164.214.102" dst_port="1843" src_ip="182.246.183.30" src_port="3077"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
921[label="170.123.60.240;d;65pkt 65fpkt", shape=diamond, color=yellow];
2344[label="1.2.87.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
2413[label="3.219.70.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
3320[label="219.7.108.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
3966[label="170.123.60.240;d;32pkt 32fpkt", shape=hexagon, color=black];
9523[label="1.2.87.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.5.15.105:*, 170.123.60.240:29440}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29440: (50%)&lt;BR/&gt; 47046: (1.9802%)&lt;BR/&gt; 1144: (1.9802%)&lt;BR/&gt; 50061: (1.48515%)&lt;BR/&gt; 64181: (0.990099%)&gt;];
}
921--2344[label="1;1pkt 1fpkt"];
921--2413[label="1;1pkt 1fpkt"];
921--3320[label="1;1pkt 1fpkt"];
921--3966[label="1;32pkt 32fpkt"];
921--9523[label="1;1pkt 1fpkt"];
2344--3966[label="1;1pkt 1fpkt"];
2344--9523[label="1;1pkt 1fpkt"];
2413--3966[label="1;1pkt 1fpkt"];
3320--3966[label="1;1pkt 1fpkt"];
3966--9523[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.60.240" dst_port="29440" src_ip="218.5.15.105"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
2430[label="214.246.89.229;d;5pkt 5fpkt", shape=diamond, color=yellow];
2431[label="172.179.208.234;s;6pkt 6fpkt", shape=diamond, color=yellow];
10294[label="172.179.208.234;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.208.234:*, 214.246.89.229:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 1541: (8.82353%)&lt;BR/&gt; 1538: (8.82353%)&lt;BR/&gt; 1511: (8.82353%)&lt;BR/&gt; 1505: (8.82353%)&gt;];
}
2430--2431[label="1;5pkt 5fpkt"];
2430--10294[label="1;5pkt 5fpkt"];
2431--10294[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="214.246.89.229" dst_port="80" src_ip="172.179.208.234"/>
    </slice>
    <from sec="1172898048" usec="0"/>
    <to sec="1172898500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
2100[label="185.196.83.74;s;28pkt 28fpkt", shape=diamond, color=yellow];
2447[label="215.160.51.51;d;29pkt 29fpkt", shape=diamond, color=yellow];
7160[label="185.196.83.74;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.83.74:*, 215.160.51.51:80}[96.5517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2335: (1.76471%)&lt;BR/&gt; 2330: (1.76471%)&lt;BR/&gt; 2329: (1.76471%)&lt;BR/&gt; 2328: (1.76471%)&gt;];
}
2100--2447[label="1;28pkt 28fpkt"];
2100--7160[label="1;28pkt 28fpkt"];
2447--7160[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.51.51" dst_port="80" src_ip="185.196.83.74"/>
    </slice>
    <from sec="1172898173" usec="0"/>
    <to sec="1172898417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
2527[label="215.81.164.104;d;15pkt 15fpkt", shape=diamond, color=yellow];
2528[label="182.246.13.199;s;15pkt 15fpkt", shape=diamond, color=yellow];
9679[label="182.246.13.199;17pkt 17fpkt", shape=pentagon, color=darkviolet];
12923[label="182.246.13.199;16pkt 16fpkt", shape=invtriangle, color=brown];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.13.199:*, 215.81.164.104:80}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1158: (3.1746%)&lt;BR/&gt; 1157: (3.1746%)&lt;BR/&gt; 1142: (3.1746%)&lt;BR/&gt; 1141: (3.1746%)&gt;];
}
2527--2528[label="1;15pkt 15fpkt"];
2527--9679[label="1;15pkt 15fpkt"];
2527--12923[label="1;15pkt 15fpkt"];
2528--9679[label="1;15pkt 15fpkt"];
2528--12923[label="1;15pkt 15fpkt"];
9679--12923[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="215.81.164.104" dst_port="80" src_ip="182.246.13.199"/>
    </slice>
    <from sec="1172898404" usec="0"/>
    <to sec="1172898857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.91.57.28"/>
      <from sec="1172898438" usec="0"/>
      <to sec="1172898471" usec="0"/>
    </slice>
    <from sec="1172898438" usec="0"/>
    <to sec="1172898471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
2559[label="24.58.25.16;d;4pkt 4fpkt", shape=diamond, color=yellow];
2560[label="170.123.82.1;s;3pkt 3fpkt", shape=diamond, color=yellow];
4681[label="170.123.82.1;s;3pkt 3fpkt", shape=hexagon, color=black];
5582[label="170.123.82.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.85.92:0, 24.58.25.16:0}[25%]&lt;BR/&gt;{170.123.82.1:1460, 24.58.25.16:554}[25%]&lt;BR/&gt;{170.123.82.1:1462, 24.58.25.16:554}[25%]&lt;BR/&gt;{170.123.82.1:1467, 24.58.25.16:554}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (46.1538%)&lt;BR/&gt; 1467: (15.3846%)&lt;BR/&gt; 1462: (15.3846%)&lt;BR/&gt; 1460: (15.3846%)&lt;BR/&gt; 0: (7.69231%)&gt;];
}
2559--2560[label="1;3pkt 3fpkt"];
2559--4681[label="1;3pkt 3fpkt"];
2559--5582[label="1;3pkt 3fpkt"];
2560--4681[label="1;3pkt 3fpkt"];
2560--5582[label="1;3pkt 3fpkt"];
4681--5582[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="24.58.25.16" dst_port="554" src_ip="170.123.82.1" src_port="1467"/>
      <filter dst_ip="24.58.25.16" dst_port="554" src_ip="170.123.82.1" src_port="1462"/>
      <filter dst_ip="24.58.25.16" dst_port="554" src_ip="170.123.82.1" src_port="1460"/>
      <filter dst_ip="24.58.25.16" src_ip="170.123.85.92"/>
    </slice>
    <from sec="1172898439" usec="0"/>
    <to sec="1172898491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.125.75.53"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,901,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
2586[label="153.21.64.242;s;2pkt 2fpkt", shape=diamond, color=yellow];
2587[label="200.52.148.126;d;2pkt 2fpkt", shape=diamond, color=yellow];
10397[label="153.21.64.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13310[label="153.21.64.242;1pkt 1fpkt", shape=invtriangle, color=brown];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.64.242:2212, 200.52.148.126:554}[50%]&lt;BR/&gt;{153.21.64.242:6970, 200.52.148.126:23496}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2212: (33.3333%)&lt;BR/&gt; 554: (33.3333%)&lt;BR/&gt; 23496: (16.6667%)&lt;BR/&gt; 6970: (16.6667%)&gt;];
}
2586--2587[label="1;2pkt 2fpkt"];
2586--10397[label="1;1pkt 1fpkt"];
2586--13310[label="1;1pkt 1fpkt"];
2587--10397[label="1;1pkt 1fpkt"];
2587--13310[label="1;1pkt 1fpkt"];
10397--13310[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.52.148.126" dst_port="23496" src_ip="153.21.64.242" src_port="6970"/>
      <filter dst_ip="200.52.148.126" dst_port="554" src_ip="153.21.64.242" src_port="2212"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.104.242.248"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.107.65.39"/>
      <from sec="1172898229" usec="0"/>
      <to sec="1172898821" usec="0"/>
    </slice>
    <from sec="1172898229" usec="0"/>
    <to sec="1172898821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
2858[label="170.123.46.61;s;65pkt 65fpkt", shape=diamond, color=yellow];
2859[label="26.29.8.218;d;64pkt 64fpkt", shape=diamond, color=yellow];
4974[label="26.29.8.218;d;58pkt 58fpkt", shape=hexagon, color=black];
5162[label="170.123.46.61;s;65pkt 65fpkt", shape=hexagon, color=black];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.46.61:80, 26.29.8.218:*}[98.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65115: (0.793651%)&lt;BR/&gt; 64942: (0.793651%)&lt;BR/&gt; 64683: (0.793651%)&lt;BR/&gt; 63721: (0.793651%)&gt;];
}
2858--2859[label="1;64pkt 64fpkt"];
2858--4974[label="1;58pkt 58fpkt"];
2858--5162[label="1;65pkt 65fpkt"];
2859--4974[label="1;58pkt 58fpkt"];
2859--5162[label="1;64pkt 64fpkt"];
4974--5162[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="26.29.8.218" src_ip="170.123.46.61" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
2622[label="156.139.172.139;s;26pkt 26fpkt", shape=diamond, color=yellow];
2889[label="218.31.166.24;d;2pkt 2fpkt", shape=diamond, color=yellow];
4763[label="156.139.172.139;s;11pkt 11fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.172.139:*, 216.168.69.75:21}[23.0769%]&lt;BR/&gt;{156.139.172.139:*, 200.40.222.82:21}[23.0769%]&lt;BR/&gt;{156.139.172.139:*, 0.97.33.85:21}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (39.7436%)&lt;BR/&gt; 6668: (3.84615%)&lt;BR/&gt; 6665: (3.84615%)&lt;BR/&gt; 1836: (3.84615%)&lt;BR/&gt; 1611: (3.84615%)&gt;];
}
2622--2889[label="1;2pkt 2fpkt"];
2622--4763[label="1;11pkt 11fpkt"];
2889--4763[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="0.97.33.85" dst_port="21" src_ip="156.139.172.139"/>
      <filter dst_ip="200.40.222.82" dst_port="21" src_ip="156.139.172.139"/>
      <filter dst_ip="216.168.69.75" dst_port="21" src_ip="156.139.172.139"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
3012[label="206.38.192.20;s;809pkt 809fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.38.192.20:*, *:5900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 58008: (0.123609%)&lt;BR/&gt; 48247: (0.123609%)&lt;BR/&gt; 40707: (0.123609%)&lt;BR/&gt; 33371: (0.123609%)&gt;];
}
3012--4129[label="0.00746269;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="206.38.192.20"/>
    </slice>
    <from sec="1172898238" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="87.19.141.184"/>
      <from sec="1172898289" usec="0"/>
      <to sec="1172898824" usec="0"/>
    </slice>
    <from sec="1172898289" usec="0"/>
    <to sec="1172898824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
3018[label="96.82.118.226;d;19pkt 19fpkt", shape=diamond, color=yellow];
3019[label="170.123.18.98;s;19pkt 19fpkt", shape=diamond, color=yellow];
7655[label="170.123.18.98;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11742[label="170.123.18.98;20pkt 20fpkt", shape=invtriangle, color=brown];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.18.98:*, 96.82.118.226:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2233: (2.53165%)&lt;BR/&gt; 2232: (2.53165%)&lt;BR/&gt; 2231: (2.53165%)&lt;BR/&gt; 2230: (2.53165%)&gt;];
}
3018--3019[label="1;19pkt 19fpkt"];
3018--7655[label="1;19pkt 19fpkt"];
3018--11742[label="0.947368;18pkt 18fpkt"];
3019--7655[label="1;19pkt 19fpkt"];
3019--11742[label="0.947368;18pkt 18fpkt"];
7655--11742[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="96.82.118.226" dst_port="80" src_ip="170.123.18.98"/>
    </slice>
    <from sec="1172898308" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.79134,2.8033,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
108[label="214.6.162.145s;224pkt 224fpkt", shape=rectangle, color=red];
3066[label="214.6.162.145;s;255pkt 255fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.6.162.145:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4506: (0.208768%)&lt;BR/&gt; 4504: (0.208768%)&lt;BR/&gt; 4503: (0.208768%)&lt;BR/&gt; 4502: (0.208768%)&gt;];
}
108--3066[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="214.6.162.145"/>
    </slice>
    <from sec="1172898560" usec="0"/>
    <to sec="1172898608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
2936[label="153.21.32.149;s;15pkt 15fpkt", shape=diamond, color=yellow];
3088[label="216.106.97.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
5330[label="216.106.97.210;d;1pkt 1fpkt", shape=hexagon, color=black];
8673[label="153.21.32.149;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.32.149:*, *:80}[58.8235%]&lt;BR/&gt;{153.21.32.149:*, *:443}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.4118%)&lt;BR/&gt; 443: (14.7059%)&lt;BR/&gt; 1825: (5.88235%)&lt;BR/&gt; 5222: (2.94118%)&lt;BR/&gt; 4368: (2.94118%)&gt;];
}
2936--3088[label="1;1pkt 1fpkt"];
2936--5330[label="1;1pkt 1fpkt"];
2936--8673[label="1;15pkt 15fpkt"];
3088--5330[label="1;1pkt 1fpkt"];
3088--8673[label="1;1pkt 1fpkt"];
5330--8673[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="153.21.32.149"/>
      <filter dst_port="443" src_ip="153.21.32.149"/>
    </slice>
    <from sec="1172898010" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="170.123.234.180"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.89.3.128"/>
      <from sec="1172898002" usec="0"/>
      <to sec="1172898737" usec="0"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.34.18.81"/>
      <from sec="1172898299" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898299" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="1.34.18.81"/>
      <from sec="1172898299" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898299" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
3063[label="182.246.53.173;s;6pkt 6fpkt", shape=diamond, color=yellow];
3450[label="37.169.150.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.53.173:*, *:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 1068: (14.2857%)&lt;BR/&gt; 14486: (7.14286%)&lt;BR/&gt; 11202: (7.14286%)&lt;BR/&gt; 10656: (7.14286%)&gt;];
}
3063--3450[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="182.246.53.173"/>
    </slice>
    <from sec="1172898557" usec="0"/>
    <to sec="1172898724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
3009[label="153.21.150.71;s;19pkt 19fpkt", shape=diamond, color=yellow];
3452[label="17.3.209.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
5117[label="17.3.209.33;d;2pkt 2fpkt", shape=hexagon, color=black];
7096[label="153.21.150.71;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.150.71:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47711: (4.34783%)&lt;BR/&gt; 47432: (4.34783%)&lt;BR/&gt; 64249: (2.17391%)&lt;BR/&gt; 57953: (2.17391%)&gt;];
}
3009--3452[label="1;2pkt 2fpkt"];
3009--5117[label="1;2pkt 2fpkt"];
3009--7096[label="1;19pkt 19fpkt"];
3452--5117[label="1;2pkt 2fpkt"];
3452--7096[label="1;2pkt 2fpkt"];
5117--7096[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.150.71" src_port="80"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
3430[label="172.179.11.140;s;15pkt 15fpkt", shape=diamond, color=yellow];
3486[label="207.109.16.170;d;13pkt 13fpkt", shape=diamond, color=yellow];
5125[label="207.109.16.170;d;13pkt 13fpkt", shape=hexagon, color=black];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.11.140:*, 207.109.16.170:80}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59969: (3.65854%)&lt;BR/&gt; 59967: (3.65854%)&lt;BR/&gt; 59965: (3.65854%)&lt;BR/&gt; 59963: (3.65854%)&gt;];
}
3430--3486[label="1;13pkt 13fpkt"];
3430--5125[label="1;13pkt 13fpkt"];
3486--5125[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="207.109.16.170" dst_port="80" src_ip="172.179.11.140"/>
    </slice>
    <from sec="1172898534" usec="0"/>
    <to sec="1172898747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
3400[label="154.200.154.173;s;94pkt 94fpkt", shape=diamond, color=yellow];
3504[label="29.34.190.110;d;94pkt 94fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.200.154.173:*, 29.34.190.110:21}[40.8163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (22.3404%)&lt;BR/&gt; 65070: (0.531915%)&lt;BR/&gt; 64743: (0.531915%)&lt;BR/&gt; 64341: (0.531915%)&lt;BR/&gt; 64148: (0.531915%)&gt;];
}
3400--3504[label="0.957447;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="29.34.190.110" dst_port="21" src_ip="154.200.154.173"/>
    </slice>
    <from sec="1172898399" usec="0"/>
    <to sec="1172898796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
3399[label="154.200.154.173;d;90pkt 90fpkt", shape=diamond, color=yellow];
3505[label="29.34.190.110;s;90pkt 90fpkt", shape=diamond, color=yellow];
7910[label="29.34.190.110;90pkt 90fpkt", shape=pentagon, color=darkviolet];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.34.190.110:21, 154.200.154.173:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (22.2222%)&lt;BR/&gt; 65070: (0.555556%)&lt;BR/&gt; 64743: (0.555556%)&lt;BR/&gt; 64341: (0.555556%)&lt;BR/&gt; 64148: (0.555556%)&gt;];
}
3399--3505[label="1;90pkt 90fpkt"];
3399--7910[label="1;90pkt 90fpkt"];
3505--7910[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="154.200.154.173" src_ip="29.34.190.110" src_port="21"/>
    </slice>
    <from sec="1172898399" usec="0"/>
    <to sec="1172898796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
3439[label="170.123.46.48;s;2pkt 2fpkt", shape=diamond, color=yellow];
3542[label="17.3.193.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.46.48:80, 17.3.193.58:44617}[50%]&lt;BR/&gt;{170.123.46.48:80, 17.3.203.98:38440}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44617: (33.3333%)&lt;BR/&gt; 38440: (16.6667%)&gt;];
}
3439--3542[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.3.203.98" dst_port="38440" src_ip="170.123.46.48" src_port="80"/>
      <filter dst_ip="17.3.193.58" dst_port="44617" src_ip="170.123.46.48" src_port="80"/>
    </slice>
    <from sec="1172898562" usec="0"/>
    <to sec="1172898750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
3438[label="170.123.46.48;d;2pkt 2fpkt", shape=diamond, color=yellow];
3543[label="17.3.193.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
6844[label="17.3.193.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.3.193.58:44617, 170.123.46.48:80}[50%]&lt;BR/&gt;{17.3.203.98:38440, 170.123.46.48:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44617: (37.5%)&lt;BR/&gt; 38440: (12.5%)&gt;];
}
3438--3543[label="1;1pkt 1fpkt"];
3438--6844[label="1;1pkt 1fpkt"];
3543--6844[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.46.48" dst_port="80" src_ip="17.3.203.98" src_port="38440"/>
      <filter dst_ip="170.123.46.48" dst_port="80" src_ip="17.3.193.58" src_port="44617"/>
    </slice>
    <from sec="1172898562" usec="0"/>
    <to sec="1172898742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
3544[label="25.85.33.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
3545[label="154.200.197.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
7109[label="154.200.197.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.200.197.72:80, 25.85.33.119:40998}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40998: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3544--3545[label="1;1pkt 1fpkt"];
3544--7109[label="1;1pkt 1fpkt"];
3545--7109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="25.85.33.119" dst_port="40998" src_ip="154.200.197.72" src_port="80"/>
    </slice>
    <from sec="1172898732" usec="0"/>
    <to sec="1172898749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.234.182.122"/>
      <from sec="1172898216" usec="0"/>
      <to sec="1172898810" usec="0"/>
    </slice>
    <from sec="1172898216" usec="0"/>
    <to sec="1172898810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
3036[label="182.246.34.36;s;9pkt 9fpkt", shape=diamond, color=yellow];
3766[label="100.21.220.91;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.34.36:80, 100.21.220.91:*}[77.7778%]&lt;BR/&gt;{182.246.34.36:80, 37.215.91.1:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10162: (6.25%)&lt;BR/&gt; 10161: (6.25%)&lt;BR/&gt; 10160: (6.25%)&lt;BR/&gt; 10159: (6.25%)&gt;];
}
3036--3766[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="100.21.220.91" src_ip="182.246.34.36" src_port="80"/>
      <filter dst_ip="37.215.91.1" src_ip="182.246.34.36" src_port="80"/>
    </slice>
    <from sec="1172898675" usec="0"/>
    <to sec="1172898813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="24.85.44.211"/>
      <from sec="1172898791" usec="0"/>
      <to sec="1172898804" usec="0"/>
    </slice>
    <from sec="1172898791" usec="0"/>
    <to sec="1172898804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902955,2.8245,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="29.160.134.183"/>
      <from sec="1172898812" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898812" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
182[label="168.84.233.121;d;10pkt 10fpkt", shape=diamond, color=yellow];
185[label="214.125.78.227;s;19pkt 19fpkt", shape=diamond, color=yellow];
2179[label="26.29.8.109;d;2pkt 2fpkt", shape=diamond, color=yellow];
3863[label="214.125.78.227;s;8pkt 8fpkt", shape=hexagon, color=black];
4479[label="168.84.233.121;d;9pkt 9fpkt", shape=hexagon, color=black];
10177[label="214.125.78.227;19pkt 19fpkt", shape=pentagon, color=darkviolet];
13187[label="214.125.78.227;18pkt 18fpkt", shape=invtriangle, color=brown];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.78.227:80, *:*}[31.5789%]&lt;BR/&gt;{214.125.78.227:21, 168.84.233.121:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (14.7059%)&lt;BR/&gt; 80: (10.5882%)&lt;BR/&gt; 63754: (3.52941%)&lt;BR/&gt; 62351: (3.52941%)&lt;BR/&gt; 60826: (3.52941%)&gt;];
}
182--185[label="1;10pkt 10fpkt"];
182--3863[label="1;8pkt 8fpkt"];
182--4479[label="1;9pkt 9fpkt"];
182--10177[label="1;10pkt 10fpkt"];
182--13187[label="0.9;9pkt 9fpkt"];
185--2179[label="1;2pkt 2fpkt"];
185--3863[label="1;8pkt 8fpkt"];
185--4479[label="1;9pkt 9fpkt"];
185--10177[label="1;19pkt 19fpkt"];
185--13187[label="1;18pkt 18fpkt"];
2179--10177[label="1;2pkt 2fpkt"];
2179--13187[label="1;2pkt 2fpkt"];
3863--4479[label="1;8pkt 8fpkt"];
3863--10177[label="1;8pkt 8fpkt"];
3863--13187[label="0.875;7pkt 7fpkt"];
4479--10177[label="1;9pkt 9fpkt"];
4479--13187[label="0.888889;8pkt 8fpkt"];
10177--13187[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.78.227" src_port="80"/>
      <filter dst_ip="168.84.233.121" src_ip="214.125.78.227" src_port="21"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13614,2.8249,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898738" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
1756[label="26.10.140.154;d;41pkt 41fpkt", shape=diamond, color=yellow];
1757[label="185.196.89.73;s;46pkt 46fpkt", shape=diamond, color=yellow];
7132[label="185.196.89.73;68pkt 68fpkt", shape=pentagon, color=darkviolet];
11463[label="185.196.89.73;67pkt 67fpkt", shape=invtriangle, color=brown];
13813[label="185.196.89.73;68pkt 68fpkt", shape=invhouse, color=bisque];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.89.73:*, 26.10.140.154:80}[60.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1705: (0.862069%)&lt;BR/&gt; 1704: (0.862069%)&lt;BR/&gt; 1703: (0.862069%)&lt;BR/&gt; 1702: (0.862069%)&gt;];
}
1756--1757[label="1;41pkt 41fpkt"];
1756--7132[label="1;41pkt 41fpkt"];
1756--11463[label="1;41pkt 41fpkt"];
1756--13813[label="1;41pkt 41fpkt"];
1757--7132[label="1;46pkt 46fpkt"];
1757--11463[label="1;46pkt 46fpkt"];
1757--13813[label="1;46pkt 46fpkt"];
7132--11463[label="1;67pkt 67fpkt"];
7132--13813[label="1;68pkt 68fpkt"];
11463--13813[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="26.10.140.154" dst_port="80" src_ip="185.196.89.73"/>
    </slice>
    <from sec="1172898019" usec="0"/>
    <to sec="1172898791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
236[label="192.239.167.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
239[label="214.125.79.191;s;1361pkt 1361fpkt", shape=diamond, color=yellow];
336[label="215.235.104.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
409[label="198.64.108.97;d;2pkt 2fpkt", shape=diamond, color=yellow];
555[label="193.219.76.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
572[label="30.7.78.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
587[label="17.11.80.41;d;2pkt 2fpkt", shape=diamond, color=yellow];
642[label="97.0.140.37;d;2pkt 2fpkt", shape=diamond, color=yellow];
698[label="100.249.22.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
808[label="96.212.204.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
910[label="196.144.8.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
1007[label="199.198.85.16;d;3pkt 3fpkt", shape=diamond, color=yellow];
1015[label="199.198.139.95;d;2pkt 2fpkt", shape=diamond, color=yellow];
1235[label="193.35.108.104;d;2pkt 2fpkt", shape=diamond, color=yellow];
1463[label="37.235.16.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
1525[label="199.167.80.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
1949[label="196.132.41.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
2664[label="196.132.110.153;d;2pkt 2fpkt", shape=diamond, color=yellow];
2997[label="196.152.89.249;d;2pkt 2fpkt", shape=diamond, color=yellow];
3741[label="196.132.209.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
3908[label="17.11.80.41;d;2pkt 2fpkt", shape=hexagon, color=black];
4530[label="199.198.85.16;d;3pkt 3fpkt", shape=hexagon, color=black];
4695[label="215.235.104.173;d;1pkt 1fpkt", shape=hexagon, color=black];
4703[label="198.64.108.97;d;2pkt 2fpkt", shape=hexagon, color=black];
4719[label="199.198.139.95;d;2pkt 2fpkt", shape=hexagon, color=black];
4746[label="97.0.140.37;d;2pkt 2fpkt", shape=hexagon, color=black];
4903[label="100.249.22.172;d;1pkt 1fpkt", shape=hexagon, color=black];
4924[label="196.152.89.249;d;2pkt 2fpkt", shape=hexagon, color=black];
5168[label="193.219.76.186;d;1pkt 1fpkt", shape=hexagon, color=black];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.79.191:13259, *:*}[60.1029%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13259: (30.1565%)&lt;BR/&gt; 80: (1.13798%)&lt;BR/&gt; 6881: (0.355619%)&lt;BR/&gt; 27581: (0.213371%)&lt;BR/&gt; 21588: (0.177809%)&gt;];
}
236--239[label="1;1pkt 1fpkt"];
239--336[label="1;1pkt 1fpkt"];
239--409[label="1;2pkt 2fpkt"];
239--555[label="1;1pkt 1fpkt"];
239--572[label="1;1pkt 1fpkt"];
239--587[label="1;2pkt 2fpkt"];
239--642[label="1;2pkt 2fpkt"];
239--698[label="1;1pkt 1fpkt"];
239--808[label="1;1pkt 1fpkt"];
239--910[label="1;2pkt 2fpkt"];
239--923[label="0.00460829;2pkt 2fpkt"];
239--1007[label="1;3pkt 3fpkt"];
239--1015[label="1;2pkt 2fpkt"];
239--1235[label="1;2pkt 2fpkt"];
239--1463[label="1;1pkt 1fpkt"];
239--1525[label="1;1pkt 1fpkt"];
239--1949[label="1;1pkt 1fpkt"];
239--2664[label="1;2pkt 2fpkt"];
239--2997[label="1;2pkt 2fpkt"];
239--3741[label="1;1pkt 1fpkt"];
239--3908[label="1;2pkt 2fpkt"];
239--4530[label="1;3pkt 3fpkt"];
239--4695[label="1;1pkt 1fpkt"];
239--4703[label="1;2pkt 2fpkt"];
239--4719[label="1;2pkt 2fpkt"];
239--4746[label="1;2pkt 2fpkt"];
239--4903[label="1;1pkt 1fpkt"];
239--4924[label="1;2pkt 2fpkt"];
239--5168[label="1;1pkt 1fpkt"];
239--5470[label="0.000734754;1pkt 1fpkt"];
239--5500[label="0.000734754;1pkt 1fpkt"];
239--5527[label="0.000734754;1pkt 1fpkt"];
336--4695[label="1;1pkt 1fpkt"];
409--4703[label="1;2pkt 2fpkt"];
555--5168[label="1;1pkt 1fpkt"];
587--3908[label="1;2pkt 2fpkt"];
642--4746[label="1;2pkt 2fpkt"];
698--4903[label="1;1pkt 1fpkt"];
1007--4530[label="1;3pkt 3fpkt"];
1015--4719[label="1;2pkt 2fpkt"];
2997--4924[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.79.191" src_port="13259"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
629[label="214.42.102.32;s;9pkt 9fpkt", shape=diamond, color=yellow];
630[label="214.125.75.32;d;11pkt 11fpkt", shape=diamond, color=yellow];
3910[label="214.42.102.32;s;5pkt 5fpkt", shape=hexagon, color=black];
3911[label="214.125.75.32;d;9pkt 9fpkt", shape=hexagon, color=black];
6267[label="214.42.102.32;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.42.102.32:*, 214.125.75.32:119}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (45.3488%)&lt;BR/&gt; 58452: (5.81395%)&lt;BR/&gt; 51205: (5.81395%)&lt;BR/&gt; 41322: (5.81395%)&lt;BR/&gt; 36902: (5.81395%)&gt;];
}
629--630[label="1;9pkt 9fpkt"];
629--3910[label="1;5pkt 5fpkt"];
629--3911[label="0.777778;7pkt 7fpkt"];
629--6267[label="1;9pkt 9fpkt"];
630--3910[label="1;5pkt 5fpkt"];
630--3911[label="1;9pkt 9fpkt"];
630--6267[label="1;9pkt 9fpkt"];
3910--3911[label="1;5pkt 5fpkt"];
3910--6267[label="1;5pkt 5fpkt"];
3911--6267[label="0.777778;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.75.32" dst_port="119" src_ip="214.42.102.32"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13614,2.8249,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="25.7.7.140"/>
      <from sec="1172898300" usec="0"/>
      <to sec="1172898468" usec="0"/>
    </slice>
    <from sec="1172898300" usec="0"/>
    <to sec="1172898468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13614,2.8249,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1172898000" usec="0"/>
      <to sec="1172898738" usec="0"/>
    </slice>
    <from sec="44789368" usec="0"/>
    <to sec="44789368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
259[label="0.6.118.101;d;2pkt 2fpkt", shape=diamond, color=yellow];
260[label="170.123.166.108;s;286pkt 286fpkt", shape=diamond, color=yellow];
3951[label="0.6.118.101;d;2pkt 2fpkt", shape=hexagon, color=black];
4092[label="170.123.166.108;s;112pkt 112fpkt", shape=hexagon, color=black];
7865[label="170.123.166.108;316pkt 316fpkt", shape=pentagon, color=darkviolet];
11861[label="170.123.166.108;316pkt 316fpkt", shape=invtriangle, color=brown];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.166.108:54324, *:*}[99.3671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54324: (49.7099%)&lt;BR/&gt; 59857: (0.290135%)&lt;BR/&gt; 54045: (0.290135%)&lt;BR/&gt; 3863: (0.290135%)&lt;BR/&gt; 1884: (0.290135%)&gt;];
}
259--260[label="1;2pkt 2fpkt"];
259--3951[label="1;2pkt 2fpkt"];
259--4092[label="1;2pkt 2fpkt"];
259--7865[label="1;2pkt 2fpkt"];
259--11861[label="1;2pkt 2fpkt"];
260--2713[label="0.0714286;1pkt 1fpkt"];
260--3951[label="1;2pkt 2fpkt"];
260--4092[label="1;112pkt 112fpkt"];
260--7865[label="1;286pkt 286fpkt"];
260--11861[label="1;286pkt 286fpkt"];
3951--4092[label="1;2pkt 2fpkt"];
3951--7865[label="1;2pkt 2fpkt"];
3951--11861[label="1;2pkt 2fpkt"];
4092--7865[label="1;112pkt 112fpkt"];
4092--11861[label="1;112pkt 112fpkt"];
7865--11861[label="1;316pkt 316fpkt"];
</description>
    <slice>
      <filter src_ip="170.123.166.108" src_port="54324"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13614,2.8249,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.44.249.28"/>
      <from sec="1172898574" usec="0"/>
      <to sec="1172898828" usec="0"/>
    </slice>
    <from sec="1172898574" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
283[label="36.127.61.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
884[label="153.21.10.165;s;11pkt 11fpkt", shape=diamond, color=yellow];
4096[label="36.127.61.152;d;1pkt 1fpkt", shape=hexagon, color=black];
9006[label="153.21.10.165;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.10.165:15516, *:*}[50%]&lt;BR/&gt;{153.21.10.165:*, 214.55.12.88:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15516: (22%)&lt;BR/&gt; 80: (12%)&lt;BR/&gt; 12250: (8%)&lt;BR/&gt; 3359: (8%)&lt;BR/&gt; 3224: (8%)&gt;];
}
283--884[label="1;1pkt 1fpkt"];
283--4096[label="1;1pkt 1fpkt"];
283--9006[label="1;1pkt 1fpkt"];
884--4096[label="1;1pkt 1fpkt"];
884--5470[label="0.0909091;1pkt 1fpkt"];
884--5500[label="0.0909091;1pkt 1fpkt"];
884--5527[label="0.0909091;1pkt 1fpkt"];
884--9006[label="1;11pkt 11fpkt"];
4096--9006[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.10.165" src_port="15516"/>
      <filter dst_ip="214.55.12.88" dst_port="80" src_ip="153.21.10.165"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
3315[label="214.125.67.91;s;99pkt 99fpkt", shape=diamond, color=yellow];
3524[label="25.85.37.219;d;11pkt 11fpkt", shape=diamond, color=yellow];
7528[label="214.125.67.91;108pkt 108fpkt", shape=pentagon, color=darkviolet];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.67.91:80, *:*}[47.7064%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.5413%)&lt;BR/&gt; 53: (11.6972%)&lt;BR/&gt; 25: (10.5505%)&lt;BR/&gt; 1078: (5.9633%)&lt;BR/&gt; 113: (2.75229%)&gt;];
}
3315--3524[label="1;11pkt 11fpkt"];
3315--4101[label="0.0232558;1pkt 1fpkt"];
3315--5389[label="0.0238095;1pkt 1fpkt"];
3315--5485[label="0.020202;2pkt 2fpkt"];
3315--5514[label="0.020202;2pkt 2fpkt"];
3315--5541[label="0.020202;2pkt 2fpkt"];
3315--7528[label="0.989899;98pkt 98fpkt"];
3524--7528[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.67.91" src_port="80"/>
    </slice>
    <from sec="1172898025" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
922[label="170.123.60.240;s;76pkt 76fpkt", shape=diamond, color=yellow];
1261[label="219.7.108.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
1412[label="213.14.188.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
1850[label="3.181.86.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
1981[label="1.2.87.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
2412[label="3.219.70.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
2593[label="216.229.138.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
4108[label="213.14.188.129;d;1pkt 1fpkt", shape=hexagon, color=black];
4212[label="219.7.108.103;d;1pkt 1fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.60.240:29440, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29440: (50%)&lt;BR/&gt; 50595: (1.78571%)&lt;BR/&gt; 50061: (1.78571%)&lt;BR/&gt; 47046: (1.19048%)&lt;BR/&gt; 2870: (1.19048%)&gt;];
}
922--1261[label="1;1pkt 1fpkt"];
922--1412[label="1;1pkt 1fpkt"];
922--1850[label="1;1pkt 1fpkt"];
922--1981[label="1;1pkt 1fpkt"];
922--2412[label="1;1pkt 1fpkt"];
922--2593[label="1;1pkt 1fpkt"];
922--4108[label="1;1pkt 1fpkt"];
922--4212[label="1;1pkt 1fpkt"];
1261--4212[label="1;1pkt 1fpkt"];
1412--4108[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="170.123.60.240" src_port="29440"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
615[label="182.246.172.118;s;2pkt 2fpkt", shape=diamond, color=yellow];
1080[label="199.164.148.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
1163[label="190.137.103.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
4144[label="199.164.148.214;d;1pkt 1fpkt", shape=hexagon, color=black];
4168[label="190.137.103.19;d;1pkt 1fpkt", shape=hexagon, color=black];
4345[label="182.246.172.118;s;2pkt 2fpkt", shape=hexagon, color=black];
8055[label="182.246.172.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.172.118:13109, 190.137.103.19:1946}[50%]&lt;BR/&gt;{182.246.172.118:13109, 199.164.148.214:12739}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13109: (50%)&lt;BR/&gt; 12739: (25%)&lt;BR/&gt; 1946: (25%)&gt;];
}
615--1080[label="1;1pkt 1fpkt"];
615--1163[label="1;1pkt 1fpkt"];
615--4144[label="1;1pkt 1fpkt"];
615--4168[label="1;1pkt 1fpkt"];
615--4345[label="1;2pkt 2fpkt"];
615--8055[label="1;2pkt 2fpkt"];
1080--4144[label="1;1pkt 1fpkt"];
1080--4345[label="1;1pkt 1fpkt"];
1080--8055[label="1;1pkt 1fpkt"];
1163--4168[label="1;1pkt 1fpkt"];
1163--4345[label="1;1pkt 1fpkt"];
1163--8055[label="1;1pkt 1fpkt"];
4144--4345[label="1;1pkt 1fpkt"];
4144--8055[label="1;1pkt 1fpkt"];
4168--4345[label="1;1pkt 1fpkt"];
4168--8055[label="1;1pkt 1fpkt"];
4345--8055[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.164.148.214" dst_port="12739" src_ip="182.246.172.118" src_port="13109"/>
      <filter dst_ip="190.137.103.19" dst_port="1946" src_ip="182.246.172.118" src_port="13109"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
1569[label="170.123.47.152;d;27pkt 27fpkt", shape=diamond, color=yellow];
1789[label="96.134.54.137;s;8pkt 8fpkt", shape=diamond, color=yellow];
4182[label="170.123.47.152;d;13pkt 13fpkt", shape=hexagon, color=black];
8418[label="96.134.54.137;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12189[label="96.134.54.137;8pkt 8fpkt", shape=invtriangle, color=brown];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.96.213.44:80, 170.123.47.152:*}[70.3704%]&lt;BR/&gt;{96.134.54.137:80, 170.123.47.152:*}[29.6296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4946: (3.90625%)&lt;BR/&gt; 4945: (3.90625%)&lt;BR/&gt; 4944: (3.90625%)&lt;BR/&gt; 4951: (3.125%)&gt;];
}
1569--1789[label="1;8pkt 8fpkt"];
1569--4182[label="1;13pkt 13fpkt"];
1569--8418[label="1;8pkt 8fpkt"];
1569--12189[label="1;8pkt 8fpkt"];
1789--4182[label="0.375;3pkt 3fpkt"];
1789--8418[label="1;8pkt 8fpkt"];
1789--12189[label="1;8pkt 8fpkt"];
4182--8418[label="0.375;3pkt 3fpkt"];
4182--12189[label="0.375;3pkt 3fpkt"];
8418--12189[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.47.152" src_ip="26.96.213.44" src_port="80"/>
      <filter dst_ip="170.123.47.152" src_ip="96.134.54.137" src_port="80"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13614,2.8249,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="41.139.66.216"/>
      <from sec="1172898668" usec="0"/>
      <to sec="1172898697" usec="0"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
1360[label="185.196.186.232;s;46pkt 46fpkt", shape=diamond, color=yellow];
4234[label="185.196.186.232;s;46pkt 46fpkt", shape=hexagon, color=black];
10266[label="185.196.186.232;46pkt 46fpkt", shape=pentagon, color=darkviolet];
13231[label="185.196.186.232;45pkt 45fpkt", shape=invtriangle, color=brown];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.186.232:*, 96.48.88.44:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64094: (1.0929%)&lt;BR/&gt; 64090: (1.0929%)&lt;BR/&gt; 64065: (1.0929%)&lt;BR/&gt; 63958: (1.0929%)&gt;];
}
1360--4234[label="1;46pkt 46fpkt"];
1360--10266[label="1;46pkt 46fpkt"];
1360--13231[label="1;45pkt 45fpkt"];
4234--10266[label="1;46pkt 46fpkt"];
4234--13231[label="1;45pkt 45fpkt"];
10266--13231[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="96.48.88.44" dst_port="80" src_ip="185.196.186.232"/>
    </slice>
    <from sec="1172898138" usec="0"/>
    <to sec="1172898190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
202[label="215.213.200.19;d;10pkt 10fpkt", shape=diamond, color=yellow];
203[label="156.139.248.1;s;22pkt 22fpkt", shape=diamond, color=yellow];
972[label="24.10.85.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
3975[label="24.10.85.107;d;1pkt 1fpkt", shape=hexagon, color=black];
4257[label="215.213.200.19;d;10pkt 10fpkt", shape=hexagon, color=black];
4482[label="156.139.248.1;s;17pkt 17fpkt", shape=hexagon, color=black];
5604[label="156.139.248.1;24pkt 24fpkt", shape=pentagon, color=darkviolet];
10649[label="156.139.248.1;24pkt 24fpkt", shape=invtriangle, color=brown];
13450[label="156.139.248.1;25pkt 25fpkt", shape=invhouse, color=bisque];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.248.1:80, 215.213.200.19:*}[40%]&lt;BR/&gt;{156.139.248.1:80, 195.178.98.202:*}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1343%)&lt;BR/&gt; 3010: (2.61194%)&lt;BR/&gt; 1395: (2.61194%)&lt;BR/&gt; 1394: (2.61194%)&lt;BR/&gt; 1392: (2.61194%)&gt;];
}
202--203[label="1;10pkt 10fpkt"];
202--4257[label="1;10pkt 10fpkt"];
202--4482[label="1;10pkt 10fpkt"];
202--5604[label="1;10pkt 10fpkt"];
202--10649[label="1;10pkt 10fpkt"];
202--13450[label="1;10pkt 10fpkt"];
203--972[label="1;1pkt 1fpkt"];
203--3975[label="1;1pkt 1fpkt"];
203--4257[label="1;10pkt 10fpkt"];
203--4482[label="1;17pkt 17fpkt"];
203--5604[label="0.954545;21pkt 21fpkt"];
203--10649[label="0.954545;21pkt 21fpkt"];
203--13450[label="1;22pkt 22fpkt"];
972--3975[label="1;1pkt 1fpkt"];
972--4482[label="1;1pkt 1fpkt"];
972--5604[label="1;1pkt 1fpkt"];
972--10649[label="1;1pkt 1fpkt"];
972--13450[label="1;1pkt 1fpkt"];
3975--4482[label="1;1pkt 1fpkt"];
3975--5604[label="1;1pkt 1fpkt"];
3975--10649[label="1;1pkt 1fpkt"];
3975--13450[label="1;1pkt 1fpkt"];
4257--4482[label="1;10pkt 10fpkt"];
4257--5604[label="1;10pkt 10fpkt"];
4257--10649[label="1;10pkt 10fpkt"];
4257--13450[label="1;10pkt 10fpkt"];
4482--5604[label="1;17pkt 17fpkt"];
4482--10649[label="1;17pkt 17fpkt"];
4482--13450[label="1;17pkt 17fpkt"];
5604--10649[label="1;24pkt 24fpkt"];
5604--13450[label="1;24pkt 24fpkt"];
10649--13450[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="215.213.200.19" src_ip="156.139.248.1" src_port="80"/>
      <filter dst_ip="195.178.98.202" src_ip="156.139.248.1" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
1816[label="5.164.4.226;s;419pkt 419fpkt", shape=diamond, color=yellow];
4300[label="5.164.4.226;s;381pkt 381fpkt", shape=hexagon, color=black];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.164.4.226:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1816--4300[label="1;381pkt 381fpkt"];
</description>
    <slice>
      <filter src_ip="5.164.4.226"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1452[label="153.21.150.18;s;140pkt 140fpkt", shape=diamond, color=yellow];
4320[label="153.21.150.18;s;62pkt 62fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.150.18:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4600: (0.742574%)&lt;BR/&gt; 2836: (0.742574%)&lt;BR/&gt; 1480: (0.742574%)&lt;BR/&gt; 63893: (0.49505%)&gt;];
}
1452--4320[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.150.18" src_port="25"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
2037[label="170.123.77.39;s;43pkt 43fpkt", shape=diamond, color=yellow];
4412[label="170.123.77.39;s;43pkt 43fpkt", shape=hexagon, color=black];
6439[label="170.123.77.39;43pkt 43fpkt", shape=pentagon, color=darkviolet];
11092[label="170.123.77.39;43pkt 43fpkt", shape=invtriangle, color=brown];
13651[label="170.123.77.39;43pkt 43fpkt", shape=invhouse, color=bisque];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.77.39:*, 220.8.16.12:80}[25.5814%]&lt;BR/&gt;{170.123.77.39:*, *:443}[20.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.3721%)&lt;BR/&gt; 443: (10.4651%)&lt;BR/&gt; 1665: (1.16279%)&lt;BR/&gt; 1663: (1.16279%)&lt;BR/&gt; 1660: (1.16279%)&gt;];
}
2037--4161[label="0.04;1pkt 1fpkt"];
2037--4412[label="1;43pkt 43fpkt"];
2037--5470[label="0.0465116;2pkt 2fpkt"];
2037--5500[label="0.0465116;2pkt 2fpkt"];
2037--5527[label="0.0465116;2pkt 2fpkt"];
2037--6439[label="1;43pkt 43fpkt"];
2037--11092[label="1;43pkt 43fpkt"];
2037--13651[label="1;43pkt 43fpkt"];
4412--5470[label="0.0465116;2pkt 2fpkt"];
4412--5500[label="0.0465116;2pkt 2fpkt"];
4412--5527[label="0.0465116;2pkt 2fpkt"];
4412--6439[label="1;43pkt 43fpkt"];
4412--11092[label="1;43pkt 43fpkt"];
4412--13651[label="1;43pkt 43fpkt"];
6439--11092[label="1;43pkt 43fpkt"];
6439--13651[label="1;43pkt 43fpkt"];
11092--13651[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="170.123.77.39"/>
      <filter dst_ip="220.8.16.12" dst_port="80" src_ip="170.123.77.39"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
713[label="170.123.217.225;s;273pkt 273fpkt", shape=diamond, color=yellow];
1335[label="204.252.220.66;d;2pkt 2fpkt", shape=diamond, color=yellow];
3920[label="170.123.217.225;s;74pkt 74fpkt", shape=hexagon, color=black];
10148[label="170.123.217.225;277pkt 277fpkt", shape=pentagon, color=darkviolet];
13176[label="170.123.217.225;276pkt 276fpkt", shape=invtriangle, color=brown];
14581[label="170.123.217.225;276pkt 276fpkt", shape=invhouse, color=bisque];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.217.225:*, 195.178.79.182:80}[25.6318%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9542%)&lt;BR/&gt; 515: (6.02716%)&lt;BR/&gt; 995: (0.509338%)&lt;BR/&gt; 443: (0.509338%)&lt;BR/&gt; 3120: (0.254669%)&gt;];
}
713--854[label="0.0408163;4pkt 4fpkt"];
713--886[label="0.014652;4pkt 4fpkt"];
713--923[label="0.003663;1pkt 1fpkt"];
713--965[label="0.0235294;2pkt 2fpkt"];
713--1335[label="1;2pkt 2fpkt"];
713--1570[label="0.0816327;8pkt 8fpkt"];
713--1583[label="0.0135135;1pkt 1fpkt"];
713--1886[label="0.011236;1pkt 1fpkt"];
713--3611[label="0.0126582;1pkt 1fpkt"];
713--3920[label="1;74pkt 74fpkt"];
713--3957[label="0.0421053;4pkt 4fpkt"];
713--4183[label="0.0816327;8pkt 8fpkt"];
713--4346[label="0.00689655;1pkt 1fpkt"];
713--4478[label="0.0449438;4pkt 4fpkt"];
713--4515[label="0.0169492;1pkt 1fpkt"];
713--4523[label="0.021978;6pkt 6fpkt"];
713--4742[label="0.021978;6pkt 6fpkt"];
713--5470[label="0.018315;5pkt 5fpkt"];
713--5500[label="0.018315;5pkt 5fpkt"];
713--5527[label="0.018315;5pkt 5fpkt"];
713--10148[label="1;273pkt 273fpkt"];
713--13176[label="0.996337;272pkt 272fpkt"];
713--14581[label="0.996337;272pkt 272fpkt"];
1335--3920[label="0.5;1pkt 1fpkt"];
1335--10148[label="1;2pkt 2fpkt"];
1335--13176[label="1;2pkt 2fpkt"];
1335--14581[label="1;2pkt 2fpkt"];
3920--3957[label="0.0540541;4pkt 4fpkt"];
3920--4183[label="0.027027;2pkt 2fpkt"];
3920--4478[label="0.0405405;3pkt 3fpkt"];
3920--4515[label="0.0169492;1pkt 1fpkt"];
3920--4523[label="0.027027;2pkt 2fpkt"];
3920--4742[label="0.0135135;1pkt 1fpkt"];
3920--5470[label="0.0675676;5pkt 5fpkt"];
3920--5500[label="0.0675676;5pkt 5fpkt"];
3920--5527[label="0.0675676;5pkt 5fpkt"];
3920--10148[label="1;74pkt 74fpkt"];
3920--13176[label="0.986486;73pkt 73fpkt"];
3920--14581[label="0.986486;73pkt 73fpkt"];
10148--13176[label="1;276pkt 276fpkt"];
10148--14581[label="1;276pkt 276fpkt"];
13176--14581[label="1;276pkt 276fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.79.182" dst_port="80" src_ip="170.123.217.225"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
2202[label="170.123.166.108;d;217pkt 217fpkt", shape=diamond, color=yellow];
4488[label="170.123.166.108;d;130pkt 130fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.123.166.108:54324}[99.0783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54324: (49.4236%)&lt;BR/&gt; 137: (0.864553%)&lt;BR/&gt; 65482: (0.288184%)&lt;BR/&gt; 65429: (0.288184%)&lt;BR/&gt; 65420: (0.288184%)&gt;];
}
2202--3686[label="0.0714286;1pkt 1fpkt"];
2202--4488[label="1;130pkt 130fpkt"];
2202--10330[label="0.00460829;1pkt 1fpkt"];
2202--13267[label="0.00460829;1pkt 1fpkt"];
2202--14625[label="0.00460829;1pkt 1fpkt"];
4488--10330[label="0.00769231;1pkt 1fpkt"];
4488--13267[label="0.00769231;1pkt 1fpkt"];
4488--14625[label="0.00769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.166.108" dst_port="54324"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.49243,2.72388,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
2324[label="172.169.10.205;s;212pkt 212fpkt", shape=diamond, color=yellow];
4585[label="172.169.10.205;s;198pkt 198fpkt", shape=hexagon, color=black];
9781[label="172.169.10.205;223pkt 223fpkt", shape=pentagon, color=darkviolet];
14496[label="172.169.10.205;221pkt 221fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.10.205:60498, *:53}[46.6368%]&lt;BR/&gt;{172.169.10.205:53, *:*}[44.3946%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.897%)&lt;BR/&gt; 60498: (23.7705%)&lt;BR/&gt; 25: (2.34192%)&lt;BR/&gt; 113: (1.75644%)&lt;BR/&gt; 32768: (1.17096%)&gt;];
}
2324--2874[label="0.0117647;1pkt 1fpkt"];
2324--4030[label="0.0123457;1pkt 1fpkt"];
2324--4398[label="0.00471698;1pkt 1fpkt"];
2324--4585[label="1;198pkt 198fpkt"];
2324--4961[label="0.00471698;1pkt 1fpkt"];
2324--5186[label="0.0117647;1pkt 1fpkt"];
2324--5485[label="0.0424528;9pkt 9fpkt"];
2324--5514[label="0.0424528;9pkt 9fpkt"];
2324--5541[label="0.0424528;9pkt 9fpkt"];
2324--9781[label="1;212pkt 212fpkt"];
2324--14496[label="0.990566;210pkt 210fpkt"];
4585--4961[label="0.00505051;1pkt 1fpkt"];
4585--5186[label="0.0117647;1pkt 1fpkt"];
4585--5485[label="0.0454545;9pkt 9fpkt"];
4585--5514[label="0.0454545;9pkt 9fpkt"];
4585--5541[label="0.0454545;9pkt 9fpkt"];
4585--9781[label="1;198pkt 198fpkt"];
4585--14496[label="0.989899;196pkt 196fpkt"];
9781--14496[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter src_ip="172.169.10.205" src_port="53"/>
      <filter dst_port="53" src_ip="172.169.10.205" src_port="60498"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
2371[label="153.21.229.35;s;33pkt 33fpkt", shape=diamond, color=yellow];
4605[label="153.21.229.35;s;26pkt 26fpkt", shape=hexagon, color=black];
6354[label="153.21.229.35;33pkt 33fpkt", shape=pentagon, color=darkviolet];
11052[label="153.21.229.35;32pkt 32fpkt", shape=invtriangle, color=brown];
13631[label="153.21.229.35;33pkt 33fpkt", shape=invhouse, color=bisque];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.229.35:6651, *:*}[48.4848%]&lt;BR/&gt;{153.21.229.35:*, 24.186.55.23:80}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6651: (24.8408%)&lt;BR/&gt; 80: (21.9745%)&lt;BR/&gt; 37392: (3.18471%)&lt;BR/&gt; 62386: (1.59236%)&lt;BR/&gt; 61719: (1.59236%)&gt;];
}
2371--4523[label="0.030303;1pkt 1fpkt"];
2371--4605[label="1;26pkt 26fpkt"];
2371--6354[label="1;33pkt 33fpkt"];
2371--11052[label="1;32pkt 32fpkt"];
2371--13631[label="1;33pkt 33fpkt"];
4605--6354[label="1;26pkt 26fpkt"];
4605--11052[label="0.961538;25pkt 25fpkt"];
4605--13631[label="1;26pkt 26fpkt"];
6354--11052[label="1;32pkt 32fpkt"];
6354--13631[label="1;33pkt 33fpkt"];
11052--13631[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.229.35" src_port="6651"/>
      <filter dst_ip="24.186.55.23" dst_port="80" src_ip="153.21.229.35"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
241[label="215.28.81.58;s;1116pkt 1116fpkt", shape=diamond, color=yellow];
608[label="17.76.113.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
1519[label="101.36.61.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
1647[label="6.149.68.217;d;11pkt 11fpkt", shape=diamond, color=yellow];
2053[label="29.196.176.203;d;6pkt 6fpkt", shape=diamond, color=yellow];
2328[label="5.171.228.254;d;4pkt 4fpkt", shape=diamond, color=yellow];
2407[label="87.12.16.18;d;7pkt 7fpkt", shape=diamond, color=yellow];
2718[label="1.210.155.143;d;6pkt 6fpkt", shape=diamond, color=yellow];
3617[label="87.252.252.168;d;9pkt 9fpkt", shape=diamond, color=yellow];
3637[label="100.26.172.46;d;7pkt 7fpkt", shape=diamond, color=yellow];
3660[label="0.146.95.66;d;8pkt 8fpkt", shape=diamond, color=yellow];
4156[label="101.36.61.103;d;1pkt 1fpkt", shape=hexagon, color=black];
4625[label="6.149.68.217;d;11pkt 11fpkt", shape=hexagon, color=black];
5073[label="1.210.155.143;d;6pkt 6fpkt", shape=hexagon, color=black];
5255[label="0.146.95.66;d;8pkt 8fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.28.81.58:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (14.4759%)&lt;BR/&gt; 12335: (4.24293%)&lt;BR/&gt; 6881: (4.03494%)&lt;BR/&gt; 55566: (1.5391%)&lt;BR/&gt; 5881: (1.37271%)&gt;];
}
241--242[label="1;1pkt 1fpkt"];
241--608[label="1;1pkt 1fpkt"];
241--1519[label="1;1pkt 1fpkt"];
241--1647[label="1;11pkt 11fpkt"];
241--2053[label="1;6pkt 6fpkt"];
241--2328[label="1;4pkt 4fpkt"];
241--2407[label="1;7pkt 7fpkt"];
241--2718[label="1;6pkt 6fpkt"];
241--3617[label="1;9pkt 9fpkt"];
241--3637[label="1;7pkt 7fpkt"];
241--3660[label="1;8pkt 8fpkt"];
241--4156[label="1;1pkt 1fpkt"];
241--4625[label="1;11pkt 11fpkt"];
241--5073[label="1;6pkt 6fpkt"];
241--5255[label="1;8pkt 8fpkt"];
241--5470[label="0.000896057;1pkt 1fpkt"];
241--5500[label="0.000896057;1pkt 1fpkt"];
241--5527[label="0.000896057;1pkt 1fpkt"];
241--6830[label="0.461538;6pkt 6fpkt"];
241--11297[label="0.461538;6pkt 6fpkt"];
1519--4156[label="1;1pkt 1fpkt"];
1647--4625[label="1;11pkt 11fpkt"];
1647--6830[label="0.0909091;1pkt 1fpkt"];
1647--11297[label="0.0909091;1pkt 1fpkt"];
2053--6830[label="0.166667;1pkt 1fpkt"];
2053--11297[label="0.166667;1pkt 1fpkt"];
2328--6830[label="0.25;1pkt 1fpkt"];
2328--11297[label="0.25;1pkt 1fpkt"];
2718--5073[label="1;6pkt 6fpkt"];
3660--5255[label="1;8pkt 8fpkt"];
3660--6830[label="0.125;1pkt 1fpkt"];
3660--11297[label="0.125;1pkt 1fpkt"];
4625--6830[label="0.0909091;1pkt 1fpkt"];
4625--11297[label="0.0909091;1pkt 1fpkt"];
5255--6830[label="0.125;1pkt 1fpkt"];
5255--11297[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.28.81.58"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
1302[label="96.156.48.126;d;73pkt 73fpkt", shape=diamond, color=yellow];
1303[label="185.196.136.57;s;81pkt 81fpkt", shape=diamond, color=yellow];
4630[label="96.156.48.126;d;73pkt 73fpkt", shape=hexagon, color=black];
5082[label="185.196.136.57;s;81pkt 81fpkt", shape=hexagon, color=black];
6820[label="185.196.136.57;81pkt 81fpkt", shape=pentagon, color=darkviolet];
11292[label="185.196.136.57;81pkt 81fpkt", shape=invtriangle, color=brown];
13744[label="185.196.136.57;81pkt 81fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.136.57:27000, 96.156.48.126:*}[87.6543%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27000: (45.0998%)&lt;BR/&gt; 53: (1.81488%)&lt;BR/&gt; 0: (1.27042%)&lt;BR/&gt; 113: (0.907441%)&lt;BR/&gt; 25: (0.907441%)&gt;];
}
1302--1303[label="1;73pkt 73fpkt"];
1302--4630[label="1;73pkt 73fpkt"];
1302--5082[label="1;73pkt 73fpkt"];
1302--6820[label="1;73pkt 73fpkt"];
1302--11292[label="1;73pkt 73fpkt"];
1302--13744[label="1;73pkt 73fpkt"];
1303--4630[label="1;73pkt 73fpkt"];
1303--5082[label="1;81pkt 81fpkt"];
1303--5485[label="0.0246914;2pkt 2fpkt"];
1303--5514[label="0.0246914;2pkt 2fpkt"];
1303--5541[label="0.0246914;2pkt 2fpkt"];
1303--6820[label="1;81pkt 81fpkt"];
1303--11292[label="1;81pkt 81fpkt"];
1303--13744[label="1;81pkt 81fpkt"];
4630--5082[label="1;73pkt 73fpkt"];
4630--6820[label="1;73pkt 73fpkt"];
4630--11292[label="1;73pkt 73fpkt"];
4630--13744[label="1;73pkt 73fpkt"];
5082--5485[label="0.0246914;2pkt 2fpkt"];
5082--5514[label="0.0246914;2pkt 2fpkt"];
5082--5541[label="0.0246914;2pkt 2fpkt"];
5082--6820[label="1;81pkt 81fpkt"];
5082--11292[label="1;81pkt 81fpkt"];
5082--13744[label="1;81pkt 81fpkt"];
6820--11292[label="1;81pkt 81fpkt"];
6820--13744[label="1;81pkt 81fpkt"];
11292--13744[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="96.156.48.126" src_ip="185.196.136.57" src_port="27000"/>
    </slice>
    <from sec="1172898059" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
2457[label="214.89.44.169;s;93pkt 93fpkt", shape=diamond, color=yellow];
2547[label="207.17.151.201;d;47pkt 47fpkt", shape=diamond, color=yellow];
4645[label="214.89.44.169;s;52pkt 52fpkt", shape=hexagon, color=black];
4936[label="207.17.151.201;d;47pkt 47fpkt", shape=hexagon, color=black];
9111[label="214.89.44.169;97pkt 97fpkt", shape=pentagon, color=darkviolet];
12600[label="214.89.44.169;96pkt 96fpkt", shape=invtriangle, color=brown];
14322[label="214.89.44.169;97pkt 97fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.89.44.169:*, 207.17.151.201:80}[49.4845%]&lt;BR/&gt;{214.89.44.169:*, 214.97.89.81:80}[31.9588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55269: (0.661626%)&lt;BR/&gt; 55267: (0.661626%)&lt;BR/&gt; 55263: (0.661626%)&lt;BR/&gt; 55261: (0.661626%)&gt;];
}
2457--2547[label="1;47pkt 47fpkt"];
2457--4645[label="1;52pkt 52fpkt"];
2457--4936[label="1;47pkt 47fpkt"];
2457--9111[label="1;93pkt 93fpkt"];
2457--12600[label="0.989247;92pkt 92fpkt"];
2457--14322[label="1;93pkt 93fpkt"];
2547--4645[label="0.978723;46pkt 46fpkt"];
2547--4936[label="1;47pkt 47fpkt"];
2547--9111[label="1;47pkt 47fpkt"];
2547--12600[label="0.978723;46pkt 46fpkt"];
2547--14322[label="1;47pkt 47fpkt"];
4645--4936[label="0.978723;46pkt 46fpkt"];
4645--9111[label="1;52pkt 52fpkt"];
4645--12600[label="0.980769;51pkt 51fpkt"];
4645--14322[label="1;52pkt 52fpkt"];
4936--9111[label="1;47pkt 47fpkt"];
4936--12600[label="0.978723;46pkt 46fpkt"];
4936--14322[label="1;47pkt 47fpkt"];
9111--12600[label="1;96pkt 96fpkt"];
9111--14322[label="1;97pkt 97fpkt"];
12600--14322[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="207.17.151.201" dst_port="80" src_ip="214.89.44.169"/>
      <filter dst_ip="214.97.89.81" dst_port="80" src_ip="214.89.44.169"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
1669[label="170.123.70.4;s;21pkt 21fpkt", shape=diamond, color=yellow];
1760[label="24.85.38.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
3845[label="24.85.38.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
4648[label="24.85.38.86;d;1pkt 1fpkt", shape=hexagon, color=black];
5675[label="170.123.70.4;81pkt 81fpkt", shape=pentagon, color=darkviolet];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.70.4:*, *:80}[97.5309%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0476%)&lt;BR/&gt; 49707: (1.42857%)&lt;BR/&gt; 49568: (1.42857%)&lt;BR/&gt; 49706: (0.952381%)&lt;BR/&gt; 49705: (0.952381%)&gt;];
}
1669--3611[label="0.047619;1pkt 1fpkt"];
1669--3845[label="1;1pkt 1fpkt"];
1669--4197[label="0.047619;1pkt 1fpkt"];
1669--4478[label="0.0952381;2pkt 2fpkt"];
1669--4742[label="0.0952381;2pkt 2fpkt"];
1669--5675[label="1;21pkt 21fpkt"];
1760--4648[label="1;1pkt 1fpkt"];
1760--5675[label="1;1pkt 1fpkt"];
3845--5675[label="1;1pkt 1fpkt"];
4648--5675[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="170.123.70.4"/>
    </slice>
    <from sec="1172898066" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
1331[label="204.152.195.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
2512[label="112.113.116.183;d;3pkt 3fpkt", shape=diamond, color=yellow];
2514[label="170.123.79.121;s;9pkt 9fpkt", shape=diamond, color=yellow];
4678[label="204.152.195.36;d;1pkt 1fpkt", shape=hexagon, color=black];
8104[label="170.123.79.121;15pkt 15fpkt", shape=pentagon, color=darkviolet];
12010[label="170.123.79.121;15pkt 15fpkt", shape=invtriangle, color=brown];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.79.121:*, 112.113.113.75:80}[26.6667%]&lt;BR/&gt;{170.123.79.121:*, 112.113.116.183:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1591: (5.68182%)&lt;BR/&gt; 1585: (4.54545%)&lt;BR/&gt; 1584: (4.54545%)&lt;BR/&gt; 1583: (4.54545%)&gt;];
}
1331--2514[label="1;1pkt 1fpkt"];
1331--4678[label="1;1pkt 1fpkt"];
1331--8104[label="1;1pkt 1fpkt"];
1331--12010[label="1;1pkt 1fpkt"];
2512--2514[label="1;3pkt 3fpkt"];
2512--8104[label="1;3pkt 3fpkt"];
2512--12010[label="1;3pkt 3fpkt"];
2514--4197[label="0.111111;1pkt 1fpkt"];
2514--4678[label="1;1pkt 1fpkt"];
2514--8104[label="1;9pkt 9fpkt"];
2514--12010[label="1;9pkt 9fpkt"];
4678--8104[label="1;1pkt 1fpkt"];
4678--12010[label="1;1pkt 1fpkt"];
8104--12010[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="112.113.113.75" dst_port="80" src_ip="170.123.79.121"/>
      <filter dst_ip="112.113.116.183" dst_port="80" src_ip="170.123.79.121"/>
    </slice>
    <from sec="1172898243" usec="0"/>
    <to sec="1172898835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.41334,2.74877,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
983[label="172.169.48.47;s;495pkt 495fpkt", shape=diamond, color=yellow];
2223[label="96.170.146.197;d;155pkt 155fpkt", shape=diamond, color=yellow];
2607[label="96.168.51.225;d;173pkt 173fpkt", shape=diamond, color=yellow];
2619[label="193.68.44.141;d;152pkt 152fpkt", shape=diamond, color=yellow];
4524[label="172.169.48.47;s;449pkt 449fpkt", shape=hexagon, color=black];
4713[label="96.170.146.197;d;155pkt 155fpkt", shape=hexagon, color=black];
4753[label="96.168.51.225;d;173pkt 173fpkt", shape=hexagon, color=black];
5198[label="193.68.44.141;d;152pkt 152fpkt", shape=hexagon, color=black];
11182[label="172.169.48.47;532pkt 532fpkt", shape=invtriangle, color=brown];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.48.47:8080, 96.168.51.225:*}[35.3818%]&lt;BR/&gt;{172.169.48.47:8080, 96.170.146.197:*}[33.3333%]&lt;BR/&gt;{172.169.48.47:8080, 193.68.44.141:*}[30.7263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 4982: (0.205255%)&lt;BR/&gt; 4600: (0.205255%)&lt;BR/&gt; 4512: (0.205255%)&lt;BR/&gt; 4340: (0.205255%)&gt;];
}
983--2223[label="1;155pkt 155fpkt"];
983--2607[label="1;173pkt 173fpkt"];
983--2619[label="1;152pkt 152fpkt"];
983--4524[label="1;449pkt 449fpkt"];
983--4713[label="1;155pkt 155fpkt"];
983--4753[label="1;173pkt 173fpkt"];
983--5198[label="1;152pkt 152fpkt"];
983--11182[label="0.989899;490pkt 490fpkt"];
2223--4524[label="1;155pkt 155fpkt"];
2223--4713[label="1;155pkt 155fpkt"];
2223--11182[label="0.980645;152pkt 152fpkt"];
2607--4524[label="0.884393;153pkt 153fpkt"];
2607--4753[label="1;173pkt 173fpkt"];
2607--11182[label="0.99422;172pkt 172fpkt"];
2619--4524[label="0.907895;138pkt 138fpkt"];
2619--5198[label="1;152pkt 152fpkt"];
2619--11182[label="0.993421;151pkt 151fpkt"];
4524--4713[label="1;155pkt 155fpkt"];
4524--4753[label="0.884393;153pkt 153fpkt"];
4524--5198[label="0.907895;138pkt 138fpkt"];
4524--11182[label="0.988864;444pkt 444fpkt"];
4713--11182[label="0.980645;152pkt 152fpkt"];
4753--11182[label="0.99422;172pkt 172fpkt"];
5198--11182[label="0.993421;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_ip="96.168.51.225" src_ip="172.169.48.47" src_port="8080"/>
      <filter dst_ip="96.170.146.197" src_ip="172.169.48.47" src_port="8080"/>
      <filter dst_ip="193.68.44.141" src_ip="172.169.48.47" src_port="8080"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
746[label="215.17.14.41;s;193pkt 193fpkt", shape=diamond, color=yellow];
1714[label="24.85.37.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
2149[label="204.252.222.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
4465[label="204.252.222.221;d;1pkt 1fpkt", shape=hexagon, color=black];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.17.14.41:*, *:80}[99.4819%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7449%)&lt;BR/&gt; 11678: (0.765306%)&lt;BR/&gt; 11744: (0.510204%)&lt;BR/&gt; 11634: (0.510204%)&lt;BR/&gt; 11769: (0.255102%)&gt;];
}
746--1714[label="1;1pkt 1fpkt"];
746--1952[label="0.0103627;2pkt 2fpkt"];
746--2149[label="1;1pkt 1fpkt"];
746--2312[label="0.0184049;3pkt 3fpkt"];
746--3611[label="0.0506329;4pkt 4fpkt"];
746--4465[label="1;1pkt 1fpkt"];
746--4523[label="0.0103627;2pkt 2fpkt"];
746--4742[label="0.0207254;4pkt 4fpkt"];
746--4765[label="0.00840336;1pkt 1fpkt"];
746--5470[label="0.0103627;2pkt 2fpkt"];
746--5500[label="0.0103627;2pkt 2fpkt"];
746--5527[label="0.0103627;2pkt 2fpkt"];
2149--4465[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="215.17.14.41"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
935[label="154.200.166.204;d;598pkt 598fpkt", shape=diamond, color=yellow];
2092[label="206.68.48.200;s;394pkt 394fpkt", shape=diamond, color=yellow];
4445[label="206.68.48.200;s;362pkt 362fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.68.48.200:1433, 154.200.166.204:*}[65.8863%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (43.2792%)&lt;BR/&gt; 0: (5.613%)&lt;BR/&gt; 139: (3.28656%)&lt;BR/&gt; 2967: (0.590842%)&lt;BR/&gt; 2213: (0.184638%)&gt;];
}
935--1895[label="0.0222222;1pkt 1fpkt"];
935--2092[label="1;394pkt 394fpkt"];
935--4445[label="1;362pkt 362fpkt"];
935--4735[label="0.0263158;1pkt 1fpkt"];
2092--4445[label="1;362pkt 362fpkt"];
</description>
    <slice>
      <filter dst_ip="154.200.166.204" src_ip="206.68.48.200" src_port="1433"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
1767[label="4.165.237.72;d;71pkt 71fpkt", shape=diamond, color=yellow];
2123[label="170.123.18.3;s;104pkt 104fpkt", shape=diamond, color=yellow];
4460[label="170.123.18.3;s;104pkt 104fpkt", shape=hexagon, color=black];
5637[label="170.123.18.3;105pkt 105fpkt", shape=pentagon, color=darkviolet];
10662[label="170.123.18.3;105pkt 105fpkt", shape=invtriangle, color=brown];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.18.3:*, 4.165.237.72:80}[66.9811%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1587: (0.511247%)&lt;BR/&gt; 1586: (0.511247%)&lt;BR/&gt; 1585: (0.511247%)&lt;BR/&gt; 1584: (0.511247%)&gt;];
}
1767--2123[label="1;71pkt 71fpkt"];
1767--4460[label="1;71pkt 71fpkt"];
1767--5637[label="1;71pkt 71fpkt"];
1767--10662[label="1;71pkt 71fpkt"];
2123--2312[label="0.0288462;3pkt 3fpkt"];
2123--4460[label="1;104pkt 104fpkt"];
2123--4765[label="0.0288462;3pkt 3fpkt"];
2123--5637[label="0.990385;103pkt 103fpkt"];
2123--10662[label="0.990385;103pkt 103fpkt"];
4460--4765[label="0.0288462;3pkt 3fpkt"];
4460--5637[label="0.990385;103pkt 103fpkt"];
4460--10662[label="0.990385;103pkt 103fpkt"];
5637--10662[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="4.165.237.72" dst_port="80" src_ip="170.123.18.3"/>
    </slice>
    <from sec="1172898229" usec="0"/>
    <to sec="1172898848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
3069[label="207.90.98.43;d;204pkt 204fpkt", shape=diamond, color=yellow];
3070[label="172.179.4.134;s;299pkt 299fpkt", shape=diamond, color=yellow];
3072[label="207.90.110.96;d;226pkt 226fpkt", shape=diamond, color=yellow];
3455[label="172.179.106.8;s;130pkt 130fpkt", shape=diamond, color=yellow];
4944[label="207.90.98.43;d;204pkt 204fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.4.134:*, 207.90.98.43:80}[47.2093%]&lt;BR/&gt;{172.179.106.8:*, 207.90.110.96:80}[30.2326%]&lt;BR/&gt;{172.179.4.134:*, 207.90.110.96:80}[22.3256%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9059%)&lt;BR/&gt; 63985: (0.14111%)&lt;BR/&gt; 63977: (0.14111%)&lt;BR/&gt; 63960: (0.14111%)&lt;BR/&gt; 63905: (0.14111%)&gt;];
}
3069--3070[label="0.995098;203pkt 203fpkt"];
3069--4944[label="1;204pkt 204fpkt"];
3070--3072[label="0.424779;96pkt 96fpkt"];
3070--4944[label="0.995098;203pkt 203fpkt"];
3072--3455[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_ip="207.90.110.96" dst_port="80" src_ip="172.179.4.134"/>
      <filter dst_ip="207.90.98.43" dst_port="80" src_ip="172.179.4.134"/>
      <filter dst_ip="207.90.110.96" dst_port="80" src_ip="172.179.106.8"/>
    </slice>
    <from sec="1172898562" usec="0"/>
    <to sec="1172898769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
212[label="182.246.7.18;s;9pkt 9fpkt", shape=diamond, color=yellow];
863[label="214.97.232.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
4952[label="182.246.7.18;s;1pkt 1fpkt", shape=hexagon, color=black];
5978[label="182.246.7.18;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10838[label="182.246.7.18;8pkt 8fpkt", shape=invtriangle, color=brown];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.7.18:*, 214.97.232.128:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 3932: (7.14286%)&lt;BR/&gt; 3948: (5.35714%)&lt;BR/&gt; 3947: (5.35714%)&lt;BR/&gt; 3946: (5.35714%)&gt;];
}
212--863[label="1;1pkt 1fpkt"];
212--4952[label="1;1pkt 1fpkt"];
212--5978[label="1;9pkt 9fpkt"];
212--10838[label="1;8pkt 8fpkt"];
863--4952[label="1;1pkt 1fpkt"];
863--5978[label="1;1pkt 1fpkt"];
4952--5978[label="1;1pkt 1fpkt"];
5978--10838[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="214.97.232.128" dst_port="554" src_ip="182.246.7.18"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
2875[label="156.139.174.212;s;131pkt 131fpkt", shape=diamond, color=yellow];
4996[label="156.139.174.212;s;123pkt 123fpkt", shape=hexagon, color=black];
9930[label="156.139.174.212;136pkt 136fpkt", shape=pentagon, color=darkviolet];
13051[label="156.139.174.212;136pkt 136fpkt", shape=invtriangle, color=brown];
14532[label="156.139.174.212;136pkt 136fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.174.212:2124, *:53}[89.781%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.8671%)&lt;BR/&gt; 2124: (45.0906%)&lt;BR/&gt; 0: (2.26586%)&lt;BR/&gt; 53809: (0.377644%)&lt;BR/&gt; 33100: (0.377644%)&gt;];
}
2875--2891[label="0.00763359;1pkt 1fpkt"];
2875--3239[label="0.0128205;1pkt 1fpkt"];
2875--3609[label="0.00961538;1pkt 1fpkt"];
2875--4030[label="0.0123457;1pkt 1fpkt"];
2875--4359[label="0.00763359;1pkt 1fpkt"];
2875--4760[label="0.00763359;1pkt 1fpkt"];
2875--4996[label="1;123pkt 123fpkt"];
2875--5186[label="0.0117647;1pkt 1fpkt"];
2875--5451[label="0.00763359;1pkt 1fpkt"];
2875--5485[label="0.19084;25pkt 25fpkt"];
2875--5514[label="0.19084;25pkt 25fpkt"];
2875--5541[label="0.19084;25pkt 25fpkt"];
2875--9930[label="0.992366;130pkt 130fpkt"];
2875--13051[label="0.992366;130pkt 130fpkt"];
2875--14532[label="0.992366;130pkt 130fpkt"];
4996--5186[label="0.0117647;1pkt 1fpkt"];
4996--5451[label="0.00813008;1pkt 1fpkt"];
4996--5485[label="0.203252;25pkt 25fpkt"];
4996--5514[label="0.203252;25pkt 25fpkt"];
4996--5541[label="0.203252;25pkt 25fpkt"];
4996--9930[label="0.99187;122pkt 122fpkt"];
4996--13051[label="0.99187;122pkt 122fpkt"];
4996--14532[label="0.99187;122pkt 122fpkt"];
9930--13051[label="1;136pkt 136fpkt"];
9930--14532[label="1;136pkt 136fpkt"];
13051--14532[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="156.139.174.212" src_port="2124"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
2307[label="153.79.251.187;s;348pkt 348fpkt", shape=diamond, color=yellow];
5005[label="153.79.251.187;s;348pkt 348fpkt", shape=hexagon, color=black];
9460[label="153.79.251.187;436pkt 436fpkt", shape=pentagon, color=darkviolet];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.79.251.187:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2307--2346[label="0.00327869;1pkt 1fpkt"];
2307--2860[label="0.00287356;1pkt 1fpkt"];
2307--3177[label="0.00287356;1pkt 1fpkt"];
2307--4999[label="0.00287356;1pkt 1fpkt"];
2307--5005[label="1;348pkt 348fpkt"];
2307--9460[label="1;348pkt 348fpkt"];
5005--9460[label="1;348pkt 348fpkt"];
</description>
    <slice>
      <filter src_ip="153.79.251.187"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13614,2.8249,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.107.65.39"/>
      <from sec="1172898229" usec="0"/>
      <to sec="1172898698" usec="0"/>
    </slice>
    <from sec="1172898229" usec="0"/>
    <to sec="1172898698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
478[label="153.21.195.213;s;1328pkt 1328fpkt", shape=diamond, color=yellow];
976[label="26.1.196.206;d;780pkt 780fpkt", shape=diamond, color=yellow];
2019[label="172.169.188.6;s;64pkt 64fpkt", shape=diamond, color=yellow];
2710[label="26.29.10.224;d;21pkt 21fpkt", shape=diamond, color=yellow];
3518[label="30.134.145.0;d;8pkt 8fpkt", shape=diamond, color=yellow];
3980[label="153.21.195.213;s;1163pkt 1163fpkt", shape=hexagon, color=black];
4799[label="172.169.188.6;s;53pkt 53fpkt", shape=hexagon, color=black];
4884[label="26.1.196.206;d;780pkt 780fpkt", shape=hexagon, color=black];
5129[label="30.134.145.0;d;6pkt 6fpkt", shape=hexagon, color=black];
5276[label="26.29.10.224;d;21pkt 21fpkt", shape=hexagon, color=black];
5738[label="172.169.188.6;68pkt 68fpkt", shape=pentagon, color=darkviolet];
10714[label="172.169.188.6;68pkt 68fpkt", shape=invtriangle, color=brown];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.195.213:80, 26.1.196.206:*}[55.8023%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9771%)&lt;BR/&gt; 62052: (0.0688073%)&lt;BR/&gt; 60931: (0.0688073%)&lt;BR/&gt; 60280: (0.0688073%)&lt;BR/&gt; 59195: (0.0688073%)&gt;];
}
478--976[label="0.998718;779pkt 779fpkt"];
478--1481[label="0.04;1pkt 1fpkt"];
478--3241[label="0.019802;2pkt 2fpkt"];
478--3518[label="1;8pkt 8fpkt"];
478--3980[label="1;1163pkt 1163fpkt"];
478--4884[label="0.998718;779pkt 779fpkt"];
478--5129[label="1;6pkt 6fpkt"];
478--5179[label="0.04;1pkt 1fpkt"];
976--2019[label="0.015625;1pkt 1fpkt"];
976--3980[label="0.998718;779pkt 779fpkt"];
976--4799[label="0.0188679;1pkt 1fpkt"];
976--4884[label="1;780pkt 780fpkt"];
976--5738[label="0.0147059;1pkt 1fpkt"];
976--10714[label="0.0147059;1pkt 1fpkt"];
2019--2710[label="1;21pkt 21fpkt"];
2019--4799[label="1;53pkt 53fpkt"];
2019--4884[label="0.015625;1pkt 1fpkt"];
2019--5276[label="1;21pkt 21fpkt"];
2019--5738[label="1;64pkt 64fpkt"];
2019--10714[label="1;64pkt 64fpkt"];
2710--4799[label="0.761905;16pkt 16fpkt"];
2710--5276[label="1;21pkt 21fpkt"];
2710--5738[label="1;21pkt 21fpkt"];
2710--10714[label="1;21pkt 21fpkt"];
3518--5129[label="1;6pkt 6fpkt"];
3980--4884[label="0.998718;779pkt 779fpkt"];
4799--4884[label="0.0188679;1pkt 1fpkt"];
4799--5276[label="0.761905;16pkt 16fpkt"];
4799--5738[label="1;53pkt 53fpkt"];
4799--10714[label="1;53pkt 53fpkt"];
4884--5738[label="0.0147059;1pkt 1fpkt"];
4884--10714[label="0.0147059;1pkt 1fpkt"];
5276--5738[label="1;21pkt 21fpkt"];
5276--10714[label="1;21pkt 21fpkt"];
5738--10714[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="26.1.196.206" src_ip="153.21.195.213" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
1831[label="172.169.45.95;d;289pkt 289fpkt", shape=diamond, color=yellow];
5154[label="172.169.45.95;d;289pkt 289fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 172.169.45.95:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1831--5154[label="1;289pkt 289fpkt"];
</description>
    <slice>
      <filter dst_ip="172.169.45.95"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
2584[label="172.179.71.26;s;78pkt 78fpkt", shape=diamond, color=yellow];
5159[label="172.179.71.26;s;78pkt 78fpkt", shape=hexagon, color=black];
6159[label="172.179.71.26;90pkt 90fpkt", shape=pentagon, color=darkviolet];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.71.26:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4117: (1.21951%)&lt;BR/&gt; 2748: (1.21951%)&lt;BR/&gt; 65381: (0.609756%)&lt;BR/&gt; 65353: (0.609756%)&gt;];
}
2584--5159[label="1;78pkt 78fpkt"];
2584--6159[label="1;78pkt 78fpkt"];
5159--6159[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter src_ip="172.179.71.26" src_port="25"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
2264[label="214.125.79.201;d;333pkt 333fpkt", shape=diamond, color=yellow];
5181[label="214.125.79.201;d;333pkt 333fpkt", shape=hexagon, color=black];
5833[label="209.37.106.11;34pkt 34fpkt", shape=pentagon, color=darkviolet];
7901[label="204.250.21.110;92pkt 92fpkt", shape=pentagon, color=darkviolet];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.250.21.110:*, 214.125.79.201:1080}[26.9795%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (49.7475%)&lt;BR/&gt; 4838: (0.315657%)&lt;BR/&gt; 4758: (0.315657%)&lt;BR/&gt; 4619: (0.315657%)&lt;BR/&gt; 3400: (0.315657%)&gt;];
}
2264--5181[label="1;333pkt 333fpkt"];
2264--5833[label="1;34pkt 34fpkt"];
2264--7901[label="0.913043;84pkt 84fpkt"];
5181--5833[label="1;34pkt 34fpkt"];
5181--7901[label="0.913043;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.79.201" dst_port="1080" src_ip="204.250.21.110"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
982[label="172.169.48.47;d;496pkt 496fpkt", shape=diamond, color=yellow];
1443[label="96.170.146.197;s;312pkt 312fpkt", shape=diamond, color=yellow];
1917[label="96.168.51.225;s;334pkt 334fpkt", shape=diamond, color=yellow];
1920[label="172.180.72.196;d;452pkt 452fpkt", shape=diamond, color=yellow];
2309[label="193.68.44.141;s;295pkt 295fpkt", shape=diamond, color=yellow];
4998[label="96.168.51.225;s;290pkt 290fpkt", shape=hexagon, color=black];
5199[label="193.68.44.141;s;295pkt 295fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.169.48.47:8080}[52.3207%]&lt;BR/&gt;{*:*, 172.180.72.196:8080}[47.4684%]&lt;BR/&gt;{96.168.51.225:*, *:8080}[35.2321%]&lt;BR/&gt;{96.170.146.197:*, *:8080}[32.9114%]&lt;BR/&gt;{193.68.44.141:*, *:8080}[31.1181%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (49.9596%)&lt;BR/&gt; 1736: (0.181892%)&lt;BR/&gt; 2487: (0.161681%)&lt;BR/&gt; 4982: (0.121261%)&lt;BR/&gt; 4512: (0.121261%)&gt;];
}
982--1443[label="0.535256;167pkt 167fpkt"];
982--1917[label="0.517964;173pkt 173fpkt"];
982--2309[label="0.515254;152pkt 152fpkt"];
982--4998[label="0.527586;153pkt 153fpkt"];
982--5199[label="0.515254;152pkt 152fpkt"];
1443--1920[label="0.464744;145pkt 145fpkt"];
1917--1920[label="0.482036;161pkt 161fpkt"];
1917--4998[label="1;290pkt 290fpkt"];
1920--2309[label="0.484746;143pkt 143fpkt"];
1920--4998[label="0.472414;137pkt 137fpkt"];
1920--5199[label="0.484746;143pkt 143fpkt"];
2309--5199[label="1;295pkt 295fpkt"];
</description>
    <slice>
      <filter dst_port="8080" src_ip="96.168.51.225"/>
      <filter dst_port="8080" src_ip="96.170.146.197"/>
      <filter dst_port="8080" src_ip="193.68.44.141"/>
      <filter dst_ip="172.169.48.47" dst_port="8080"/>
      <filter dst_ip="172.180.72.196" dst_port="8080"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1638[label="170.123.10.220;s;134pkt 134fpkt", shape=diamond, color=yellow];
1758[label="204.252.223.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
3061[label="204.252.223.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
4248[label="204.252.223.50;d;1pkt 1fpkt", shape=hexagon, color=black];
5325[label="204.252.223.141;d;1pkt 1fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.10.220:*, 210.49.91.81:80}[33.5821%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5507%)&lt;BR/&gt; 443: (1.44928%)&lt;BR/&gt; 41379: (1.08696%)&lt;BR/&gt; 41340: (1.08696%)&lt;BR/&gt; 41432: (0.362319%)&gt;];
}
1638--1758[label="1;1pkt 1fpkt"];
1638--2712[label="0.0625;1pkt 1fpkt"];
1638--3061[label="1;1pkt 1fpkt"];
1638--3611[label="0.0126582;1pkt 1fpkt"];
1638--4183[label="0.0408163;4pkt 4fpkt"];
1638--4248[label="1;1pkt 1fpkt"];
1638--4478[label="0.0224719;2pkt 2fpkt"];
1638--4515[label="0.0338983;2pkt 2fpkt"];
1638--4523[label="0.00746269;1pkt 1fpkt"];
1638--4742[label="0.00746269;1pkt 1fpkt"];
1638--4782[label="0.010989;1pkt 1fpkt"];
1638--5325[label="1;1pkt 1fpkt"];
1638--5470[label="0.0298507;4pkt 4fpkt"];
1638--5500[label="0.0298507;4pkt 4fpkt"];
1638--5527[label="0.0298507;4pkt 4fpkt"];
1758--4248[label="1;1pkt 1fpkt"];
3061--5325[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.49.91.81" dst_port="80" src_ip="170.123.10.220"/>
    </slice>
    <from sec="1172898019" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1733[label="170.123.47.222;s;37pkt 37fpkt", shape=diamond, color=yellow];
1740[label="214.55.12.148;d;34pkt 34fpkt", shape=diamond, color=yellow];
5356[label="170.123.47.222;s;38pkt 38fpkt", shape=hexagon, color=black];
10089[label="170.123.47.222;155pkt 155fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.47.222:*, 214.55.12.148:*}[25.8065%]&lt;BR/&gt;{170.123.47.222:*, 214.55.12.157:80}[20.6452%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.0985%)&lt;BR/&gt; 443: (8.90152%)&lt;BR/&gt; 2756: (0.568182%)&lt;BR/&gt; 2755: (0.568182%)&lt;BR/&gt; 2754: (0.568182%)&gt;];
}
1733--5356[label="1;37pkt 37fpkt"];
1733--10089[label="1;37pkt 37fpkt"];
1740--10089[label="1;34pkt 34fpkt"];
5356--10089[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="214.55.12.148" src_ip="170.123.47.222"/>
      <filter dst_ip="214.55.12.157" dst_port="80" src_ip="170.123.47.222"/>
    </slice>
    <from sec="1172898207" usec="0"/>
    <to sec="1172898892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38892,2.77624,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
3846[label="24.85.38.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
5364[label="24.85.38.163;s;1pkt 1fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.85.38.163:80, 170.123.70.4:49707}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49707: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3846--5364[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.70.4" dst_port="49707" src_ip="24.85.38.163" src_port="80"/>
    </slice>
    <from sec="1172898798" usec="0"/>
    <to sec="1172898827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
5633[label="172.179.246.2;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.246.2:32791, *:53}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.8571%)&lt;BR/&gt; 32791: (35.7143%)&lt;BR/&gt; 80: (7.14286%)&lt;BR/&gt; 65456: (3.57143%)&lt;BR/&gt; 32810: (3.57143%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="172.179.246.2" src_port="32791"/>
    </slice>
    <from sec="1172898156" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.228.29.0"/>
    </slice>
    <from sec="1172898460" usec="0"/>
    <to sec="1172898497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.141.31.0"/>
    </slice>
    <from sec="1172898413" usec="0"/>
    <to sec="1172898442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.255.141.0"/>
    </slice>
    <from sec="1172898394" usec="0"/>
    <to sec="1172898396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.237.198.0"/>
    </slice>
    <from sec="1172898387" usec="0"/>
    <to sec="1172898400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.70.233.0"/>
    </slice>
    <from sec="1172898569" usec="0"/>
    <to sec="1172898574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.109.6.1"/>
    </slice>
    <from sec="1172898085" usec="0"/>
    <to sec="1172898103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.103.64.1"/>
    </slice>
    <from sec="1172898085" usec="0"/>
    <to sec="1172898263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.105.1"/>
    </slice>
    <from sec="1172898106" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.70.204.1"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.236.216.1"/>
    </slice>
    <from sec="1172898780" usec="0"/>
    <to sec="1172898797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.61.68.2"/>
    </slice>
    <from sec="1172898564" usec="0"/>
    <to sec="1172898582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.138.178.2"/>
    </slice>
    <from sec="1172898303" usec="0"/>
    <to sec="1172898357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.38.232.2"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.102.1.3"/>
    </slice>
    <from sec="1172898452" usec="0"/>
    <to sec="1172898481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.106.26.3"/>
    </slice>
    <from sec="1172898385" usec="0"/>
    <to sec="1172898401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.242.69.3"/>
    </slice>
    <from sec="1172898369" usec="0"/>
    <to sec="1172898394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.121.119.3"/>
    </slice>
    <from sec="1172898423" usec="0"/>
    <to sec="1172898438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.169.211.3"/>
    </slice>
    <from sec="1172898491" usec="0"/>
    <to sec="1172898507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.2.240.3"/>
    </slice>
    <from sec="1172898168" usec="0"/>
    <to sec="1172898186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.82.24.4"/>
    </slice>
    <from sec="1172898627" usec="0"/>
    <to sec="1172898684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
2368[label="170.123.42.4;s;114pkt 114fpkt", shape=diamond, color=yellow];
5673[label="170.123.42.4;122pkt 122fpkt", shape=pentagon, color=darkviolet];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.42.4:32859, *:53}[84.5528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.4237%)&lt;BR/&gt; 32859: (43.0085%)&lt;BR/&gt; 65402: (0.423729%)&lt;BR/&gt; 56977: (0.423729%)&lt;BR/&gt; 43129: (0.423729%)&gt;];
}
2368--2572[label="0.00877193;1pkt 1fpkt"];
2368--2618[label="0.00877193;1pkt 1fpkt"];
2368--2891[label="0.00877193;1pkt 1fpkt"];
2368--3183[label="0.00877193;1pkt 1fpkt"];
2368--4030[label="0.0123457;1pkt 1fpkt"];
2368--4101[label="0.0232558;1pkt 1fpkt"];
2368--4359[label="0.00877193;1pkt 1fpkt"];
2368--4731[label="0.0111111;1pkt 1fpkt"];
2368--4760[label="0.00877193;1pkt 1fpkt"];
2368--5185[label="0.0169492;1pkt 1fpkt"];
2368--5389[label="0.0238095;1pkt 1fpkt"];
2368--5451[label="0.00877193;1pkt 1fpkt"];
2368--5485[label="0.0789474;9pkt 9fpkt"];
2368--5514[label="0.0789474;9pkt 9fpkt"];
2368--5541[label="0.0789474;9pkt 9fpkt"];
2368--5673[label="0.991228;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="170.123.42.4" src_port="32859"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.69.49.4"/>
    </slice>
    <from sec="1172898489" usec="0"/>
    <to sec="1172898591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.92.80.4"/>
    </slice>
    <from sec="1172898627" usec="0"/>
    <to sec="1172898710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.17.174.4"/>
    </slice>
    <from sec="1172898361" usec="0"/>
    <to sec="1172898433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.233.4.5"/>
    </slice>
    <from sec="1172898530" usec="0"/>
    <to sec="1172898539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.98.18.5"/>
    </slice>
    <from sec="1172898492" usec="0"/>
    <to sec="1172898662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.102.24.5"/>
    </slice>
    <from sec="1172898578" usec="0"/>
    <to sec="1172898677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.145.150.5"/>
    </slice>
    <from sec="1172898823" usec="0"/>
    <to sec="1172898881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
1241[label="170.123.15.117;d;129pkt 129fpkt", shape=diamond, color=yellow];
4046[label="170.123.15.117;d;129pkt 129fpkt", shape=hexagon, color=black];
5716[label="206.78.192.5;79pkt 79fpkt", shape=pentagon, color=darkviolet];
6342[label="207.90.114.35;39pkt 39fpkt", shape=pentagon, color=darkviolet];
10702[label="206.78.192.5;79pkt 79fpkt", shape=invtriangle, color=brown];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.78.192.5:80, 170.123.15.117:*}[60.3053%]&lt;BR/&gt;{207.90.114.35:80, 170.123.15.117:*}[28.2443%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3407%)&lt;BR/&gt; 8579: (0.43956%)&lt;BR/&gt; 1902: (0.43956%)&lt;BR/&gt; 1901: (0.43956%)&lt;BR/&gt; 1900: (0.43956%)&gt;];
}
1241--4046[label="1;129pkt 129fpkt"];
1241--5716[label="1;79pkt 79fpkt"];
1241--6342[label="0.948718;37pkt 37fpkt"];
1241--10702[label="1;79pkt 79fpkt"];
4046--5716[label="1;79pkt 79fpkt"];
4046--6342[label="0.948718;37pkt 37fpkt"];
4046--10702[label="1;79pkt 79fpkt"];
5716--10702[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.15.117" src_ip="206.78.192.5" src_port="80"/>
      <filter dst_ip="170.123.15.117" src_ip="207.90.114.35" src_port="80"/>
    </slice>
    <from sec="1172898014" usec="0"/>
    <to sec="1172898807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.28.213.5"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.81.227.5"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.255.1.7"/>
    </slice>
    <from sec="1172898499" usec="0"/>
    <to sec="1172898521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.56.116.7"/>
    </slice>
    <from sec="1172898685" usec="0"/>
    <to sec="1172898715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.179.118.7"/>
    </slice>
    <from sec="1172898153" usec="0"/>
    <to sec="1172898283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.11.160.7"/>
    </slice>
    <from sec="1172898576" usec="0"/>
    <to sec="1172898600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.0.81.8"/>
    </slice>
    <from sec="1172898352" usec="0"/>
    <to sec="1172898377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.196.105.8"/>
    </slice>
    <from sec="1172898310" usec="0"/>
    <to sec="1172898378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.161.117.8"/>
    </slice>
    <from sec="1172898546" usec="0"/>
    <to sec="1172898561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.48.141.8"/>
    </slice>
    <from sec="1172898816" usec="0"/>
    <to sec="1172898836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.197.142.8"/>
    </slice>
    <from sec="1172898706" usec="0"/>
    <to sec="1172898735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.150.8"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.43.162.8"/>
    </slice>
    <from sec="1172898708" usec="0"/>
    <to sec="1172898734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.33.9"/>
    </slice>
    <from sec="1172898605" usec="0"/>
    <to sec="1172898771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.156.70.9"/>
    </slice>
    <from sec="1172898636" usec="0"/>
    <to sec="1172898664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.129.230.9"/>
    </slice>
    <from sec="1172898236" usec="0"/>
    <to sec="1172898254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.44.254.9"/>
    </slice>
    <from sec="1172898195" usec="0"/>
    <to sec="1172898225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.89.8.10"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.239.14.10"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.142.51.10"/>
    </slice>
    <from sec="1172898082" usec="0"/>
    <to sec="1172898089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.1.144.10"/>
    </slice>
    <from sec="1172898450" usec="0"/>
    <to sec="1172898454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.155.10"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.118.175.10"/>
    </slice>
    <from sec="1172898279" usec="0"/>
    <to sec="1172898292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.1.249.10"/>
    </slice>
    <from sec="1172898702" usec="0"/>
    <to sec="1172898733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.46.0.11"/>
    </slice>
    <from sec="1172898609" usec="0"/>
    <to sec="1172898630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.118.34.11"/>
    </slice>
    <from sec="1172898279" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.44.37.11"/>
    </slice>
    <from sec="1172898755" usec="0"/>
    <to sec="1172898785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.240.49.11"/>
    </slice>
    <from sec="1172898056" usec="0"/>
    <to sec="1172898067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.218.51.11"/>
    </slice>
    <from sec="1172898694" usec="0"/>
    <to sec="1172898709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.123.66.11"/>
    </slice>
    <from sec="1172898573" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.203.82.11"/>
    </slice>
    <from sec="1172898036" usec="0"/>
    <to sec="1172898047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.217.88.11"/>
    </slice>
    <from sec="1172898366" usec="0"/>
    <to sec="1172898699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.91.135.11"/>
    </slice>
    <from sec="1172898358" usec="0"/>
    <to sec="1172898378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.57.147.11"/>
    </slice>
    <from sec="1172898544" usec="0"/>
    <to sec="1172898591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.194.156.11"/>
    </slice>
    <from sec="1172898101" usec="0"/>
    <to sec="1172898301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.187.169.11"/>
    </slice>
    <from sec="1172898481" usec="0"/>
    <to sec="1172898641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.150.2.12"/>
    </slice>
    <from sec="1172898851" usec="0"/>
    <to sec="1172898864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.55.17.12"/>
    </slice>
    <from sec="1172898699" usec="0"/>
    <to sec="1172898723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.96.25.12"/>
    </slice>
    <from sec="1172898665" usec="0"/>
    <to sec="1172898696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.68.86.12"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.94.139.12"/>
    </slice>
    <from sec="1172898716" usec="0"/>
    <to sec="1172898731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.1.161.12"/>
    </slice>
    <from sec="1172898348" usec="0"/>
    <to sec="1172898358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.200.196.12"/>
    </slice>
    <from sec="1172898021" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.33.13"/>
    </slice>
    <from sec="1172898194" usec="0"/>
    <to sec="1172898205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.70.44.13"/>
    </slice>
    <from sec="1172898163" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.77.66.13"/>
    </slice>
    <from sec="1172898469" usec="0"/>
    <to sec="1172898518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.165.68.13"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.207.16.14"/>
    </slice>
    <from sec="1172898856" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.58.39.14"/>
    </slice>
    <from sec="1172898618" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.201.43.14"/>
    </slice>
    <from sec="1172898362" usec="0"/>
    <to sec="1172898385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.182.240.14"/>
    </slice>
    <from sec="1172898514" usec="0"/>
    <to sec="1172898519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.163.41.15"/>
    </slice>
    <from sec="1172898217" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.22.191.15"/>
    </slice>
    <from sec="1172898288" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.150.221.15"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.20.57.16"/>
    </slice>
    <from sec="1172898239" usec="0"/>
    <to sec="1172898251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.22.104.16"/>
    </slice>
    <from sec="1172898199" usec="0"/>
    <to sec="1172898212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.103.108.16"/>
    </slice>
    <from sec="1172898147" usec="0"/>
    <to sec="1172898190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.23.137.16"/>
    </slice>
    <from sec="1172898778" usec="0"/>
    <to sec="1172898802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.246.163.16"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.215.1.17"/>
    </slice>
    <from sec="1172898229" usec="0"/>
    <to sec="1172898348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.130.105.17"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.97.109.17"/>
    </slice>
    <from sec="1172898092" usec="0"/>
    <to sec="1172898880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.128.142.17"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.242.223.17"/>
    </slice>
    <from sec="1172898484" usec="0"/>
    <to sec="1172898518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.80.224.17"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.232.17"/>
    </slice>
    <from sec="1172898044" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.149.141.18"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.167.211.18"/>
    </slice>
    <from sec="1172898274" usec="0"/>
    <to sec="1172898342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.193.233.18"/>
    </slice>
    <from sec="1172898708" usec="0"/>
    <to sec="1172898832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.194.42.19"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.232.75.19"/>
    </slice>
    <from sec="1172898011" usec="0"/>
    <to sec="1172898853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.238.89.19"/>
    </slice>
    <from sec="1172898494" usec="0"/>
    <to sec="1172898558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.149.141.19"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.22.161.19"/>
    </slice>
    <from sec="1172898292" usec="0"/>
    <to sec="1172898310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.41.204.19"/>
    </slice>
    <from sec="1172898014" usec="0"/>
    <to sec="1172898883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.92.245.19"/>
    </slice>
    <from sec="1172898368" usec="0"/>
    <to sec="1172898380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.147.48.20"/>
    </slice>
    <from sec="1172898287" usec="0"/>
    <to sec="1172898787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.132.71.20"/>
    </slice>
    <from sec="1172898347" usec="0"/>
    <to sec="1172898372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.61.148.20"/>
    </slice>
    <from sec="1172898624" usec="0"/>
    <to sec="1172898632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.43.162.20"/>
    </slice>
    <from sec="1172898217" usec="0"/>
    <to sec="1172898246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.118.163.20"/>
    </slice>
    <from sec="1172898743" usec="0"/>
    <to sec="1172898771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.167.165.20"/>
    </slice>
    <from sec="1172898471" usec="0"/>
    <to sec="1172898486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.160.175.20"/>
    </slice>
    <from sec="1172898540" usec="0"/>
    <to sec="1172898549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.1.179.20"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.102.208.20"/>
    </slice>
    <from sec="1172898427" usec="0"/>
    <to sec="1172898431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.221.38.21"/>
    </slice>
    <from sec="1172898335" usec="0"/>
    <to sec="1172898346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.8.55.21"/>
    </slice>
    <from sec="1172898817" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.90.78.21"/>
    </slice>
    <from sec="1172898790" usec="0"/>
    <to sec="1172898803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.200.234.21"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.72.71.22"/>
    </slice>
    <from sec="1172898309" usec="0"/>
    <to sec="1172898328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.248.164.22"/>
    </slice>
    <from sec="1172898404" usec="0"/>
    <to sec="1172898430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.98.10.23"/>
    </slice>
    <from sec="1172898819" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.253.19.23"/>
    </slice>
    <from sec="1172898575" usec="0"/>
    <to sec="1172898606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.116.49.23"/>
    </slice>
    <from sec="1172898457" usec="0"/>
    <to sec="1172898462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.124.130.23"/>
    </slice>
    <from sec="1172898445" usec="0"/>
    <to sec="1172898487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.98.162.23"/>
    </slice>
    <from sec="1172898452" usec="0"/>
    <to sec="1172898493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.2.184.23"/>
    </slice>
    <from sec="1172898342" usec="0"/>
    <to sec="1172898357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.149.141.24"/>
    </slice>
    <from sec="1172898826" usec="0"/>
    <to sec="1172898841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
199[label="172.89.154.24;s;425pkt 425fpkt", shape=diamond, color=yellow];
475[label="172.89.154.26;s;659pkt 659fpkt", shape=diamond, color=yellow];
626[label="212.57.4.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
2197[label="196.153.220.93;d;2pkt 2fpkt", shape=diamond, color=yellow];
6126[label="172.89.154.24;685pkt 685fpkt", shape=pentagon, color=darkviolet];
6171[label="172.89.154.26;700pkt 700fpkt", shape=pentagon, color=darkviolet];
10954[label="172.89.154.26;699pkt 699fpkt", shape=invtriangle, color=brown];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.89.154.26:0, *:0}[50.5415%]&lt;BR/&gt;{172.89.154.24:0, *:0}[49.4585%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
199--2197[label="0.5;1pkt 1fpkt"];
199--2860[label="0.00282486;1pkt 1fpkt"];
199--3177[label="0.00280899;1pkt 1fpkt"];
199--6126[label="1;425pkt 425fpkt"];
475--626[label="1;1pkt 1fpkt"];
475--2197[label="0.5;1pkt 1fpkt"];
475--2296[label="0.00212314;1pkt 1fpkt"];
475--2860[label="0.00282486;1pkt 1fpkt"];
475--4999[label="0.00212314;1pkt 1fpkt"];
475--6171[label="1;659pkt 659fpkt"];
475--10954[label="0.998483;658pkt 658fpkt"];
626--6171[label="1;1pkt 1fpkt"];
626--10954[label="1;1pkt 1fpkt"];
2197--6126[label="0.5;1pkt 1fpkt"];
2197--6171[label="0.5;1pkt 1fpkt"];
2197--10954[label="0.5;1pkt 1fpkt"];
6171--10954[label="1;699pkt 699fpkt"];
</description>
    <slice>
      <filter src_ip="172.89.154.26"/>
      <filter src_ip="172.89.154.24"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.137.162.24"/>
    </slice>
    <from sec="1172898531" usec="0"/>
    <to sec="1172898541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.151.205.24"/>
    </slice>
    <from sec="1172898786" usec="0"/>
    <to sec="1172898801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.36.25"/>
    </slice>
    <from sec="1172898883" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.238.117.25"/>
    </slice>
    <from sec="1172898772" usec="0"/>
    <to sec="1172898786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.167.147.25"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.147.48.27"/>
    </slice>
    <from sec="1172898139" usec="0"/>
    <to sec="1172898831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.169.60.27"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.61.75.27"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.200.79.27"/>
    </slice>
    <from sec="1172898511" usec="0"/>
    <to sec="1172898538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.104.114.28"/>
    </slice>
    <from sec="1172898162" usec="0"/>
    <to sec="1172898181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.166.232.28"/>
    </slice>
    <from sec="1172898299" usec="0"/>
    <to sec="1172898313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.44.249.28"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.169.203.29"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.246.183.30"/>
    </slice>
    <from sec="1172898017" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.229.66.31"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.237.192.31"/>
    </slice>
    <from sec="1172898033" usec="0"/>
    <to sec="1172898837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.252.47.32"/>
    </slice>
    <from sec="1172898610" usec="0"/>
    <to sec="1172898624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.104.32"/>
    </slice>
    <from sec="1172898031" usec="0"/>
    <to sec="1172898872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.130.108.32"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
1619[label="171.41.1.33;s;104pkt 104fpkt", shape=diamond, color=yellow];
6283[label="171.41.1.33;108pkt 108fpkt", shape=pentagon, color=darkviolet];
11011[label="171.41.1.33;107pkt 107fpkt", shape=invtriangle, color=brown];
13613[label="171.41.1.33;107pkt 107fpkt", shape=invhouse, color=bisque];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.41.1.33:25, *:*}[92.5926%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.2441%)&lt;BR/&gt; 995: (1.87793%)&lt;BR/&gt; 110: (1.87793%)&lt;BR/&gt; 4491: (0.938967%)&lt;BR/&gt; 4482: (0.938967%)&gt;];
}
1619--6283[label="1;104pkt 104fpkt"];
1619--11011[label="1;104pkt 104fpkt"];
1619--13613[label="1;104pkt 104fpkt"];
6283--11011[label="1;107pkt 107fpkt"];
6283--13613[label="1;107pkt 107fpkt"];
11011--13613[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="171.41.1.33" src_port="25"/>
    </slice>
    <from sec="1172898010" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.104.4.33"/>
    </slice>
    <from sec="1172898554" usec="0"/>
    <to sec="1172898574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.194.29.33"/>
    </slice>
    <from sec="1172898131" usec="0"/>
    <to sec="1172898235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.128.67.33"/>
    </slice>
    <from sec="1172898536" usec="0"/>
    <to sec="1172898579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.130.108.33"/>
    </slice>
    <from sec="1172898177" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.101.128.33"/>
    </slice>
    <from sec="1172898686" usec="0"/>
    <to sec="1172898712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.33.130.33"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
3856[label="0.166.194.33;s;2pkt 2fpkt", shape=diamond, color=yellow];
6304[label="0.166.194.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11027[label="0.166.194.33;1pkt 1fpkt", shape=invtriangle, color=brown];
13621[label="0.166.194.33;1pkt 1fpkt", shape=invhouse, color=bisque];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.166.194.33:4325, 214.125.79.114:8080}[50%]&lt;BR/&gt;{0.166.194.33:4329, 214.125.79.114:8080}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 4329: (40%)&lt;BR/&gt; 4325: (10%)&gt;];
}
3856--6304[label="1;1pkt 1fpkt"];
3856--11027[label="1;1pkt 1fpkt"];
3856--13621[label="1;1pkt 1fpkt"];
6304--11027[label="1;1pkt 1fpkt"];
6304--13621[label="1;1pkt 1fpkt"];
11027--13621[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.79.114" dst_port="8080" src_ip="0.166.194.33" src_port="4329"/>
      <filter dst_ip="214.125.79.114" dst_port="8080" src_ip="0.166.194.33" src_port="4325"/>
    </slice>
    <from sec="1172898805" usec="0"/>
    <to sec="1172898848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.208.161.35"/>
    </slice>
    <from sec="1172898741" usec="0"/>
    <to sec="1172898812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.238.35"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.203.33.36"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.246.34.36"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.36.36"/>
    </slice>
    <from sec="1172898073" usec="0"/>
    <to sec="1172898843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.153.84.36"/>
    </slice>
    <from sec="1172898556" usec="0"/>
    <to sec="1172898624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.133.97.36"/>
    </slice>
    <from sec="1172898333" usec="0"/>
    <to sec="1172898455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.120.162.36"/>
    </slice>
    <from sec="1172898649" usec="0"/>
    <to sec="1172898663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.76.12.37"/>
    </slice>
    <from sec="1172898567" usec="0"/>
    <to sec="1172898599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.46.37"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.209.204.37"/>
    </slice>
    <from sec="1172898658" usec="0"/>
    <to sec="1172898772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.2.57.38"/>
    </slice>
    <from sec="1172898463" usec="0"/>
    <to sec="1172898487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.251.95.38"/>
    </slice>
    <from sec="1172898085" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
3394[label="153.21.164.38;s;29pkt 29fpkt", shape=diamond, color=yellow];
6417[label="153.21.164.38;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.164.38:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62277: (1.44928%)&lt;BR/&gt; 62162: (1.44928%)&lt;BR/&gt; 62088: (1.44928%)&lt;BR/&gt; 60136: (1.44928%)&gt;];
}
3394--6417[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.164.38" src_port="80"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.180.38"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.203.106.39"/>
    </slice>
    <from sec="1172898159" usec="0"/>
    <to sec="1172898271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.78.203.39"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.23.25.40"/>
    </slice>
    <from sec="1172898541" usec="0"/>
    <to sec="1172898550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.148.133.40"/>
    </slice>
    <from sec="1172898161" usec="0"/>
    <to sec="1172898281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.194.145.40"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.165.7.41"/>
    </slice>
    <from sec="1172898509" usec="0"/>
    <to sec="1172898595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
3796[label="24.85.37.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
6471[label="215.17.14.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11110[label="215.17.14.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.17.14.41:11844, 24.85.37.88:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11844: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3796--6471[label="1;1pkt 1fpkt"];
3796--11110[label="1;1pkt 1fpkt"];
6471--11110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="24.85.37.88" dst_port="80" src_ip="215.17.14.41" src_port="11844"/>
    </slice>
    <from sec="1172898735" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.125.75.41"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.246.129.41"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.15.155.41"/>
    </slice>
    <from sec="1172898107" usec="0"/>
    <to sec="1172898122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.2.238.41"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
6504[label="215.28.84.42;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.28.84.42:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="215.28.84.42"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
2708[label="172.89.155.42;s;54pkt 54fpkt", shape=diamond, color=yellow];
6509[label="172.89.155.42;66pkt 66fpkt", shape=pentagon, color=darkviolet];
11130[label="172.89.155.42;65pkt 65fpkt", shape=invtriangle, color=brown];
13669[label="172.89.155.42;66pkt 66fpkt", shape=invhouse, color=bisque];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.89.155.42:80, *:*}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4064%)&lt;BR/&gt; 20031: (1.59363%)&lt;BR/&gt; 0: (1.59363%)&lt;BR/&gt; 59744: (0.796813%)&lt;BR/&gt; 59701: (0.796813%)&gt;];
}
2708--6509[label="1;54pkt 54fpkt"];
2708--11130[label="0.981481;53pkt 53fpkt"];
2708--13669[label="1;54pkt 54fpkt"];
6509--11130[label="1;65pkt 65fpkt"];
6509--13669[label="1;66pkt 66fpkt"];
11130--13669[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter src_ip="172.89.155.42" src_port="80"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.254.198.42"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.210.213.42"/>
    </slice>
    <from sec="1172898618" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.35.43"/>
    </slice>
    <from sec="1172898125" usec="0"/>
    <to sec="1172898832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.167.75.43"/>
    </slice>
    <from sec="1172898440" usec="0"/>
    <to sec="1172898469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.37.221.43"/>
    </slice>
    <from sec="1172898477" usec="0"/>
    <to sec="1172898496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.64.73.44"/>
    </slice>
    <from sec="1172898197" usec="0"/>
    <to sec="1172898220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.169.148.44"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.194.167.44"/>
    </slice>
    <from sec="1172898588" usec="0"/>
    <to sec="1172898691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.23.60.45"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.106.60.45"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.128.116.45"/>
    </slice>
    <from sec="1172898207" usec="0"/>
    <to sec="1172898221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.183.212.45"/>
    </slice>
    <from sec="1172898701" usec="0"/>
    <to sec="1172898719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.26.61.46"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.216.108.46"/>
    </slice>
    <from sec="1172898704" usec="0"/>
    <to sec="1172898774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.42.138.46"/>
    </slice>
    <from sec="1172898839" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.53.168.46"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.12.82.47"/>
    </slice>
    <from sec="1172898330" usec="0"/>
    <to sec="1172898366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.98.185.47"/>
    </slice>
    <from sec="1172898795" usec="0"/>
    <to sec="1172898802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.8.108.48"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.118.187.48"/>
    </slice>
    <from sec="1172898334" usec="0"/>
    <to sec="1172898349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.196.195.48"/>
    </slice>
    <from sec="1172898831" usec="0"/>
    <to sec="1172898859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.198.21.49"/>
    </slice>
    <from sec="1172898852" usec="0"/>
    <to sec="1172898872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.7.52.49"/>
    </slice>
    <from sec="1172898085" usec="0"/>
    <to sec="1172898335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.180.138.49"/>
    </slice>
    <from sec="1172898108" usec="0"/>
    <to sec="1172898829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.146.179.49"/>
    </slice>
    <from sec="1172898845" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.103.13.50"/>
    </slice>
    <from sec="1172898469" usec="0"/>
    <to sec="1172898586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.47.50"/>
    </slice>
    <from sec="1172898809" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.121.132.50"/>
    </slice>
    <from sec="1172898599" usec="0"/>
    <to sec="1172898812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.13.239.50"/>
    </slice>
    <from sec="1172898594" usec="0"/>
    <to sec="1172898653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.177.59.51"/>
    </slice>
    <from sec="1172898481" usec="0"/>
    <to sec="1172898538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.115.121.51"/>
    </slice>
    <from sec="1172898317" usec="0"/>
    <to sec="1172898768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
3558[label="154.200.178.51;s;167pkt 167fpkt", shape=diamond, color=yellow];
6690[label="154.200.178.51;178pkt 178fpkt", shape=pentagon, color=darkviolet];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.200.178.51:53, *:*}[46.3687%]&lt;BR/&gt;{154.200.178.51:54660, *:53}[27.3743%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.3913%)&lt;BR/&gt; 54660: (13.7681%)&lt;BR/&gt; 25: (7.53623%)&lt;BR/&gt; 113: (5.7971%)&lt;BR/&gt; 9253: (0.724638%)&gt;];
}
3558--4030[label="0.0123457;1pkt 1fpkt"];
3558--4101[label="0.0232558;1pkt 1fpkt"];
3558--4359[label="0.00704225;1pkt 1fpkt"];
3558--4760[label="0.00636943;1pkt 1fpkt"];
3558--5185[label="0.0169492;1pkt 1fpkt"];
3558--5389[label="0.0238095;1pkt 1fpkt"];
3558--5451[label="0.00704225;1pkt 1fpkt"];
3558--5469[label="0.00598802;1pkt 1fpkt"];
3558--5485[label="0.0239521;4pkt 4fpkt"];
3558--5499[label="0.00598802;1pkt 1fpkt"];
3558--5514[label="0.0239521;4pkt 4fpkt"];
3558--5526[label="0.00598802;1pkt 1fpkt"];
3558--5541[label="0.0239521;4pkt 4fpkt"];
3558--6690[label="0.994012;166pkt 166fpkt"];
</description>
    <slice>
      <filter src_ip="154.200.178.51" src_port="53"/>
      <filter dst_port="53" src_ip="154.200.178.51" src_port="54660"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.51.214.51"/>
    </slice>
    <from sec="1172898855" usec="0"/>
    <to sec="1172898884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.234.51"/>
    </slice>
    <from sec="1172898388" usec="0"/>
    <to sec="1172898419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.133.251.51"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.25.14.52"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.167.52.52"/>
    </slice>
    <from sec="1172898111" usec="0"/>
    <to sec="1172898335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.196.92.52"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.105.52"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.89.136.52"/>
    </slice>
    <from sec="1172898425" usec="0"/>
    <to sec="1172898506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.97.80.53"/>
    </slice>
    <from sec="1172898095" usec="0"/>
    <to sec="1172898100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.217.107.53"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.197.192.53"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.101.130.54"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.127.60.55"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
2130[label="214.125.68.55;s;1582pkt 1582fpkt", shape=diamond, color=yellow];
6771[label="214.125.68.55;1583pkt 1583fpkt", shape=pentagon, color=darkviolet];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.68.55:54348, *:*}[95.957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54348: (47.9937%)&lt;BR/&gt; 6881: (5.0237%)&lt;BR/&gt; 54045: (1.04265%)&lt;BR/&gt; 49152: (0.853081%)&lt;BR/&gt; 50000: (0.442338%)&gt;];
}
2130--2199[label="0.00714286;1pkt 1fpkt"];
2130--6771[label="1;1582pkt 1582fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.68.55" src_port="54348"/>
    </slice>
    <from sec="1172898060" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.90.55"/>
    </slice>
    <from sec="1172898150" usec="0"/>
    <to sec="1172898338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.98.0.56"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.34.93.56"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.82.97.56"/>
    </slice>
    <from sec="1172898109" usec="0"/>
    <to sec="1172898132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.239.14.57"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.147.67.57"/>
    </slice>
    <from sec="1172898205" usec="0"/>
    <to sec="1172898233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.67.182.57"/>
    </slice>
    <from sec="1172898875" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.42.198.57"/>
    </slice>
    <from sec="1172898849" usec="0"/>
    <to sec="1172898876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.144.171.58"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.137.181.58"/>
    </slice>
    <from sec="1172898396" usec="0"/>
    <to sec="1172898411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.72.205.58"/>
    </slice>
    <from sec="1172898330" usec="0"/>
    <to sec="1172898341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.16.214.58"/>
    </slice>
    <from sec="1172898832" usec="0"/>
    <to sec="1172898850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.93.157.59"/>
    </slice>
    <from sec="1172898803" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.196.186.59"/>
    </slice>
    <from sec="1172898594" usec="0"/>
    <to sec="1172898608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.11.108.60"/>
    </slice>
    <from sec="1172898457" usec="0"/>
    <to sec="1172898481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.214.16.61"/>
    </slice>
    <from sec="1172898411" usec="0"/>
    <to sec="1172898433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.140.32.61"/>
    </slice>
    <from sec="1172898132" usec="0"/>
    <to sec="1172898501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.65.155.61"/>
    </slice>
    <from sec="1172898397" usec="0"/>
    <to sec="1172898426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.24.174.61"/>
    </slice>
    <from sec="1172898241" usec="0"/>
    <to sec="1172898385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.196.25.62"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.164.88.62"/>
    </slice>
    <from sec="1172898368" usec="0"/>
    <to sec="1172898393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.65.155.62"/>
    </slice>
    <from sec="1172898843" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.85.251.62"/>
    </slice>
    <from sec="1172898163" usec="0"/>
    <to sec="1172898352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.151.1.63"/>
    </slice>
    <from sec="1172898411" usec="0"/>
    <to sec="1172898458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.6.55.63"/>
    </slice>
    <from sec="1172898474" usec="0"/>
    <to sec="1172898557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
1014[label="217.144.171.63;s;118pkt 118fpkt", shape=diamond, color=yellow];
6925[label="217.144.171.63;120pkt 120fpkt", shape=pentagon, color=darkviolet];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.144.171.63:6667, *:*}[35.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (17.8571%)&lt;BR/&gt; 6665: (4.20168%)&lt;BR/&gt; 113: (3.15126%)&lt;BR/&gt; 6660: (2.94118%)&lt;BR/&gt; 6668: (2.52101%)&gt;];
}
1014--6925[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter src_ip="217.144.171.63" src_port="6667"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.53.220.63"/>
    </slice>
    <from sec="1172898152" usec="0"/>
    <to sec="1172898212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.96.75.64"/>
    </slice>
    <from sec="1172898135" usec="0"/>
    <to sec="1172898150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.81.114.64"/>
    </slice>
    <from sec="1172898760" usec="0"/>
    <to sec="1172898782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.243.128.64"/>
    </slice>
    <from sec="1172898221" usec="0"/>
    <to sec="1172898823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.9.126.65"/>
    </slice>
    <from sec="1172898029" usec="0"/>
    <to sec="1172898056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.138.148.65"/>
    </slice>
    <from sec="1172898815" usec="0"/>
    <to sec="1172898856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.0.178.65"/>
    </slice>
    <from sec="1172898856" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.3.215.65"/>
    </slice>
    <from sec="1172898842" usec="0"/>
    <to sec="1172898873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.191.34.67"/>
    </slice>
    <from sec="1172898410" usec="0"/>
    <to sec="1172898424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.155.198.67"/>
    </slice>
    <from sec="1172898263" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.22.14.68"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.28.68"/>
    </slice>
    <from sec="1172898076" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.55.91.68"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.67.128.68"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.149.147.68"/>
    </slice>
    <from sec="1172898147" usec="0"/>
    <to sec="1172898187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.48.202.68"/>
    </slice>
    <from sec="1172898099" usec="0"/>
    <to sec="1172898120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.235.68"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
3600[label="214.125.67.69;s;102pkt 102fpkt", shape=diamond, color=yellow];
7045[label="214.125.67.69;108pkt 108fpkt", shape=pentagon, color=darkviolet];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.67.69:80, 206.142.92.70:*}[89.8148%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5238%)&lt;BR/&gt; 0: (0.952381%)&lt;BR/&gt; 2961: (0.47619%)&lt;BR/&gt; 2960: (0.47619%)&lt;BR/&gt; 2959: (0.47619%)&gt;];
}
3600--7045[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="206.142.92.70" src_ip="214.125.67.69" src_port="80"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.217.137.69"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.22.151.69"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.52.16.70"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.66.95.70"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.242.168.70"/>
    </slice>
    <from sec="1172898560" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.33.17.72"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.60.121.72"/>
    </slice>
    <from sec="1172898317" usec="0"/>
    <to sec="1172898332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.169.148.72"/>
    </slice>
    <from sec="1172898175" usec="0"/>
    <to sec="1172898749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.84.114.73"/>
    </slice>
    <from sec="1172898600" usec="0"/>
    <to sec="1172898731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.44.142.73"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.134.160.73"/>
    </slice>
    <from sec="1172898140" usec="0"/>
    <to sec="1172898223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.180.73"/>
    </slice>
    <from sec="1172898015" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.23.56.74"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.83.74"/>
    </slice>
    <from sec="1172898034" usec="0"/>
    <to sec="1172898878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.0.177.74"/>
    </slice>
    <from sec="1172898349" usec="0"/>
    <to sec="1172898371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.234.38.75"/>
    </slice>
    <from sec="1172898239" usec="0"/>
    <to sec="1172898248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.125.74.75"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.50.136.75"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.145.16.76"/>
    </slice>
    <from sec="1172898329" usec="0"/>
    <to sec="1172898354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.165.68.76"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.172.226.76"/>
    </slice>
    <from sec="1172898310" usec="0"/>
    <to sec="1172898320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.53.52.77"/>
    </slice>
    <from sec="1172898210" usec="0"/>
    <to sec="1172898395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.240.86.77"/>
    </slice>
    <from sec="1172898537" usec="0"/>
    <to sec="1172898555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.21.138.77"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.163.77"/>
    </slice>
    <from sec="1172898118" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.6.236.77"/>
    </slice>
    <from sec="1172898724" usec="0"/>
    <to sec="1172898737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.144.68.78"/>
    </slice>
    <from sec="1172898330" usec="0"/>
    <to sec="1172898350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.166.200.78"/>
    </slice>
    <from sec="1172898876" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.179.12.79"/>
    </slice>
    <from sec="1172898093" usec="0"/>
    <to sec="1172898229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.91.20.79"/>
    </slice>
    <from sec="1172898499" usec="0"/>
    <to sec="1172898562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.167.20.79"/>
    </slice>
    <from sec="1172898368" usec="0"/>
    <to sec="1172898448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.124.51.79"/>
    </slice>
    <from sec="1172898251" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.25.59.79"/>
    </slice>
    <from sec="1172898021" usec="0"/>
    <to sec="1172898039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.61.39.80"/>
    </slice>
    <from sec="1172898221" usec="0"/>
    <to sec="1172898227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.162.80"/>
    </slice>
    <from sec="1172898030" usec="0"/>
    <to sec="1172898845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.3.208.80"/>
    </slice>
    <from sec="1172898356" usec="0"/>
    <to sec="1172898365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.32.81"/>
    </slice>
    <from sec="1172898088" usec="0"/>
    <to sec="1172898843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.37.81"/>
    </slice>
    <from sec="1172898834" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.116.119.81"/>
    </slice>
    <from sec="1172898057" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.32.129.81"/>
    </slice>
    <from sec="1172898011" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.179.214.81"/>
    </slice>
    <from sec="1172898680" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.189.31.82"/>
    </slice>
    <from sec="1172898045" usec="0"/>
    <to sec="1172898351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.21.81.82"/>
    </slice>
    <from sec="1172898801" usec="0"/>
    <to sec="1172898816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.145.81.82"/>
    </slice>
    <from sec="1172898713" usec="0"/>
    <to sec="1172898726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.0.104.82"/>
    </slice>
    <from sec="1172898700" usec="0"/>
    <to sec="1172898729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.4.75.84"/>
    </slice>
    <from sec="1172898344" usec="0"/>
    <to sec="1172898378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.167.98.84"/>
    </slice>
    <from sec="1172898363" usec="0"/>
    <to sec="1172898371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
2235[label="172.169.161.84;s;28pkt 28fpkt", shape=diamond, color=yellow];
7387[label="172.169.161.84;38pkt 38fpkt", shape=pentagon, color=darkviolet];
11595[label="172.169.161.84;37pkt 37fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.161.84:80, *:*}[92.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1165%)&lt;BR/&gt; 995: (3.8835%)&lt;BR/&gt; 63136: (1.45631%)&lt;BR/&gt; 63023: (1.45631%)&lt;BR/&gt; 63022: (1.45631%)&gt;];
}
2235--7387[label="1;28pkt 28fpkt"];
2235--11595[label="0.964286;27pkt 27fpkt"];
7387--11595[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="172.169.161.84" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.37.85"/>
    </slice>
    <from sec="1172898185" usec="0"/>
    <to sec="1172898214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.190.85"/>
    </slice>
    <from sec="1172898132" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.41.194.85"/>
    </slice>
    <from sec="1172898065" usec="0"/>
    <to sec="1172898151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.169.52.86"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.49.208.86"/>
    </slice>
    <from sec="1172898387" usec="0"/>
    <to sec="1172898449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.21.103.87"/>
    </slice>
    <from sec="1172898340" usec="0"/>
    <to sec="1172898356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.70.168.87"/>
    </slice>
    <from sec="1172898714" usec="0"/>
    <to sec="1172898726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.102.192.87"/>
    </slice>
    <from sec="1172898829" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.203.180.88"/>
    </slice>
    <from sec="1172898182" usec="0"/>
    <to sec="1172898189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.227.88"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.65.9.89"/>
    </slice>
    <from sec="1172898101" usec="0"/>
    <to sec="1172898128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.100.41.89"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.232.100.89"/>
    </slice>
    <from sec="1172898678" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.28.122.89"/>
    </slice>
    <from sec="1172898027" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.236.89"/>
    </slice>
    <from sec="1172898341" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.211.240.89"/>
    </slice>
    <from sec="1172898785" usec="0"/>
    <to sec="1172898822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.231.19.90"/>
    </slice>
    <from sec="1172898393" usec="0"/>
    <to sec="1172898408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.81.34.90"/>
    </slice>
    <from sec="1172898341" usec="0"/>
    <to sec="1172898500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.234.81.90"/>
    </slice>
    <from sec="1172898469" usec="0"/>
    <to sec="1172898521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.66.207.90"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.166.215.90"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.30.230.91"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.178.99.92"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.11.203.92"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.65.161.93"/>
    </slice>
    <from sec="1172898652" usec="0"/>
    <to sec="1172898765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.98.10.94"/>
    </slice>
    <from sec="1172898876" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.197.83.94"/>
    </slice>
    <from sec="1172898551" usec="0"/>
    <to sec="1172898569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.55.172.94"/>
    </slice>
    <from sec="1172898060" usec="0"/>
    <to sec="1172898074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.165.8.95"/>
    </slice>
    <from sec="1172898769" usec="0"/>
    <to sec="1172898824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
1924[label="170.123.83.95;s;143pkt 143fpkt", shape=diamond, color=yellow];
7588[label="170.123.83.95;153pkt 153fpkt", shape=pentagon, color=darkviolet];
11702[label="170.123.83.95;152pkt 152fpkt", shape=invtriangle, color=brown];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.83.95:25, *:*}[99.3464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3488: (0.669643%)&lt;BR/&gt; 2831: (0.669643%)&lt;BR/&gt; 64241: (0.334821%)&lt;BR/&gt; 64097: (0.334821%)&gt;];
}
1924--7588[label="1;143pkt 143fpkt"];
1924--11702[label="0.993007;142pkt 142fpkt"];
7588--11702[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter src_ip="170.123.83.95" src_port="25"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.198.139.95"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.217.153.95"/>
    </slice>
    <from sec="1172898094" usec="0"/>
    <to sec="1172898199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.160.233.95"/>
    </slice>
    <from sec="1172898434" usec="0"/>
    <to sec="1172898820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.6.34.96"/>
    </slice>
    <from sec="1172898327" usec="0"/>
    <to sec="1172898341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.41.45.96"/>
    </slice>
    <from sec="1172898677" usec="0"/>
    <to sec="1172898692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.82.81.96"/>
    </slice>
    <from sec="1172898507" usec="0"/>
    <to sec="1172898548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.180.98.96"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.217.21.98"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.206.23.99"/>
    </slice>
    <from sec="1172898029" usec="0"/>
    <to sec="1172898129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.10.116.99"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.140.134.99"/>
    </slice>
    <from sec="1172898325" usec="0"/>
    <to sec="1172898348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.15.243.99"/>
    </slice>
    <from sec="1172898856" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.96.25.100"/>
    </slice>
    <from sec="1172898403" usec="0"/>
    <to sec="1172898445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.110.39.100"/>
    </slice>
    <from sec="1172898482" usec="0"/>
    <to sec="1172898517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.66.140.100"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.236.198.100"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.236.15.101"/>
    </slice>
    <from sec="1172898567" usec="0"/>
    <to sec="1172898581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.80.87.101"/>
    </slice>
    <from sec="1172898634" usec="0"/>
    <to sec="1172898649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
1232[label="172.179.25.19;s;399pkt 399fpkt", shape=diamond, color=yellow];
1277[label="206.176.194.165;d;2pkt 2fpkt", shape=diamond, color=yellow];
1731[label="214.1.97.74;d;173pkt 173fpkt", shape=diamond, color=yellow];
2065[label="206.176.195.196;d;13pkt 13fpkt", shape=diamond, color=yellow];
3629[label="171.41.40.102;s;50pkt 50fpkt", shape=diamond, color=yellow];
5994[label="172.179.25.19;400pkt 400fpkt", shape=pentagon, color=darkviolet];
7739[label="171.41.40.102;50pkt 50fpkt", shape=pentagon, color=darkviolet];
9836[label="171.41.45.208;42pkt 42fpkt", shape=pentagon, color=darkviolet];
10849[label="172.179.25.19;400pkt 400fpkt", shape=invtriangle, color=brown];
11793[label="171.41.40.102;50pkt 50fpkt", shape=invtriangle, color=brown];
13008[label="171.41.45.208;41pkt 41fpkt", shape=invtriangle, color=brown];
13540[label="172.179.25.19;399pkt 399fpkt", shape=invhouse, color=bisque];
13972[label="171.41.40.102;49pkt 49fpkt", shape=invhouse, color=bisque];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.25.19:*, 214.1.97.74:80}[49.8986%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6132%)&lt;BR/&gt; 5004: (0.290135%)&lt;BR/&gt; 51308: (0.12089%)&lt;BR/&gt; 51307: (0.12089%)&lt;BR/&gt; 51306: (0.12089%)&gt;];
}
1232--1277[label="1;2pkt 2fpkt"];
1232--1731[label="1;173pkt 173fpkt"];
1232--2065[label="0.307692;4pkt 4fpkt"];
1232--5470[label="0.0125313;5pkt 5fpkt"];
1232--5500[label="0.0125313;5pkt 5fpkt"];
1232--5527[label="0.0125313;5pkt 5fpkt"];
1232--5994[label="1;399pkt 399fpkt"];
1232--10849[label="1;399pkt 399fpkt"];
1232--13540[label="0.997494;398pkt 398fpkt"];
1277--5994[label="1;2pkt 2fpkt"];
1277--10849[label="1;2pkt 2fpkt"];
1277--13540[label="1;2pkt 2fpkt"];
1731--5994[label="1;173pkt 173fpkt"];
1731--10849[label="1;173pkt 173fpkt"];
1731--13540[label="1;173pkt 173fpkt"];
2065--3629[label="0.461538;6pkt 6fpkt"];
2065--5470[label="0.230769;3pkt 3fpkt"];
2065--5500[label="0.230769;3pkt 3fpkt"];
2065--5527[label="0.230769;3pkt 3fpkt"];
2065--5994[label="0.307692;4pkt 4fpkt"];
2065--7739[label="0.461538;6pkt 6fpkt"];
2065--9071[label="0.0769231;1pkt 1fpkt"];
2065--9836[label="0.153846;2pkt 2fpkt"];
2065--10849[label="0.307692;4pkt 4fpkt"];
2065--11793[label="0.461538;6pkt 6fpkt"];
2065--13008[label="0.153846;2pkt 2fpkt"];
2065--13540[label="0.307692;4pkt 4fpkt"];
2065--13972[label="0.461538;6pkt 6fpkt"];
3629--5470[label="0.04;2pkt 2fpkt"];
3629--5500[label="0.04;2pkt 2fpkt"];
3629--5527[label="0.04;2pkt 2fpkt"];
3629--7739[label="1;50pkt 50fpkt"];
3629--11793[label="1;50pkt 50fpkt"];
3629--13972[label="1;49pkt 49fpkt"];
5994--10849[label="1;400pkt 400fpkt"];
5994--13540[label="1;399pkt 399fpkt"];
7739--11793[label="1;50pkt 50fpkt"];
7739--13972[label="1;49pkt 49fpkt"];
9836--13008[label="1;41pkt 41fpkt"];
10849--13540[label="1;399pkt 399fpkt"];
11793--13972[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="214.1.97.74" dst_port="80" src_ip="172.179.25.19"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.218.81.102"/>
    </slice>
    <from sec="1172898550" usec="0"/>
    <to sec="1172898563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.200.108.102"/>
    </slice>
    <from sec="1172898366" usec="0"/>
    <to sec="1172898386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.21.136.102"/>
    </slice>
    <from sec="1172898434" usec="0"/>
    <to sec="1172898670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.180.9.103"/>
    </slice>
    <from sec="1172898149" usec="0"/>
    <to sec="1172898189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.43.103"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.36.61.103"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.7.9.104"/>
    </slice>
    <from sec="1172898647" usec="0"/>
    <to sec="1172898655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.128.49.104"/>
    </slice>
    <from sec="1172898417" usec="0"/>
    <to sec="1172898433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.37.143.105"/>
    </slice>
    <from sec="1172898084" usec="0"/>
    <to sec="1172898095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.9.216.105"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.148.1.106"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.8.104.106"/>
    </slice>
    <from sec="1172898698" usec="0"/>
    <to sec="1172898833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.179.144.106"/>
    </slice>
    <from sec="1172898118" usec="0"/>
    <to sec="1172898814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.39.5.107"/>
    </slice>
    <from sec="1172898387" usec="0"/>
    <to sec="1172898405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.104.8.107"/>
    </slice>
    <from sec="1172898564" usec="0"/>
    <to sec="1172898592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.138.38.107"/>
    </slice>
    <from sec="1172898366" usec="0"/>
    <to sec="1172898379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.203.41.107"/>
    </slice>
    <from sec="1172898462" usec="0"/>
    <to sec="1172898499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.75.138.107"/>
    </slice>
    <from sec="1172898330" usec="0"/>
    <to sec="1172898354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.140.138.107"/>
    </slice>
    <from sec="1172898300" usec="0"/>
    <to sec="1172898317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.144.107"/>
    </slice>
    <from sec="1172898060" usec="0"/>
    <to sec="1172898861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.159.192.107"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.246.208.107"/>
    </slice>
    <from sec="1172898600" usec="0"/>
    <to sec="1172898690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.241.53.108"/>
    </slice>
    <from sec="1172898566" usec="0"/>
    <to sec="1172898590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.14.61.108"/>
    </slice>
    <from sec="1172898619" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.95.88.108"/>
    </slice>
    <from sec="1172898710" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.192.162.108"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.169.148.109"/>
    </slice>
    <from sec="1172898169" usec="0"/>
    <to sec="1172898611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.220.192.109"/>
    </slice>
    <from sec="1172898278" usec="0"/>
    <to sec="1172898322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.2.240.109"/>
    </slice>
    <from sec="1172898834" usec="0"/>
    <to sec="1172898863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.2.7.110"/>
    </slice>
    <from sec="1172898655" usec="0"/>
    <to sec="1172898876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
2643[label="215.28.95.110;s;349pkt 349fpkt", shape=diamond, color=yellow];
7906[label="215.28.95.110;379pkt 379fpkt", shape=pentagon, color=darkviolet];
11886[label="215.28.95.110;378pkt 378fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.28.95.110:53465, *:53}[59.7368%]&lt;BR/&gt;{215.28.95.110:53, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.2206%)&lt;BR/&gt; 53465: (29.9277%)&lt;BR/&gt; 32768: (1.03978%)&lt;BR/&gt; 39633: (0.271248%)&lt;BR/&gt; 32831: (0.271248%)&gt;];
}
2643--2891[label="0.00729927;1pkt 1fpkt"];
2643--3183[label="0.0078125;1pkt 1fpkt"];
2643--4030[label="0.0123457;1pkt 1fpkt"];
2643--4101[label="0.0232558;1pkt 1fpkt"];
2643--4295[label="0.0120482;1pkt 1fpkt"];
2643--4359[label="0.00704225;1pkt 1fpkt"];
2643--4731[label="0.0111111;1pkt 1fpkt"];
2643--4760[label="0.00636943;1pkt 1fpkt"];
2643--5389[label="0.0238095;1pkt 1fpkt"];
2643--5451[label="0.00704225;1pkt 1fpkt"];
2643--5485[label="0.0859599;30pkt 30fpkt"];
2643--5514[label="0.0859599;30pkt 30fpkt"];
2643--5541[label="0.0859599;30pkt 30fpkt"];
2643--7906[label="0.997135;348pkt 348fpkt"];
2643--11886[label="0.994269;347pkt 347fpkt"];
7906--11886[label="1;378pkt 378fpkt"];
</description>
    <slice>
      <filter src_ip="215.28.95.110" src_port="53"/>
      <filter dst_port="53" src_ip="215.28.95.110" src_port="53465"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.217.151.112"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.226.181.112"/>
    </slice>
    <from sec="1172898288" usec="0"/>
    <to sec="1172898334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.232.217.112"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.91.219.112"/>
    </slice>
    <from sec="1172898885" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.219.89.113"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.152.190.113"/>
    </slice>
    <from sec="1172898205" usec="0"/>
    <to sec="1172898462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.150.238.113"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
3576[label="172.179.244.113;s;384pkt 384fpkt", shape=diamond, color=yellow];
7960[label="172.179.244.113;399pkt 399fpkt", shape=pentagon, color=darkviolet];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.244.113:14203, *:*}[99.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14203: (49.6169%)&lt;BR/&gt; 6881: (0.574713%)&lt;BR/&gt; 20000: (0.383142%)&lt;BR/&gt; 50000: (0.255428%)&lt;BR/&gt; 32459: (0.255428%)&gt;];
}
3576--7960[label="0.997396;383pkt 383fpkt"];
</description>
    <slice>
      <filter src_ip="172.179.244.113" src_port="14203"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.206.245.114"/>
    </slice>
    <from sec="1172898436" usec="0"/>
    <to sec="1172898867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.177.115"/>
    </slice>
    <from sec="1172898016" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.219.196.115"/>
    </slice>
    <from sec="1172898393" usec="0"/>
    <to sec="1172898409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.9.13.117"/>
    </slice>
    <from sec="1172898767" usec="0"/>
    <to sec="1172898878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.46.243.117"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.49.77.118"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.82.94.118"/>
    </slice>
    <from sec="1172898550" usec="0"/>
    <to sec="1172898566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.132.4.119"/>
    </slice>
    <from sec="1172898597" usec="0"/>
    <to sec="1172898677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.64.101.119"/>
    </slice>
    <from sec="1172898449" usec="0"/>
    <to sec="1172898464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.160.195.119"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.76.232.119"/>
    </slice>
    <from sec="1172898250" usec="0"/>
    <to sec="1172898883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.149.39.120"/>
    </slice>
    <from sec="1172898691" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.133.50.120"/>
    </slice>
    <from sec="1172898545" usec="0"/>
    <to sec="1172898600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.145.78.120"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.38.236.120"/>
    </slice>
    <from sec="1172898533" usec="0"/>
    <to sec="1172898554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.233.10.121"/>
    </slice>
    <from sec="1172898806" usec="0"/>
    <to sec="1172898824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71386,2.77333,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
107[label="213.140.101.121s;190pkt 190fpkt", shape=rectangle, color=red];
8105[label="213.140.101.121;256pkt 256fpkt", shape=pentagon, color=darkviolet];
12011[label="213.140.101.121;255pkt 255fpkt", shape=invtriangle, color=brown];
14067[label="213.140.101.121;256pkt 256fpkt", shape=invhouse, color=bisque];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.140.101.121:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 18981: (0.208986%)&lt;BR/&gt; 18979: (0.208986%)&lt;BR/&gt; 18977: (0.208986%)&lt;BR/&gt; 18975: (0.208986%)&gt;];
}
107--8105[label="1;190pkt 190fpkt"];
107--12011[label="1;190pkt 190fpkt"];
107--14067[label="1;190pkt 190fpkt"];
8105--12011[label="1;255pkt 255fpkt"];
8105--14067[label="1;256pkt 256fpkt"];
12011--14067[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.140.101.121"/>
    </slice>
    <from sec="1172898083" usec="0"/>
    <to sec="1172898097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
533[label="180.152.250.217;d;8pkt 8fpkt", shape=diamond, color=yellow];
1868[label="204.208.94.221;d;6pkt 6fpkt", shape=diamond, color=yellow];
1869[label="156.139.170.249;s;12pkt 12fpkt", shape=diamond, color=yellow];
1951[label="156.139.200.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
2237[label="156.139.176.207;s;5pkt 5fpkt", shape=diamond, color=yellow];
2267[label="156.139.144.121;s;4pkt 4fpkt", shape=diamond, color=yellow];
2290[label="156.139.145.111;s;6pkt 6fpkt", shape=diamond, color=yellow];
3181[label="156.139.178.152;s;2pkt 2fpkt", shape=diamond, color=yellow];
4531[label="156.139.176.207;s;5pkt 5fpkt", shape=hexagon, color=black];
4726[label="156.139.170.249;s;9pkt 9fpkt", shape=hexagon, color=black];
5661[label="156.139.161.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6555[label="156.139.200.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8111[label="156.139.144.121;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8745[label="156.139.178.152;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9828[label="156.139.176.207;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9988[label="156.139.235.216;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10677[label="156.139.161.3;2pkt 2fpkt", shape=invtriangle, color=brown];
12015[label="156.139.144.121;4pkt 4fpkt", shape=invtriangle, color=brown];
13084[label="156.139.235.216;1pkt 1fpkt", shape=invtriangle, color=brown];
14070[label="156.139.144.121;3pkt 3fpkt", shape=invhouse, color=bisque];
14543[label="156.139.235.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:5050}[32.4324%]&lt;BR/&gt;{156.139.170.249:*, *:*}[32.4324%]&lt;BR/&gt;{*:*, *:6667}[21.6216%]&lt;BR/&gt;{*:*, 180.152.250.217:*}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (17.2619%)&lt;BR/&gt; 5050: (11.3095%)&lt;BR/&gt; 21: (5.35714%)&lt;BR/&gt; 32768: (3.57143%)&lt;BR/&gt; 53: (3.57143%)&gt;];
}
533--1951[label="1;1pkt 1fpkt"];
533--2237[label="0.2;1pkt 1fpkt"];
533--2267[label="0.75;3pkt 3fpkt"];
533--3181[label="0.5;1pkt 1fpkt"];
533--4531[label="0.2;1pkt 1fpkt"];
533--5661[label="1;1pkt 1fpkt"];
533--6555[label="1;1pkt 1fpkt"];
533--8111[label="0.75;3pkt 3fpkt"];
533--8745[label="0.5;1pkt 1fpkt"];
533--9828[label="0.2;1pkt 1fpkt"];
533--10677[label="0.5;1pkt 1fpkt"];
533--12015[label="0.75;3pkt 3fpkt"];
533--14070[label="1;3pkt 3fpkt"];
1868--1869[label="0.166667;1pkt 1fpkt"];
1868--2267[label="0.25;1pkt 1fpkt"];
1868--2290[label="0.166667;1pkt 1fpkt"];
1868--4726[label="0.166667;1pkt 1fpkt"];
1868--8111[label="0.25;1pkt 1fpkt"];
1868--9988[label="0.5;1pkt 1fpkt"];
1868--12015[label="0.25;1pkt 1fpkt"];
1868--13084[label="1;1pkt 1fpkt"];
1868--14543[label="1;1pkt 1fpkt"];
1869--3215[label="0.0833333;1pkt 1fpkt"];
1869--4726[label="1;9pkt 9fpkt"];
1869--5485[label="0.0833333;1pkt 1fpkt"];
1869--5514[label="0.0833333;1pkt 1fpkt"];
1869--5541[label="0.0833333;1pkt 1fpkt"];
1951--6555[label="1;1pkt 1fpkt"];
2237--4531[label="1;5pkt 5fpkt"];
2237--9828[label="1;5pkt 5fpkt"];
2267--8111[label="1;4pkt 4fpkt"];
2267--12015[label="1;4pkt 4fpkt"];
2267--14070[label="1;3pkt 3fpkt"];
3181--8745[label="1;2pkt 2fpkt"];
4531--9828[label="1;5pkt 5fpkt"];
4726--5485[label="0.111111;1pkt 1fpkt"];
4726--5514[label="0.111111;1pkt 1fpkt"];
4726--5541[label="0.111111;1pkt 1fpkt"];
5661--10677[label="1;1pkt 1fpkt"];
8111--12015[label="1;4pkt 4fpkt"];
8111--14070[label="1;3pkt 3fpkt"];
9988--13084[label="1;1pkt 1fpkt"];
9988--14543[label="1;1pkt 1fpkt"];
12015--14070[label="1;3pkt 3fpkt"];
13084--14543[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="156.139.170.249"/>
      <filter dst_ip="180.152.250.217"/>
      <filter dst_port="5050"/>
      <filter dst_port="6667"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.233.247.121"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.3.61.122"/>
    </slice>
    <from sec="1172898118" usec="0"/>
    <to sec="1172898133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.68.122"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.125.88.122"/>
    </slice>
    <from sec="1172898101" usec="0"/>
    <to sec="1172898841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
8135[label="172.104.193.122;237pkt 237fpkt", shape=pentagon, color=darkviolet];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.104.193.122:0, *:0}[83.1224%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (83.1224%)&lt;BR/&gt; 53: (8.43882%)&lt;BR/&gt; 1047: (0.421941%)&lt;BR/&gt; 63547: (0.21097%)&lt;BR/&gt; 62999: (0.21097%)&gt;];
}
</description>
    <slice>
      <filter src_ip="172.104.193.122"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.74.100.123"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.27.113.123"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.3.169.123"/>
    </slice>
    <from sec="1172898375" usec="0"/>
    <to sec="1172898388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.104.200.123"/>
    </slice>
    <from sec="1172898739" usec="0"/>
    <to sec="1172898874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.77.136.124"/>
    </slice>
    <from sec="1172898036" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.22.76.125"/>
    </slice>
    <from sec="1172898232" usec="0"/>
    <to sec="1172898287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.0.139.125"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.108.144.126"/>
    </slice>
    <from sec="1172898102" usec="0"/>
    <to sec="1172898183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.33.99.127"/>
    </slice>
    <from sec="1172898686" usec="0"/>
    <to sec="1172898728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.200.206.127"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.36.234.127"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
2573[label="172.104.193.119;d;50pkt 50fpkt", shape=diamond, color=yellow];
2575[label="26.29.10.128;s;53pkt 53fpkt", shape=diamond, color=yellow];
8203[label="26.29.10.128;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.29.10.128:*, 172.104.193.119:80}[94.8276%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6835%)&lt;BR/&gt; 64577: (0.949367%)&lt;BR/&gt; 64399: (0.949367%)&lt;BR/&gt; 64161: (0.949367%)&lt;BR/&gt; 61722: (0.949367%)&gt;];
}
2573--2575[label="0.94;47pkt 47fpkt"];
2573--5470[label="0.06;3pkt 3fpkt"];
2573--5500[label="0.06;3pkt 3fpkt"];
2573--5527[label="0.06;3pkt 3fpkt"];
2573--8203[label="0.94;47pkt 47fpkt"];
2575--5470[label="0.0566038;3pkt 3fpkt"];
2575--5500[label="0.0566038;3pkt 3fpkt"];
2575--5527[label="0.0566038;3pkt 3fpkt"];
2575--8203[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="172.104.193.119" dst_port="80" src_ip="26.29.10.128"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.237.106.128"/>
    </slice>
    <from sec="1172898465" usec="0"/>
    <to sec="1172898562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.184.128"/>
    </slice>
    <from sec="1172898021" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.29.188.128"/>
    </slice>
    <from sec="1172898825" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.106.226.128"/>
    </slice>
    <from sec="1172898818" usec="0"/>
    <to sec="1172898830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.20.1.129"/>
    </slice>
    <from sec="1172898355" usec="0"/>
    <to sec="1172898367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.17.9.129"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
2771[label="212.89.144.175;s;1677pkt 1677fpkt", shape=diamond, color=yellow];
4849[label="212.89.144.175;s;382pkt 382fpkt", shape=hexagon, color=black];
9244[label="212.89.144.175;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12670[label="212.89.144.175;6pkt 6fpkt", shape=invtriangle, color=brown];
14357[label="212.89.144.175;1999pkt 1999fpkt", shape=invhouse, color=bisque];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.89.144.175:0, *:0}[99.95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9509%)&lt;BR/&gt; 33247: (0.02457%)&lt;BR/&gt; 53: (0.02457%)&gt;];
}
2771--2978[label="0.0714286;1pkt 1fpkt"];
2771--4849[label="1;382pkt 382fpkt"];
2771--14357[label="0.999404;1676pkt 1676fpkt"];
4849--14357[label="0.997382;381pkt 381fpkt"];
9244--12670[label="1;6pkt 6fpkt"];
9244--14357[label="1;6pkt 6fpkt"];
12670--14357[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="212.89.144.175"/>
    </slice>
    <from sec="1172898419" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.62.129"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.62.219.129"/>
    </slice>
    <from sec="1172898572" usec="0"/>
    <to sec="1172898594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.139.126.130"/>
    </slice>
    <from sec="1172898016" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.206.139.130"/>
    </slice>
    <from sec="1172898484" usec="0"/>
    <to sec="1172898512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.154.213.130"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.89.11.132"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.234.12.133"/>
    </slice>
    <from sec="1172898014" usec="0"/>
    <to sec="1172898884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.203.78.133"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.138.133.133"/>
    </slice>
    <from sec="1172898352" usec="0"/>
    <to sec="1172898571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.32.141.133"/>
    </slice>
    <from sec="1172898240" usec="0"/>
    <to sec="1172898342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.127.61.134"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.125.79.134"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.210.200.134"/>
    </slice>
    <from sec="1172898572" usec="0"/>
    <to sec="1172898669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.35.63.135"/>
    </slice>
    <from sec="1172898428" usec="0"/>
    <to sec="1172898437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.130.230.135"/>
    </slice>
    <from sec="1172898120" usec="0"/>
    <to sec="1172898298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.158.145.136"/>
    </slice>
    <from sec="1172898341" usec="0"/>
    <to sec="1172898466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.169.148.136"/>
    </slice>
    <from sec="1172898199" usec="0"/>
    <to sec="1172898559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.239.167.136"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
8423[label="199.0.134.137;119pkt 119fpkt", shape=pentagon, color=darkviolet];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.0.134.137:56243, *:1026}[57.1429%]&lt;BR/&gt;{199.0.134.137:56243, *:1027}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56243: (50%)&lt;BR/&gt; 1026: (28.5714%)&lt;BR/&gt; 1027: (21.4286%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1026" src_ip="199.0.134.137" src_port="56243"/>
      <filter dst_port="1027" src_ip="199.0.134.137" src_port="56243"/>
    </slice>
    <from sec="1172898280" usec="0"/>
    <to sec="1172898282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.100.135.137"/>
    </slice>
    <from sec="1172898415" usec="0"/>
    <to sec="1172898483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.155.0.138"/>
    </slice>
    <from sec="1172898728" usec="0"/>
    <to sec="1172898745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.169.4.138"/>
    </slice>
    <from sec="1172898312" usec="0"/>
    <to sec="1172898871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.20.171.138"/>
    </slice>
    <from sec="1172898251" usec="0"/>
    <to sec="1172898259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.0.139.139"/>
    </slice>
    <from sec="1172898100" usec="0"/>
    <to sec="1172898314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.129.197.139"/>
    </slice>
    <from sec="1172898858" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.243.16.140"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.26.140"/>
    </slice>
    <from sec="1172898364" usec="0"/>
    <to sec="1172898616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
8514[label="170.123.234.140;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.234.140:25, *:*}[55%]&lt;BR/&gt;{170.123.234.140:53, *:*}[27.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.5%)&lt;BR/&gt; 53: (18.75%)&lt;BR/&gt; 80: (3.75%)&lt;BR/&gt; 32768: (3.125%)&lt;BR/&gt; 10000: (1.25%)&gt;];
}
</description>
    <slice>
      <filter src_ip="170.123.234.140" src_port="25"/>
      <filter src_ip="170.123.234.140" src_port="53"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.104.235.140"/>
    </slice>
    <from sec="1172898401" usec="0"/>
    <to sec="1172898456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
3848[label="96.23.41.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
8519[label="172.179.24.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12249[label="172.179.24.141;1pkt 1fpkt", shape=invtriangle, color=brown];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.24.141:2402, 96.23.41.42:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2402: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3848--8519[label="1;1pkt 1fpkt"];
3848--12249[label="1;1pkt 1fpkt"];
8519--12249[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.23.41.42" dst_port="80" src_ip="172.179.24.141" src_port="2402"/>
    </slice>
    <from sec="1172898799" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.149.38.141"/>
    </slice>
    <from sec="1172898554" usec="0"/>
    <to sec="1172898583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.38.142"/>
    </slice>
    <from sec="1172898265" usec="0"/>
    <to sec="1172898310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.158.142"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.52.193.142"/>
    </slice>
    <from sec="1172898250" usec="0"/>
    <to sec="1172898281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.54.218.142"/>
    </slice>
    <from sec="1172898074" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.168.0.143"/>
    </slice>
    <from sec="1172898788" usec="0"/>
    <to sec="1172898801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.55.64.143"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.20.112.143"/>
    </slice>
    <from sec="1172898521" usec="0"/>
    <to sec="1172898536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.188.114.143"/>
    </slice>
    <from sec="1172898560" usec="0"/>
    <to sec="1172898582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.90.172.143"/>
    </slice>
    <from sec="1172898193" usec="0"/>
    <to sec="1172898206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.33.144"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.112.9.145"/>
    </slice>
    <from sec="1172898531" usec="0"/>
    <to sec="1172898540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.162.18.145"/>
    </slice>
    <from sec="1172898864" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.196.88.145"/>
    </slice>
    <from sec="1172898439" usec="0"/>
    <to sec="1172898480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.48.85.146"/>
    </slice>
    <from sec="1172898482" usec="0"/>
    <to sec="1172898500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.19.169.146"/>
    </slice>
    <from sec="1172898034" usec="0"/>
    <to sec="1172898821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.9.131.147"/>
    </slice>
    <from sec="1172898734" usec="0"/>
    <to sec="1172898763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.75.199.147"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.17.14.148"/>
    </slice>
    <from sec="1172898027" usec="0"/>
    <to sec="1172898667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.33.148"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.89.155.148"/>
    </slice>
    <from sec="1172898014" usec="0"/>
    <to sec="1172898892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.207.38.149"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.77.108.149"/>
    </slice>
    <from sec="1172898752" usec="0"/>
    <to sec="1172898785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.190.102.150"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.112.201.150"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
2666[label="172.169.23.81;d;40pkt 40fpkt", shape=diamond, color=yellow];
2919[label="26.29.10.151;s;24pkt 24fpkt", shape=diamond, color=yellow];
8709[label="26.29.10.151;32pkt 32fpkt", shape=pentagon, color=darkviolet];
12357[label="26.29.10.151;32pkt 32fpkt", shape=invtriangle, color=brown];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.29.10.151:*, 172.169.23.81:80}[68.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65374: (1.5625%)&lt;BR/&gt; 63132: (1.5625%)&lt;BR/&gt; 62321: (1.5625%)&lt;BR/&gt; 60632: (1.5625%)&gt;];
}
2666--2919[label="0.958333;23pkt 23fpkt"];
2666--3667[label="0.03125;1pkt 1fpkt"];
2666--5470[label="0.075;3pkt 3fpkt"];
2666--5500[label="0.075;3pkt 3fpkt"];
2666--5527[label="0.075;3pkt 3fpkt"];
2666--7134[label="0.025;1pkt 1fpkt"];
2666--8709[label="0.875;28pkt 28fpkt"];
2666--12357[label="0.875;28pkt 28fpkt"];
2919--5470[label="0.0833333;2pkt 2fpkt"];
2919--5500[label="0.0833333;2pkt 2fpkt"];
2919--5527[label="0.0833333;2pkt 2fpkt"];
2919--8709[label="1;24pkt 24fpkt"];
2919--12357[label="1;24pkt 24fpkt"];
8709--12357[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="172.169.23.81" dst_port="80" src_ip="26.29.10.151"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.56.41.151"/>
    </slice>
    <from sec="1172898082" usec="0"/>
    <to sec="1172898096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.179.48.151"/>
    </slice>
    <from sec="1172898588" usec="0"/>
    <to sec="1172898616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.91.64.151"/>
    </slice>
    <from sec="1172898830" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.106.26.152"/>
    </slice>
    <from sec="1172898409" usec="0"/>
    <to sec="1172898425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.219.70.152"/>
    </slice>
    <from sec="1172898054" usec="0"/>
    <to sec="1172898566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.229.198.152"/>
    </slice>
    <from sec="1172898769" usec="0"/>
    <to sec="1172898801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.0.5.153"/>
    </slice>
    <from sec="1172898670" usec="0"/>
    <to sec="1172898699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.164.81.153"/>
    </slice>
    <from sec="1172898667" usec="0"/>
    <to sec="1172898750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.242.131.153"/>
    </slice>
    <from sec="1172898804" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.156.153"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.11.92.154"/>
    </slice>
    <from sec="1172898771" usec="0"/>
    <to sec="1172898785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.56.182.154"/>
    </slice>
    <from sec="1172898282" usec="0"/>
    <to sec="1172898356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.36.6.155"/>
    </slice>
    <from sec="1172898178" usec="0"/>
    <to sec="1172898193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.221.13.155"/>
    </slice>
    <from sec="1172898810" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.25.119.155"/>
    </slice>
    <from sec="1172898386" usec="0"/>
    <to sec="1172898473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.191.129.155"/>
    </slice>
    <from sec="1172898301" usec="0"/>
    <to sec="1172898325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.195.143.155"/>
    </slice>
    <from sec="1172898363" usec="0"/>
    <to sec="1172898372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.176.106.156"/>
    </slice>
    <from sec="1172898871" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.184.163.156"/>
    </slice>
    <from sec="1172898832" usec="0"/>
    <to sec="1172898848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.48.184.156"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
2705[label="156.139.199.138;s;38pkt 38fpkt", shape=diamond, color=yellow];
4919[label="156.139.199.138;s;38pkt 38fpkt", shape=hexagon, color=black];
8460[label="156.139.199.138;42pkt 42fpkt", shape=pentagon, color=darkviolet];
12213[label="156.139.199.138;42pkt 42fpkt", shape=invtriangle, color=brown];
14162[label="156.139.199.138;41pkt 41fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.199.138:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59329: (1.24378%)&lt;BR/&gt; 58382: (1.24378%)&lt;BR/&gt; 57465: (1.24378%)&lt;BR/&gt; 56979: (1.24378%)&gt;];
}
2705--2752[label="0.0285714;1pkt 1fpkt"];
2705--4919[label="1;38pkt 38fpkt"];
2705--8460[label="1;38pkt 38fpkt"];
2705--12213[label="1;38pkt 38fpkt"];
2705--14162[label="0.973684;37pkt 37fpkt"];
4919--8460[label="1;38pkt 38fpkt"];
4919--12213[label="1;38pkt 38fpkt"];
4919--14162[label="0.973684;37pkt 37fpkt"];
8460--12213[label="1;42pkt 42fpkt"];
8460--14162[label="1;41pkt 41fpkt"];
12213--14162[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="156.139.199.138" src_port="80"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.125.78.157"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.152.219.157"/>
    </slice>
    <from sec="1172898588" usec="0"/>
    <to sec="1172898603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.138.56.158"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.88.25.159"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.218.74.159"/>
    </slice>
    <from sec="1172898480" usec="0"/>
    <to sec="1172898509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.200.132.159"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.56.218.159"/>
    </slice>
    <from sec="1172898202" usec="0"/>
    <to sec="1172898230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.154.160"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.220.160"/>
    </slice>
    <from sec="1172898034" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.207.9.161"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
7178[label="156.139.145.75;89pkt 89fpkt", shape=pentagon, color=darkviolet];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.145.75:1026, *:53}[71.9101%]&lt;BR/&gt;{156.139.145.75:53, *:*}[28.0899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.809%)&lt;BR/&gt; 1026: (35.9551%)&lt;BR/&gt; 9253: (1.1236%)&lt;BR/&gt; 64463: (0.561798%)&lt;BR/&gt; 61896: (0.561798%)&gt;];
}
</description>
    <slice>
      <filter src_ip="156.139.145.75" src_port="53"/>
      <filter dst_port="53" src_ip="156.139.145.75" src_port="1026"/>
    </slice>
    <from sec="1172898072" usec="0"/>
    <to sec="1172898867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.41.2.162"/>
    </slice>
    <from sec="1172898504" usec="0"/>
    <to sec="1172898515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.224.37.162"/>
    </slice>
    <from sec="1172898107" usec="0"/>
    <to sec="1172898406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4081,2.71289,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
811[label="100.162.230.4;d;23pkt 23fpkt", shape=diamond, color=yellow];
1306[label="214.89.54.182;s;15pkt 15fpkt", shape=diamond, color=yellow];
3937[label="100.162.230.4;d;16pkt 16fpkt", shape=hexagon, color=black];
8945[label="214.89.44.162;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9368[label="214.89.54.182;15pkt 15fpkt", shape=pentagon, color=darkviolet];
12494[label="214.89.44.162;7pkt 7fpkt", shape=invtriangle, color=brown];
12747[label="214.89.54.182;14pkt 14fpkt", shape=invtriangle, color=brown];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.89.54.182:80, 100.162.230.4:*}[65.2174%]&lt;BR/&gt;{214.89.44.162:80, 100.162.230.4:*}[34.7826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1259: (2.55102%)&lt;BR/&gt; 1258: (2.55102%)&lt;BR/&gt; 1257: (2.55102%)&lt;BR/&gt; 1256: (2.55102%)&gt;];
}
811--1306[label="1;15pkt 15fpkt"];
811--3937[label="1;16pkt 16fpkt"];
811--8945[label="1;8pkt 8fpkt"];
811--9368[label="1;15pkt 15fpkt"];
811--12494[label="1;7pkt 7fpkt"];
811--12747[label="1;14pkt 14fpkt"];
1306--3937[label="0.733333;11pkt 11fpkt"];
1306--9368[label="1;15pkt 15fpkt"];
1306--12747[label="1;14pkt 14fpkt"];
3937--8945[label="0.625;5pkt 5fpkt"];
3937--9368[label="0.733333;11pkt 11fpkt"];
3937--12494[label="0.571429;4pkt 4fpkt"];
3937--12747[label="0.714286;10pkt 10fpkt"];
8945--12494[label="1;7pkt 7fpkt"];
9368--12747[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="100.162.230.4" src_ip="214.89.54.182" src_port="80"/>
      <filter dst_ip="100.162.230.4" src_ip="214.89.44.162" src_port="80"/>
    </slice>
    <from sec="1172898044" usec="0"/>
    <to sec="1172898336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.75.204.162"/>
    </slice>
    <from sec="1172898074" usec="0"/>
    <to sec="1172898885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.112.218.162"/>
    </slice>
    <from sec="1172898570" usec="0"/>
    <to sec="1172898628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.235.78.163"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.16.198.163"/>
    </slice>
    <from sec="1172898437" usec="0"/>
    <to sec="1172898439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.117.95.164"/>
    </slice>
    <from sec="1172898298" usec="0"/>
    <to sec="1172898359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.204.237.164"/>
    </slice>
    <from sec="1172898226" usec="0"/>
    <to sec="1172898399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.235.78.165"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.81.224.165"/>
    </slice>
    <from sec="1172898095" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.156.24.166"/>
    </slice>
    <from sec="1172898024" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.221.98.166"/>
    </slice>
    <from sec="1172898359" usec="0"/>
    <to sec="1172898364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.23.4.167"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
1009[label="214.125.74.1;d;403pkt 403fpkt", shape=diamond, color=yellow];
2594[label="96.134.6.76;d;68pkt 68fpkt", shape=diamond, color=yellow];
2892[label="26.226.198.132;s;140pkt 140fpkt", shape=diamond, color=yellow];
3150[label="208.243.53.96;s;17pkt 17fpkt", shape=diamond, color=yellow];
3252[label="26.226.198.167;s;135pkt 135fpkt", shape=diamond, color=yellow];
3588[label="214.125.76.170;d;128pkt 128fpkt", shape=diamond, color=yellow];
7566[label="208.243.52.94;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9077[label="26.226.198.167;152pkt 152fpkt", shape=pentagon, color=darkviolet];
9654[label="26.226.198.197;96pkt 96fpkt", shape=pentagon, color=darkviolet];
11688[label="208.243.52.94;15pkt 15fpkt", shape=invtriangle, color=brown];
12580[label="26.226.198.167;151pkt 151fpkt", shape=invtriangle, color=brown];
14314[label="26.226.198.167;152pkt 152fpkt", shape=invhouse, color=bisque];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 214.125.74.1:0}[47.6359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (31.1141%)&lt;BR/&gt; 33438: (11.1753%)&lt;BR/&gt; 33435: (10.9375%)&lt;BR/&gt; 33436: (8.28804%)&lt;BR/&gt; 33437: (3.97418%)&gt;];
}
1009--7566[label="0.0666667;1pkt 1fpkt"];
1009--11688[label="0.0666667;1pkt 1fpkt"];
2594--2892[label="0.823529;56pkt 56fpkt"];
2594--3150[label="0.0588235;1pkt 1fpkt"];
2594--4735[label="0.0263158;1pkt 1fpkt"];
2594--7566[label="0.0666667;1pkt 1fpkt"];
2594--11688[label="0.0666667;1pkt 1fpkt"];
2892--3588[label="0.328125;42pkt 42fpkt"];
2892--4111[label="0.3;42pkt 42fpkt"];
3252--3588[label="0.328125;42pkt 42fpkt"];
3252--4111[label="0.311111;42pkt 42fpkt"];
3252--4264[label="0.0148148;2pkt 2fpkt"];
3252--9077[label="1;135pkt 135fpkt"];
3252--12580[label="0.992593;134pkt 134fpkt"];
3252--14314[label="1;135pkt 135fpkt"];
3588--4508[label="0.015625;2pkt 2fpkt"];
3588--9077[label="0.328125;42pkt 42fpkt"];
3588--9080[label="0.015625;2pkt 2fpkt"];
3588--9654[label="0.3125;30pkt 30fpkt"];
3588--12580[label="0.328125;42pkt 42fpkt"];
3588--14314[label="0.328125;42pkt 42fpkt"];
7566--11688[label="1;15pkt 15fpkt"];
9077--12580[label="1;151pkt 151fpkt"];
9077--14314[label="1;152pkt 152fpkt"];
12580--14314[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.74.1"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.37.1.168"/>
    </slice>
    <from sec="1172898749" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.151.23.168"/>
    </slice>
    <from sec="1172898480" usec="0"/>
    <to sec="1172898495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.62.70.168"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.119.165.168"/>
    </slice>
    <from sec="1172898257" usec="0"/>
    <to sec="1172898287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.169.165.168"/>
    </slice>
    <from sec="1172898806" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
9102[label="214.120.218.168;90pkt 90fpkt", shape=pentagon, color=darkviolet];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.120.218.168:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="214.120.218.168"/>
    </slice>
    <from sec="1172898027" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.74.73.169"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.250.89.169"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.133.142.169"/>
    </slice>
    <from sec="1172898183" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.154.169"/>
    </slice>
    <from sec="1172898033" usec="0"/>
    <to sec="1172898853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.225.214.169"/>
    </slice>
    <from sec="1172898844" usec="0"/>
    <to sec="1172898866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.136.6.170"/>
    </slice>
    <from sec="1172898553" usec="0"/>
    <to sec="1172898561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.148.131.170"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.53.160.170"/>
    </slice>
    <from sec="1172898491" usec="0"/>
    <to sec="1172898519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.209.198.170"/>
    </slice>
    <from sec="1172898555" usec="0"/>
    <to sec="1172898628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
1245[label="170.123.164.224;d;227pkt 227fpkt", shape=diamond, color=yellow];
2398[label="193.121.154.171;s;201pkt 201fpkt", shape=diamond, color=yellow];
2953[label="193.121.154.102;s;14pkt 14fpkt", shape=diamond, color=yellow];
4618[label="170.123.164.224;d;152pkt 152fpkt", shape=hexagon, color=black];
9159[label="193.121.154.171;246pkt 246fpkt", shape=pentagon, color=darkviolet];
12625[label="193.121.154.171;245pkt 245fpkt", shape=invtriangle, color=brown];
14333[label="193.121.154.171;237pkt 237fpkt", shape=invhouse, color=bisque];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.121.154.171:80, 170.123.164.224:*}[90.4412%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10092: (0.226929%)&lt;BR/&gt; 10076: (0.226929%)&lt;BR/&gt; 10068: (0.226929%)&lt;BR/&gt; 9996: (0.226929%)&gt;];
}
1245--2398[label="1;201pkt 201fpkt"];
1245--2953[label="1;14pkt 14fpkt"];
1245--3277[label="0.00970874;1pkt 1fpkt"];
1245--4618[label="1;152pkt 152fpkt"];
1245--5257[label="0.00970874;1pkt 1fpkt"];
1245--9122[label="0.00943396;1pkt 1fpkt"];
1245--9159[label="0.885463;201pkt 201fpkt"];
1245--12606[label="0.00952381;1pkt 1fpkt"];
1245--12625[label="0.881057;200pkt 200fpkt"];
1245--14325[label="0.00943396;1pkt 1fpkt"];
1245--14333[label="0.859031;195pkt 195fpkt"];
2398--4618[label="0.828947;126pkt 126fpkt"];
2398--9159[label="1;201pkt 201fpkt"];
2398--12625[label="0.995025;200pkt 200fpkt"];
2398--14333[label="0.970149;195pkt 195fpkt"];
2953--4618[label="1;14pkt 14fpkt"];
4618--5257[label="0.00970874;1pkt 1fpkt"];
4618--9122[label="0.00943396;1pkt 1fpkt"];
4618--9159[label="0.828947;126pkt 126fpkt"];
4618--12606[label="0.00952381;1pkt 1fpkt"];
4618--12625[label="0.822368;125pkt 125fpkt"];
4618--14325[label="0.00943396;1pkt 1fpkt"];
4618--14333[label="0.789474;120pkt 120fpkt"];
9159--12625[label="1;245pkt 245fpkt"];
9159--14333[label="1;237pkt 237fpkt"];
12625--14333[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.164.224" src_ip="193.121.154.171" src_port="80"/>
    </slice>
    <from sec="1172898015" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.146.163.171"/>
    </slice>
    <from sec="1172898270" usec="0"/>
    <to sec="1172898297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.236.171"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.249.22.172"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
1249[label="172.104.233.178;s;138pkt 138fpkt", shape=diamond, color=yellow];
1339[label="96.23.36.236;d;58pkt 58fpkt", shape=diamond, color=yellow];
2365[label="153.21.105.18;s;145pkt 145fpkt", shape=diamond, color=yellow];
3026[label="153.21.68.172;s;38pkt 38fpkt", shape=diamond, color=yellow];
3623[label="153.21.92.163;s;148pkt 148fpkt", shape=diamond, color=yellow];
3628[label="153.21.18.2;s;32pkt 32fpkt", shape=diamond, color=yellow];
3663[label="37.169.148.176;d;33pkt 33fpkt", shape=diamond, color=yellow];
3678[label="37.169.148.177;d;29pkt 29fpkt", shape=diamond, color=yellow];
4048[label="172.104.233.178;s;98pkt 98fpkt", shape=hexagon, color=black];
5608[label="153.21.18.2;34pkt 34fpkt", shape=pentagon, color=darkviolet];
9178[label="153.21.68.172;41pkt 41fpkt", shape=pentagon, color=darkviolet];
9305[label="172.104.233.178;169pkt 169fpkt", shape=pentagon, color=darkviolet];
9597[label="153.21.40.195;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12703[label="172.104.233.178;169pkt 169fpkt", shape=invtriangle, color=brown];
12880[label="153.21.40.195;6pkt 6fpkt", shape=invtriangle, color=brown];
13537[label="153.21.105.18;150pkt 150fpkt", shape=invhouse, color=bisque];
14374[label="172.104.233.178;169pkt 169fpkt", shape=invhouse, color=bisque];
14454[label="153.21.40.195;5pkt 5fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.92.163:*, *:*}[26.6667%]&lt;BR/&gt;{172.104.233.178:*, *:80}[25.5856%]&lt;BR/&gt;{153.21.105.18:*, *:80}[23.964%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9837%)&lt;BR/&gt; 443: (6.23297%)&lt;BR/&gt; 1863: (0.408719%)&lt;BR/&gt; 4998: (0.20436%)&lt;BR/&gt; 4989: (0.20436%)&gt;];
}
1249--1339[label="1;58pkt 58fpkt"];
1249--3678[label="0.275862;8pkt 8fpkt"];
1249--4048[label="1;98pkt 98fpkt"];
1249--5470[label="0.0869565;12pkt 12fpkt"];
1249--5500[label="0.0869565;12pkt 12fpkt"];
1249--5527[label="0.0869565;12pkt 12fpkt"];
1249--9305[label="1;138pkt 138fpkt"];
1249--12703[label="1;138pkt 138fpkt"];
1249--14374[label="1;138pkt 138fpkt"];
1339--4048[label="1;58pkt 58fpkt"];
1339--9305[label="1;58pkt 58fpkt"];
1339--12703[label="1;58pkt 58fpkt"];
1339--14374[label="1;58pkt 58fpkt"];
2365--3586[label="0.0123457;1pkt 1fpkt"];
2365--3663[label="0.333333;11pkt 11fpkt"];
2365--4523[label="0.00689655;1pkt 1fpkt"];
2365--4742[label="0.0206897;3pkt 3fpkt"];
2365--5200[label="0.0123457;1pkt 1fpkt"];
2365--5237[label="0.0392157;2pkt 2fpkt"];
2365--5470[label="0.0965517;14pkt 14fpkt"];
2365--5500[label="0.0965517;14pkt 14fpkt"];
2365--5527[label="0.0965517;14pkt 14fpkt"];
2365--13537[label="1;145pkt 145fpkt"];
3026--3663[label="0.363636;12pkt 12fpkt"];
3026--3678[label="0.275862;8pkt 8fpkt"];
3026--9178[label="1;38pkt 38fpkt"];
3623--3663[label="0.0909091;3pkt 3fpkt"];
3623--3678[label="0.137931;4pkt 4fpkt"];
3628--3663[label="0.125;4pkt 4fpkt"];
3628--3678[label="0.137931;4pkt 4fpkt"];
3628--4523[label="0.03125;1pkt 1fpkt"];
3628--5470[label="0.0625;2pkt 2fpkt"];
3628--5500[label="0.0625;2pkt 2fpkt"];
3628--5527[label="0.0625;2pkt 2fpkt"];
3628--5608[label="1;32pkt 32fpkt"];
3663--5470[label="0.0909091;3pkt 3fpkt"];
3663--5500[label="0.0909091;3pkt 3fpkt"];
3663--5527[label="0.0909091;3pkt 3fpkt"];
3663--5608[label="0.121212;4pkt 4fpkt"];
3663--6050[label="0.030303;1pkt 1fpkt"];
3663--9178[label="0.363636;12pkt 12fpkt"];
3663--9597[label="0.166667;1pkt 1fpkt"];
3663--10883[label="0.030303;1pkt 1fpkt"];
3663--12880[label="0.166667;1pkt 1fpkt"];
3663--13537[label="0.333333;11pkt 11fpkt"];
3663--13556[label="0.030303;1pkt 1fpkt"];
3663--14454[label="0.2;1pkt 1fpkt"];
3678--4048[label="0.275862;8pkt 8fpkt"];
3678--5470[label="0.137931;4pkt 4fpkt"];
3678--5500[label="0.137931;4pkt 4fpkt"];
3678--5527[label="0.137931;4pkt 4fpkt"];
3678--5608[label="0.137931;4pkt 4fpkt"];
3678--6050[label="0.0344828;1pkt 1fpkt"];
3678--9178[label="0.275862;8pkt 8fpkt"];
3678--9305[label="0.275862;8pkt 8fpkt"];
3678--10883[label="0.0344828;1pkt 1fpkt"];
3678--12703[label="0.275862;8pkt 8fpkt"];
3678--13556[label="0.0344828;1pkt 1fpkt"];
3678--14374[label="0.275862;8pkt 8fpkt"];
4048--5470[label="0.122449;12pkt 12fpkt"];
4048--5500[label="0.122449;12pkt 12fpkt"];
4048--5527[label="0.122449;12pkt 12fpkt"];
4048--9305[label="1;98pkt 98fpkt"];
4048--12703[label="1;98pkt 98fpkt"];
4048--14374[label="1;98pkt 98fpkt"];
9305--12703[label="1;169pkt 169fpkt"];
9305--14374[label="1;169pkt 169fpkt"];
9597--12880[label="1;6pkt 6fpkt"];
9597--14454[label="1;5pkt 5fpkt"];
12703--14374[label="1;169pkt 169fpkt"];
12880--14454[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.92.163"/>
      <filter dst_port="80" src_ip="172.104.233.178"/>
      <filter dst_port="80" src_ip="153.21.105.18"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.134.93.173"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.235.104.173"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.72.35.174"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.201.162.174"/>
    </slice>
    <from sec="1172898696" usec="0"/>
    <to sec="1172898706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.35.70.175"/>
    </slice>
    <from sec="1172898588" usec="0"/>
    <to sec="1172898607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.116.90.175"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.211.106.175"/>
    </slice>
    <from sec="1172898221" usec="0"/>
    <to sec="1172898849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
1585[label="172.104.185.175;s;71pkt 71fpkt", shape=diamond, color=yellow];
9246[label="172.104.185.175;75pkt 75fpkt", shape=pentagon, color=darkviolet];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.104.185.175:*, 205.72.49.53:80}[58.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6301%)&lt;BR/&gt; 110: (1.36986%)&lt;BR/&gt; 55804: (0.684932%)&lt;BR/&gt; 55803: (0.684932%)&lt;BR/&gt; 53802: (0.684932%)&gt;];
}
1585--1819[label="0.028169;2pkt 2fpkt"];
1585--5470[label="0.0422535;3pkt 3fpkt"];
1585--5500[label="0.0422535;3pkt 3fpkt"];
1585--5527[label="0.0422535;3pkt 3fpkt"];
1585--9246[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="205.72.49.53" dst_port="80" src_ip="172.104.185.175"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.47.20.176"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.182.176"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.96.238.176"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.8.177"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.199.69.177"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.128.212.177"/>
    </slice>
    <from sec="1172898355" usec="0"/>
    <to sec="1172898404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.56.22.178"/>
    </slice>
    <from sec="1172898725" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.135.39.178"/>
    </slice>
    <from sec="1172898565" usec="0"/>
    <to sec="1172898676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.17.11.180"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.234.180"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.66.96.181"/>
    </slice>
    <from sec="1172898435" usec="0"/>
    <to sec="1172898448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.162.102.181"/>
    </slice>
    <from sec="1172898816" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.101.138.181"/>
    </slice>
    <from sec="1172898083" usec="0"/>
    <to sec="1172898106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.18.62.182"/>
    </slice>
    <from sec="1172898485" usec="0"/>
    <to sec="1172898590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.167.128.182"/>
    </slice>
    <from sec="1172898659" usec="0"/>
    <to sec="1172898672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.136.130.182"/>
    </slice>
    <from sec="1172898819" usec="0"/>
    <to sec="1172898831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
2921[label="214.125.72.183;s;58pkt 58fpkt", shape=diamond, color=yellow];
9391[label="214.125.72.183;58pkt 58fpkt", shape=pentagon, color=darkviolet];
12759[label="214.125.72.183;58pkt 58fpkt", shape=invtriangle, color=brown];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.72.183:*, *:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1863: (3.44828%)&lt;BR/&gt; 50781: (1.72414%)&lt;BR/&gt; 47430: (1.72414%)&lt;BR/&gt; 29995: (1.72414%)&gt;];
}
2921--5470[label="0.0172414;1pkt 1fpkt"];
2921--5500[label="0.0172414;1pkt 1fpkt"];
2921--5527[label="0.0172414;1pkt 1fpkt"];
2921--9391[label="1;58pkt 58fpkt"];
2921--12759[label="1;58pkt 58fpkt"];
9391--12759[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="214.125.72.183"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.0.107.183"/>
    </slice>
    <from sec="1172898558" usec="0"/>
    <to sec="1172898592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.43.184"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.60.47.184"/>
    </slice>
    <from sec="1172898847" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.240.101.184"/>
    </slice>
    <from sec="1172898484" usec="0"/>
    <to sec="1172898501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.239.136.184"/>
    </slice>
    <from sec="1172898342" usec="0"/>
    <to sec="1172898408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.190.184"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.36.115.185"/>
    </slice>
    <from sec="1172898426" usec="0"/>
    <to sec="1172898455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.125.77.186"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.52.165.186"/>
    </slice>
    <from sec="1172898462" usec="0"/>
    <to sec="1172898477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.43.188"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.34.74.188"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.55.84.188"/>
    </slice>
    <from sec="1172898099" usec="0"/>
    <to sec="1172898428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.130.39.189"/>
    </slice>
    <from sec="1172898402" usec="0"/>
    <to sec="1172898443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.33.128.189"/>
    </slice>
    <from sec="1172898149" usec="0"/>
    <to sec="1172898188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
3811[label="205.176.131.189;s;10pkt 10fpkt", shape=diamond, color=yellow];
9492[label="205.176.131.189;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12814[label="205.176.131.189;10pkt 10fpkt", shape=invtriangle, color=brown];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.176.131.189:80, 215.28.81.57:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58863: (5%)&lt;BR/&gt; 58862: (5%)&lt;BR/&gt; 58861: (5%)&lt;BR/&gt; 58860: (5%)&gt;];
}
3811--9492[label="1;10pkt 10fpkt"];
3811--12814[label="1;10pkt 10fpkt"];
9492--12814[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.57" src_ip="205.176.131.189" src_port="80"/>
    </slice>
    <from sec="1172898754" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.29.144.189"/>
    </slice>
    <from sec="1172898882" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
462[label="192.9.196.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
463[label="185.196.210.191;s;8pkt 8fpkt", shape=diamond, color=yellow];
805[label="185.196.208.12;s;121pkt 121fpkt", shape=diamond, color=yellow];
1274[label="96.33.17.87;d;122pkt 122fpkt", shape=diamond, color=yellow];
1660[label="172.179.240.102;s;14pkt 14fpkt", shape=diamond, color=yellow];
1663[label="96.89.17.136;d;6pkt 6fpkt", shape=diamond, color=yellow];
1928[label="96.155.109.176;d;168pkt 168fpkt", shape=diamond, color=yellow];
3433[label="172.179.160.109;s;9pkt 9fpkt", shape=diamond, color=yellow];
3437[label="185.196.200.189;s;5pkt 5fpkt", shape=diamond, color=yellow];
3445[label="35.147.66.26;d;4pkt 4fpkt", shape=diamond, color=yellow];
3539[label="96.156.25.195;d;3pkt 3fpkt", shape=diamond, color=yellow];
3895[label="192.9.196.242;d;1pkt 1fpkt", shape=hexagon, color=black];
3896[label="185.196.210.191;s;5pkt 5fpkt", shape=hexagon, color=black];
4054[label="185.196.208.12;s;121pkt 121fpkt", shape=hexagon, color=black];
4426[label="172.179.240.102;s;14pkt 14fpkt", shape=hexagon, color=black];
5865[label="185.196.208.12;120pkt 120fpkt", shape=pentagon, color=darkviolet];
7748[label="172.179.240.102;58pkt 58fpkt", shape=pentagon, color=darkviolet];
7885[label="172.179.160.109;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7915[label="185.196.10.111;26pkt 26fpkt", shape=pentagon, color=darkviolet];
9317[label="185.196.240.179;23pkt 23fpkt", shape=pentagon, color=darkviolet];
9496[label="185.196.200.189;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9529[label="185.196.210.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10321[label="172.179.13.237;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11798[label="172.179.240.102;57pkt 57fpkt", shape=invtriangle, color=brown];
11875[label="172.179.160.109;21pkt 21fpkt", shape=invtriangle, color=brown];
12713[label="185.196.240.179;22pkt 22fpkt", shape=invtriangle, color=brown];
12818[label="185.196.200.189;5pkt 5fpkt", shape=invtriangle, color=brown];
14006[label="172.179.160.109;21pkt 21fpkt", shape=invhouse, color=bisque];
14424[label="185.196.200.189;4pkt 4fpkt", shape=invhouse, color=bisque];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 96.155.109.176:53}[38.8372%]&lt;BR/&gt;{185.196.208.12:80, 96.33.17.87:*}[28.1395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.7621%)&lt;BR/&gt; 53: (15.0202%)&lt;BR/&gt; 25: (2.62097%)&lt;BR/&gt; 33924: (2.01613%)&lt;BR/&gt; 45740: (1.31048%)&gt;];
}
462--463[label="1;1pkt 1fpkt"];
462--3895[label="1;1pkt 1fpkt"];
462--3896[label="1;1pkt 1fpkt"];
462--9529[label="1;1pkt 1fpkt"];
463--1928[label="0.125;1pkt 1fpkt"];
463--3215[label="0.125;1pkt 1fpkt"];
463--3895[label="1;1pkt 1fpkt"];
463--3896[label="1;5pkt 5fpkt"];
463--5470[label="0.25;2pkt 2fpkt"];
463--5485[label="0.25;2pkt 2fpkt"];
463--5500[label="0.25;2pkt 2fpkt"];
463--5514[label="0.25;2pkt 2fpkt"];
463--5527[label="0.25;2pkt 2fpkt"];
463--5541[label="0.25;2pkt 2fpkt"];
463--9529[label="1;1pkt 1fpkt"];
805--1274[label="1;121pkt 121fpkt"];
805--4054[label="1;121pkt 121fpkt"];
805--5865[label="1;120pkt 120fpkt"];
1274--4054[label="1;121pkt 121fpkt"];
1274--5865[label="1;120pkt 120fpkt"];
1274--7885[label="0.047619;1pkt 1fpkt"];
1274--11875[label="0.047619;1pkt 1fpkt"];
1274--14006[label="0.047619;1pkt 1fpkt"];
1660--1663[label="1;6pkt 6fpkt"];
1660--1928[label="0.0714286;1pkt 1fpkt"];
1660--4426[label="1;14pkt 14fpkt"];
1660--7748[label="1;14pkt 14fpkt"];
1660--11798[label="1;14pkt 14fpkt"];
1663--4426[label="1;6pkt 6fpkt"];
1663--7748[label="1;6pkt 6fpkt"];
1663--11798[label="1;6pkt 6fpkt"];
1928--1946[label="0.00595238;1pkt 1fpkt"];
1928--2245[label="0.00595238;1pkt 1fpkt"];
1928--2286[label="0.00595238;1pkt 1fpkt"];
1928--2324[label="0.00595238;1pkt 1fpkt"];
1928--2368[label="0.00877193;1pkt 1fpkt"];
1928--2409[label="0.00595238;1pkt 1fpkt"];
1928--2875[label="0.00763359;1pkt 1fpkt"];
1928--2877[label="0.00613497;1pkt 1fpkt"];
1928--2900[label="0.00595238;1pkt 1fpkt"];
1928--2922[label="0.0119048;1pkt 1fpkt"];
1928--3193[label="0.00980392;1pkt 1fpkt"];
1928--3197[label="0.00649351;1pkt 1fpkt"];
1928--3264[label="0.016129;1pkt 1fpkt"];
1928--3437[label="0.2;1pkt 1fpkt"];
1928--3620[label="0.00757576;1pkt 1fpkt"];
1928--3896[label="0.2;1pkt 1fpkt"];
1928--3983[label="0.00595238;1pkt 1fpkt"];
1928--4137[label="0.00595238;1pkt 1fpkt"];
1928--4139[label="0.00595238;1pkt 1fpkt"];
1928--4151[label="0.00595238;1pkt 1fpkt"];
1928--4260[label="0.00595238;1pkt 1fpkt"];
1928--4293[label="0.00595238;1pkt 1fpkt"];
1928--4307[label="0.00595238;1pkt 1fpkt"];
1928--4426[label="0.0714286;1pkt 1fpkt"];
1928--4509[label="0.00595238;1pkt 1fpkt"];
1928--4548[label="0.00595238;1pkt 1fpkt"];
1928--4571[label="0.00680272;1pkt 1fpkt"];
1928--4585[label="0.00595238;1pkt 1fpkt"];
1928--4752[label="0.00595238;1pkt 1fpkt"];
1928--4766[label="0.00595238;1pkt 1fpkt"];
1928--4979[label="0.00595238;1pkt 1fpkt"];
1928--4983[label="0.00595238;1pkt 1fpkt"];
1928--4996[label="0.00813008;1pkt 1fpkt"];
1928--5007[label="0.00689655;1pkt 1fpkt"];
1928--5037[label="0.00595238;1pkt 1fpkt"];
1928--5155[label="0.00595238;1pkt 1fpkt"];
1928--5173[label="0.00595238;1pkt 1fpkt"];
1928--5230[label="0.00757576;1pkt 1fpkt"];
1928--5425[label="0.00595238;1pkt 1fpkt"];
1928--5485[label="0.291667;49pkt 49fpkt"];
1928--5514[label="0.291667;49pkt 49fpkt"];
1928--5541[label="0.291667;49pkt 49fpkt"];
1928--5673[label="0.00819672;1pkt 1fpkt"];
1928--5859[label="0.0222222;1pkt 1fpkt"];
1928--6029[label="0.00595238;1pkt 1fpkt"];
1928--6069[label="0.0135135;1pkt 1fpkt"];
1928--6138[label="0.0196078;1pkt 1fpkt"];
1928--6353[label="0.00595238;1pkt 1fpkt"];
1928--6547[label="0.00595238;1pkt 1fpkt"];
1928--6678[label="0.0344828;1pkt 1fpkt"];
1928--6716[label="0.0169492;1pkt 1fpkt"];
1928--6845[label="0.0153846;1pkt 1fpkt"];
1928--6876[label="0.00649351;1pkt 1fpkt"];
1928--6930[label="0.0119048;1pkt 1fpkt"];
1928--6967[label="0.0151515;1pkt 1fpkt"];
1928--7085[label="0.0175439;1pkt 1fpkt"];
1928--7216[label="0.00595238;1pkt 1fpkt"];
1928--7365[label="0.02;1pkt 1fpkt"];
1928--7469[label="0.00884956;1pkt 1fpkt"];
1928--7590[label="0.0344828;1pkt 1fpkt"];
1928--7748[label="0.0172414;1pkt 1fpkt"];
1928--7765[label="0.0833333;1pkt 1fpkt"];
1928--7915[label="0.0384615;1pkt 1fpkt"];
1928--8186[label="0.00595238;1pkt 1fpkt"];
1928--8232[label="0.00680272;1pkt 1fpkt"];
1928--8311[label="0.00595238;1pkt 1fpkt"];
1928--8466[label="0.0285714;1pkt 1fpkt"];
1928--8597[label="0.00909091;1pkt 1fpkt"];
1928--8872[label="0.00595238;1pkt 1fpkt"];
1928--8923[label="0.0131579;1pkt 1fpkt"];
1928--8950[label="0.0104167;1pkt 1fpkt"];
1928--8968[label="0.00729927;1pkt 1fpkt"];
1928--9057[label="0.00595238;1pkt 1fpkt"];
1928--9137[label="0.025641;1pkt 1fpkt"];
1928--9317[label="0.0434783;1pkt 1fpkt"];
1928--9338[label="0.105263;4pkt 4fpkt"];
1928--9340[label="0.0588235;1pkt 1fpkt"];
1928--9496[label="0.2;1pkt 1fpkt"];
1928--9777[label="0.00833333;1pkt 1fpkt"];
1928--9781[label="0.00595238;1pkt 1fpkt"];
1928--9784[label="0.00613497;1pkt 1fpkt"];
1928--9822[label="0.00595238;1pkt 1fpkt"];
1928--9930[label="0.00735294;1pkt 1fpkt"];
1928--10117[label="0.00595238;1pkt 1fpkt"];
1928--10321[label="0.166667;1pkt 1fpkt"];
1928--10349[label="0.142857;1pkt 1fpkt"];
1928--10871[label="0.00595238;1pkt 1fpkt"];
1928--10896[label="0.0135135;1pkt 1fpkt"];
1928--11051[label="0.00595238;1pkt 1fpkt"];
1928--11238[label="0.0169492;1pkt 1fpkt"];
1928--11326[label="0.00649351;1pkt 1fpkt"];
1928--11354[label="0.0119048;1pkt 1fpkt"];
1928--11374[label="0.0151515;1pkt 1fpkt"];
1928--11508[label="0.00595238;1pkt 1fpkt"];
1928--11642[label="0.00884956;1pkt 1fpkt"];
1928--11704[label="0.0344828;1pkt 1fpkt"];
1928--11798[label="0.0175439;1pkt 1fpkt"];
1928--12055[label="0.00595238;1pkt 1fpkt"];
1928--12081[label="0.00680272;1pkt 1fpkt"];
1928--12215[label="0.0285714;1pkt 1fpkt"];
1928--12456[label="0.00595238;1pkt 1fpkt"];
1928--12566[label="0.00595238;1pkt 1fpkt"];
1928--12713[label="0.0454545;1pkt 1fpkt"];
1928--12728[label="0.0588235;1pkt 1fpkt"];
1928--12818[label="0.2;1pkt 1fpkt"];
1928--12979[label="0.00617284;1pkt 1fpkt"];
1928--13051[label="0.00735294;1pkt 1fpkt"];
1928--13550[label="0.00595238;1pkt 1fpkt"];
1928--13706[label="0.00595238;1pkt 1fpkt"];
1928--13714[label="0.0172414;1pkt 1fpkt"];
1928--13775[label="0.0153846;1pkt 1fpkt"];
1928--13851[label="0.00595238;1pkt 1fpkt"];
1928--13901[label="0.00892857;1pkt 1fpkt"];
1928--14385[label="0.0588235;1pkt 1fpkt"];
1928--14496[label="0.00595238;1pkt 1fpkt"];
1928--14498[label="0.00613497;1pkt 1fpkt"];
1928--14532[label="0.00735294;1pkt 1fpkt"];
3433--3445[label="0.5;2pkt 2fpkt"];
3433--3539[label="1;3pkt 3fpkt"];
3433--7885[label="1;9pkt 9fpkt"];
3433--11875[label="1;9pkt 9fpkt"];
3433--14006[label="1;9pkt 9fpkt"];
3437--3445[label="0.5;2pkt 2fpkt"];
3437--9496[label="1;5pkt 5fpkt"];
3437--12818[label="1;5pkt 5fpkt"];
3437--14424[label="1;4pkt 4fpkt"];
3445--7885[label="0.5;2pkt 2fpkt"];
3445--9496[label="0.5;2pkt 2fpkt"];
3445--11875[label="0.5;2pkt 2fpkt"];
3445--12818[label="0.5;2pkt 2fpkt"];
3445--14006[label="0.5;2pkt 2fpkt"];
3445--14424[label="0.5;2pkt 2fpkt"];
3539--7885[label="1;3pkt 3fpkt"];
3539--11875[label="1;3pkt 3fpkt"];
3539--14006[label="1;3pkt 3fpkt"];
3895--3896[label="1;1pkt 1fpkt"];
3895--9529[label="1;1pkt 1fpkt"];
3896--5470[label="0.4;2pkt 2fpkt"];
3896--5485[label="0.4;2pkt 2fpkt"];
3896--5500[label="0.4;2pkt 2fpkt"];
3896--5514[label="0.4;2pkt 2fpkt"];
3896--5527[label="0.4;2pkt 2fpkt"];
3896--5541[label="0.4;2pkt 2fpkt"];
3896--9529[label="1;1pkt 1fpkt"];
4054--5865[label="1;120pkt 120fpkt"];
4426--7748[label="1;14pkt 14fpkt"];
4426--11798[label="1;14pkt 14fpkt"];
7748--11798[label="1;57pkt 57fpkt"];
7885--11875[label="1;21pkt 21fpkt"];
7885--14006[label="1;21pkt 21fpkt"];
9317--12713[label="1;22pkt 22fpkt"];
9496--12818[label="1;5pkt 5fpkt"];
9496--14424[label="1;4pkt 4fpkt"];
11875--14006[label="1;21pkt 21fpkt"];
12818--14424[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="96.155.109.176" dst_port="53"/>
      <filter dst_ip="96.33.17.87" src_ip="185.196.208.12" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.76.8.190"/>
    </slice>
    <from sec="1172898509" usec="0"/>
    <to sec="1172898538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.186.69.190"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.59869,2.81692,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
113[label="208.15.176.190s;101pkt 101fpkt", shape=rectangle, color=red];
9514[label="208.15.176.190;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.15.176.190:*, *:1026}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 30995: (0.49505%)&lt;BR/&gt; 30994: (0.49505%)&lt;BR/&gt; 30993: (0.49505%)&lt;BR/&gt; 30992: (0.49505%)&gt;];
}
113--9514[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="208.15.176.190"/>
    </slice>
    <from sec="1172898716" usec="0"/>
    <to sec="1172898717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.197.20.191"/>
    </slice>
    <from sec="1172898496" usec="0"/>
    <to sec="1172898522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.11.193.191"/>
    </slice>
    <from sec="1172898384" usec="0"/>
    <to sec="1172898406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.42.192"/>
    </slice>
    <from sec="1172898603" usec="0"/>
    <to sec="1172898676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.183.71.192"/>
    </slice>
    <from sec="1172898155" usec="0"/>
    <to sec="1172898172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.3.1.193"/>
    </slice>
    <from sec="1172898115" usec="0"/>
    <to sec="1172898124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.217.15.193"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
2880[label="154.200.40.193;s;57pkt 57fpkt", shape=diamond, color=yellow];
9565[label="154.200.40.193;78pkt 78fpkt", shape=pentagon, color=darkviolet];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.200.40.193:80, 26.29.1.39:*}[37.9747%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65128: (0.740741%)&lt;BR/&gt; 64947: (0.740741%)&lt;BR/&gt; 63879: (0.740741%)&lt;BR/&gt; 60773: (0.740741%)&gt;];
}
2880--9565[label="0.982456;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="26.29.1.39" src_ip="154.200.40.193" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.184.64.193"/>
    </slice>
    <from sec="1172898653" usec="0"/>
    <to sec="1172898668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.178.149.193"/>
    </slice>
    <from sec="1172898792" usec="0"/>
    <to sec="1172898820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.101.132.194"/>
    </slice>
    <from sec="1172898593" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.186.192.194"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.47.109.195"/>
    </slice>
    <from sec="1172898498" usec="0"/>
    <to sec="1172898593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.82.213.195"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.64.239.196"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.52.197"/>
    </slice>
    <from sec="1172898075" usec="0"/>
    <to sec="1172898889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.170.146.197"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.156.197"/>
    </slice>
    <from sec="1172898140" usec="0"/>
    <to sec="1172898687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.164.197"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.20.229.197"/>
    </slice>
    <from sec="1172898152" usec="0"/>
    <to sec="1172898205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.172.187.198"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.128.18.199"/>
    </slice>
    <from sec="1172898238" usec="0"/>
    <to sec="1172898247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.162.47.199"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.68.90.199"/>
    </slice>
    <from sec="1172898023" usec="0"/>
    <to sec="1172898038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.124.136.200"/>
    </slice>
    <from sec="1172898162" usec="0"/>
    <to sec="1172898182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.79.141.200"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.53.197.200"/>
    </slice>
    <from sec="1172898244" usec="0"/>
    <to sec="1172898881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.144.21.201"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.34.34.201"/>
    </slice>
    <from sec="1172898251" usec="0"/>
    <to sec="1172898375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.133.140.201"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.47.34.202"/>
    </slice>
    <from sec="1172898721" usec="0"/>
    <to sec="1172898737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
2702[label="170.123.147.193;d;56pkt 56fpkt", shape=diamond, color=yellow];
9727[label="1.163.80.202;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12948[label="1.163.80.202;6pkt 6fpkt", shape=invtriangle, color=brown];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.123.147.193:25}[55.3571%]&lt;BR/&gt;{*:25, 170.123.147.193:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.1014%)&lt;BR/&gt; 2947: (2.17391%)&lt;BR/&gt; 2451: (2.17391%)&lt;BR/&gt; 2065: (2.17391%)&lt;BR/&gt; 2042: (2.17391%)&gt;];
}
2702--7552[label="0.0714286;1pkt 1fpkt"];
2702--7806[label="0.0178571;1pkt 1fpkt"];
2702--9727[label="1;7pkt 7fpkt"];
2702--11678[label="0.0714286;1pkt 1fpkt"];
2702--12948[label="1;6pkt 6fpkt"];
9727--12948[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.147.193" src_port="25"/>
      <filter dst_ip="170.123.147.193" dst_port="25"/>
    </slice>
    <from sec="1172898017" usec="0"/>
    <to sec="1172898704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.148.110.202"/>
    </slice>
    <from sec="1172898543" usec="0"/>
    <to sec="1172898558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.21.212.202"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.43.161.203"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.167.26.204"/>
    </slice>
    <from sec="1172898572" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.85.33.204"/>
    </slice>
    <from sec="1172898747" usec="0"/>
    <to sec="1172898751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.72.41.204"/>
    </slice>
    <from sec="1172898462" usec="0"/>
    <to sec="1172898477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.10.24.205"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.59.98.205"/>
    </slice>
    <from sec="1172898209" usec="0"/>
    <to sec="1172898350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.197.111.205"/>
    </slice>
    <from sec="1172898315" usec="0"/>
    <to sec="1172898628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.102.7.206"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.98.10.206"/>
    </slice>
    <from sec="1172898876" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.144.206"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.172.25.207"/>
    </slice>
    <from sec="1172898418" usec="0"/>
    <to sec="1172898432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.133.140.207"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.211.249.207"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.125.74.208"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.156.74.208"/>
    </slice>
    <from sec="1172898116" usec="0"/>
    <to sec="1172898130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.64.105.208"/>
    </slice>
    <from sec="1172898590" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.114.204.208"/>
    </slice>
    <from sec="1172898302" usec="0"/>
    <to sec="1172898317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.24.16.209"/>
    </slice>
    <from sec="1172898298" usec="0"/>
    <to sec="1172898422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.98.90.209"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.178.209"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.244.229.209"/>
    </slice>
    <from sec="1172898016" usec="0"/>
    <to sec="1172898876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.229.210"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.99.73.211"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
3229[label="201.131.187.211;s;574pkt 574fpkt", shape=diamond, color=yellow];
9911[label="201.131.187.211;618pkt 618fpkt", shape=pentagon, color=darkviolet];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.131.187.211:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3229--9911[label="1;574pkt 574fpkt"];
</description>
    <slice>
      <filter src_ip="201.131.187.211"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.252.220.211"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.24.5.212"/>
    </slice>
    <from sec="1172898174" usec="0"/>
    <to sec="1172898187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.99.29.212"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.41.48.212"/>
    </slice>
    <from sec="1172898027" usec="0"/>
    <to sec="1172898106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.250.71.212"/>
    </slice>
    <from sec="1172898441" usec="0"/>
    <to sec="1172898485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.252.220.213"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.66.14.214"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.147.170.215"/>
    </slice>
    <from sec="1172898809" usec="0"/>
    <to sec="1172898823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.123.194.215"/>
    </slice>
    <from sec="1172898034" usec="0"/>
    <to sec="1172898756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.48.11.216"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
2857[label="170.123.46.61;d;59pkt 59fpkt", shape=diamond, color=yellow];
3151[label="26.29.8.218;s;58pkt 58fpkt", shape=diamond, color=yellow];
10006[label="26.29.8.218;70pkt 70fpkt", shape=pentagon, color=darkviolet];
13098[label="26.29.8.218;70pkt 70fpkt", shape=invtriangle, color=brown];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.29.8.218:*, 170.123.46.61:80}[98.5915%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65115: (0.77821%)&lt;BR/&gt; 64942: (0.77821%)&lt;BR/&gt; 64683: (0.77821%)&lt;BR/&gt; 63721: (0.77821%)&gt;];
}
2857--3151[label="1;58pkt 58fpkt"];
2857--5470[label="0.0677966;4pkt 4fpkt"];
2857--5500[label="0.0677966;4pkt 4fpkt"];
2857--5527[label="0.0677966;4pkt 4fpkt"];
2857--10006[label="0.983051;58pkt 58fpkt"];
2857--13098[label="0.983051;58pkt 58fpkt"];
3151--5470[label="0.0689655;4pkt 4fpkt"];
3151--5500[label="0.0689655;4pkt 4fpkt"];
3151--5527[label="0.0689655;4pkt 4fpkt"];
3151--10006[label="1;58pkt 58fpkt"];
3151--13098[label="1;58pkt 58fpkt"];
10006--13098[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.46.61" dst_port="80" src_ip="26.29.8.218"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.31.10.218"/>
    </slice>
    <from sec="1172898876" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.147.218"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.53.66.220"/>
    </slice>
    <from sec="1172898403" usec="0"/>
    <to sec="1172898523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38358,2.74071,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
770[label="170.123.147.73;s;35pkt 35fpkt", shape=diamond, color=yellow];
1247[label="100.22.222.71;d;5pkt 5fpkt", shape=diamond, color=yellow];
2109[label="28.64.14.106;d;84pkt 84fpkt", shape=diamond, color=yellow];
5052[label="170.123.147.73;s;35pkt 35fpkt", shape=hexagon, color=black];
10056[label="170.123.190.220;54pkt 54fpkt", shape=pentagon, color=darkviolet];
10173[label="170.123.44.227;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.190.220:80, 28.64.14.106:*}[36.0294%]&lt;BR/&gt;{170.123.147.73:80, *:*}[25.7353%]&lt;BR/&gt;{170.123.44.227:80, *:*}[22.7941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 17110: (0.614754%)&lt;BR/&gt; 17106: (0.614754%)&lt;BR/&gt; 17057: (0.614754%)&lt;BR/&gt; 17038: (0.614754%)&gt;];
}
770--1247[label="1;5pkt 5fpkt"];
770--2109[label="0.457143;16pkt 16fpkt"];
770--5052[label="1;35pkt 35fpkt"];
1247--5052[label="1;5pkt 5fpkt"];
2109--5052[label="0.457143;16pkt 16fpkt"];
2109--10056[label="0.907407;49pkt 49fpkt"];
2109--10173[label="0.0967742;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="170.123.147.73" src_port="80"/>
      <filter src_ip="170.123.44.227" src_port="80"/>
      <filter dst_ip="28.64.14.106" src_ip="170.123.190.220" src_port="80"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.10.221"/>
    </slice>
    <from sec="1172898505" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
448[label="170.123.196.56;d;344pkt 344fpkt", shape=diamond, color=yellow];
737[label="33.129.66.86;s;2pkt 2fpkt", shape=diamond, color=yellow];
741[label="192.153.213.95;s;6pkt 6fpkt", shape=diamond, color=yellow];
966[label="26.29.20.117;s;85pkt 85fpkt", shape=diamond, color=yellow];
1221[label="33.129.66.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
1279[label="153.21.69.187;d;297pkt 297fpkt", shape=diamond, color=yellow];
1334[label="193.121.154.2;s;117pkt 117fpkt", shape=diamond, color=yellow];
1879[label="18.224.23.43;s;110pkt 110fpkt", shape=diamond, color=yellow];
2102[label="198.182.234.181;s;36pkt 36fpkt", shape=diamond, color=yellow];
2591[label="172.169.51.54;d;116pkt 116fpkt", shape=diamond, color=yellow];
2738[label="168.34.200.221;s;7pkt 7fpkt", shape=diamond, color=yellow];
3006[label="100.124.255.83;s;41pkt 41fpkt", shape=diamond, color=yellow];
4070[label="193.121.154.2;s;117pkt 117fpkt", shape=hexagon, color=black];
4195[label="33.129.66.86;s;2pkt 2fpkt", shape=hexagon, color=black];
4303[label="26.29.20.117;s;69pkt 69fpkt", shape=hexagon, color=black];
4334[label="18.224.23.43;s;69pkt 69fpkt", shape=hexagon, color=black];
4449[label="198.182.234.181;s;16pkt 16fpkt", shape=hexagon, color=black];
4516[label="170.123.196.56;d;344pkt 344fpkt", shape=hexagon, color=black];
4730[label="172.169.51.54;d;116pkt 116fpkt", shape=hexagon, color=black];
4797[label="33.129.66.81;s;1pkt 1fpkt", shape=hexagon, color=black];
4913[label="192.153.213.95;s;6pkt 6fpkt", shape=hexagon, color=black];
4923[label="153.21.69.187;d;297pkt 297fpkt", shape=hexagon, color=black];
5091[label="168.34.200.221;s;7pkt 7fpkt", shape=hexagon, color=black];
5623[label="193.121.154.2;117pkt 117fpkt", shape=pentagon, color=darkviolet];
5660[label="193.121.154.3;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6403[label="198.182.234.37;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6518[label="18.224.23.43;115pkt 115fpkt", shape=pentagon, color=darkviolet];
7297[label="33.129.66.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7367[label="100.124.255.83;42pkt 42fpkt", shape=pentagon, color=darkviolet];
7425[label="33.129.66.86;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7988[label="206.230.158.115;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8026[label="26.29.20.117;89pkt 89fpkt", shape=pentagon, color=darkviolet];
9360[label="198.182.234.181;36pkt 36fpkt", shape=pentagon, color=darkviolet];
10083[label="168.34.200.221;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11135[label="18.224.23.43;114pkt 114fpkt", shape=invtriangle, color=brown];
11615[label="33.129.66.86;2pkt 2fpkt", shape=invtriangle, color=brown];
12743[label="198.182.234.181;35pkt 35fpkt", shape=invtriangle, color=brown];
13140[label="168.34.200.221;6pkt 6fpkt", shape=invtriangle, color=brown];
13672[label="18.224.23.43;115pkt 115fpkt", shape=invhouse, color=bisque];
13885[label="33.129.66.86;2pkt 2fpkt", shape=invhouse, color=bisque];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 153.21.69.187:*}[29.923%]&lt;BR/&gt;{*:80, 170.123.196.56:*}[25.7426%]&lt;BR/&gt;{*:53, *:*}[22.7723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.1101%)&lt;BR/&gt; 53: (13.2518%)&lt;BR/&gt; 443: (3.09208%)&lt;BR/&gt; 123: (0.849473%)&lt;BR/&gt; 32768: (0.390758%)&gt;];
}
448--634[label="0.0552326;19pkt 19fpkt"];
448--668[label="0.0175439;1pkt 1fpkt"];
448--737[label="1;2pkt 2fpkt"];
448--741[label="1;6pkt 6fpkt"];
448--924[label="0.00290698;1pkt 1fpkt"];
448--929[label="0.0915033;14pkt 14fpkt"];
448--966[label="0.223529;19pkt 19fpkt"];
448--980[label="0.0348837;12pkt 12fpkt"];
448--1114[label="0.0138889;1pkt 1fpkt"];
448--1221[label="1;1pkt 1fpkt"];
448--1571[label="0.214286;21pkt 21fpkt"];
448--1879[label="0.2;22pkt 22fpkt"];
448--2014[label="0.0227273;1pkt 1fpkt"];
448--2024[label="0.0102041;1pkt 1fpkt"];
448--2102[label="0.305556;11pkt 11fpkt"];
448--2289[label="0.00735294;1pkt 1fpkt"];
448--2617[label="0.0189873;3pkt 3fpkt"];
448--3006[label="0.390244;16pkt 16fpkt"];
448--3175[label="0.0657895;5pkt 5fpkt"];
448--3287[label="0.157895;6pkt 6fpkt"];
448--4195[label="1;2pkt 2fpkt"];
448--4303[label="0.202899;14pkt 14fpkt"];
448--4309[label="0.00581395;2pkt 2fpkt"];
448--4334[label="0.0869565;6pkt 6fpkt"];
448--4406[label="0.0322581;1pkt 1fpkt"];
448--4516[label="1;344pkt 344fpkt"];
448--4610[label="0.0121951;1pkt 1fpkt"];
448--4754[label="0.00806452;1pkt 1fpkt"];
448--4797[label="1;1pkt 1fpkt"];
448--4913[label="1;6pkt 6fpkt"];
448--5194[label="0.0175439;1pkt 1fpkt"];
448--5398[label="0.00581395;2pkt 2fpkt"];
448--5983[label="0.183673;9pkt 9fpkt"];
448--6166[label="0.0188679;1pkt 1fpkt"];
448--6386[label="0.0153846;1pkt 1fpkt"];
448--6403[label="0.0769231;2pkt 2fpkt"];
448--6407[label="0.0175439;1pkt 1fpkt"];
448--6518[label="0.191304;22pkt 22fpkt"];
448--6825[label="0.00724638;1pkt 1fpkt"];
448--7130[label="0.0649351;5pkt 5fpkt"];
448--7297[label="1;1pkt 1fpkt"];
448--7367[label="0.380952;16pkt 16fpkt"];
448--7425[label="1;2pkt 2fpkt"];
448--7844[label="0.0075188;1pkt 1fpkt"];
448--7988[label="1;10pkt 10fpkt"];
448--8003[label="0.0714286;2pkt 2fpkt"];
448--8026[label="0.213483;19pkt 19fpkt"];
448--8279[label="0.0140845;1pkt 1fpkt"];
448--8327[label="0.0324675;5pkt 5fpkt"];
448--8500[label="0.0225564;3pkt 3fpkt"];
448--8507[label="0.015873;2pkt 2fpkt"];
448--8890[label="0.0625;1pkt 1fpkt"];
448--9360[label="0.305556;11pkt 11fpkt"];
448--10176[label="0.0178571;1pkt 1fpkt"];
448--10493[label="0.181818;6pkt 6fpkt"];
448--10842[label="0.166667;8pkt 8fpkt"];
448--11069[label="0.0153846;1pkt 1fpkt"];
448--11078[label="0.0175439;1pkt 1fpkt"];
448--11135[label="0.192982;22pkt 22fpkt"];
448--11295[label="0.00729927;1pkt 1fpkt"];
448--11461[label="0.0657895;5pkt 5fpkt"];
448--11615[label="1;2pkt 2fpkt"];
448--11848[label="0.00757576;1pkt 1fpkt"];
448--11944[label="0.0714286;2pkt 2fpkt"];
448--12109[label="0.0140845;1pkt 1fpkt"];
448--12237[label="0.0227273;3pkt 3fpkt"];
448--12240[label="0.016;2pkt 2fpkt"];
448--12466[label="0.0666667;1pkt 1fpkt"];
448--12743[label="0.314286;11pkt 11fpkt"];
448--13638[label="0.015625;1pkt 1fpkt"];
448--13642[label="0.0178571;1pkt 1fpkt"];
448--13672[label="0.191304;22pkt 22fpkt"];
448--13885[label="1;2pkt 2fpkt"];
448--13990[label="0.00757576;1pkt 1fpkt"];
448--14117[label="0.0142857;1pkt 1fpkt"];
737--4195[label="1;2pkt 2fpkt"];
737--4516[label="1;2pkt 2fpkt"];
737--7425[label="1;2pkt 2fpkt"];
737--11615[label="1;2pkt 2fpkt"];
737--13885[label="1;2pkt 2fpkt"];
741--4516[label="1;6pkt 6fpkt"];
741--4913[label="1;6pkt 6fpkt"];
966--1188[label="0.0117647;1pkt 1fpkt"];
966--1201[label="0.0235294;2pkt 2fpkt"];
966--1416[label="0.0294118;1pkt 1fpkt"];
966--1637[label="0.0483871;3pkt 3fpkt"];
966--2313[label="0.0588235;5pkt 5fpkt"];
966--2591[label="0.2;17pkt 17fpkt"];
966--4109[label="0.0941176;8pkt 8fpkt"];
966--4206[label="0.0483871;3pkt 3fpkt"];
966--4303[label="1;69pkt 69fpkt"];
966--4516[label="0.223529;19pkt 19fpkt"];
966--4730[label="0.2;17pkt 17fpkt"];
966--8026[label="1;85pkt 85fpkt"];
1221--4516[label="1;1pkt 1fpkt"];
1221--4797[label="1;1pkt 1fpkt"];
1221--7297[label="1;1pkt 1fpkt"];
1279--1334[label="1;117pkt 117fpkt"];
1279--1446[label="0.003367;1pkt 1fpkt"];
1279--2102[label="0.666667;24pkt 24fpkt"];
1279--2738[label="0.857143;6pkt 6fpkt"];
1279--3006[label="0.585366;24pkt 24fpkt"];
1279--3277[label="0.0194175;2pkt 2fpkt"];
1279--4070[label="1;117pkt 117fpkt"];
1279--4123[label="0.003367;1pkt 1fpkt"];
1279--4449[label="1;16pkt 16fpkt"];
1279--4923[label="1;297pkt 297fpkt"];
1279--5091[label="0.857143;6pkt 6fpkt"];
1279--5257[label="0.0194175;2pkt 2fpkt"];
1279--5623[label="1;117pkt 117fpkt"];
1279--5660[label="1;19pkt 19fpkt"];
1279--6321[label="0.003367;1pkt 1fpkt"];
1279--6403[label="0.576923;15pkt 15fpkt"];
1279--7367[label="0.571429;24pkt 24fpkt"];
1279--8254[label="0.0952381;2pkt 2fpkt"];
1279--9122[label="0.0188679;2pkt 2fpkt"];
1279--9360[label="0.666667;24pkt 24fpkt"];
1279--10083[label="0.833333;5pkt 5fpkt"];
1279--12094[label="0.05;1pkt 1fpkt"];
1279--12384[label="0.0625;1pkt 1fpkt"];
1279--12606[label="0.00952381;1pkt 1fpkt"];
1279--12743[label="0.657143;23pkt 23fpkt"];
1279--13140[label="0.833333;5pkt 5fpkt"];
1279--14325[label="0.0188679;2pkt 2fpkt"];
1334--4070[label="1;117pkt 117fpkt"];
1334--4923[label="1;117pkt 117fpkt"];
1334--5623[label="1;117pkt 117fpkt"];
1879--2220[label="0.0140845;1pkt 1fpkt"];
1879--2247[label="0.00909091;1pkt 1fpkt"];
1879--2280[label="0.00909091;1pkt 1fpkt"];
1879--2285[label="0.00909091;1pkt 1fpkt"];
1879--2314[label="0.00909091;1pkt 1fpkt"];
1879--2588[label="0.00909091;1pkt 1fpkt"];
1879--2591[label="0.0636364;7pkt 7fpkt"];
1879--2642[label="0.00909091;1pkt 1fpkt"];
1879--3148[label="0.00909091;1pkt 1fpkt"];
1879--3596[label="0.00909091;1pkt 1fpkt"];
1879--3879[label="0.0727273;8pkt 8fpkt"];
1879--3979[label="0.00909091;1pkt 1fpkt"];
1879--3982[label="0.00909091;1pkt 1fpkt"];
1879--4004[label="0.00909091;1pkt 1fpkt"];
1879--4115[label="0.00909091;1pkt 1fpkt"];
1879--4128[label="0.00909091;1pkt 1fpkt"];
1879--4261[label="0.00909091;1pkt 1fpkt"];
1879--4292[label="0.00909091;1pkt 1fpkt"];
1879--4334[label="1;69pkt 69fpkt"];
1879--4516[label="0.2;22pkt 22fpkt"];
1879--4518[label="0.0181818;1pkt 1fpkt"];
1879--4547[label="0.00909091;1pkt 1fpkt"];
1879--4563[label="0.00909091;1pkt 1fpkt"];
1879--4691[label="0.00909091;1pkt 1fpkt"];
1879--4730[label="0.0636364;7pkt 7fpkt"];
1879--5015[label="0.00909091;1pkt 1fpkt"];
1879--5134[label="0.00909091;1pkt 1fpkt"];
1879--5172[label="0.00909091;1pkt 1fpkt"];
1879--5174[label="0.00909091;1pkt 1fpkt"];
1879--5372[label="0.0545455;6pkt 6fpkt"];
1879--5485[label="0.0181818;2pkt 2fpkt"];
1879--5514[label="0.0181818;2pkt 2fpkt"];
1879--5541[label="0.0181818;2pkt 2fpkt"];
1879--6518[label="1;110pkt 110fpkt"];
1879--11135[label="0.990909;109pkt 109fpkt"];
1879--13672[label="1;110pkt 110fpkt"];
2102--4449[label="1;16pkt 16fpkt"];
2102--4516[label="0.305556;11pkt 11fpkt"];
2102--4923[label="0.666667;24pkt 24fpkt"];
2102--9360[label="1;36pkt 36fpkt"];
2102--12743[label="1;35pkt 35fpkt"];
2591--3190[label="0.0140845;1pkt 1fpkt"];
2591--3886[label="0.0172414;2pkt 2fpkt"];
2591--4025[label="0.0222222;1pkt 1fpkt"];
2591--4303[label="0.217391;15pkt 15fpkt"];
2591--4309[label="0.0172414;2pkt 2fpkt"];
2591--4334[label="0.0434783;3pkt 3fpkt"];
2591--4372[label="0.0172414;2pkt 2fpkt"];
2591--4406[label="0.0645161;2pkt 2fpkt"];
2591--4730[label="1;116pkt 116fpkt"];
2591--5002[label="0.015625;1pkt 1fpkt"];
2591--5194[label="0.0175439;1pkt 1fpkt"];
2591--5398[label="0.0172414;2pkt 2fpkt"];
2591--6166[label="0.0188679;1pkt 1fpkt"];
2591--6386[label="0.0153846;1pkt 1fpkt"];
2591--6407[label="0.0350877;2pkt 2fpkt"];
2591--6518[label="0.0608696;7pkt 7fpkt"];
2591--7207[label="0.0454545;2pkt 2fpkt"];
2591--7285[label="0.0571429;2pkt 2fpkt"];
2591--7701[label="0.00862069;1pkt 1fpkt"];
2591--7844[label="0.00862069;1pkt 1fpkt"];
2591--8026[label="0.191011;17pkt 17fpkt"];
2591--8507[label="0.00862069;1pkt 1fpkt"];
2591--9259[label="0.0133333;1pkt 1fpkt"];
2591--9816[label="0.0188679;1pkt 1fpkt"];
2591--9889[label="0.0172414;2pkt 2fpkt"];
2591--10176[label="0.0178571;1pkt 1fpkt"];
2591--11069[label="0.0153846;1pkt 1fpkt"];
2591--11078[label="0.0350877;2pkt 2fpkt"];
2591--11135[label="0.0614035;7pkt 7fpkt"];
2591--11774[label="0.00862069;1pkt 1fpkt"];
2591--11848[label="0.00862069;1pkt 1fpkt"];
2591--12240[label="0.00862069;1pkt 1fpkt"];
2591--13638[label="0.015625;1pkt 1fpkt"];
2591--13642[label="0.0357143;2pkt 2fpkt"];
2591--13672[label="0.0608696;7pkt 7fpkt"];
2591--13990[label="0.00862069;1pkt 1fpkt"];
2738--4923[label="0.857143;6pkt 6fpkt"];
2738--5091[label="1;7pkt 7fpkt"];
2738--10083[label="1;6pkt 6fpkt"];
2738--13140[label="1;6pkt 6fpkt"];
3006--4516[label="0.390244;16pkt 16fpkt"];
3006--4923[label="0.585366;24pkt 24fpkt"];
3006--7367[label="1;41pkt 41fpkt"];
4070--4923[label="1;117pkt 117fpkt"];
4070--5623[label="1;117pkt 117fpkt"];
4195--4516[label="1;2pkt 2fpkt"];
4195--7425[label="1;2pkt 2fpkt"];
4195--11615[label="1;2pkt 2fpkt"];
4195--13885[label="1;2pkt 2fpkt"];
4303--4516[label="0.202899;14pkt 14fpkt"];
4303--4730[label="0.217391;15pkt 15fpkt"];
4303--8026[label="1;69pkt 69fpkt"];
4334--4516[label="0.0869565;6pkt 6fpkt"];
4334--4518[label="0.0181818;1pkt 1fpkt"];
4334--4547[label="0.0144928;1pkt 1fpkt"];
4334--4563[label="0.0144928;1pkt 1fpkt"];
4334--4691[label="0.0144928;1pkt 1fpkt"];
4334--4730[label="0.0434783;3pkt 3fpkt"];
4334--5015[label="0.0144928;1pkt 1fpkt"];
4334--5134[label="0.0144928;1pkt 1fpkt"];
4334--5172[label="0.0144928;1pkt 1fpkt"];
4334--5174[label="0.0144928;1pkt 1fpkt"];
4334--5372[label="0.0869565;6pkt 6fpkt"];
4334--5485[label="0.0289855;2pkt 2fpkt"];
4334--5514[label="0.0289855;2pkt 2fpkt"];
4334--5541[label="0.0289855;2pkt 2fpkt"];
4334--6518[label="1;69pkt 69fpkt"];
4334--11135[label="0.985507;68pkt 68fpkt"];
4334--13672[label="1;69pkt 69fpkt"];
4449--4923[label="1;16pkt 16fpkt"];
4449--9360[label="1;16pkt 16fpkt"];
4449--12743[label="0.9375;15pkt 15fpkt"];
4516--4610[label="0.0121951;1pkt 1fpkt"];
4516--4754[label="0.00806452;1pkt 1fpkt"];
4516--4797[label="1;1pkt 1fpkt"];
4516--4913[label="1;6pkt 6fpkt"];
4516--5194[label="0.0175439;1pkt 1fpkt"];
4516--5398[label="0.00581395;2pkt 2fpkt"];
4516--5983[label="0.183673;9pkt 9fpkt"];
4516--6166[label="0.0188679;1pkt 1fpkt"];
4516--6386[label="0.0153846;1pkt 1fpkt"];
4516--6403[label="0.0769231;2pkt 2fpkt"];
4516--6407[label="0.0175439;1pkt 1fpkt"];
4516--6518[label="0.191304;22pkt 22fpkt"];
4516--6825[label="0.00724638;1pkt 1fpkt"];
4516--7130[label="0.0649351;5pkt 5fpkt"];
4516--7297[label="1;1pkt 1fpkt"];
4516--7367[label="0.380952;16pkt 16fpkt"];
4516--7425[label="1;2pkt 2fpkt"];
4516--7844[label="0.0075188;1pkt 1fpkt"];
4516--7988[label="1;10pkt 10fpkt"];
4516--8003[label="0.0714286;2pkt 2fpkt"];
4516--8026[label="0.213483;19pkt 19fpkt"];
4516--8279[label="0.0140845;1pkt 1fpkt"];
4516--8327[label="0.0324675;5pkt 5fpkt"];
4516--8500[label="0.0225564;3pkt 3fpkt"];
4516--8507[label="0.015873;2pkt 2fpkt"];
4516--8890[label="0.0625;1pkt 1fpkt"];
4516--9360[label="0.305556;11pkt 11fpkt"];
4516--10176[label="0.0178571;1pkt 1fpkt"];
4516--10493[label="0.181818;6pkt 6fpkt"];
4516--10842[label="0.166667;8pkt 8fpkt"];
4516--11069[label="0.0153846;1pkt 1fpkt"];
4516--11078[label="0.0175439;1pkt 1fpkt"];
4516--11135[label="0.192982;22pkt 22fpkt"];
4516--11295[label="0.00729927;1pkt 1fpkt"];
4516--11461[label="0.0657895;5pkt 5fpkt"];
4516--11615[label="1;2pkt 2fpkt"];
4516--11848[label="0.00757576;1pkt 1fpkt"];
4516--11944[label="0.0714286;2pkt 2fpkt"];
4516--12109[label="0.0140845;1pkt 1fpkt"];
4516--12237[label="0.0227273;3pkt 3fpkt"];
4516--12240[label="0.016;2pkt 2fpkt"];
4516--12466[label="0.0666667;1pkt 1fpkt"];
4516--12743[label="0.314286;11pkt 11fpkt"];
4516--13638[label="0.015625;1pkt 1fpkt"];
4516--13642[label="0.0178571;1pkt 1fpkt"];
4516--13672[label="0.191304;22pkt 22fpkt"];
4516--13885[label="1;2pkt 2fpkt"];
4516--13990[label="0.00757576;1pkt 1fpkt"];
4516--14117[label="0.0142857;1pkt 1fpkt"];
4730--5002[label="0.015625;1pkt 1fpkt"];
4730--5194[label="0.0175439;1pkt 1fpkt"];
4730--5398[label="0.0172414;2pkt 2fpkt"];
4730--6166[label="0.0188679;1pkt 1fpkt"];
4730--6386[label="0.0153846;1pkt 1fpkt"];
4730--6407[label="0.0350877;2pkt 2fpkt"];
4730--6518[label="0.0608696;7pkt 7fpkt"];
4730--7207[label="0.0454545;2pkt 2fpkt"];
4730--7285[label="0.0571429;2pkt 2fpkt"];
4730--7701[label="0.00862069;1pkt 1fpkt"];
4730--7844[label="0.00862069;1pkt 1fpkt"];
4730--8026[label="0.191011;17pkt 17fpkt"];
4730--8507[label="0.00862069;1pkt 1fpkt"];
4730--9259[label="0.0133333;1pkt 1fpkt"];
4730--9816[label="0.0188679;1pkt 1fpkt"];
4730--9889[label="0.0172414;2pkt 2fpkt"];
4730--10176[label="0.0178571;1pkt 1fpkt"];
4730--11069[label="0.0153846;1pkt 1fpkt"];
4730--11078[label="0.0350877;2pkt 2fpkt"];
4730--11135[label="0.0614035;7pkt 7fpkt"];
4730--11774[label="0.00862069;1pkt 1fpkt"];
4730--11848[label="0.00862069;1pkt 1fpkt"];
4730--12240[label="0.00862069;1pkt 1fpkt"];
4730--13638[label="0.015625;1pkt 1fpkt"];
4730--13642[label="0.0357143;2pkt 2fpkt"];
4730--13672[label="0.0608696;7pkt 7fpkt"];
4730--13990[label="0.00862069;1pkt 1fpkt"];
4797--7297[label="1;1pkt 1fpkt"];
4923--5091[label="0.857143;6pkt 6fpkt"];
4923--5257[label="0.0194175;2pkt 2fpkt"];
4923--5623[label="1;117pkt 117fpkt"];
4923--5660[label="1;19pkt 19fpkt"];
4923--6321[label="0.003367;1pkt 1fpkt"];
4923--6403[label="0.576923;15pkt 15fpkt"];
4923--7367[label="0.571429;24pkt 24fpkt"];
4923--8254[label="0.0952381;2pkt 2fpkt"];
4923--9122[label="0.0188679;2pkt 2fpkt"];
4923--9360[label="0.666667;24pkt 24fpkt"];
4923--10083[label="0.833333;5pkt 5fpkt"];
4923--12094[label="0.05;1pkt 1fpkt"];
4923--12384[label="0.0625;1pkt 1fpkt"];
4923--12606[label="0.00952381;1pkt 1fpkt"];
4923--12743[label="0.657143;23pkt 23fpkt"];
4923--13140[label="0.833333;5pkt 5fpkt"];
4923--14325[label="0.0188679;2pkt 2fpkt"];
5091--10083[label="1;6pkt 6fpkt"];
5091--13140[label="1;6pkt 6fpkt"];
6518--11135[label="1;114pkt 114fpkt"];
6518--13672[label="1;115pkt 115fpkt"];
7425--11615[label="1;2pkt 2fpkt"];
7425--13885[label="1;2pkt 2fpkt"];
9360--12743[label="1;35pkt 35fpkt"];
10083--13140[label="1;6pkt 6fpkt"];
11135--13672[label="1;114pkt 114fpkt"];
11615--13885[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_ip="170.123.196.56" src_port="80"/>
      <filter dst_ip="153.21.69.187" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.167.64.222"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.217.163.223"/>
    </slice>
    <from sec="1172898221" usec="0"/>
    <to sec="1172898284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
3815[label="24.85.42.211;d;2pkt 2fpkt", shape=diamond, color=yellow];
10115[label="153.21.9.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.9.224:1789, 24.85.42.211:80}[50%]&lt;BR/&gt;{153.21.9.224:1790, 24.85.42.211:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1790: (33.3333%)&lt;BR/&gt; 1789: (16.6667%)&gt;];
}
3815--10115[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="24.85.42.211" dst_port="80" src_ip="153.21.9.224" src_port="1790"/>
      <filter dst_ip="24.85.42.211" dst_port="80" src_ip="153.21.9.224" src_port="1789"/>
    </slice>
    <from sec="1172898755" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.138.50.224"/>
    </slice>
    <from sec="1172898579" usec="0"/>
    <to sec="1172898609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.144.55.224"/>
    </slice>
    <from sec="1172898031" usec="0"/>
    <to sec="1172898046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.9.140.224"/>
    </slice>
    <from sec="1172898571" usec="0"/>
    <to sec="1172898613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.106.153.224"/>
    </slice>
    <from sec="1172898881" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.21.195.224"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.132.41.225"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.894719,2.78958,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
3261[label="215.28.71.237;d;613pkt 613fpkt", shape=diamond, color=yellow];
10141[label="193.5.90.225;455pkt 455fpkt", shape=pentagon, color=darkviolet];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.5.90.225:*, 215.28.71.237:1111}[70.3246%]&lt;BR/&gt;{193.3.39.152:*, 215.28.71.237:1111}[29.5209%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1111: (49.9532%)&lt;BR/&gt; 33030: (0.140449%)&lt;BR/&gt; 60999: (0.093633%)&lt;BR/&gt; 60995: (0.093633%)&lt;BR/&gt; 60993: (0.093633%)&gt;];
}
3261--10141[label="0.925275;421pkt 421fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.71.237" dst_port="1111" src_ip="193.5.90.225"/>
      <filter dst_ip="215.28.71.237" dst_port="1111" src_ip="193.3.39.152"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.144.179.225"/>
    </slice>
    <from sec="1172898234" usec="0"/>
    <to sec="1172898249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.165.77.226"/>
    </slice>
    <from sec="1172898395" usec="0"/>
    <to sec="1172898424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.10.84.226"/>
    </slice>
    <from sec="1172898029" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.114.208.226"/>
    </slice>
    <from sec="1172898501" usec="0"/>
    <to sec="1172898527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.16.210.226"/>
    </slice>
    <from sec="1172898526" usec="0"/>
    <to sec="1172898541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.169.32.227"/>
    </slice>
    <from sec="1172898554" usec="0"/>
    <to sec="1172898588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.105.157.227"/>
    </slice>
    <from sec="1172898207" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.174.227"/>
    </slice>
    <from sec="1172898105" usec="0"/>
    <to sec="1172898873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.17.15.228"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.102.36.229"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.100.185.229"/>
    </slice>
    <from sec="1172898024" usec="0"/>
    <to sec="1172898034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.108.197.229"/>
    </slice>
    <from sec="1172898394" usec="0"/>
    <to sec="1172898406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.196.28.230"/>
    </slice>
    <from sec="1172898102" usec="0"/>
    <to sec="1172898829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.255.41.230"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.170.139.230"/>
    </slice>
    <from sec="1172898596" usec="0"/>
    <to sec="1172898629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.107.204.230"/>
    </slice>
    <from sec="1172898737" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.130.32.231"/>
    </slice>
    <from sec="1172898064" usec="0"/>
    <to sec="1172898872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.94.37.231"/>
    </slice>
    <from sec="1172898090" usec="0"/>
    <to sec="1172898126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.51.86.231"/>
    </slice>
    <from sec="1172898349" usec="0"/>
    <to sec="1172898745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.139.186.231"/>
    </slice>
    <from sec="1172898027" usec="0"/>
    <to sec="1172898892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.5.168.232"/>
    </slice>
    <from sec="1172898272" usec="0"/>
    <to sec="1172898892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.167.26.233"/>
    </slice>
    <from sec="1172898231" usec="0"/>
    <to sec="1172898348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.74.77.233"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.98.10.234"/>
    </slice>
    <from sec="1172898178" usec="0"/>
    <to sec="1172898185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.196.84.234"/>
    </slice>
    <from sec="1172898017" usec="0"/>
    <to sec="1172898880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.99.39.237"/>
    </slice>
    <from sec="1172898092" usec="0"/>
    <to sec="1172898109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.112.119.237"/>
    </slice>
    <from sec="1172898114" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.6.129.237"/>
    </slice>
    <from sec="1172898498" usec="0"/>
    <to sec="1172898512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.196.172.238"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.252.222.238"/>
    </slice>
    <from sec="1172898893" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.107.231.238"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.134.58.239"/>
    </slice>
    <from sec="1172898563" usec="0"/>
    <to sec="1172898576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.252.150.239"/>
    </slice>
    <from sec="1172898306" usec="0"/>
    <to sec="1172898422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.215.190.239"/>
    </slice>
    <from sec="1172898219" usec="0"/>
    <to sec="1172898236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.212.245.239"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.210.5.240"/>
    </slice>
    <from sec="1172898246" usec="0"/>
    <to sec="1172898481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.151.1.241"/>
    </slice>
    <from sec="1172898512" usec="0"/>
    <to sec="1172898567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.194.163.241"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.246.224.242"/>
    </slice>
    <from sec="1172898198" usec="0"/>
    <to sec="1172898236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.85.8.243"/>
    </slice>
    <from sec="1172898037" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.160.36.243"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.200.177.243"/>
    </slice>
    <from sec="1172898465" usec="0"/>
    <to sec="1172898477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.240.113.245"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.67.134.245"/>
    </slice>
    <from sec="1172898346" usec="0"/>
    <to sec="1172898360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.101.121.246"/>
    </slice>
    <from sec="1172898034" usec="0"/>
    <to sec="1172898047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.98.190.246"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.18.134.247"/>
    </slice>
    <from sec="1172898021" usec="0"/>
    <to sec="1172898160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.64.28.248"/>
    </slice>
    <from sec="1172898825" usec="0"/>
    <to sec="1172898844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.219.57.248"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.56.40.249"/>
    </slice>
    <from sec="1172898721" usec="0"/>
    <to sec="1172898770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.54.183.249"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.122.74.250"/>
    </slice>
    <from sec="1172898856" usec="0"/>
    <to sec="1172898874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.146.2.252"/>
    </slice>
    <from sec="1172898320" usec="0"/>
    <to sec="1172898403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.36.88.252"/>
    </slice>
    <from sec="1172898050" usec="0"/>
    <to sec="1172898566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.214.138.252"/>
    </slice>
    <from sec="1172898509" usec="0"/>
    <to sec="1172898586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.49.226.253"/>
    </slice>
    <from sec="1172898427" usec="0"/>
    <to sec="1172898448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.166.12.254"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.148.37.254"/>
    </slice>
    <from sec="1172898827" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.37.146.254"/>
    </slice>
    <from sec="1172898553" usec="0"/>
    <to sec="1172898591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.11.18.255"/>
    </slice>
    <from sec="1172898024" usec="0"/>
    <to sec="1172898293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402782,2.83802,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.94.149.255"/>
    </slice>
    <from sec="1172898864" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.228.29.0"/>
    </slice>
    <from sec="1172898460" usec="0"/>
    <to sec="1172898497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.169.128.0"/>
    </slice>
    <from sec="1172898391" usec="0"/>
    <to sec="1172898421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.255.141.0"/>
    </slice>
    <from sec="1172898394" usec="0"/>
    <to sec="1172898396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.237.198.0"/>
    </slice>
    <from sec="1172898387" usec="0"/>
    <to sec="1172898400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
5569[label="172.169.203.0;11pkt 11fpkt", shape=pentagon, color=darkviolet];
10623[label="172.169.203.0;10pkt 10fpkt", shape=invtriangle, color=brown];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.203.0:80, 26.29.8.14:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56696: (4.7619%)&lt;BR/&gt; 56526: (4.7619%)&lt;BR/&gt; 56008: (4.7619%)&lt;BR/&gt; 52326: (4.7619%)&gt;];
}
5569--10623[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="26.29.8.14" src_ip="172.169.203.0" src_port="80"/>
    </slice>
    <from sec="1172898129" usec="0"/>
    <to sec="1172898846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.109.6.1"/>
    </slice>
    <from sec="1172898085" usec="0"/>
    <to sec="1172898103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
5585[label="6.165.97.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10633[label="6.165.97.1;1pkt 1fpkt", shape=invtriangle, color=brown];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.165.97.1:1482, 153.21.195.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1482: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5585--10633[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" src_ip="6.165.97.1" src_port="1482"/>
    </slice>
    <from sec="1172898829" usec="0"/>
    <to sec="1172898844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_961{
style=filled;
color=gray75;
5589[label="26.178.132.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10636[label="26.178.132.1;1pkt 1fpkt", shape=invtriangle, color=brown];
stat961[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.178.132.1:34303, 214.125.64.209:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34303: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
5589--10636[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.64.209" dst_port="3127" src_ip="26.178.132.1" src_port="34303"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.20.180.1"/>
    </slice>
    <from sec="1172898045" usec="0"/>
    <to sec="1172898064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.70.204.1"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.236.216.1"/>
    </slice>
    <from sec="1172898780" usec="0"/>
    <to sec="1172898797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="163.242.69.3"/>
    </slice>
    <from sec="1172898369" usec="0"/>
    <to sec="1172898394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.82.24.4"/>
    </slice>
    <from sec="1172898627" usec="0"/>
    <to sec="1172898684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
5691[label="96.205.192.4;111pkt 111fpkt", shape=pentagon, color=darkviolet];
10691[label="96.205.192.4;112pkt 112fpkt", shape=invtriangle, color=brown];
13469[label="96.205.192.4;111pkt 111fpkt", shape=invhouse, color=bisque];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.205.192.4:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (8.53293%)&lt;BR/&gt; 1030: (8.53293%)&lt;BR/&gt; 1029: (8.23353%)&lt;BR/&gt; 1028: (7.63473%)&lt;BR/&gt; 4257: (7.18563%)&gt;];
}
5691--10691[label="1;111pkt 111fpkt"];
5691--13469[label="1;111pkt 111fpkt"];
10691--13469[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter src_ip="96.205.192.4"/>
    </slice>
    <from sec="1172898881" usec="0"/>
    <to sec="1172898882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.145.150.5"/>
    </slice>
    <from sec="1172898823" usec="0"/>
    <to sec="1172898881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.56.214.5"/>
    </slice>
    <from sec="1172898153" usec="0"/>
    <to sec="1172898176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.9.229.5"/>
    </slice>
    <from sec="1172898678" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.233.45.7"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_972{
style=filled;
color=gray75;
5747[label="87.192.53.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10718[label="87.192.53.7;1pkt 1fpkt", shape=invtriangle, color=brown];
stat972[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.192.53.7:2106, 214.125.67.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2106: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5747--10718[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.55" dst_port="80" src_ip="87.192.53.7" src_port="2106"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.161.129.7"/>
    </slice>
    <from sec="1172898339" usec="0"/>
    <to sec="1172898368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.11.160.7"/>
    </slice>
    <from sec="1172898576" usec="0"/>
    <to sec="1172898600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
5756[label="199.198.177.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10725[label="199.198.177.7;1pkt 1fpkt", shape=invtriangle, color=brown];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.198.177.7:3712, 153.21.195.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3712: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5756--10725[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" src_ip="199.198.177.7" src_port="3712"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
5763[label="206.121.71.8;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10731[label="206.121.71.8;15pkt 15fpkt", shape=invtriangle, color=brown];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.121.71.8:80, 153.21.78.21:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49870: (3.33333%)&lt;BR/&gt; 49869: (3.33333%)&lt;BR/&gt; 49868: (3.33333%)&lt;BR/&gt; 49867: (3.33333%)&gt;];
}
5763--10731[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.78.21" src_ip="206.121.71.8" src_port="80"/>
    </slice>
    <from sec="1172898655" usec="0"/>
    <to sec="1172898816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_977{
style=filled;
color=gray75;
5784[label="100.38.21.9;17pkt 17fpkt", shape=pentagon, color=darkviolet];
10740[label="100.38.21.9;17pkt 17fpkt", shape=invtriangle, color=brown];
stat977[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.38.21.9:*, 214.125.70.218:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 63587: (2.94118%)&lt;BR/&gt; 63572: (2.94118%)&lt;BR/&gt; 63489: (2.94118%)&lt;BR/&gt; 63289: (2.94118%)&gt;];
}
5784--10740[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.70.218" dst_port="53" src_ip="100.38.21.9"/>
    </slice>
    <from sec="1172898021" usec="0"/>
    <to sec="1172898876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.33.9"/>
    </slice>
    <from sec="1172898605" usec="0"/>
    <to sec="1172898771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.156.70.9"/>
    </slice>
    <from sec="1172898636" usec="0"/>
    <to sec="1172898664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.129.230.9"/>
    </slice>
    <from sec="1172898236" usec="0"/>
    <to sec="1172898254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.44.254.9"/>
    </slice>
    <from sec="1172898195" usec="0"/>
    <to sec="1172898225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.1.144.10"/>
    </slice>
    <from sec="1172898450" usec="0"/>
    <to sec="1172898454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.14.155.10"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.118.175.10"/>
    </slice>
    <from sec="1172898279" usec="0"/>
    <to sec="1172898292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
5820[label="214.100.25.11;88pkt 88fpkt", shape=pentagon, color=darkviolet];
10755[label="214.100.25.11;88pkt 88fpkt", shape=invtriangle, color=brown];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.100.25.11:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4286: (1.13636%)&lt;BR/&gt; 3736: (1.13636%)&lt;BR/&gt; 4964: (0.568182%)&lt;BR/&gt; 4959: (0.568182%)&gt;];
}
5820--10755[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="214.100.25.11"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_986{
style=filled;
color=gray75;
5821[label="193.163.29.11;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10756[label="193.163.29.11;4pkt 4fpkt", shape=invtriangle, color=brown];
stat986[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.163.29.11:1117, 172.80.89.26:1434}[25%]&lt;BR/&gt;{193.163.29.11:1117, 215.28.127.52:1434}[25%]&lt;BR/&gt;{193.163.29.11:1117, 172.180.231.98:1434}[25%]&lt;BR/&gt;{193.163.29.11:1117, 153.21.31.232:1434}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1117: (50%)&gt;];
}
5821--10756[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.31.232" dst_port="1434" src_ip="193.163.29.11" src_port="1117"/>
      <filter dst_ip="172.180.231.98" dst_port="1434" src_ip="193.163.29.11" src_port="1117"/>
      <filter dst_ip="215.28.127.52" dst_port="1434" src_ip="193.163.29.11" src_port="1117"/>
      <filter dst_ip="172.80.89.26" dst_port="1434" src_ip="193.163.29.11" src_port="1117"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.123.66.11"/>
    </slice>
    <from sec="1172898573" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.203.82.11"/>
    </slice>
    <from sec="1172898036" usec="0"/>
    <to sec="1172898047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.57.147.11"/>
    </slice>
    <from sec="1172898544" usec="0"/>
    <to sec="1172898591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.194.156.11"/>
    </slice>
    <from sec="1172898101" usec="0"/>
    <to sec="1172898301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.150.2.12"/>
    </slice>
    <from sec="1172898851" usec="0"/>
    <to sec="1172898864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
5845[label="215.17.13.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10768[label="215.17.13.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.17.13.12:52370, 24.85.33.111:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52370: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5845--10768[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="24.85.33.111" dst_port="80" src_ip="215.17.13.12" src_port="52370"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.55.17.12"/>
    </slice>
    <from sec="1172898699" usec="0"/>
    <to sec="1172898723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_994{
style=filled;
color=gray75;
5847[label="213.100.18.12;419pkt 419fpkt", shape=pentagon, color=darkviolet];
10770[label="213.100.18.12;419pkt 419fpkt", shape=invtriangle, color=brown];
13500[label="213.100.18.12;420pkt 420fpkt", shape=invhouse, color=bisque];
stat994[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.100.18.12:*, *:5900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 65385: (0.119237%)&lt;BR/&gt; 65083: (0.119237%)&lt;BR/&gt; 64758: (0.119237%)&lt;BR/&gt; 64729: (0.119237%)&gt;];
}
5847--10770[label="1;419pkt 419fpkt"];
5847--13500[label="1;419pkt 419fpkt"];
10770--13500[label="1;419pkt 419fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="213.100.18.12"/>
    </slice>
    <from sec="1172898242" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.96.25.12"/>
    </slice>
    <from sec="1172898665" usec="0"/>
    <to sec="1172898696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.68.86.12"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
5866[label="185.196.214.12;18pkt 18fpkt", shape=pentagon, color=darkviolet];
10778[label="185.196.214.12;18pkt 18fpkt", shape=invtriangle, color=brown];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.214.12:*, 214.97.89.78:80}[44.4444%]&lt;BR/&gt;{185.196.214.12:*, 196.101.201.138:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 25: (8.33333%)&lt;BR/&gt; 4720: (2.77778%)&lt;BR/&gt; 3314: (2.77778%)&lt;BR/&gt; 1927: (2.77778%)&gt;];
}
5866--10778[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="214.97.89.78" dst_port="80" src_ip="185.196.214.12"/>
      <filter dst_ip="196.101.201.138" dst_port="80" src_ip="185.196.214.12"/>
    </slice>
    <from sec="1172898058" usec="0"/>
    <to sec="1172898871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
5870[label="206.186.3.13;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10782[label="206.186.3.13;5pkt 5fpkt", shape=invtriangle, color=brown];
13505[label="206.186.3.13;5pkt 5fpkt", shape=invhouse, color=bisque];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.186.3.13:80, 215.17.14.255:61459}[20%]&lt;BR/&gt;{206.186.3.13:80, 215.17.14.255:61548}[20%]&lt;BR/&gt;{206.186.3.13:80, 215.17.14.255:61549}[20%]&lt;BR/&gt;{206.186.3.13:80, 215.17.14.255:61554}[20%]&lt;BR/&gt;{206.186.3.13:80, 215.17.14.255:61555}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61555: (10%)&lt;BR/&gt; 61554: (10%)&lt;BR/&gt; 61549: (10%)&lt;BR/&gt; 61548: (10%)&gt;];
}
5870--10782[label="1;5pkt 5fpkt"];
5870--13505[label="1;5pkt 5fpkt"];
10782--13505[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.17.14.255" dst_port="61555" src_ip="206.186.3.13" src_port="80"/>
      <filter dst_ip="215.17.14.255" dst_port="61554" src_ip="206.186.3.13" src_port="80"/>
      <filter dst_ip="215.17.14.255" dst_port="61549" src_ip="206.186.3.13" src_port="80"/>
      <filter dst_ip="215.17.14.255" dst_port="61548" src_ip="206.186.3.13" src_port="80"/>
      <filter dst_ip="215.17.14.255" dst_port="61459" src_ip="206.186.3.13" src_port="80"/>
    </slice>
    <from sec="1172898847" usec="0"/>
    <to sec="1172898871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.33.13"/>
    </slice>
    <from sec="1172898194" usec="0"/>
    <to sec="1172898205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.77.66.13"/>
    </slice>
    <from sec="1172898469" usec="0"/>
    <to sec="1172898518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.67.69.14"/>
    </slice>
    <from sec="1172898446" usec="0"/>
    <to sec="1172898455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.51.70.14"/>
    </slice>
    <from sec="1172898031" usec="0"/>
    <to sec="1172898108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.23.137.16"/>
    </slice>
    <from sec="1172898778" usec="0"/>
    <to sec="1172898802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.246.163.16"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
5946[label="196.167.193.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10820[label="196.167.193.16;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.167.193.16:2065, 214.125.67.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2065: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5946--10820[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.55" dst_port="80" src_ip="196.167.193.16" src_port="2065"/>
    </slice>
    <from sec="1172898175" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
5966[label="100.201.129.17;153pkt 153fpkt", shape=pentagon, color=darkviolet];
10832[label="100.201.129.17;154pkt 154fpkt", shape=invtriangle, color=brown];
13531[label="100.201.129.17;153pkt 153fpkt", shape=invhouse, color=bisque];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{100.201.129.17:*, *:1026}[70.1299%]&lt;BR/&gt;{100.201.129.17:*, *:1027}[29.8701%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (35%)&lt;BR/&gt; 1027: (15%)&lt;BR/&gt; 41116: (1.63043%)&lt;BR/&gt; 41299: (0.652174%)&lt;BR/&gt; 41223: (0.652174%)&gt;];
}
5966--10832[label="1;153pkt 153fpkt"];
5966--13531[label="1;153pkt 153fpkt"];
10832--13531[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="100.201.129.17"/>
      <filter dst_port="1027" src_ip="100.201.129.17"/>
    </slice>
    <from sec="1172898625" usec="0"/>
    <to sec="1172898626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.163.138.17"/>
    </slice>
    <from sec="1172898818" usec="0"/>
    <to sec="1172898847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.128.142.17"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.238.89.19"/>
    </slice>
    <from sec="1172898494" usec="0"/>
    <to sec="1172898558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.22.161.19"/>
    </slice>
    <from sec="1172898292" usec="0"/>
    <to sec="1172898309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
6023[label="172.179.142.20;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10865[label="172.179.142.20;11pkt 11fpkt", shape=invtriangle, color=brown];
13546[label="172.179.142.20;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.142.20:5629, *:*}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5629: (25.8065%)&lt;BR/&gt; 54321: (9.67742%)&lt;BR/&gt; 5619: (9.67742%)&lt;BR/&gt; 4672: (9.67742%)&lt;BR/&gt; 19338: (4.83871%)&gt;];
}
6023--10865[label="1;10pkt 10fpkt"];
6023--13546[label="1;10pkt 10fpkt"];
10865--13546[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="172.179.142.20" src_port="5629"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.61.148.20"/>
    </slice>
    <from sec="1172898624" usec="0"/>
    <to sec="1172898632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.102.208.20"/>
    </slice>
    <from sec="1172898427" usec="0"/>
    <to sec="1172898431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="97.8.55.21"/>
    </slice>
    <from sec="1172898817" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
6052[label="172.179.79.21;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10884[label="172.179.79.21;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.79.21:80, 37.169.145.212:1222}[33.3333%]&lt;BR/&gt;{172.179.79.21:80, 37.169.145.212:1224}[33.3333%]&lt;BR/&gt;{172.179.79.21:80, 37.169.145.212:1226}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1226: (20%)&lt;BR/&gt; 1224: (20%)&lt;BR/&gt; 1222: (10%)&gt;];
}
6052--10884[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="37.169.145.212" dst_port="1226" src_ip="172.179.79.21" src_port="80"/>
      <filter dst_ip="37.169.145.212" dst_port="1224" src_ip="172.179.79.21" src_port="80"/>
      <filter dst_ip="37.169.145.212" dst_port="1222" src_ip="172.179.79.21" src_port="80"/>
    </slice>
    <from sec="1172898599" usec="0"/>
    <to sec="1172898651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
6054[label="217.116.90.21;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10886[label="217.116.90.21;12pkt 12fpkt", shape=invtriangle, color=brown];
13558[label="217.116.90.21;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.116.90.21:22, 214.125.64.238:*}[50%]&lt;BR/&gt;{217.116.90.21:22, 214.125.64.239:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 46070: (4.28571%)&lt;BR/&gt; 46069: (4.28571%)&lt;BR/&gt; 46067: (4.28571%)&lt;BR/&gt; 46066: (4.28571%)&gt;];
}
6054--10886[label="1;12pkt 12fpkt"];
6054--13558[label="1;11pkt 11fpkt"];
10886--13558[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.64.239" src_ip="217.116.90.21" src_port="22"/>
      <filter dst_ip="214.125.64.238" src_ip="217.116.90.21" src_port="22"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.241.160.21"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.98.10.23"/>
    </slice>
    <from sec="1172898819" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.253.19.23"/>
    </slice>
    <from sec="1172898575" usec="0"/>
    <to sec="1172898606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="97.116.49.23"/>
    </slice>
    <from sec="1172898457" usec="0"/>
    <to sec="1172898462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
6096[label="97.179.133.23;198pkt 198fpkt", shape=pentagon, color=darkviolet];
10910[label="97.179.133.23;198pkt 198fpkt", shape=invtriangle, color=brown];
13570[label="97.179.133.23;197pkt 197fpkt", shape=invhouse, color=bisque];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.179.133.23:10002, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10002: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6096--10910[label="1;198pkt 198fpkt"];
6096--13570[label="1;197pkt 197fpkt"];
10910--13570[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="97.179.133.23" src_port="10002"/>
    </slice>
    <from sec="1172898431" usec="0"/>
    <to sec="1172898445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.98.162.23"/>
    </slice>
    <from sec="1172898452" usec="0"/>
    <to sec="1172898493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.2.184.23"/>
    </slice>
    <from sec="1172898342" usec="0"/>
    <to sec="1172898357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.30.72.24"/>
    </slice>
    <from sec="1172898331" usec="0"/>
    <to sec="1172898345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
6118[label="213.139.91.24;255pkt 255fpkt", shape=pentagon, color=darkviolet];
10926[label="213.139.91.24;254pkt 254fpkt", shape=invtriangle, color=brown];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.139.91.24:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3641: (0.196464%)&lt;BR/&gt; 3608: (0.196464%)&lt;BR/&gt; 3602: (0.196464%)&lt;BR/&gt; 3599: (0.196464%)&gt;];
}
6118--10926[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.139.91.24"/>
    </slice>
    <from sec="1172898092" usec="0"/>
    <to sec="1172898129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.87.128.24"/>
    </slice>
    <from sec="1172898569" usec="0"/>
    <to sec="1172898581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.137.162.24"/>
    </slice>
    <from sec="1172898531" usec="0"/>
    <to sec="1172898541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.36.25"/>
    </slice>
    <from sec="1172898883" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
6140[label="213.76.49.25;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10938[label="213.76.49.25;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.76.49.25:60469, 214.125.74.251:80}[50%]&lt;BR/&gt;{213.76.49.25:60621, 214.125.74.251:41049}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60621: (25%)&lt;BR/&gt; 60469: (25%)&lt;BR/&gt; 41049: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
6140--10938[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.74.251" dst_port="41049" src_ip="213.76.49.25" src_port="60621"/>
      <filter dst_ip="214.125.74.251" dst_port="80" src_ip="213.76.49.25" src_port="60469"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1031{
style=filled;
color=gray75;
6149[label="172.89.154.25;84pkt 84fpkt", shape=pentagon, color=darkviolet];
10944[label="172.89.154.25;84pkt 84fpkt", shape=invtriangle, color=brown];
13582[label="172.89.154.25;84pkt 84fpkt", shape=invhouse, color=bisque];
stat1031[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.89.154.25:65534, *:53}[89.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65534: (44.6429%)&lt;BR/&gt; 53: (44.6429%)&lt;BR/&gt; 0: (8.33333%)&lt;BR/&gt; 80: (1.19048%)&lt;BR/&gt; 58078: (0.595238%)&gt;];
}
6149--10944[label="1;84pkt 84fpkt"];
6149--13582[label="1;84pkt 84fpkt"];
10944--13582[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="172.89.154.25" src_port="65534"/>
    </slice>
    <from sec="1172898014" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.212.202.25"/>
    </slice>
    <from sec="1172898772" usec="0"/>
    <to sec="1172898802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1033{
style=filled;
color=gray75;
6160[label="214.125.79.26;69pkt 69fpkt", shape=pentagon, color=darkviolet];
10948[label="214.125.79.26;69pkt 69fpkt", shape=invtriangle, color=brown];
13583[label="214.125.79.26;68pkt 68fpkt", shape=invhouse, color=bisque];
stat1033[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.79.26:80, 4.199.50.128:*}[60.8696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.7767%)&lt;BR/&gt; 25: (5.58252%)&lt;BR/&gt; 53: (2.91262%)&lt;BR/&gt; 0: (1.45631%)&lt;BR/&gt; 64579: (0.728155%)&gt;];
}
6160--10948[label="1;69pkt 69fpkt"];
6160--13583[label="1;68pkt 68fpkt"];
10948--13583[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="4.199.50.128" src_ip="214.125.79.26" src_port="80"/>
    </slice>
    <from sec="1172898031" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.169.60.27"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1035{
style=filled;
color=gray75;
6189[label="194.149.141.27;105pkt 105fpkt", shape=pentagon, color=darkviolet];
10961[label="194.149.141.27;105pkt 105fpkt", shape=invtriangle, color=brown];
stat1035[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.149.141.27:80, 153.21.88.154:*}[45.7143%]&lt;BR/&gt;{194.149.141.27:80, 153.21.8.206:*}[25.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50391: (0.47619%)&lt;BR/&gt; 50390: (0.47619%)&lt;BR/&gt; 50389: (0.47619%)&lt;BR/&gt; 50388: (0.47619%)&gt;];
}
6189--10961[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.88.154" src_ip="194.149.141.27" src_port="80"/>
      <filter dst_ip="153.21.8.206" src_ip="194.149.141.27" src_port="80"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
6198[label="170.123.18.28;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10965[label="170.123.18.28;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.18.28:1053, 26.29.20.72:80}[25%]&lt;BR/&gt;{170.123.18.28:1054, 26.29.20.72:80}[25%]&lt;BR/&gt;{170.123.18.28:1063, 215.186.132.244:80}[25%]&lt;BR/&gt;{170.123.18.28:1064, 215.186.132.244:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1064: (14.2857%)&lt;BR/&gt; 1063: (14.2857%)&lt;BR/&gt; 1054: (14.2857%)&lt;BR/&gt; 1053: (7.14286%)&gt;];
}
6198--10965[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.186.132.244" dst_port="80" src_ip="170.123.18.28" src_port="1064"/>
      <filter dst_ip="215.186.132.244" dst_port="80" src_ip="170.123.18.28" src_port="1063"/>
      <filter dst_ip="26.29.20.72" dst_port="80" src_ip="170.123.18.28" src_port="1054"/>
      <filter dst_ip="26.29.20.72" dst_port="80" src_ip="170.123.18.28" src_port="1053"/>
    </slice>
    <from sec="1172898873" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.44.249.28"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.93.68.29"/>
    </slice>
    <from sec="1172898858" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.108.82.29"/>
    </slice>
    <from sec="1172898785" usec="0"/>
    <to sec="1172898799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
6243[label="216.208.167.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10989[label="216.208.167.30;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.208.167.30:56481, 214.125.67.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56481: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6243--10989[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.55" dst_port="80" src_ip="216.208.167.30" src_port="56481"/>
    </slice>
    <from sec="1172898147" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.246.183.30"/>
    </slice>
    <from sec="1172898017" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.229.66.31"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.237.192.31"/>
    </slice>
    <from sec="1172898033" usec="0"/>
    <to sec="1172898837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.19.209.31"/>
    </slice>
    <from sec="1172898480" usec="0"/>
    <to sec="1172898491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.252.47.32"/>
    </slice>
    <from sec="1172898610" usec="0"/>
    <to sec="1172898624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.100.83.32"/>
    </slice>
    <from sec="1172898064" usec="0"/>
    <to sec="1172898077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.37.118.32"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.209.142.32"/>
    </slice>
    <from sec="1172898519" usec="0"/>
    <to sec="1172898592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.61.148.32"/>
    </slice>
    <from sec="1172898572" usec="0"/>
    <to sec="1172898609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.104.4.33"/>
    </slice>
    <from sec="1172898554" usec="0"/>
    <to sec="1172898574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
6287[label="207.109.24.33;11pkt 11fpkt", shape=pentagon, color=darkviolet];
11015[label="207.109.24.33;10pkt 10fpkt", shape=invtriangle, color=brown];
13615[label="207.109.24.33;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.109.24.33:80, 153.21.37.84:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1510: (4.83871%)&lt;BR/&gt; 1509: (4.83871%)&lt;BR/&gt; 1508: (4.83871%)&lt;BR/&gt; 1507: (4.83871%)&gt;];
}
6287--11015[label="1;10pkt 10fpkt"];
6287--13615[label="1;10pkt 10fpkt"];
11015--13615[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.37.84" src_ip="207.109.24.33" src_port="80"/>
    </slice>
    <from sec="1172898509" usec="0"/>
    <to sec="1172898800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.194.29.33"/>
    </slice>
    <from sec="1172898131" usec="0"/>
    <to sec="1172898235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.128.67.33"/>
    </slice>
    <from sec="1172898536" usec="0"/>
    <to sec="1172898579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.238.68.33"/>
    </slice>
    <from sec="1172898323" usec="0"/>
    <to sec="1172898347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.130.108.33"/>
    </slice>
    <from sec="1172898177" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.101.128.33"/>
    </slice>
    <from sec="1172898686" usec="0"/>
    <to sec="1172898712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.33.130.33"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
6300[label="87.239.131.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11025[label="87.239.131.33;1pkt 1fpkt", shape=invtriangle, color=brown];
13618[label="87.239.131.33;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.239.131.33:1378, 153.21.195.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1378: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6300--11025[label="1;1pkt 1fpkt"];
6300--13618[label="1;1pkt 1fpkt"];
11025--13618[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" src_ip="87.239.131.33" src_port="1378"/>
    </slice>
    <from sec="1172898257" usec="0"/>
    <to sec="1172898889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.53.137.33"/>
    </slice>
    <from sec="1172898127" usec="0"/>
    <to sec="1172898139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.83.208.33"/>
    </slice>
    <from sec="1172898353" usec="0"/>
    <to sec="1172898384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
6308[label="153.21.226.33;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11030[label="153.21.226.33;6pkt 6fpkt", shape=invtriangle, color=brown];
13622[label="153.21.226.33;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.226.33:*, 18.234.137.4:80}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65051: (7.5%)&lt;BR/&gt; 65049: (7.5%)&lt;BR/&gt; 65047: (7.5%)&lt;BR/&gt; 65046: (7.5%)&gt;];
}
6308--11030[label="1;6pkt 6fpkt"];
6308--13622[label="1;7pkt 7fpkt"];
11030--13622[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="18.234.137.4" dst_port="80" src_ip="153.21.226.33"/>
    </slice>
    <from sec="1172898810" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.30.9.34"/>
    </slice>
    <from sec="1172898711" usec="0"/>
    <to sec="1172898743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.8.23.34"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.198.135.35"/>
    </slice>
    <from sec="1172898769" usec="0"/>
    <to sec="1172898882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.208.161.35"/>
    </slice>
    <from sec="1172898741" usec="0"/>
    <to sec="1172898812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.242.14.36"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
6363[label="170.123.66.36;57pkt 57fpkt", shape=pentagon, color=darkviolet];
11057[label="170.123.66.36;57pkt 57fpkt", shape=invtriangle, color=brown];
13635[label="170.123.66.36;57pkt 57fpkt", shape=invhouse, color=bisque];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.66.36:*, 37.169.150.205:80}[42.1053%]&lt;BR/&gt;{170.123.66.36:*, 37.169.150.196:80}[22.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1228%)&lt;BR/&gt; 1863: (0.877193%)&lt;BR/&gt; 1820: (0.877193%)&lt;BR/&gt; 1817: (0.877193%)&lt;BR/&gt; 1814: (0.877193%)&gt;];
}
6363--11057[label="1;57pkt 57fpkt"];
6363--13635[label="1;57pkt 57fpkt"];
11057--13635[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="37.169.150.205" dst_port="80" src_ip="170.123.66.36"/>
      <filter dst_ip="37.169.150.196" dst_port="80" src_ip="170.123.66.36"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.120.162.36"/>
    </slice>
    <from sec="1172898649" usec="0"/>
    <to sec="1172898663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.251.95.38"/>
    </slice>
    <from sec="1172898085" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.56.133.38"/>
    </slice>
    <from sec="1172898864" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1071{
style=filled;
color=gray75;
6430[label="207.220.8.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11089[label="207.220.8.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1071[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.220.8.39:56203, 215.140.34.81:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56203: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
6430--11089[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.140.34.81" dst_port="53" src_ip="207.220.8.39" src_port="56203"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.84.64.39"/>
    </slice>
    <from sec="1172898339" usec="0"/>
    <to sec="1172898354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.203.106.39"/>
    </slice>
    <from sec="1172898159" usec="0"/>
    <to sec="1172898271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.17.181.39"/>
    </slice>
    <from sec="1172898473" usec="0"/>
    <to sec="1172898607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.194.145.40"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.165.7.41"/>
    </slice>
    <from sec="1172898509" usec="0"/>
    <to sec="1172898595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
6473[label="172.179.27.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11111[label="172.179.27.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.27.41:80, 193.38.154.254:60572}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60572: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6473--11111[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.38.154.254" dst_port="60572" src_ip="172.179.27.41" src_port="80"/>
    </slice>
    <from sec="1172898439" usec="0"/>
    <to sec="1172898473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.932183,2.76225,002,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1078{
style=filled;
color=gray75;
194[label="24.5.144.61;d;1121pkt 1121fpkt", shape=diamond, color=yellow];
1295[label="214.125.79.246;s;291pkt 291fpkt", shape=diamond, color=yellow];
6503[label="214.125.79.42;57pkt 57fpkt", shape=pentagon, color=darkviolet];
8661[label="214.125.73.148;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8991[label="214.125.79.164;69pkt 69fpkt", shape=pentagon, color=darkviolet];
9256[label="214.125.79.176;212pkt 212fpkt", shape=pentagon, color=darkviolet];
10446[label="214.125.71.245;27pkt 27fpkt", shape=pentagon, color=darkviolet];
10461[label="214.125.79.246;292pkt 292fpkt", shape=pentagon, color=darkviolet];
11126[label="214.125.79.42;57pkt 57fpkt", shape=invtriangle, color=brown];
12329[label="214.125.73.148;17pkt 17fpkt", shape=invtriangle, color=brown];
12676[label="214.125.79.176;211pkt 211fpkt", shape=invtriangle, color=brown];
stat1078[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 24.5.144.61:*}[34.9083%]&lt;BR/&gt;{*:445, 24.5.144.61:*}[28.9845%]&lt;BR/&gt;{214.125.79.246:*, 24.5.144.61:*}[20.5219%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (19.3929%)&lt;BR/&gt; 445: (14.7766%)&lt;BR/&gt; 0: (10.7083%)&lt;BR/&gt; 5121: (8.83221%)&lt;BR/&gt; 20190: (1.37015%)&gt;];
}
194--329[label="0.0032538;3pkt 3fpkt"];
194--880[label="0.00267618;3pkt 3fpkt"];
194--957[label="0.00869565;3pkt 3fpkt"];
194--1295[label="1;291pkt 291fpkt"];
194--1844[label="0.0131579;1pkt 1fpkt"];
194--1957[label="0.0126582;1pkt 1fpkt"];
194--2269[label="0.0123457;1pkt 1fpkt"];
194--3549[label="0.00439239;3pkt 3fpkt"];
194--4276[label="0.0037831;3pkt 3fpkt"];
194--4963[label="0.00917431;3pkt 3fpkt"];
194--6116[label="0.0517241;3pkt 3fpkt"];
194--6503[label="1;57pkt 57fpkt"];
194--7190[label="0.0119048;1pkt 1fpkt"];
194--8661[label="0.0555556;1pkt 1fpkt"];
194--8776[label="0.0027933;1pkt 1fpkt"];
194--8991[label="0.0144928;1pkt 1fpkt"];
194--9135[label="0.0196078;1pkt 1fpkt"];
194--9155[label="0.0125;1pkt 1fpkt"];
194--9256[label="0.0141509;3pkt 3fpkt"];
194--9862[label="0.00267618;3pkt 3fpkt"];
194--10446[label="0.925926;25pkt 25fpkt"];
194--10461[label="0.996575;291pkt 291fpkt"];
194--10925[label="0.0526316;3pkt 3fpkt"];
194--11126[label="1;57pkt 57fpkt"];
194--12329[label="0.0588235;1pkt 1fpkt"];
194--12400[label="0.00280112;1pkt 1fpkt"];
194--12676[label="0.014218;3pkt 3fpkt"];
194--13609[label="0.0105263;1pkt 1fpkt"];
194--14239[label="0.00280112;1pkt 1fpkt"];
1295--10461[label="1;291pkt 291fpkt"];
6503--11126[label="1;57pkt 57fpkt"];
8661--12329[label="1;17pkt 17fpkt"];
9256--12676[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter dst_ip="24.5.144.61" src_ip="214.125.79.246"/>
      <filter dst_ip="24.5.144.61" src_port="139"/>
      <filter dst_ip="24.5.144.61" src_port="445"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
942[label="215.28.82.181;s;433pkt 433fpkt", shape=diamond, color=yellow];
971[label="172.169.45.95;s;393pkt 393fpkt", shape=diamond, color=yellow];
1454[label="214.125.74.1;s;405pkt 405fpkt", shape=diamond, color=yellow];
2629[label="195.49.197.115;d;50pkt 50fpkt", shape=diamond, color=yellow];
5581[label="214.125.74.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6512[label="172.179.198.42;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7584[label="172.169.45.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9345[label="215.28.82.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10630[label="214.125.74.1;3pkt 3fpkt", shape=invtriangle, color=brown];
11131[label="172.179.198.42;13pkt 13fpkt", shape=invtriangle, color=brown];
11699[label="172.169.45.95;1pkt 1fpkt", shape=invtriangle, color=brown];
13443[label="214.125.74.1;3pkt 3fpkt", shape=invhouse, color=bisque];
13670[label="172.179.198.42;13pkt 13fpkt", shape=invhouse, color=bisque];
13928[label="172.169.45.95;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.28.82.181:0, *:0}[33.5659%]&lt;BR/&gt;{214.125.74.1:0, *:0}[31.3953%]&lt;BR/&gt;{172.169.45.95:0, *:0}[30.4651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
942--2629[label="0.02;1pkt 1fpkt"];
942--3177[label="0.00280899;1pkt 1fpkt"];
942--9345[label="1;2pkt 2fpkt"];
971--2629[label="0.02;1pkt 1fpkt"];
971--7584[label="1;1pkt 1fpkt"];
971--11699[label="1;1pkt 1fpkt"];
971--13928[label="1;1pkt 1fpkt"];
1454--2629[label="0.02;1pkt 1fpkt"];
1454--5581[label="1;3pkt 3fpkt"];
1454--10630[label="1;3pkt 3fpkt"];
1454--13443[label="1;3pkt 3fpkt"];
2629--6512[label="0.0769231;1pkt 1fpkt"];
2629--11131[label="0.0769231;1pkt 1fpkt"];
2629--13670[label="0.0769231;1pkt 1fpkt"];
5581--10630[label="1;3pkt 3fpkt"];
5581--13443[label="1;3pkt 3fpkt"];
6512--11131[label="1;13pkt 13fpkt"];
6512--13670[label="1;13pkt 13fpkt"];
7584--11699[label="1;1pkt 1fpkt"];
7584--13928[label="1;1pkt 1fpkt"];
10630--13443[label="1;3pkt 3fpkt"];
11131--13670[label="1;13pkt 13fpkt"];
11699--13928[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.28.82.181"/>
      <filter src_ip="214.125.74.1"/>
      <filter src_ip="172.169.45.95"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.210.213.42"/>
    </slice>
    <from sec="1172898618" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.167.75.43"/>
    </slice>
    <from sec="1172898440" usec="0"/>
    <to sec="1172898469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.42.176.43"/>
    </slice>
    <from sec="1172898516" usec="0"/>
    <to sec="1172898531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1083{
style=filled;
color=gray75;
6536[label="96.121.214.43;402pkt 402fpkt", shape=pentagon, color=darkviolet];
11144[label="96.121.214.43;401pkt 401fpkt", shape=invtriangle, color=brown];
stat1083[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.121.214.43:*, *:5900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 65160: (0.124533%)&lt;BR/&gt; 65030: (0.124533%)&lt;BR/&gt; 64952: (0.124533%)&lt;BR/&gt; 64773: (0.124533%)&gt;];
}
6536--11144[label="1;401pkt 401fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="96.121.214.43"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.117.109.44"/>
    </slice>
    <from sec="1172898174" usec="0"/>
    <to sec="1172898179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.139.200.44"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.129.105.45"/>
    </slice>
    <from sec="1172898602" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.41.175.45"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1088{
style=filled;
color=gray75;
6577[label="172.169.181.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11166[label="172.169.181.45;2pkt 2fpkt", shape=invtriangle, color=brown];
13682[label="172.169.181.45;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1088[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.181.45:16080, 17.3.197.108:60051}[50%]&lt;BR/&gt;{172.169.181.45:80, 36.225.70.118:50565}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50565: (30%)&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 60051: (20%)&lt;BR/&gt; 16080: (20%)&gt;];
}
6577--11166[label="1;2pkt 2fpkt"];
6577--13682[label="1;1pkt 1fpkt"];
11166--13682[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.225.70.118" dst_port="50565" src_ip="172.169.181.45" src_port="80"/>
      <filter dst_ip="17.3.197.108" dst_port="60051" src_ip="172.169.181.45" src_port="16080"/>
    </slice>
    <from sec="1172898235" usec="0"/>
    <to sec="1172898843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.183.212.45"/>
    </slice>
    <from sec="1172898701" usec="0"/>
    <to sec="1172898719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.186.44.46"/>
    </slice>
    <from sec="1172898802" usec="0"/>
    <to sec="1172898816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.26.61.46"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1092{
style=filled;
color=gray75;
6603[label="18.120.44.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11181[label="18.120.44.47;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1092[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.120.44.47:16746, 153.21.195.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16746: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6603--11181[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" src_ip="18.120.44.47" src_port="16746"/>
    </slice>
    <from sec="1172898841" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.98.185.47"/>
    </slice>
    <from sec="1172898795" usec="0"/>
    <to sec="1172898802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1095{
style=filled;
color=gray75;
6623[label="217.13.52.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11192[label="217.13.52.48;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1095[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.13.52.48:53, 214.125.64.238:44997}[50%]&lt;BR/&gt;{217.13.52.48:53, 214.125.64.239:32973}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 44997: (33.3333%)&lt;BR/&gt; 32973: (16.6667%)&gt;];
}
6623--11192[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.64.239" dst_port="32973" src_ip="217.13.52.48" src_port="53"/>
      <filter dst_ip="214.125.64.238" dst_port="44997" src_ip="217.13.52.48" src_port="53"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1096{
style=filled;
color=gray75;
6626[label="214.125.73.48;11pkt 11fpkt", shape=pentagon, color=darkviolet];
11195[label="214.125.73.48;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1096[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.73.48:80, 25.85.36.23:*}[27.2727%]&lt;BR/&gt;{214.125.73.48:80, 26.29.8.35:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.0952%)&lt;BR/&gt; 25: (11.9048%)&lt;BR/&gt; 56372: (4.7619%)&lt;BR/&gt; 54414: (4.7619%)&lt;BR/&gt; 53760: (4.7619%)&gt;];
}
6626--11195[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="26.29.8.35" src_ip="214.125.73.48" src_port="80"/>
      <filter dst_ip="25.85.36.23" src_ip="214.125.73.48" src_port="80"/>
    </slice>
    <from sec="1172898058" usec="0"/>
    <to sec="1172898872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.8.108.48"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1098{
style=filled;
color=gray75;
6634[label="154.200.178.48;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11200[label="154.200.178.48;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1098[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.200.178.48:80, 25.84.59.170:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47669: (6.89655%)&lt;BR/&gt; 60254: (3.44828%)&lt;BR/&gt; 58733: (3.44828%)&lt;BR/&gt; 57918: (3.44828%)&gt;];
}
6634--11200[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="25.84.59.170" src_ip="154.200.178.48" src_port="80"/>
    </slice>
    <from sec="1172898047" usec="0"/>
    <to sec="1172898811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.118.187.48"/>
    </slice>
    <from sec="1172898334" usec="0"/>
    <to sec="1172898349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1100{
style=filled;
color=gray75;
6646[label="199.54.50.49;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11205[label="199.54.50.49;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1100[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.54.50.49:80, 172.180.31.149:57246}[25%]&lt;BR/&gt;{199.54.50.49:80, 172.180.31.150:55884}[25%]&lt;BR/&gt;{199.54.50.49:80, 172.180.31.150:55886}[25%]&lt;BR/&gt;{199.54.50.49:80, 172.180.31.150:55889}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57246: (12.5%)&lt;BR/&gt; 55889: (12.5%)&lt;BR/&gt; 55886: (12.5%)&lt;BR/&gt; 55884: (12.5%)&gt;];
}
6646--11205[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.180.31.150" dst_port="55889" src_ip="199.54.50.49" src_port="80"/>
      <filter dst_ip="172.180.31.150" dst_port="55886" src_ip="199.54.50.49" src_port="80"/>
      <filter dst_ip="172.180.31.150" dst_port="55884" src_ip="199.54.50.49" src_port="80"/>
      <filter dst_ip="172.180.31.149" dst_port="57246" src_ip="199.54.50.49" src_port="80"/>
    </slice>
    <from sec="1172898846" usec="0"/>
    <to sec="1172898864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.146.179.49"/>
    </slice>
    <from sec="1172898845" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.103.13.50"/>
    </slice>
    <from sec="1172898469" usec="0"/>
    <to sec="1172898586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.121.132.50"/>
    </slice>
    <from sec="1172898599" usec="0"/>
    <to sec="1172898812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.13.239.50"/>
    </slice>
    <from sec="1172898594" usec="0"/>
    <to sec="1172898653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.133.251.51"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1106{
style=filled;
color=gray75;
6699[label="182.246.32.52;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11229[label="182.246.32.52;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1106[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.32.52:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61889: (3.44828%)&lt;BR/&gt; 44380: (3.44828%)&lt;BR/&gt; 23470: (3.44828%)&lt;BR/&gt; 17198: (3.44828%)&gt;];
}
6699--11229[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="182.246.32.52" src_port="25"/>
    </slice>
    <from sec="1172898037" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.129.36.53"/>
    </slice>
    <from sec="1172898712" usec="0"/>
    <to sec="1172898777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.240.69.53"/>
    </slice>
    <from sec="1172898551" usec="0"/>
    <to sec="1172898580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.217.107.53"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1110{
style=filled;
color=gray75;
6745[label="172.169.51.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11252[label="172.169.51.54;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1110[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.51.54:63602, 204.210.194.22:80}[50%]&lt;BR/&gt;{172.169.51.54:63678, 204.210.194.22:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63678: (25%)&lt;BR/&gt; 63602: (25%)&gt;];
}
6745--11252[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.210.194.22" dst_port="80" src_ip="172.169.51.54" src_port="63678"/>
      <filter dst_ip="204.210.194.22" dst_port="80" src_ip="172.169.51.54" src_port="63602"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1111{
style=filled;
color=gray75;
3549[label="214.125.68.54;s;683pkt 683fpkt", shape=diamond, color=yellow];
6746[label="214.125.68.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11253[label="214.125.68.54;2pkt 2fpkt", shape=invtriangle, color=brown];
13725[label="214.125.68.54;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1111[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.68.54:54348, *:*}[94.1435%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54348: (46.8795%)&lt;BR/&gt; 6881: (4.57184%)&lt;BR/&gt; 49152: (0.870827%)&lt;BR/&gt; 54045: (0.507983%)&lt;BR/&gt; 52525: (0.507983%)&gt;];
}
3549--4562[label="0.0175439;1pkt 1fpkt"];
3549--6746[label="1;2pkt 2fpkt"];
3549--11253[label="1;2pkt 2fpkt"];
3549--13725[label="1;2pkt 2fpkt"];
6746--11253[label="1;2pkt 2fpkt"];
6746--13725[label="1;2pkt 2fpkt"];
11253--13725[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.68.54" src_port="54348"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1112{
style=filled;
color=gray75;
6749[label="185.196.92.54;27pkt 27fpkt", shape=pentagon, color=darkviolet];
11255[label="185.196.92.54;27pkt 27fpkt", shape=invtriangle, color=brown];
stat1112[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.92.54:25, *:*}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65307: (1.85185%)&lt;BR/&gt; 65293: (1.85185%)&lt;BR/&gt; 62888: (1.85185%)&lt;BR/&gt; 62421: (1.85185%)&gt;];
}
6749--11255[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="185.196.92.54" src_port="25"/>
    </slice>
    <from sec="1172898073" usec="0"/>
    <to sec="1172898884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.38.132.54"/>
    </slice>
    <from sec="1172898357" usec="0"/>
    <to sec="1172898371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1115{
style=filled;
color=gray75;
6761[label="195.81.227.54;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11265[label="195.81.227.54;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1115[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.227.54:80, 215.28.81.73:54647}[20%]&lt;BR/&gt;{195.81.227.54:80, 215.28.81.73:54653}[20%]&lt;BR/&gt;{195.81.227.54:80, 215.28.81.72:58573}[20%]&lt;BR/&gt;{195.81.227.54:80, 215.28.81.72:58574}[20%]&lt;BR/&gt;{195.81.227.54:80, 215.28.81.72:58579}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58579: (10%)&lt;BR/&gt; 58574: (10%)&lt;BR/&gt; 58573: (10%)&lt;BR/&gt; 54653: (10%)&gt;];
}
6761--11265[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.72" dst_port="58579" src_ip="195.81.227.54" src_port="80"/>
      <filter dst_ip="215.28.81.72" dst_port="58574" src_ip="195.81.227.54" src_port="80"/>
      <filter dst_ip="215.28.81.72" dst_port="58573" src_ip="195.81.227.54" src_port="80"/>
      <filter dst_ip="215.28.81.73" dst_port="54653" src_ip="195.81.227.54" src_port="80"/>
      <filter dst_ip="215.28.81.73" dst_port="54647" src_ip="195.81.227.54" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.106.7.55"/>
    </slice>
    <from sec="1172898485" usec="0"/>
    <to sec="1172898500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1117{
style=filled;
color=gray75;
6763[label="36.29.19.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11268[label="36.29.19.55;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1117[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.29.19.55:1082, 153.21.195.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1082: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6763--11268[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" src_ip="36.29.19.55" src_port="1082"/>
    </slice>
    <from sec="1172898202" usec="0"/>
    <to sec="1172898885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
6775[label="182.130.108.55;66pkt 66fpkt", shape=pentagon, color=darkviolet];
11272[label="182.130.108.55;65pkt 65fpkt", shape=invtriangle, color=brown];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.130.108.55:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6775--11272[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter src_ip="182.130.108.55"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
6804[label="217.144.171.56;41pkt 41fpkt", shape=pentagon, color=darkviolet];
11283[label="217.144.171.56;41pkt 41fpkt", shape=invtriangle, color=brown];
13738[label="217.144.171.56;40pkt 40fpkt", shape=invhouse, color=bisque];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.144.171.56:*, 96.89.66.32:*}[34.1463%]&lt;BR/&gt;{217.144.171.56:6667, *:*}[29.2683%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (14.7541%)&lt;BR/&gt; 113: (9.83607%)&lt;BR/&gt; 6666: (4.91803%)&lt;BR/&gt; 6663: (4.5082%)&lt;BR/&gt; 6668: (2.45902%)&gt;];
}
6804--11283[label="1;41pkt 41fpkt"];
6804--13738[label="1;40pkt 40fpkt"];
11283--13738[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="96.89.66.32" src_ip="217.144.171.56"/>
      <filter src_ip="217.144.171.56" src_port="6667"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
277[label="215.28.82.32;d;6pkt 6fpkt", shape=diamond, color=yellow];
278[label="214.78.123.93;s;10pkt 10fpkt", shape=diamond, color=yellow];
903[label="215.87.63.222;s;7pkt 7fpkt", shape=diamond, color=yellow];
4094[label="215.28.82.32;d;6pkt 6fpkt", shape=hexagon, color=black];
4277[label="215.87.63.222;s;7pkt 7fpkt", shape=hexagon, color=black];
6813[label="199.73.25.57;362pkt 362fpkt", shape=pentagon, color=darkviolet];
7520[label="214.38.159.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7555[label="214.78.123.93;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11288[label="199.73.25.57;362pkt 362fpkt", shape=invtriangle, color=brown];
13740[label="199.73.25.57;362pkt 362fpkt", shape=invhouse, color=bisque];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.73.25.57:*, *:1026}[52.2193%]&lt;BR/&gt;{199.73.25.57:*, *:1027}[42.2977%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (26.5432%)&lt;BR/&gt; 1027: (21.4286%)&lt;BR/&gt; 0: (2.29277%)&lt;BR/&gt; 47117: (1.0582%)&lt;BR/&gt; 47296: (0.925926%)&gt;];
}
277--278[label="0.166667;1pkt 1fpkt"];
277--903[label="0.166667;1pkt 1fpkt"];
277--4094[label="1;6pkt 6fpkt"];
277--4277[label="0.166667;1pkt 1fpkt"];
277--6813[label="0.166667;1pkt 1fpkt"];
277--7520[label="0.5;1pkt 1fpkt"];
277--7555[label="0.166667;1pkt 1fpkt"];
277--11288[label="0.166667;1pkt 1fpkt"];
277--13740[label="0.166667;1pkt 1fpkt"];
278--4094[label="0.166667;1pkt 1fpkt"];
278--7555[label="1;10pkt 10fpkt"];
903--4094[label="0.166667;1pkt 1fpkt"];
903--4277[label="1;7pkt 7fpkt"];
4094--4277[label="0.166667;1pkt 1fpkt"];
4094--6813[label="0.166667;1pkt 1fpkt"];
4094--7520[label="0.5;1pkt 1fpkt"];
4094--7555[label="0.166667;1pkt 1fpkt"];
4094--11288[label="0.166667;1pkt 1fpkt"];
4094--13740[label="0.166667;1pkt 1fpkt"];
6813--11288[label="1;362pkt 362fpkt"];
6813--13740[label="1;362pkt 362fpkt"];
11288--13740[label="1;362pkt 362fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="199.73.25.57"/>
      <filter dst_port="1027" src_ip="199.73.25.57"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.67.182.57"/>
    </slice>
    <from sec="1172898875" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.137.181.58"/>
    </slice>
    <from sec="1172898396" usec="0"/>
    <to sec="1172898411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.72.205.58"/>
    </slice>
    <from sec="1172898330" usec="0"/>
    <to sec="1172898341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.252.221.58"/>
    </slice>
    <from sec="1172898063" usec="0"/>
    <to sec="1172898073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1125{
style=filled;
color=gray75;
6859[label="24.0.79.59;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11312[label="24.0.79.59;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1125[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.0.79.59:80, 215.28.81.57:59770}[50%]&lt;BR/&gt;{24.0.79.59:80, 215.28.81.57:59771}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59771: (25%)&lt;BR/&gt; 59770: (25%)&gt;];
}
6859--11312[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.57" dst_port="59771" src_ip="24.0.79.59" src_port="80"/>
      <filter dst_ip="215.28.81.57" dst_port="59770" src_ip="24.0.79.59" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.34.98.59"/>
    </slice>
    <from sec="1172898462" usec="0"/>
    <to sec="1172898482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.93.157.59"/>
    </slice>
    <from sec="1172898803" usec="0"/>
    <to sec="1172898828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="185.196.186.59"/>
    </slice>
    <from sec="1172898594" usec="0"/>
    <to sec="1172898608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.96.48.60"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1130{
style=filled;
color=gray75;
6876[label="215.28.81.60;154pkt 154fpkt", shape=pentagon, color=darkviolet];
11326[label="215.28.81.60;154pkt 154fpkt", shape=invtriangle, color=brown];
stat1130[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.28.81.60:32768, *:53}[91.5584%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32768: (45.7792%)&lt;BR/&gt; 53: (45.7792%)&lt;BR/&gt; 0: (7.79221%)&lt;BR/&gt; 3774: (0.324675%)&lt;BR/&gt; 80: (0.324675%)&gt;];
}
6876--11326[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.28.81.60" src_port="32768"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.27.17.61"/>
    </slice>
    <from sec="1172898543" usec="0"/>
    <to sec="1172898565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.140.32.61"/>
    </slice>
    <from sec="1172898132" usec="0"/>
    <to sec="1172898501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.196.49.61"/>
    </slice>
    <from sec="1172898778" usec="0"/>
    <to sec="1172898793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.24.174.61"/>
    </slice>
    <from sec="1172898241" usec="0"/>
    <to sec="1172898385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.138.9.62"/>
    </slice>
    <from sec="1172898563" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="185.196.25.62"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.164.88.62"/>
    </slice>
    <from sec="1172898368" usec="0"/>
    <to sec="1172898393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1138{
style=filled;
color=gray75;
6912[label="7.227.109.62;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11342[label="7.227.109.62;6pkt 6fpkt", shape=invtriangle, color=brown];
13762[label="7.227.109.62;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1138[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.227.109.62:*, *:3124}[50%]&lt;BR/&gt;{7.227.109.62:*, 214.125.64.209:3127}[33.3333%]&lt;BR/&gt;{7.227.109.62:*, 214.125.64.216:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (25%)&lt;BR/&gt; 3124: (25%)&lt;BR/&gt; 4516: (8.33333%)&lt;BR/&gt; 4513: (8.33333%)&lt;BR/&gt; 4452: (8.33333%)&gt;];
}
6912--11342[label="1;6pkt 6fpkt"];
6912--13762[label="1;6pkt 6fpkt"];
11342--13762[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.64.216" src_ip="7.227.109.62"/>
      <filter dst_port="3124" src_ip="7.227.109.62"/>
      <filter dst_ip="214.125.64.209" dst_port="3127" src_ip="7.227.109.62"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.65.155.62"/>
    </slice>
    <from sec="1172898843" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.6.55.63"/>
    </slice>
    <from sec="1172898474" usec="0"/>
    <to sec="1172898557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1141{
style=filled;
color=gray75;
6928[label="185.196.232.63;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11352[label="185.196.232.63;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1141[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.232.63:2170, 214.30.111.250:43256}[20%]&lt;BR/&gt;{185.196.232.63:2170, 214.30.111.250:43546}[20%]&lt;BR/&gt;{185.196.232.63:2170, 214.30.111.250:43833}[20%]&lt;BR/&gt;{185.196.232.63:2170, 214.30.111.250:44119}[20%]&lt;BR/&gt;{185.196.232.63:2170, 214.30.111.250:44406}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2170: (50%)&lt;BR/&gt; 44406: (11.1111%)&lt;BR/&gt; 44119: (11.1111%)&lt;BR/&gt; 43833: (11.1111%)&lt;BR/&gt; 43546: (11.1111%)&gt;];
}
6928--11352[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="214.30.111.250" dst_port="44406" src_ip="185.196.232.63" src_port="2170"/>
      <filter dst_ip="214.30.111.250" dst_port="44119" src_ip="185.196.232.63" src_port="2170"/>
      <filter dst_ip="214.30.111.250" dst_port="43833" src_ip="185.196.232.63" src_port="2170"/>
      <filter dst_ip="214.30.111.250" dst_port="43546" src_ip="185.196.232.63" src_port="2170"/>
      <filter dst_ip="214.30.111.250" dst_port="43256" src_ip="185.196.232.63" src_port="2170"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.96.75.64"/>
    </slice>
    <from sec="1172898135" usec="0"/>
    <to sec="1172898150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.81.114.64"/>
    </slice>
    <from sec="1172898760" usec="0"/>
    <to sec="1172898782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.101.241.64"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.144.3.65"/>
    </slice>
    <from sec="1172898091" usec="0"/>
    <to sec="1172898099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1146{
style=filled;
color=gray75;
6964[label="153.21.82.65;25pkt 25fpkt", shape=pentagon, color=darkviolet];
11372[label="153.21.82.65;24pkt 24fpkt", shape=invtriangle, color=brown];
13773[label="153.21.82.65;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1146[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.82.65:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58436: (2.05479%)&lt;BR/&gt; 53144: (2.05479%)&lt;BR/&gt; 48144: (2.05479%)&lt;BR/&gt; 48030: (2.05479%)&gt;];
}
6964--11372[label="1;24pkt 24fpkt"];
6964--13773[label="1;24pkt 24fpkt"];
11372--13773[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.82.65" src_port="80"/>
    </slice>
    <from sec="1172898070" usec="0"/>
    <to sec="1172898861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.0.178.65"/>
    </slice>
    <from sec="1172898856" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1148{
style=filled;
color=gray75;
6974[label="204.252.221.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11379[label="204.252.221.65;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1148[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.252.221.65:80, 215.17.15.228:51095}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51095: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6974--11379[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.17.15.228" dst_port="51095" src_ip="204.252.221.65" src_port="80"/>
    </slice>
    <from sec="1172898838" usec="0"/>
    <to sec="1172898852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
6975[label="170.123.238.65;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11380[label="170.123.238.65;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.238.65:80, 201.97.25.160:*}[28.5714%]&lt;BR/&gt;{170.123.238.65:80, 100.154.139.200:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65383: (7.14286%)&lt;BR/&gt; 57782: (7.14286%)&lt;BR/&gt; 57727: (7.14286%)&lt;BR/&gt; 48605: (7.14286%)&gt;];
}
6975--11380[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="100.154.139.200" src_ip="170.123.238.65" src_port="80"/>
      <filter dst_ip="201.97.25.160" src_ip="170.123.238.65" src_port="80"/>
    </slice>
    <from sec="1172898106" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1150{
style=filled;
color=gray75;
6981[label="170.123.69.66;27pkt 27fpkt", shape=pentagon, color=darkviolet];
11383[label="170.123.69.66;27pkt 27fpkt", shape=invtriangle, color=brown];
stat1150[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.69.66:*, 26.96.11.201:80}[62.963%]&lt;BR/&gt;{170.123.69.66:*, 26.96.11.192:443}[37.037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.4815%)&lt;BR/&gt; 443: (18.5185%)&lt;BR/&gt; 2968: (1.85185%)&lt;BR/&gt; 2967: (1.85185%)&lt;BR/&gt; 2964: (1.85185%)&gt;];
}
6981--11383[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="26.96.11.201" dst_port="80" src_ip="170.123.69.66"/>
      <filter dst_ip="26.96.11.192" dst_port="443" src_ip="170.123.69.66"/>
    </slice>
    <from sec="1172898094" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1151{
style=filled;
color=gray75;
6982[label="153.21.82.66;38pkt 38fpkt", shape=pentagon, color=darkviolet];
11384[label="153.21.82.66;37pkt 37fpkt", shape=invtriangle, color=brown];
stat1151[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.82.66:80, 25.84.59.192:*}[63.1579%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60223: (1.33333%)&lt;BR/&gt; 56074: (1.33333%)&lt;BR/&gt; 56067: (1.33333%)&lt;BR/&gt; 52270: (1.33333%)&gt;];
}
6982--11384[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="25.84.59.192" src_ip="153.21.82.66" src_port="80"/>
    </slice>
    <from sec="1172898096" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1152{
style=filled;
color=gray75;
6984[label="0.124.104.66;126pkt 126fpkt", shape=pentagon, color=darkviolet];
11385[label="0.124.104.66;125pkt 125fpkt", shape=invtriangle, color=brown];
13781[label="0.124.104.66;125pkt 125fpkt", shape=invhouse, color=bisque];
stat1152[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.124.104.66:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4433: (0.398936%)&lt;BR/&gt; 4428: (0.398936%)&lt;BR/&gt; 4413: (0.398936%)&lt;BR/&gt; 4412: (0.398936%)&gt;];
}
6984--11385[label="1;125pkt 125fpkt"];
6984--13781[label="1;125pkt 125fpkt"];
11385--13781[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="0.124.104.66"/>
    </slice>
    <from sec="1172898754" usec="0"/>
    <to sec="1172898781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1153{
style=filled;
color=gray75;
6985[label="5.0.130.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11386[label="5.0.130.66;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1153[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.0.130.66:80, 170.123.50.19:48578}[50%]&lt;BR/&gt;{5.0.130.66:53, 172.169.196.43:11424}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48578: (25%)&lt;BR/&gt; 11424: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 53: (25%)&gt;];
}
6985--11386[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.169.196.43" dst_port="11424" src_ip="5.0.130.66" src_port="53"/>
      <filter dst_ip="170.123.50.19" dst_port="48578" src_ip="5.0.130.66" src_port="80"/>
    </slice>
    <from sec="1172898853" usec="0"/>
    <to sec="1172898866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.60.164.66"/>
    </slice>
    <from sec="1172898798" usec="0"/>
    <to sec="1172898817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1155{
style=filled;
color=gray75;
6991[label="170.123.190.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11391[label="170.123.190.66;2pkt 2fpkt", shape=invtriangle, color=brown];
13783[label="170.123.190.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1155[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.190.66:80, 17.3.202.42:47250}[50%]&lt;BR/&gt;{170.123.190.66:80, 17.3.200.77:58314}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58314: (30%)&lt;BR/&gt; 47250: (20%)&gt;];
}
6991--11391[label="1;2pkt 2fpkt"];
6991--13783[label="1;1pkt 1fpkt"];
11391--13783[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.3.200.77" dst_port="58314" src_ip="170.123.190.66" src_port="80"/>
      <filter dst_ip="17.3.202.42" dst_port="47250" src_ip="170.123.190.66" src_port="80"/>
    </slice>
    <from sec="1172898703" usec="0"/>
    <to sec="1172898706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1156{
style=filled;
color=gray75;
6995[label="0.171.0.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11395[label="0.171.0.67;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1156[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.171.0.67:80, 215.28.82.64:4016}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4016: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6995--11395[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.82.64" dst_port="4016" src_ip="0.171.0.67" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1157{
style=filled;
color=gray75;
896[label="153.21.149.67;s;258pkt 258fpkt", shape=diamond, color=yellow];
4271[label="153.21.149.67;s;166pkt 166fpkt", shape=hexagon, color=black];
7003[label="153.21.149.67;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11399[label="153.21.149.67;5pkt 5fpkt", shape=invtriangle, color=brown];
13787[label="153.21.149.67;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1157[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.149.67:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4181: (0.457666%)&lt;BR/&gt; 3682: (0.457666%)&lt;BR/&gt; 3410: (0.457666%)&lt;BR/&gt; 1189: (0.457666%)&gt;];
}
896--4271[label="1;166pkt 166fpkt"];
896--11399[label="0.2;1pkt 1fpkt"];
4271--11399[label="0.2;1pkt 1fpkt"];
7003--11399[label="1;4pkt 4fpkt"];
7003--13787[label="1;4pkt 4fpkt"];
11399--13787[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.149.67" src_port="25"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.22.14.68"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1159{
style=filled;
color=gray75;
7018[label="215.108.37.68;82pkt 82fpkt", shape=pentagon, color=darkviolet];
11409[label="215.108.37.68;82pkt 82fpkt", shape=invtriangle, color=brown];
stat1159[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.108.37.68:*, *:135}[57.3171%]&lt;BR/&gt;{215.108.37.68:*, *:445}[42.6829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (28.6585%)&lt;BR/&gt; 445: (21.3415%)&lt;BR/&gt; 4867: (1.21951%)&lt;BR/&gt; 4021: (1.21951%)&lt;BR/&gt; 3888: (1.21951%)&gt;];
}
7018--11409[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="215.108.37.68"/>
      <filter dst_port="445" src_ip="215.108.37.68"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.219.144.68"/>
    </slice>
    <from sec="1172898559" usec="0"/>
    <to sec="1172898568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.48.202.68"/>
    </slice>
    <from sec="1172898099" usec="0"/>
    <to sec="1172898120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1162{
style=filled;
color=gray75;
7036[label="170.123.246.68;42pkt 42fpkt", shape=pentagon, color=darkviolet];
11417[label="170.123.246.68;42pkt 42fpkt", shape=invtriangle, color=brown];
13795[label="170.123.246.68;41pkt 41fpkt", shape=invhouse, color=bisque];
stat1162[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.246.68:*, 112.100.109.210:80}[61.9048%]&lt;BR/&gt;{170.123.246.68:*, 112.100.109.205:80}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8%)&lt;BR/&gt; 3223: (1.2%)&lt;BR/&gt; 3213: (1.2%)&lt;BR/&gt; 3208: (1.2%)&lt;BR/&gt; 3197: (1.2%)&gt;];
}
7036--11417[label="1;42pkt 42fpkt"];
7036--13795[label="1;41pkt 41fpkt"];
11417--13795[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="112.100.109.210" dst_port="80" src_ip="170.123.246.68"/>
      <filter dst_ip="112.100.109.205" dst_port="80" src_ip="170.123.246.68"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1163{
style=filled;
color=gray75;
7047[label="26.165.77.69;16pkt 16fpkt", shape=pentagon, color=darkviolet];
11420[label="26.165.77.69;15pkt 15fpkt", shape=invtriangle, color=brown];
13797[label="26.165.77.69;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1163[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.165.77.69:80, 215.28.81.57:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59379: (3.26087%)&lt;BR/&gt; 59101: (3.26087%)&lt;BR/&gt; 59100: (3.26087%)&lt;BR/&gt; 59099: (3.26087%)&gt;];
}
7047--11420[label="1;15pkt 15fpkt"];
7047--13797[label="1;15pkt 15fpkt"];
11420--13797[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.57" src_ip="26.165.77.69" src_port="80"/>
    </slice>
    <from sec="1172898831" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1164{
style=filled;
color=gray75;
7055[label="198.32.141.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11423[label="198.32.141.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1164[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.141.69:31102, 153.21.195.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31102: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7055--11423[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" src_ip="198.32.141.69" src_port="31102"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.22.151.69"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1166{
style=filled;
color=gray75;
7062[label="154.200.205.69;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11428[label="154.200.205.69;7pkt 7fpkt", shape=invtriangle, color=brown];
13800[label="154.200.205.69;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1166[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.200.205.69:41191, *:*}[42.8571%]&lt;BR/&gt;{154.200.205.69:*, 200.142.53.167:60771}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41191: (22.5%)&lt;BR/&gt; 60771: (15%)&lt;BR/&gt; 123: (15%)&lt;BR/&gt; 64790: (7.5%)&lt;BR/&gt; 42874: (7.5%)&gt;];
}
7062--11428[label="1;7pkt 7fpkt"];
7062--13800[label="1;6pkt 6fpkt"];
11428--13800[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="154.200.205.69" src_port="41191"/>
      <filter dst_ip="200.142.53.167" dst_port="60771" src_ip="154.200.205.69"/>
    </slice>
    <from sec="1172898047" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.52.16.70"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1168{
style=filled;
color=gray75;
7068[label="170.123.61.70;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11430[label="170.123.61.70;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1168[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.61.70:80, 193.23.173.78:*}[66.6667%]&lt;BR/&gt;{170.123.61.70:80, 17.3.17.199:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55930: (9.09091%)&lt;BR/&gt; 55842: (9.09091%)&lt;BR/&gt; 1336: (9.09091%)&lt;BR/&gt; 1335: (9.09091%)&gt;];
}
7068--11430[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="193.23.173.78" src_ip="170.123.61.70" src_port="80"/>
      <filter dst_ip="17.3.17.199" src_ip="170.123.61.70" src_port="80"/>
    </slice>
    <from sec="1172898199" usec="0"/>
    <to sec="1172898472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1169{
style=filled;
color=gray75;
7070[label="216.17.95.70;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11431[label="216.17.95.70;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1169[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.17.95.70:36220, 214.125.67.75:3306}[20%]&lt;BR/&gt;{216.17.95.70:22, 214.125.67.75:1586}[20%]&lt;BR/&gt;{216.17.95.70:22, 214.125.67.75:4530}[20%]&lt;BR/&gt;{216.17.95.70:22, 214.125.67.75:4531}[20%]&lt;BR/&gt;{216.17.95.70:22, 214.125.67.75:4947}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (38.8889%)&lt;BR/&gt; 36220: (11.1111%)&lt;BR/&gt; 4947: (11.1111%)&lt;BR/&gt; 4531: (11.1111%)&lt;BR/&gt; 4530: (11.1111%)&gt;];
}
7070--11431[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.75" dst_port="4947" src_ip="216.17.95.70" src_port="22"/>
      <filter dst_ip="214.125.67.75" dst_port="4531" src_ip="216.17.95.70" src_port="22"/>
      <filter dst_ip="214.125.67.75" dst_port="4530" src_ip="216.17.95.70" src_port="22"/>
      <filter dst_ip="214.125.67.75" dst_port="1586" src_ip="216.17.95.70" src_port="22"/>
      <filter dst_ip="214.125.67.75" dst_port="3306" src_ip="216.17.95.70" src_port="36220"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.242.168.70"/>
    </slice>
    <from sec="1172898560" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1171{
style=filled;
color=gray75;
7080[label="172.104.196.70;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11437[label="172.104.196.70;18pkt 18fpkt", shape=invtriangle, color=brown];
13802[label="172.104.196.70;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1171[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.104.196.70:123, *:123}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (75.4717%)&lt;BR/&gt; 80: (8.49057%)&lt;BR/&gt; 55547: (2.83019%)&lt;BR/&gt; 54766: (2.83019%)&lt;BR/&gt; 53465: (2.83019%)&gt;];
}
7080--11437[label="1;18pkt 18fpkt"];
7080--13802[label="1;17pkt 17fpkt"];
11437--13802[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="123" src_ip="172.104.196.70" src_port="123"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1172{
style=filled;
color=gray75;
7081[label="172.169.196.70;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11438[label="172.169.196.70;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1172[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.196.70:80, 27.132.0.137:4284}[33.3333%]&lt;BR/&gt;{172.169.196.70:47831, 195.22.220.205:80}[33.3333%]&lt;BR/&gt;{172.169.196.70:80, 29.182.123.253:54026}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54026: (16.6667%)&lt;BR/&gt; 47831: (16.6667%)&lt;BR/&gt; 4284: (16.6667%)&gt;];
}
7081--11438[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="29.182.123.253" dst_port="54026" src_ip="172.169.196.70" src_port="80"/>
      <filter dst_ip="195.22.220.205" dst_port="80" src_ip="172.169.196.70" src_port="47831"/>
      <filter dst_ip="27.132.0.137" dst_port="4284" src_ip="172.169.196.70" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.66.222.70"/>
    </slice>
    <from sec="1172898740" usec="0"/>
    <to sec="1172898743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="97.175.113.71"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1175{
style=filled;
color=gray75;
7095[label="156.139.131.71;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11443[label="156.139.131.71;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1175[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.131.71:25, 216.37.163.89:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.4737%)&lt;BR/&gt; 61625: (5.26316%)&lt;BR/&gt; 53213: (5.26316%)&lt;BR/&gt; 15627: (5.26316%)&lt;BR/&gt; 6666: (5.26316%)&gt;];
}
7095--11443[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="216.37.163.89" src_ip="156.139.131.71" src_port="25"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="154.200.197.72"/>
    </slice>
    <from sec="1172898733" usec="0"/>
    <to sec="1172898749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.252.220.72"/>
    </slice>
    <from sec="1172898187" usec="0"/>
    <to sec="1172898786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.43.73"/>
    </slice>
    <from sec="1172898036" usec="0"/>
    <to sec="1172898198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.24.66.73"/>
    </slice>
    <from sec="1172898739" usec="0"/>
    <to sec="1172898769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.44.142.73"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.134.160.73"/>
    </slice>
    <from sec="1172898140" usec="0"/>
    <to sec="1172898223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.112.242.73"/>
    </slice>
    <from sec="1172898666" usec="0"/>
    <to sec="1172898834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1183{
style=filled;
color=gray75;
7152[label="153.21.18.74;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11473[label="153.21.18.74;19pkt 19fpkt", shape=invtriangle, color=brown];
13817[label="153.21.18.74;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1183[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.18.74:80, 25.85.37.99:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64634: (2.58621%)&lt;BR/&gt; 64349: (2.58621%)&lt;BR/&gt; 64232: (2.58621%)&lt;BR/&gt; 64065: (2.58621%)&gt;];
}
7152--11473[label="1;19pkt 19fpkt"];
7152--13817[label="1;19pkt 19fpkt"];
11473--13817[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="25.85.37.99" src_ip="153.21.18.74" src_port="80"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.206.81.74"/>
    </slice>
    <from sec="1172898124" usec="0"/>
    <to sec="1172898142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1185{
style=filled;
color=gray75;
7172[label="170.123.46.75;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11482[label="170.123.46.75;7pkt 7fpkt", shape=invtriangle, color=brown];
13825[label="170.123.46.75;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1185[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.46.75:80, 26.29.8.235:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56222: (7.14286%)&lt;BR/&gt; 55273: (7.14286%)&lt;BR/&gt; 47842: (7.14286%)&lt;BR/&gt; 44616: (7.14286%)&gt;];
}
7172--11482[label="1;7pkt 7fpkt"];
7172--13825[label="1;7pkt 7fpkt"];
11482--13825[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="26.29.8.235" src_ip="170.123.46.75" src_port="80"/>
    </slice>
    <from sec="1172898060" usec="0"/>
    <to sec="1172898868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.125.74.75"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1187{
style=filled;
color=gray75;
650[label="170.123.228.99;d;80pkt 80fpkt", shape=diamond, color=yellow];
1265[label="208.250.255.41;s;10pkt 10fpkt", shape=diamond, color=yellow];
1384[label="204.152.195.213;s;12pkt 12fpkt", shape=diamond, color=yellow];
1681[label="204.152.195.36;s;1pkt 1fpkt", shape=diamond, color=yellow];
1718[label="204.152.195.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
2161[label="112.113.116.169;s;5pkt 5fpkt", shape=diamond, color=yellow];
2513[label="170.123.79.121;d;9pkt 9fpkt", shape=diamond, color=yellow];
2761[label="112.113.116.183;s;3pkt 3fpkt", shape=diamond, color=yellow];
4470[label="112.113.116.169;s;5pkt 5fpkt", shape=hexagon, color=black];
4679[label="204.152.195.36;s;1pkt 1fpkt", shape=hexagon, color=black];
4749[label="170.123.228.99;d;80pkt 80fpkt", shape=hexagon, color=black];
5554[label="112.113.116.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6376[label="204.152.195.36;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7031[label="204.152.195.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7060[label="204.152.195.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7176[label="112.113.113.75;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9118[label="112.113.116.169;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9395[label="112.113.116.183;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9943[label="204.152.195.213;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11427[label="204.152.195.69;1pkt 1fpkt", shape=invtriangle, color=brown];
11484[label="112.113.113.75;3pkt 3fpkt", shape=invtriangle, color=brown];
12761[label="112.113.116.183;2pkt 2fpkt", shape=invtriangle, color=brown];
13059[label="204.152.195.213;11pkt 11fpkt", shape=invtriangle, color=brown];
13826[label="112.113.113.75;3pkt 3fpkt", shape=invhouse, color=bisque];
14535[label="204.152.195.213;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1187[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 170.123.228.99:*}[87.6404%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5401%)&lt;BR/&gt; 1935: (1.45985%)&lt;BR/&gt; 1589: (1.27737%)&lt;BR/&gt; 1584: (1.27737%)&lt;BR/&gt; 1591: (1.09489%)&gt;];
}
650--1265[label="1;10pkt 10fpkt"];
650--1384[label="1;12pkt 12fpkt"];
650--1718[label="1;1pkt 1fpkt"];
650--2161[label="1;5pkt 5fpkt"];
650--3874[label="0.0125;1pkt 1fpkt"];
650--4470[label="1;5pkt 5fpkt"];
650--4749[label="1;80pkt 80fpkt"];
650--5554[label="1;1pkt 1fpkt"];
650--6376[label="0.9;9pkt 9fpkt"];
650--7031[label="1;1pkt 1fpkt"];
650--7060[label="1;1pkt 1fpkt"];
650--8523[label="0.0125;1pkt 1fpkt"];
650--9118[label="1;5pkt 5fpkt"];
650--9943[label="1;12pkt 12fpkt"];
650--10308[label="0.0285714;1pkt 1fpkt"];
650--11427[label="1;1pkt 1fpkt"];
650--12252[label="0.0125;1pkt 1fpkt"];
650--13059[label="1;11pkt 11fpkt"];
650--13252[label="0.0294118;1pkt 1fpkt"];
650--14180[label="0.0125;1pkt 1fpkt"];
650--14535[label="1;11pkt 11fpkt"];
650--14617[label="0.0294118;1pkt 1fpkt"];
1265--4749[label="1;10pkt 10fpkt"];
1384--4749[label="1;12pkt 12fpkt"];
1384--9943[label="1;12pkt 12fpkt"];
1384--13059[label="1;11pkt 11fpkt"];
1384--14535[label="1;11pkt 11fpkt"];
1681--2513[label="1;1pkt 1fpkt"];
1681--4679[label="1;1pkt 1fpkt"];
1681--6376[label="1;1pkt 1fpkt"];
1718--4749[label="1;1pkt 1fpkt"];
1718--7060[label="1;1pkt 1fpkt"];
1718--11427[label="1;1pkt 1fpkt"];
2161--4470[label="1;5pkt 5fpkt"];
2161--4749[label="1;5pkt 5fpkt"];
2161--9118[label="1;5pkt 5fpkt"];
2513--2761[label="1;3pkt 3fpkt"];
2513--4679[label="1;1pkt 1fpkt"];
2513--5240[label="0.111111;1pkt 1fpkt"];
2513--6376[label="0.111111;1pkt 1fpkt"];
2513--7176[label="1;4pkt 4fpkt"];
2513--8940[label="0.111111;1pkt 1fpkt"];
2513--9395[label="1;2pkt 2fpkt"];
2513--11484[label="1;3pkt 3fpkt"];
2513--12492[label="0.111111;1pkt 1fpkt"];
2513--12761[label="1;2pkt 2fpkt"];
2513--13826[label="1;3pkt 3fpkt"];
2513--14276[label="0.111111;1pkt 1fpkt"];
2761--9395[label="1;2pkt 2fpkt"];
2761--12761[label="1;2pkt 2fpkt"];
4470--4749[label="1;5pkt 5fpkt"];
4470--9118[label="1;5pkt 5fpkt"];
4679--6376[label="1;1pkt 1fpkt"];
4749--5554[label="1;1pkt 1fpkt"];
4749--6376[label="0.9;9pkt 9fpkt"];
4749--7031[label="1;1pkt 1fpkt"];
4749--7060[label="1;1pkt 1fpkt"];
4749--8523[label="0.0125;1pkt 1fpkt"];
4749--9118[label="1;5pkt 5fpkt"];
4749--9943[label="1;12pkt 12fpkt"];
4749--10308[label="0.0285714;1pkt 1fpkt"];
4749--11427[label="1;1pkt 1fpkt"];
4749--12252[label="0.0125;1pkt 1fpkt"];
4749--13059[label="1;11pkt 11fpkt"];
4749--13252[label="0.0294118;1pkt 1fpkt"];
4749--14180[label="0.0125;1pkt 1fpkt"];
4749--14535[label="1;11pkt 11fpkt"];
4749--14617[label="0.0294118;1pkt 1fpkt"];
7060--11427[label="1;1pkt 1fpkt"];
7176--11484[label="1;3pkt 3fpkt"];
7176--13826[label="1;3pkt 3fpkt"];
9395--12761[label="1;2pkt 2fpkt"];
9943--13059[label="1;11pkt 11fpkt"];
9943--14535[label="1;11pkt 11fpkt"];
11484--13826[label="1;3pkt 3fpkt"];
13059--14535[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.228.99" src_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1188{
style=filled;
color=gray75;
7182[label="172.179.174.75;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11488[label="172.179.174.75;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1188[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.174.75:*, 96.145.204.36:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1962: (3.84615%)&lt;BR/&gt; 1961: (3.84615%)&lt;BR/&gt; 1960: (3.84615%)&lt;BR/&gt; 1959: (3.84615%)&gt;];
}
7182--11488[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="96.145.204.36" dst_port="80" src_ip="172.179.174.75"/>
    </slice>
    <from sec="1172898526" usec="0"/>
    <to sec="1172898743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1189{
style=filled;
color=gray75;
7183[label="215.32.180.75;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11489[label="215.32.180.75;21pkt 21fpkt", shape=invtriangle, color=brown];
stat1189[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.32.180.75:*, 67.86.227.216:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53943: (2.38095%)&lt;BR/&gt; 48801: (2.38095%)&lt;BR/&gt; 48750: (2.38095%)&lt;BR/&gt; 46736: (2.38095%)&gt;];
}
7183--11489[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="67.86.227.216" dst_port="80" src_ip="215.32.180.75"/>
    </slice>
    <from sec="1172898353" usec="0"/>
    <to sec="1172898493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.145.16.76"/>
    </slice>
    <from sec="1172898329" usec="0"/>
    <to sec="1172898354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.164.35.76"/>
    </slice>
    <from sec="1172898256" usec="0"/>
    <to sec="1172898269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.172.226.76"/>
    </slice>
    <from sec="1172898310" usec="0"/>
    <to sec="1172898320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1193{
style=filled;
color=gray75;
7211[label="172.187.13.77;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11504[label="172.187.13.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1193[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.187.13.77:3660, 207.212.150.199:80}[50%]&lt;BR/&gt;{172.187.13.77:3661, 207.212.150.199:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3661: (33.3333%)&lt;BR/&gt; 3660: (16.6667%)&gt;];
}
7211--11504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.212.150.199" dst_port="80" src_ip="172.187.13.77" src_port="3661"/>
      <filter dst_ip="207.212.150.199" dst_port="80" src_ip="172.187.13.77" src_port="3660"/>
    </slice>
    <from sec="1172898189" usec="0"/>
    <to sec="1172898209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.31.14.77"/>
    </slice>
    <from sec="1172898545" usec="0"/>
    <to sec="1172898572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.53.52.77"/>
    </slice>
    <from sec="1172898210" usec="0"/>
    <to sec="1172898395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.240.86.77"/>
    </slice>
    <from sec="1172898537" usec="0"/>
    <to sec="1172898555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.6.236.77"/>
    </slice>
    <from sec="1172898724" usec="0"/>
    <to sec="1172898737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.46.4.78"/>
    </slice>
    <from sec="1172898444" usec="0"/>
    <to sec="1172898473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.222.4.79"/>
    </slice>
    <from sec="1172898510" usec="0"/>
    <to sec="1172898524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.167.20.79"/>
    </slice>
    <from sec="1172898368" usec="0"/>
    <to sec="1172898448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.19.75.79"/>
    </slice>
    <from sec="1172898543" usec="0"/>
    <to sec="1172898556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.96.196.79"/>
    </slice>
    <from sec="1172898765" usec="0"/>
    <to sec="1172898780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.61.39.80"/>
    </slice>
    <from sec="1172898221" usec="0"/>
    <to sec="1172898227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.37.81"/>
    </slice>
    <from sec="1172898834" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.3.97.81"/>
    </slice>
    <from sec="1172898338" usec="0"/>
    <to sec="1172898347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1207{
style=filled;
color=gray75;
7301[label="206.232.100.81;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11551[label="206.232.100.81;7pkt 7fpkt", shape=invtriangle, color=brown];
13853[label="206.232.100.81;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1207[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.232.100.81:80, 153.21.8.44:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1366: (7.14286%)&lt;BR/&gt; 1364: (7.14286%)&lt;BR/&gt; 1360: (7.14286%)&lt;BR/&gt; 1359: (7.14286%)&gt;];
}
7301--11551[label="1;7pkt 7fpkt"];
7301--13853[label="1;7pkt 7fpkt"];
11551--13853[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.8.44" src_ip="206.232.100.81" src_port="80"/>
    </slice>
    <from sec="1172898876" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1208{
style=filled;
color=gray75;
7322[label="172.179.12.82;133pkt 133fpkt", shape=pentagon, color=darkviolet];
11560[label="172.179.12.82;133pkt 133fpkt", shape=invtriangle, color=brown];
13860[label="172.179.12.82;132pkt 132fpkt", shape=invhouse, color=bisque];
stat1208[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.12.82:*, 215.160.49.235:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48199: (0.376884%)&lt;BR/&gt; 48197: (0.376884%)&lt;BR/&gt; 48195: (0.376884%)&lt;BR/&gt; 48193: (0.376884%)&gt;];
}
7322--11560[label="1;133pkt 133fpkt"];
7322--13860[label="1;132pkt 132fpkt"];
11560--13860[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.49.235" dst_port="80" src_ip="172.179.12.82"/>
    </slice>
    <from sec="1172898858" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.189.31.82"/>
    </slice>
    <from sec="1172898045" usec="0"/>
    <to sec="1172898351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.40.40.82"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1211{
style=filled;
color=gray75;
7326[label="172.179.65.82;25pkt 25fpkt", shape=pentagon, color=darkviolet];
11564[label="172.179.65.82;24pkt 24fpkt", shape=invtriangle, color=brown];
13861[label="172.179.65.82;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1211[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.65.82:80, 100.154.178.96:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59510: (2.02703%)&lt;BR/&gt; 59509: (2.02703%)&lt;BR/&gt; 59508: (2.02703%)&lt;BR/&gt; 59507: (2.02703%)&gt;];
}
7326--11564[label="1;24pkt 24fpkt"];
7326--13861[label="1;25pkt 25fpkt"];
11564--13861[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="100.154.178.96" src_ip="172.179.65.82" src_port="80"/>
    </slice>
    <from sec="1172898117" usec="0"/>
    <to sec="1172898123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.145.81.82"/>
    </slice>
    <from sec="1172898713" usec="0"/>
    <to sec="1172898726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1213{
style=filled;
color=gray75;
7331[label="172.179.82.82;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11566[label="172.179.82.82;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1213[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.82.82:25, 96.12.92.66:50151}[33.3333%]&lt;BR/&gt;{172.179.82.82:25, 207.33.176.180:56873}[33.3333%]&lt;BR/&gt;{172.179.82.82:25, 206.193.76.185:60939}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 60939: (16.6667%)&lt;BR/&gt; 56873: (16.6667%)&lt;BR/&gt; 50151: (16.6667%)&gt;];
}
7331--11566[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="206.193.76.185" dst_port="60939" src_ip="172.179.82.82" src_port="25"/>
      <filter dst_ip="207.33.176.180" dst_port="56873" src_ip="172.179.82.82" src_port="25"/>
      <filter dst_ip="96.12.92.66" dst_port="50151" src_ip="172.179.82.82" src_port="25"/>
    </slice>
    <from sec="1172898043" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.0.104.82"/>
    </slice>
    <from sec="1172898700" usec="0"/>
    <to sec="1172898729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.86.61.83"/>
    </slice>
    <from sec="1172898562" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1216{
style=filled;
color=gray75;
7371[label="26.29.8.84;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11585[label="26.29.8.84;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1216[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.29.8.84:*, 214.125.74.2:80}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64388: (2.77778%)&lt;BR/&gt; 64196: (2.77778%)&lt;BR/&gt; 63218: (2.77778%)&lt;BR/&gt; 61489: (2.77778%)&gt;];
}
7371--11585[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.74.2" dst_port="80" src_ip="26.29.8.84"/>
    </slice>
    <from sec="1172898046" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1218{
style=filled;
color=gray75;
7382[label="214.125.79.84;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11592[label="214.125.79.84;6pkt 6fpkt", shape=invtriangle, color=brown];
13875[label="214.125.79.84;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1218[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.79.84:139, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (41.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 4243: (8.33333%)&lt;BR/&gt; 3569: (8.33333%)&lt;BR/&gt; 2296: (8.33333%)&gt;];
}
7382--11592[label="1;6pkt 6fpkt"];
7382--13875[label="1;6pkt 6fpkt"];
11592--13875[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.79.84" src_port="139"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1219{
style=filled;
color=gray75;
7383[label="170.123.80.84;36pkt 36fpkt", shape=pentagon, color=darkviolet];
11593[label="170.123.80.84;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1219[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.80.84:*, *:113}[50%]&lt;BR/&gt;{170.123.80.84:25, *:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 59369: (1.38889%)&lt;BR/&gt; 59368: (1.38889%)&lt;BR/&gt; 59367: (1.38889%)&gt;];
}
7383--11593[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="170.123.80.84" src_port="25"/>
      <filter dst_port="113" src_ip="170.123.80.84"/>
    </slice>
    <from sec="1172898126" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1220{
style=filled;
color=gray75;
7392[label="185.196.195.84;19pkt 19fpkt", shape=pentagon, color=darkviolet];
11599[label="185.196.195.84;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1220[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.195.84:56869, *:53}[57.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.8378%)&lt;BR/&gt; 56869: (29.7297%)&lt;BR/&gt; 25: (6.75676%)&lt;BR/&gt; 110: (5.40541%)&lt;BR/&gt; 60675: (2.7027%)&gt;];
}
7392--11599[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="185.196.195.84" src_port="56869"/>
    </slice>
    <from sec="1172898072" usec="0"/>
    <to sec="1172898792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.34.96.85"/>
    </slice>
    <from sec="1172898631" usec="0"/>
    <to sec="1172898646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.19.170.85"/>
    </slice>
    <from sec="1172898511" usec="0"/>
    <to sec="1172898540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.101.70.86"/>
    </slice>
    <from sec="1172898362" usec="0"/>
    <to sec="1172898369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.155.185.86"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.49.208.86"/>
    </slice>
    <from sec="1172898387" usec="0"/>
    <to sec="1172898449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1226{
style=filled;
color=gray75;
7449[label="172.169.41.87;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11630[label="172.169.41.87;5pkt 5fpkt", shape=invtriangle, color=brown];
13896[label="172.169.41.87;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1226[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.41.87:62259, 195.17.152.5:80}[20%]&lt;BR/&gt;{172.169.41.87:62260, 18.224.56.131:80}[20%]&lt;BR/&gt;{172.169.41.87:62261, 26.192.121.113:80}[20%]&lt;BR/&gt;{172.169.41.87:62262, 26.192.121.113:80}[20%]&lt;BR/&gt;{172.169.41.87:62263, 26.192.121.113:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62263: (10%)&lt;BR/&gt; 62262: (10%)&lt;BR/&gt; 62261: (10%)&lt;BR/&gt; 62260: (10%)&gt;];
}
7449--11630[label="1;5pkt 5fpkt"];
7449--13896[label="1;5pkt 5fpkt"];
11630--13896[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="26.192.121.113" dst_port="80" src_ip="172.169.41.87" src_port="62263"/>
      <filter dst_ip="26.192.121.113" dst_port="80" src_ip="172.169.41.87" src_port="62262"/>
      <filter dst_ip="26.192.121.113" dst_port="80" src_ip="172.169.41.87" src_port="62261"/>
      <filter dst_ip="18.224.56.131" dst_port="80" src_ip="172.169.41.87" src_port="62260"/>
      <filter dst_ip="195.17.152.5" dst_port="80" src_ip="172.169.41.87" src_port="62259"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.70.168.87"/>
    </slice>
    <from sec="1172898714" usec="0"/>
    <to sec="1172898726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.102.192.87"/>
    </slice>
    <from sec="1172898829" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1229{
style=filled;
color=gray75;
2623[label="215.28.101.89;s;181pkt 181fpkt", shape=diamond, color=yellow];
7488[label="215.28.101.89;214pkt 214fpkt", shape=pentagon, color=darkviolet];
11652[label="215.28.101.89;214pkt 214fpkt", shape=invtriangle, color=brown];
13905[label="215.28.101.89;213pkt 213fpkt", shape=invhouse, color=bisque];
stat1229[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.28.101.89:53, *:*}[52.3364%]&lt;BR/&gt;{215.28.101.89:44873, *:53}[33.1776%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.3431%)&lt;BR/&gt; 44873: (17.0925%)&lt;BR/&gt; 25: (5.41363%)&lt;BR/&gt; 0: (1.94647%)&lt;BR/&gt; 32769: (1.27737%)&gt;];
}
2623--2872[label="0.00833333;1pkt 1fpkt"];
2623--3183[label="0.0078125;1pkt 1fpkt"];
2623--4030[label="0.0123457;1pkt 1fpkt"];
2623--4359[label="0.00704225;1pkt 1fpkt"];
2623--4760[label="0.00636943;1pkt 1fpkt"];
2623--5451[label="0.00704225;1pkt 1fpkt"];
2623--5485[label="0.0828729;15pkt 15fpkt"];
2623--5514[label="0.0828729;15pkt 15fpkt"];
2623--5541[label="0.0828729;15pkt 15fpkt"];
2623--7488[label="1;181pkt 181fpkt"];
2623--11652[label="1;181pkt 181fpkt"];
2623--13905[label="0.994475;180pkt 180fpkt"];
7488--11652[label="1;214pkt 214fpkt"];
7488--13905[label="1;213pkt 213fpkt"];
11652--13905[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter src_ip="215.28.101.89" src_port="53"/>
      <filter dst_port="53" src_ip="215.28.101.89" src_port="44873"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1230{
style=filled;
color=gray75;
7504[label="172.179.26.90;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11657[label="172.179.26.90;8pkt 8fpkt", shape=invtriangle, color=brown];
13908[label="172.179.26.90;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1230[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.26.90:*, 207.90.73.135:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52899: (6%)&lt;BR/&gt; 52845: (6%)&lt;BR/&gt; 52844: (6%)&lt;BR/&gt; 52830: (6%)&gt;];
}
7504--11657[label="1;8pkt 8fpkt"];
7504--13908[label="1;8pkt 8fpkt"];
11657--13908[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="207.90.73.135" dst_port="80" src_ip="172.179.26.90"/>
    </slice>
    <from sec="1172898471" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.81.34.90"/>
    </slice>
    <from sec="1172898341" usec="0"/>
    <to sec="1172898500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.152.52.91"/>
    </slice>
    <from sec="1172898708" usec="0"/>
    <to sec="1172898722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1233{
style=filled;
color=gray75;
7556[label="154.200.125.93;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11681[label="154.200.125.93;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1233[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.200.125.93:80, 25.84.59.168:*}[30%]&lt;BR/&gt;{154.200.125.93:80, 26.29.1.39:*}[20%]&lt;BR/&gt;{154.200.125.93:80, 17.3.205.86:*}[20%]&lt;BR/&gt;{154.200.125.93:80, 25.84.59.170:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 123: (10%)&lt;BR/&gt; 61145: (5%)&lt;BR/&gt; 61027: (5%)&lt;BR/&gt; 36990: (5%)&gt;];
}
7556--11681[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="25.84.59.168" src_ip="154.200.125.93" src_port="80"/>
      <filter dst_ip="25.84.59.170" src_ip="154.200.125.93" src_port="80"/>
      <filter dst_ip="17.3.205.86" src_ip="154.200.125.93" src_port="80"/>
      <filter dst_ip="26.29.1.39" src_ip="154.200.125.93" src_port="80"/>
    </slice>
    <from sec="1172898357" usec="0"/>
    <to sec="1172898814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.98.139.93"/>
    </slice>
    <from sec="1172898032" usec="0"/>
    <to sec="1172898046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.65.161.93"/>
    </slice>
    <from sec="1172898652" usec="0"/>
    <to sec="1172898765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.22.216.93"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.197.83.94"/>
    </slice>
    <from sec="1172898551" usec="0"/>
    <to sec="1172898569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.43.89.94"/>
    </slice>
    <from sec="1172898432" usec="0"/>
    <to sec="1172898469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.35.110.94"/>
    </slice>
    <from sec="1172898111" usec="0"/>
    <to sec="1172898132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.55.172.94"/>
    </slice>
    <from sec="1172898060" usec="0"/>
    <to sec="1172898074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.98.111.95"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.160.233.95"/>
    </slice>
    <from sec="1172898434" usec="0"/>
    <to sec="1172898820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.41.45.96"/>
    </slice>
    <from sec="1172898677" usec="0"/>
    <to sec="1172898692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.82.81.96"/>
    </slice>
    <from sec="1172898507" usec="0"/>
    <to sec="1172898548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1245{
style=filled;
color=gray75;
7622[label="101.33.171.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11720[label="101.33.171.96;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1245[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.33.171.96:4084, 153.21.164.38:80}[33.3333%]&lt;BR/&gt;{101.33.171.96:4086, 153.21.164.38:80}[33.3333%]&lt;BR/&gt;{101.33.171.96:4090, 153.21.164.38:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4090: (20%)&lt;BR/&gt; 4086: (20%)&lt;BR/&gt; 4084: (10%)&gt;];
}
7622--11720[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.164.38" dst_port="80" src_ip="101.33.171.96" src_port="4090"/>
      <filter dst_ip="153.21.164.38" dst_port="80" src_ip="101.33.171.96" src_port="4086"/>
      <filter dst_ip="153.21.164.38" dst_port="80" src_ip="101.33.171.96" src_port="4084"/>
    </slice>
    <from sec="1172898098" usec="0"/>
    <to sec="1172898127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1246{
style=filled;
color=gray75;
7627[label="201.210.228.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11722[label="201.210.228.96;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1246[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.210.228.96:46995, 215.140.34.81:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46995: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
7627--11722[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.140.34.81" dst_port="53" src_ip="201.210.228.96" src_port="46995"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1248{
style=filled;
color=gray75;
7637[label="9.185.56.97;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11727[label="9.185.56.97;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1248[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.185.56.97:19449, 215.140.32.140:53}[33.3333%]&lt;BR/&gt;{9.185.56.97:29290, 215.140.32.140:53}[33.3333%]&lt;BR/&gt;{9.185.56.97:44037, 215.140.32.140:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 44037: (16.6667%)&lt;BR/&gt; 29290: (16.6667%)&lt;BR/&gt; 19449: (16.6667%)&gt;];
}
7637--11727[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.140.32.140" dst_port="53" src_ip="9.185.56.97" src_port="44037"/>
      <filter dst_ip="215.140.32.140" dst_port="53" src_ip="9.185.56.97" src_port="29290"/>
      <filter dst_ip="215.140.32.140" dst_port="53" src_ip="9.185.56.97" src_port="19449"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1249{
style=filled;
color=gray75;
7638[label="172.179.64.97;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11728[label="172.179.64.97;4pkt 4fpkt", shape=invtriangle, color=brown];
13942[label="172.179.64.97;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1249[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.64.97:80, 96.89.12.164:3977}[20%]&lt;BR/&gt;{172.179.64.97:80, 96.89.12.164:3979}[20%]&lt;BR/&gt;{172.179.64.97:80, 96.89.12.164:4001}[20%]&lt;BR/&gt;{172.179.64.97:80, 96.89.12.164:4003}[20%]&lt;BR/&gt;{172.179.64.97:80, 96.89.12.164:4025}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4025: (10.7143%)&lt;BR/&gt; 4003: (10.7143%)&lt;BR/&gt; 4001: (10.7143%)&lt;BR/&gt; 3979: (10.7143%)&gt;];
}
7638--11728[label="1;4pkt 4fpkt"];
7638--13942[label="1;5pkt 5fpkt"];
11728--13942[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="96.89.12.164" dst_port="4025" src_ip="172.179.64.97" src_port="80"/>
      <filter dst_ip="96.89.12.164" dst_port="4003" src_ip="172.179.64.97" src_port="80"/>
      <filter dst_ip="96.89.12.164" dst_port="4001" src_ip="172.179.64.97" src_port="80"/>
      <filter dst_ip="96.89.12.164" dst_port="3979" src_ip="172.179.64.97" src_port="80"/>
      <filter dst_ip="96.89.12.164" dst_port="3977" src_ip="172.179.64.97" src_port="80"/>
    </slice>
    <from sec="1172898610" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.106.132.97"/>
    </slice>
    <from sec="1172898052" usec="0"/>
    <to sec="1172898063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1251{
style=filled;
color=gray75;
2952[label="195.5.5.177;d;33pkt 33fpkt", shape=diamond, color=yellow];
7319[label="217.20.240.81;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7619[label="171.77.136.96;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7643[label="171.77.136.97;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11718[label="171.77.136.96;5pkt 5fpkt", shape=invtriangle, color=brown];
11732[label="171.77.136.97;12pkt 12fpkt", shape=invtriangle, color=brown];
13936[label="171.77.136.96;5pkt 5fpkt", shape=invhouse, color=bisque];
13946[label="171.77.136.97;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1251[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.20.240.80:*, 195.5.5.177:443}[27.027%]&lt;BR/&gt;{171.77.136.97:*, 195.5.5.177:443}[27.027%]&lt;BR/&gt;{217.20.240.81:*, 195.5.5.177:443}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.7447%)&lt;BR/&gt; 25: (4.25532%)&lt;BR/&gt; 48975: (2.12766%)&lt;BR/&gt; 48939: (2.12766%)&lt;BR/&gt; 48936: (2.12766%)&gt;];
}
2952--7319[label="1;8pkt 8fpkt"];
2952--7619[label="1;5pkt 5fpkt"];
2952--7643[label="0.692308;9pkt 9fpkt"];
2952--11718[label="1;5pkt 5fpkt"];
2952--11732[label="0.75;9pkt 9fpkt"];
2952--13936[label="1;5pkt 5fpkt"];
2952--13946[label="0.692308;9pkt 9fpkt"];
7619--11718[label="1;5pkt 5fpkt"];
7619--13936[label="1;5pkt 5fpkt"];
7643--11732[label="1;12pkt 12fpkt"];
7643--13946[label="1;13pkt 13fpkt"];
11718--13936[label="1;5pkt 5fpkt"];
11732--13946[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="195.5.5.177" dst_port="443" src_ip="171.77.136.97"/>
      <filter dst_ip="195.5.5.177" dst_port="443" src_ip="217.20.240.80"/>
      <filter dst_ip="195.5.5.177" dst_port="443" src_ip="217.20.240.81"/>
    </slice>
    <from sec="1172898017" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.113.245.97"/>
    </slice>
    <from sec="1172898877" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.87.9.98"/>
    </slice>
    <from sec="1172898167" usec="0"/>
    <to sec="1172898171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.217.21.98"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.241.32.98"/>
    </slice>
    <from sec="1172898148" usec="0"/>
    <to sec="1172898246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.75.68.98"/>
    </slice>
    <from sec="1172898575" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1257{
style=filled;
color=gray75;
7674[label="26.29.1.99;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11754[label="26.29.1.99;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1257[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.29.1.99:*, 170.123.220.202:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58136: (9.09091%)&lt;BR/&gt; 46667: (9.09091%)&lt;BR/&gt; 46481: (9.09091%)&lt;BR/&gt; 45744: (9.09091%)&gt;];
}
7674--11754[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.220.202" dst_port="80" src_ip="26.29.1.99"/>
    </slice>
    <from sec="1172898061" usec="0"/>
    <to sec="1172898775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.10.116.99"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.172.218.99"/>
    </slice>
    <from sec="1172898719" usec="0"/>
    <to sec="1172898735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.15.243.99"/>
    </slice>
    <from sec="1172898856" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.96.25.100"/>
    </slice>
    <from sec="1172898403" usec="0"/>
    <to sec="1172898445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.110.39.100"/>
    </slice>
    <from sec="1172898482" usec="0"/>
    <to sec="1172898517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.66.140.100"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.80.87.101"/>
    </slice>
    <from sec="1172898634" usec="0"/>
    <to sec="1172898649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.243.104.101"/>
    </slice>
    <from sec="1172898507" usec="0"/>
    <to sec="1172898526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.218.81.102"/>
    </slice>
    <from sec="1172898550" usec="0"/>
    <to sec="1172898563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.224.132.102"/>
    </slice>
    <from sec="1172898069" usec="0"/>
    <to sec="1172898081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1268{
style=filled;
color=gray75;
7747[label="154.200.176.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11797[label="154.200.176.102;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1268[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.200.176.102:0, 208.243.52.94:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
7747--11797[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.243.52.94" src_ip="154.200.176.102"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.180.9.103"/>
    </slice>
    <from sec="1172898149" usec="0"/>
    <to sec="1172898189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.36.61.103"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.169.225.103"/>
    </slice>
    <from sec="1172898609" usec="0"/>
    <to sec="1172898631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.7.9.104"/>
    </slice>
    <from sec="1172898647" usec="0"/>
    <to sec="1172898655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1273{
style=filled;
color=gray75;
7775[label="208.81.60.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11815[label="208.81.60.104;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1273[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.81.60.104:80, 170.123.1.66:1590}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1590: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7775--11815[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.1.66" dst_port="1590" src_ip="208.81.60.104" src_port="80"/>
    </slice>
    <from sec="1172898794" usec="0"/>
    <to sec="1172898845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1274{
style=filled;
color=gray75;
7777[label="170.123.91.104;52pkt 52fpkt", shape=pentagon, color=darkviolet];
11817[label="170.123.91.104;52pkt 52fpkt", shape=invtriangle, color=brown];
stat1274[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.91.104:*, 112.113.113.54:80}[48.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2933: (0.961538%)&lt;BR/&gt; 2932: (0.961538%)&lt;BR/&gt; 2925: (0.961538%)&lt;BR/&gt; 2924: (0.961538%)&gt;];
}
7777--11817[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="112.113.113.54" dst_port="80" src_ip="170.123.91.104"/>
    </slice>
    <from sec="1172898680" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1275{
style=filled;
color=gray75;
7780[label="214.112.169.104;66pkt 66fpkt", shape=pentagon, color=darkviolet];
11819[label="214.112.169.104;67pkt 67fpkt", shape=invtriangle, color=brown];
13978[label="214.112.169.104;67pkt 67fpkt", shape=invhouse, color=bisque];
stat1275[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.112.169.104:*, 170.123.234.180:42102}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42102: (50%)&lt;BR/&gt; 4998: (0.75%)&lt;BR/&gt; 4994: (0.75%)&lt;BR/&gt; 4990: (0.75%)&lt;BR/&gt; 4987: (0.75%)&gt;];
}
7780--11819[label="1;66pkt 66fpkt"];
7780--13978[label="1;66pkt 66fpkt"];
11819--13978[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.234.180" dst_port="42102" src_ip="214.112.169.104"/>
    </slice>
    <from sec="1172898548" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.9.216.105"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.5.223.105"/>
    </slice>
    <from sec="1172898334" usec="0"/>
    <to sec="1172898351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.148.1.106"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1279{
style=filled;
color=gray75;
7808[label="170.123.47.106;41pkt 41fpkt", shape=pentagon, color=darkviolet];
11831[label="170.123.47.106;41pkt 41fpkt", shape=invtriangle, color=brown];
stat1279[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.47.106:*, 210.49.236.226:80}[21.9512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7805%)&lt;BR/&gt; 1768: (1.21951%)&lt;BR/&gt; 1767: (1.21951%)&lt;BR/&gt; 1766: (1.21951%)&lt;BR/&gt; 1765: (1.21951%)&gt;];
}
7808--11831[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="210.49.236.226" dst_port="80" src_ip="170.123.47.106"/>
    </slice>
    <from sec="1172898861" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="175.44.194.106"/>
    </slice>
    <from sec="1172898034" usec="0"/>
    <to sec="1172898043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1281{
style=filled;
color=gray75;
7823[label="153.21.9.107;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11837[label="153.21.9.107;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1281[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.9.107:*, 26.97.215.29:80}[58.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3217: (3.0303%)&lt;BR/&gt; 3208: (3.0303%)&lt;BR/&gt; 3206: (3.0303%)&lt;BR/&gt; 3196: (3.0303%)&gt;];
}
7823--11837[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="26.97.215.29" dst_port="80" src_ip="153.21.9.107"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.56.12.107"/>
    </slice>
    <from sec="1172898250" usec="0"/>
    <to sec="1172898263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.203.41.107"/>
    </slice>
    <from sec="1172898462" usec="0"/>
    <to sec="1172898499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.53.123.107"/>
    </slice>
    <from sec="1172898061" usec="0"/>
    <to sec="1172898075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.75.138.107"/>
    </slice>
    <from sec="1172898330" usec="0"/>
    <to sec="1172898354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.140.138.107"/>
    </slice>
    <from sec="1172898300" usec="0"/>
    <to sec="1172898317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.138.141.107"/>
    </slice>
    <from sec="1172898452" usec="0"/>
    <to sec="1172898490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.159.192.107"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.95.88.108"/>
    </slice>
    <from sec="1172898710" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.55.143.108"/>
    </slice>
    <from sec="1172898347" usec="0"/>
    <to sec="1172898445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1291{
style=filled;
color=gray75;
7859[label="153.21.150.108;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11858[label="153.21.150.108;20pkt 20fpkt", shape=invtriangle, color=brown];
stat1291[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.150.108:80, 24.211.100.24:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63982: (2.5%)&lt;BR/&gt; 59956: (2.5%)&lt;BR/&gt; 59879: (2.5%)&lt;BR/&gt; 53604: (2.5%)&gt;];
}
7859--11858[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="24.211.100.24" src_ip="153.21.150.108" src_port="80"/>
    </slice>
    <from sec="1172898081" usec="0"/>
    <to sec="1172898799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.35.164.108"/>
    </slice>
    <from sec="1172898867" usec="0"/>
    <to sec="1172898882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.213.213.108"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.98.91.109"/>
    </slice>
    <from sec="1172898642" usec="0"/>
    <to sec="1172898699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.222.157.109"/>
    </slice>
    <from sec="1172898117" usec="0"/>
    <to sec="1172898221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.109.226.109"/>
    </slice>
    <from sec="1172898522" usec="0"/>
    <to sec="1172898535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.33.111"/>
    </slice>
    <from sec="1172898893" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1298{
style=filled;
color=gray75;
7920[label="153.21.80.111;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11892[label="153.21.80.111;20pkt 20fpkt", shape=invtriangle, color=brown];
14012[label="153.21.80.111;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1298[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.80.111:9834, *:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9834: (47.5806%)&lt;BR/&gt; 63110: (2.41935%)&lt;BR/&gt; 62009: (2.41935%)&lt;BR/&gt; 61610: (2.41935%)&lt;BR/&gt; 53247: (2.41935%)&gt;];
}
7920--11892[label="1;20pkt 20fpkt"];
7920--14012[label="1;21pkt 21fpkt"];
11892--14012[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="153.21.80.111" src_port="9834"/>
    </slice>
    <from sec="1172898027" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.200.85.111"/>
    </slice>
    <from sec="1172898863" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1300{
style=filled;
color=gray75;
7931[label="37.169.148.112;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11901[label="37.169.148.112;18pkt 18fpkt", shape=invtriangle, color=brown];
14016[label="37.169.148.112;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1300[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.169.148.112:80, 172.104.234.92:*}[55.5556%]&lt;BR/&gt;{37.169.148.112:80, 172.104.137.173:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61160: (2.77778%)&lt;BR/&gt; 61159: (2.77778%)&lt;BR/&gt; 61158: (2.77778%)&lt;BR/&gt; 61157: (2.77778%)&gt;];
}
7931--11901[label="1;18pkt 18fpkt"];
7931--14016[label="1;18pkt 18fpkt"];
11901--14016[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="172.104.234.92" src_ip="37.169.148.112" src_port="80"/>
      <filter dst_ip="172.104.137.173" src_ip="37.169.148.112" src_port="80"/>
    </slice>
    <from sec="1172898046" usec="0"/>
    <to sec="1172898605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.226.181.112"/>
    </slice>
    <from sec="1172898288" usec="0"/>
    <to sec="1172898334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1302{
style=filled;
color=gray75;
7947[label="207.138.51.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11912[label="207.138.51.113;1pkt 1fpkt", shape=invtriangle, color=brown];
14022[label="207.138.51.113;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1302[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.138.51.113:48678, 214.125.64.208:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48678: (50%)&lt;BR/&gt; 3128: (50%)&gt;];
}
7947--11912[label="1;1pkt 1fpkt"];
7947--14022[label="1;1pkt 1fpkt"];
11912--14022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.64.208" dst_port="3128" src_ip="207.138.51.113" src_port="48678"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.116.129.113"/>
    </slice>
    <from sec="1172898703" usec="0"/>
    <to sec="1172898718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.150.238.113"/>
    </slice>
    <from sec="1172898004" usec="0"/>
    <to sec="1172898038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1305{
style=filled;
color=gray75;
7973[label="156.139.177.114;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11927[label="156.139.177.114;10pkt 10fpkt", shape=invtriangle, color=brown];
14027[label="156.139.177.114;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1305[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.177.114:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 51847: (5%)&lt;BR/&gt; 4510: (5%)&lt;BR/&gt; 4300: (5%)&lt;BR/&gt; 3279: (5%)&gt;];
}
7973--11927[label="1;10pkt 10fpkt"];
7973--14027[label="1;10pkt 10fpkt"];
11927--14027[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="156.139.177.114" src_port="25"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.46.243.114"/>
    </slice>
    <from sec="1172898011" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.23.53.115"/>
    </slice>
    <from sec="1172898675" usec="0"/>
    <to sec="1172898690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1308{
style=filled;
color=gray75;
7985[label="96.253.120.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11933[label="96.253.120.115;1pkt 1fpkt", shape=invtriangle, color=brown];
14029[label="96.253.120.115;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1308[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.253.120.115:1170, 214.125.67.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1170: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7985--11933[label="1;1pkt 1fpkt"];
7985--14029[label="1;1pkt 1fpkt"];
11933--14029[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.55" dst_port="80" src_ip="96.253.120.115" src_port="1170"/>
    </slice>
    <from sec="1172898208" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.28.198.115"/>
    </slice>
    <from sec="1172898399" usec="0"/>
    <to sec="1172898508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.170.35.116"/>
    </slice>
    <from sec="1172898110" usec="0"/>
    <to sec="1172898114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1312{
style=filled;
color=gray75;
8018[label="172.104.193.116;44pkt 44fpkt", shape=pentagon, color=darkviolet];
11953[label="172.104.193.116;44pkt 44fpkt", shape=invtriangle, color=brown];
14035[label="172.104.193.116;44pkt 44fpkt", shape=invhouse, color=bisque];
stat1312[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.104.193.116:80, 25.85.37.221:*}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63826: (1.13636%)&lt;BR/&gt; 61831: (1.13636%)&lt;BR/&gt; 61087: (1.13636%)&lt;BR/&gt; 58548: (1.13636%)&gt;];
}
8018--11953[label="1;44pkt 44fpkt"];
8018--14035[label="1;44pkt 44fpkt"];
11953--14035[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="25.85.37.221" src_ip="172.104.193.116" src_port="80"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.9.13.117"/>
    </slice>
    <from sec="1172898767" usec="0"/>
    <to sec="1172898878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,053,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1314{
style=filled;
color=gray75;
8025[label="170.123.15.117;138pkt 138fpkt", shape=pentagon, color=darkviolet];
11958[label="170.123.15.117;137pkt 137fpkt", shape=invtriangle, color=brown];
stat1314[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.15.117:*, 206.78.192.5:80}[57.2464%]&lt;BR/&gt;{170.123.15.117:*, 207.90.114.35:80}[26.8116%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8182%)&lt;BR/&gt; 8579: (1.81818%)&lt;BR/&gt; 57284: (0.363636%)&lt;BR/&gt; 41023: (0.363636%)&lt;BR/&gt; 22178: (0.363636%)&gt;];
}
8025--11958[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_ip="206.78.192.5" dst_port="80" src_ip="170.123.15.117"/>
      <filter dst_ip="207.90.114.35" dst_port="80" src_ip="170.123.15.117"/>
    </slice>
    <from sec="1172898017" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.37.213.117"/>
    </slice>
    <from sec="1172898294" usec="0"/>
    <to sec="1172898480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1316{
style=filled;
color=gray75;
8041[label="214.89.11.118;22pkt 22fpkt", shape=pentagon, color=darkviolet];
11968[label="214.89.11.118;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1316[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.89.11.118:*, 214.97.233.38:53}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2253: (4.54545%)&lt;BR/&gt; 1875: (4.54545%)&lt;BR/&gt; 1033: (4.54545%)&lt;BR/&gt; 3969: (2.27273%)&gt;];
}
8041--11968[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="214.97.233.38" dst_port="53" src_ip="214.89.11.118"/>
    </slice>
    <from sec="1172898062" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.217.21.118"/>
    </slice>
    <from sec="1172898796" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.82.94.118"/>
    </slice>
    <from sec="1172898550" usec="0"/>
    <to sec="1172898566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.252.220.118"/>
    </slice>
    <from sec="1172898614" usec="0"/>
    <to sec="1172898682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.132.4.119"/>
    </slice>
    <from sec="1172898597" usec="0"/>
    <to sec="1172898677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
8063[label="214.89.59.119;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11983[label="214.89.59.119;16pkt 16fpkt", shape=invtriangle, color=brown];
14055[label="214.89.59.119;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.89.59.119:80, 35.146.0.5:*}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 11148: (3.06122%)&lt;BR/&gt; 11147: (3.06122%)&lt;BR/&gt; 11146: (3.06122%)&lt;BR/&gt; 11145: (3.06122%)&gt;];
}
8063--11983[label="1;16pkt 16fpkt"];
8063--14055[label="1;16pkt 16fpkt"];
11983--14055[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="35.146.0.5" src_ip="214.89.59.119" src_port="80"/>
    </slice>
    <from sec="1172898047" usec="0"/>
    <to sec="1172898687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1322{
style=filled;
color=gray75;
8066[label="153.21.80.119;27pkt 27fpkt", shape=pentagon, color=darkviolet];
11984[label="153.21.80.119;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1322[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.80.119:80, 96.156.33.150:*}[29.6296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64222: (1.88679%)&lt;BR/&gt; 60355: (1.88679%)&lt;BR/&gt; 59331: (1.88679%)&lt;BR/&gt; 52128: (1.88679%)&gt;];
}
8066--11984[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="96.156.33.150" src_ip="153.21.80.119" src_port="80"/>
    </slice>
    <from sec="1172898072" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.240.133.119"/>
    </slice>
    <from sec="1172898403" usec="0"/>
    <to sec="1172898502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.61.149.119"/>
    </slice>
    <from sec="1172898753" usec="0"/>
    <to sec="1172898767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.160.195.119"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.243.27.120"/>
    </slice>
    <from sec="1172898129" usec="0"/>
    <to sec="1172898144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.149.39.120"/>
    </slice>
    <from sec="1172898691" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.133.50.120"/>
    </slice>
    <from sec="1172898545" usec="0"/>
    <to sec="1172898600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.163.85.120"/>
    </slice>
    <from sec="1172898021" usec="0"/>
    <to sec="1172898034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.210.172.120"/>
    </slice>
    <from sec="1172898749" usec="0"/>
    <to sec="1172898758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.58.210.120"/>
    </slice>
    <from sec="1172898347" usec="0"/>
    <to sec="1172898373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.83.230.120"/>
    </slice>
    <from sec="1172898252" usec="0"/>
    <to sec="1172898286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.38.236.120"/>
    </slice>
    <from sec="1172898533" usec="0"/>
    <to sec="1172898554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.233.10.121"/>
    </slice>
    <from sec="1172898806" usec="0"/>
    <to sec="1172898824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.241.31.121"/>
    </slice>
    <from sec="1172898029" usec="0"/>
    <to sec="1172898035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.27.115.121"/>
    </slice>
    <from sec="1172898246" usec="0"/>
    <to sec="1172898259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.67.150.121"/>
    </slice>
    <from sec="1172898584" usec="0"/>
    <to sec="1172898595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1338{
style=filled;
color=gray75;
8114[label="170.123.164.121;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12018[label="170.123.164.121;12pkt 12fpkt", shape=invtriangle, color=brown];
14072[label="170.123.164.121;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1338[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.164.121:80, 101.43.150.40:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53630: (4.16667%)&lt;BR/&gt; 50461: (4.16667%)&lt;BR/&gt; 43774: (4.16667%)&lt;BR/&gt; 40211: (4.16667%)&gt;];
}
8114--12018[label="1;12pkt 12fpkt"];
8114--14072[label="1;12pkt 12fpkt"];
12018--14072[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="101.43.150.40" src_ip="170.123.164.121" src_port="80"/>
    </slice>
    <from sec="1172898599" usec="0"/>
    <to sec="1172898718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.72.2.122"/>
    </slice>
    <from sec="1172898444" usec="0"/>
    <to sec="1172898471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.3.61.122"/>
    </slice>
    <from sec="1172898118" usec="0"/>
    <to sec="1172898133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.157.192.122"/>
    </slice>
    <from sec="1172898068" usec="0"/>
    <to sec="1172898091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.27.113.123"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.44.176.124"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.0.139.125"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.108.144.126"/>
    </slice>
    <from sec="1172898102" usec="0"/>
    <to sec="1172898183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.155.1.128"/>
    </slice>
    <from sec="1172898617" usec="0"/>
    <to sec="1172898733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1348{
style=filled;
color=gray75;
8208[label="170.123.63.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12064[label="170.123.63.128;1pkt 1fpkt", shape=invtriangle, color=brown];
14095[label="170.123.63.128;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1348[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.63.128:1669, 205.23.60.45:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1669: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8208--12064[label="1;1pkt 1fpkt"];
8208--14095[label="1;1pkt 1fpkt"];
12064--14095[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.23.60.45" dst_port="80" src_ip="170.123.63.128" src_port="1669"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1350{
style=filled;
color=gray75;
8222[label="200.52.139.128;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12075[label="200.52.139.128;8pkt 8fpkt", shape=invtriangle, color=brown];
14100[label="200.52.139.128;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1350[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.52.139.128:80, 153.21.180.0:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1317: (6.81818%)&lt;BR/&gt; 1296: (6.81818%)&lt;BR/&gt; 1284: (6.81818%)&lt;BR/&gt; 1277: (6.81818%)&gt;];
}
8222--12075[label="1;7pkt 7fpkt"];
8222--14100[label="1;7pkt 7fpkt"];
12075--14100[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.180.0" src_ip="200.52.139.128" src_port="80"/>
    </slice>
    <from sec="1172898069" usec="0"/>
    <to sec="1172898518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.29.188.128"/>
    </slice>
    <from sec="1172898825" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.106.226.128"/>
    </slice>
    <from sec="1172898818" usec="0"/>
    <to sec="1172898830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.20.1.129"/>
    </slice>
    <from sec="1172898355" usec="0"/>
    <to sec="1172898367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.44.129"/>
    </slice>
    <from sec="1172898756" usec="0"/>
    <to sec="1172898853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.123.62.129"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.125.135.129"/>
    </slice>
    <from sec="1172898326" usec="0"/>
    <to sec="1172898339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.62.219.129"/>
    </slice>
    <from sec="1172898572" usec="0"/>
    <to sec="1172898594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1358{
style=filled;
color=gray75;
8261[label="214.221.34.130;104pkt 104fpkt", shape=pentagon, color=darkviolet];
12099[label="214.221.34.130;103pkt 103fpkt", shape=invtriangle, color=brown];
14111[label="214.221.34.130;104pkt 104fpkt", shape=invhouse, color=bisque];
stat1358[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.221.34.130:53, 214.125.68.238:*}[91.3462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32771: (2.2508%)&lt;BR/&gt; 65534: (0.482315%)&lt;BR/&gt; 62357: (0.482315%)&lt;BR/&gt; 62353: (0.482315%)&gt;];
}
8261--12099[label="1;103pkt 103fpkt"];
8261--14111[label="1;104pkt 104fpkt"];
12099--14111[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.68.238" src_ip="214.221.34.130" src_port="53"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.159.125.130"/>
    </slice>
    <from sec="1172898047" usec="0"/>
    <to sec="1172898063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.139.126.130"/>
    </slice>
    <from sec="1172898016" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.219.130.130"/>
    </slice>
    <from sec="1172898526" usec="0"/>
    <to sec="1172898555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.184.232.130"/>
    </slice>
    <from sec="1172898508" usec="0"/>
    <to sec="1172898669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1363{
style=filled;
color=gray75;
8284[label="153.21.249.130;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12112[label="153.21.249.130;2pkt 2fpkt", shape=invtriangle, color=brown];
14120[label="153.21.249.130;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1363[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.249.130:80, 17.3.199.48:49482}[33.3333%]&lt;BR/&gt;{153.21.249.130:80, 26.29.10.151:63446}[33.3333%]&lt;BR/&gt;{153.21.249.130:80, 29.210.21.152:28295}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63446: (18.75%)&lt;BR/&gt; 49482: (18.75%)&lt;BR/&gt; 28295: (12.5%)&gt;];
}
8284--12112[label="1;2pkt 2fpkt"];
8284--14120[label="1;3pkt 3fpkt"];
12112--14120[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="29.210.21.152" dst_port="28295" src_ip="153.21.249.130" src_port="80"/>
      <filter dst_ip="26.29.10.151" dst_port="63446" src_ip="153.21.249.130" src_port="80"/>
      <filter dst_ip="17.3.199.48" dst_port="49482" src_ip="153.21.249.130" src_port="80"/>
    </slice>
    <from sec="1172898107" usec="0"/>
    <to sec="1172898879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1364{
style=filled;
color=gray75;
8285[label="182.246.6.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12113[label="182.246.6.131;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1364[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.6.131:1042, 37.169.150.233:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1042: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8285--12113[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="37.169.150.233" dst_port="80" src_ip="182.246.6.131" src_port="1042"/>
    </slice>
    <from sec="1172898852" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1365{
style=filled;
color=gray75;
8286[label="214.221.34.131;97pkt 97fpkt", shape=pentagon, color=darkviolet];
12114[label="214.221.34.131;96pkt 96fpkt", shape=invtriangle, color=brown];
stat1365[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.221.34.131:53, 214.125.68.238:*}[93.8144%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 38156: (1.29534%)&lt;BR/&gt; 65534: (0.518135%)&lt;BR/&gt; 62356: (0.518135%)&lt;BR/&gt; 62352: (0.518135%)&gt;];
}
8286--12114[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.68.238" src_ip="214.221.34.131" src_port="53"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.87.95.131"/>
    </slice>
    <from sec="1172898260" usec="0"/>
    <to sec="1172898314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.234.155.132"/>
    </slice>
    <from sec="1172898360" usec="0"/>
    <to sec="1172898432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.170.59.133"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.203.78.133"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.138.133.133"/>
    </slice>
    <from sec="1172898352" usec="0"/>
    <to sec="1172898571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.32.141.133"/>
    </slice>
    <from sec="1172898240" usec="0"/>
    <to sec="1172898342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.162.144.133"/>
    </slice>
    <from sec="1172898671" usec="0"/>
    <to sec="1172898689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.39.96.134"/>
    </slice>
    <from sec="1172898539" usec="0"/>
    <to sec="1172898576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1374{
style=filled;
color=gray75;
3755[label="154.200.206.127;d;26pkt 26fpkt", shape=diamond, color=yellow];
3839[label="218.217.15.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
6767[label="11.8.50.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8359[label="1.180.146.134;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12145[label="1.180.146.134;2pkt 2fpkt", shape=invtriangle, color=brown];
13985[label="1.66.212.106;1pkt 1fpkt", shape=invhouse, color=bisque];
14134[label="1.180.146.134;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1374[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 154.200.206.127:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46655: (10%)&lt;BR/&gt; 0: (8.57143%)&lt;BR/&gt; 63709: (5.71429%)&lt;BR/&gt; 62785: (4.28571%)&lt;BR/&gt; 123: (4.28571%)&gt;];
}
3755--3839[label="1;1pkt 1fpkt"];
3755--6767[label="1;1pkt 1fpkt"];
3755--8359[label="0.5;1pkt 1fpkt"];
3755--12145[label="0.5;1pkt 1fpkt"];
3755--13985[label="1;1pkt 1fpkt"];
3755--14134[label="0.5;1pkt 1fpkt"];
8359--12145[label="1;2pkt 2fpkt"];
8359--14134[label="1;2pkt 2fpkt"];
12145--14134[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="154.200.206.127"/>
    </slice>
    <from sec="1172898208" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.128.171.134"/>
    </slice>
    <from sec="1172898276" usec="0"/>
    <to sec="1172898416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1376{
style=filled;
color=gray75;
8405[label="215.186.128.136;60pkt 60fpkt", shape=pentagon, color=darkviolet];
12177[label="215.186.128.136;59pkt 59fpkt", shape=invtriangle, color=brown];
stat1376[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.186.128.136:80, 153.21.37.16:*}[50%]&lt;BR/&gt;{215.186.128.136:80, 153.21.9.34:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3665: (0.840336%)&lt;BR/&gt; 3664: (0.840336%)&lt;BR/&gt; 3661: (0.840336%)&lt;BR/&gt; 3660: (0.840336%)&gt;];
}
8405--12177[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.9.34" src_ip="215.186.128.136" src_port="80"/>
      <filter dst_ip="153.21.37.16" src_ip="215.186.128.136" src_port="80"/>
    </slice>
    <from sec="1172898014" usec="0"/>
    <to sec="1172898892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.158.145.136"/>
    </slice>
    <from sec="1172898341" usec="0"/>
    <to sec="1172898466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.239.167.136"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.245.171.136"/>
    </slice>
    <from sec="1172898232" usec="0"/>
    <to sec="1172898258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1380{
style=filled;
color=gray75;
8414[label="112.98.10.137;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12185[label="112.98.10.137;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1380[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.98.10.137:80, 215.28.81.57:58715}[50%]&lt;BR/&gt;{112.98.10.137:80, 215.28.81.57:59485}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59485: (25%)&lt;BR/&gt; 58715: (25%)&gt;];
}
8414--12185[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.57" dst_port="59485" src_ip="112.98.10.137" src_port="80"/>
      <filter dst_ip="215.28.81.57" dst_port="58715" src_ip="112.98.10.137" src_port="80"/>
    </slice>
    <from sec="1172898797" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1381{
style=filled;
color=gray75;
8415[label="156.136.15.137;42pkt 42fpkt", shape=pentagon, color=darkviolet];
12186[label="156.136.15.137;41pkt 41fpkt", shape=invtriangle, color=brown];
14152[label="156.136.15.137;41pkt 41fpkt", shape=invhouse, color=bisque];
stat1381[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.136.15.137:*, 172.180.160.67:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 8678: (1.20968%)&lt;BR/&gt; 8673: (1.20968%)&lt;BR/&gt; 8670: (1.20968%)&lt;BR/&gt; 8668: (1.20968%)&gt;];
}
8415--12186[label="1;41pkt 41fpkt"];
8415--14152[label="1;41pkt 41fpkt"];
12186--14152[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="172.180.160.67" dst_port="443" src_ip="156.136.15.137"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1382{
style=filled;
color=gray75;
1844[label="214.125.73.137;s;76pkt 76fpkt", shape=diamond, color=yellow];
8419[label="214.125.73.137;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12190[label="214.125.73.137;3pkt 3fpkt", shape=invtriangle, color=brown];
14155[label="214.125.73.137;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1382[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.73.137:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1844--2860[label="0.0131579;1pkt 1fpkt"];
1844--8419[label="0.5;1pkt 1fpkt"];
1844--12190[label="0.666667;2pkt 2fpkt"];
1844--14155[label="0.5;1pkt 1fpkt"];
8419--12190[label="1;2pkt 2fpkt"];
8419--14155[label="1;2pkt 2fpkt"];
12190--14155[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.73.137"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.100.135.137"/>
    </slice>
    <from sec="1172898415" usec="0"/>
    <to sec="1172898483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.124.79.138"/>
    </slice>
    <from sec="1172898234" usec="0"/>
    <to sec="1172898241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.42.85.138"/>
    </slice>
    <from sec="1172898647" usec="0"/>
    <to sec="1172898662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1386{
style=filled;
color=gray75;
8450[label="210.190.102.138;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12206[label="210.190.102.138;3pkt 3fpkt", shape=invtriangle, color=brown];
14159[label="210.190.102.138;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1386[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.190.102.138:37133, 215.140.34.81:53}[33.3333%]&lt;BR/&gt;{210.190.102.138:5220, 215.140.32.129:53}[33.3333%]&lt;BR/&gt;{210.190.102.138:42347, 215.140.32.140:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 42347: (16.6667%)&lt;BR/&gt; 37133: (16.6667%)&lt;BR/&gt; 5220: (16.6667%)&gt;];
}
8450--12206[label="1;3pkt 3fpkt"];
8450--14159[label="1;3pkt 3fpkt"];
12206--14159[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.140.32.140" dst_port="53" src_ip="210.190.102.138" src_port="42347"/>
      <filter dst_ip="215.140.32.129" dst_port="53" src_ip="210.190.102.138" src_port="5220"/>
      <filter dst_ip="215.140.34.81" dst_port="53" src_ip="210.190.102.138" src_port="37133"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1387{
style=filled;
color=gray75;
8452[label="200.137.150.138;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12208[label="200.137.150.138;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1387[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.137.150.138:2259, 215.140.32.129:53}[20%]&lt;BR/&gt;{200.137.150.138:18476, 215.140.32.129:53}[20%]&lt;BR/&gt;{200.137.150.138:20301, 215.140.32.129:53}[20%]&lt;BR/&gt;{200.137.150.138:24715, 215.140.32.129:53}[20%]&lt;BR/&gt;{200.137.150.138:28358, 215.140.32.129:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 28358: (10%)&lt;BR/&gt; 24715: (10%)&lt;BR/&gt; 20301: (10%)&lt;BR/&gt; 18476: (10%)&gt;];
}
8452--12208[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.140.32.129" dst_port="53" src_ip="200.137.150.138" src_port="28358"/>
      <filter dst_ip="215.140.32.129" dst_port="53" src_ip="200.137.150.138" src_port="24715"/>
      <filter dst_ip="215.140.32.129" dst_port="53" src_ip="200.137.150.138" src_port="20301"/>
      <filter dst_ip="215.140.32.129" dst_port="53" src_ip="200.137.150.138" src_port="18476"/>
      <filter dst_ip="215.140.32.129" dst_port="53" src_ip="200.137.150.138" src_port="2259"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.128.153.138"/>
    </slice>
    <from sec="1172898804" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.20.171.138"/>
    </slice>
    <from sec="1172898251" usec="0"/>
    <to sec="1172898259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.185.43.139"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.179.116.139"/>
    </slice>
    <from sec="1172898648" usec="0"/>
    <to sec="1172898661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.0.139.139"/>
    </slice>
    <from sec="1172898100" usec="0"/>
    <to sec="1172898314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1393{
style=filled;
color=gray75;
8486[label="214.61.219.139;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12229[label="214.61.219.139;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1393[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.61.219.139:80, 153.21.149.74:46688}[50%]&lt;BR/&gt;{214.61.219.139:80, 153.21.37.84:1411}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1411: (33.3333%)&lt;BR/&gt; 46688: (16.6667%)&gt;];
}
8486--12229[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.37.84" dst_port="1411" src_ip="214.61.219.139" src_port="80"/>
      <filter dst_ip="153.21.149.74" dst_port="46688" src_ip="214.61.219.139" src_port="80"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1394{
style=filled;
color=gray75;
8488[label="24.229.3.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12230[label="24.229.3.140;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1394[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.229.3.140:80, 153.21.9.165:4004}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4004: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8488--12230[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.9.165" dst_port="4004" src_ip="24.229.3.140" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.19.177.140"/>
    </slice>
    <from sec="1172898329" usec="0"/>
    <to sec="1172898343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.149.38.141"/>
    </slice>
    <from sec="1172898554" usec="0"/>
    <to sec="1172898583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1397{
style=filled;
color=gray75;
8522[label="29.192.60.141;102pkt 102fpkt", shape=pentagon, color=darkviolet];
12251[label="29.192.60.141;102pkt 102fpkt", shape=invtriangle, color=brown];
14179[label="29.192.60.141;102pkt 102fpkt", shape=invhouse, color=bisque];
stat1397[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.192.60.141:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
8522--12251[label="1;102pkt 102fpkt"];
8522--14179[label="1;102pkt 102fpkt"];
12251--14179[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter src_ip="29.192.60.141"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.201.118.141"/>
    </slice>
    <from sec="1172898186" usec="0"/>
    <to sec="1172898198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1399{
style=filled;
color=gray75;
8539[label="21.16.238.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12262[label="21.16.238.141;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1399[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.16.238.141:1155, 214.125.79.114:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1155: (50%)&gt;];
}
8539--12262[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.79.114" dst_port="8080" src_ip="21.16.238.141" src_port="1155"/>
    </slice>
    <from sec="1172898851" usec="0"/>
    <to sec="1172898862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.0.240.141"/>
    </slice>
    <from sec="1172898753" usec="0"/>
    <to sec="1172898767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.60.97.142"/>
    </slice>
    <from sec="1172898538" usec="0"/>
    <to sec="1172898571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.139.158.142"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1403{
style=filled;
color=gray75;
8554[label="156.139.184.142;59pkt 59fpkt", shape=pentagon, color=darkviolet];
12271[label="156.139.184.142;58pkt 58fpkt", shape=invtriangle, color=brown];
stat1403[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.184.142:80, 5.29.6.12:*}[30.5085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60271: (0.854701%)&lt;BR/&gt; 59265: (0.854701%)&lt;BR/&gt; 59264: (0.854701%)&lt;BR/&gt; 59263: (0.854701%)&gt;];
}
8554--12271[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="5.29.6.12" src_ip="156.139.184.142" src_port="80"/>
    </slice>
    <from sec="1172898018" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.54.218.142"/>
    </slice>
    <from sec="1172898074" usec="0"/>
    <to sec="1172898890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.20.112.143"/>
    </slice>
    <from sec="1172898521" usec="0"/>
    <to sec="1172898536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.162.231.144"/>
    </slice>
    <from sec="1172898728" usec="0"/>
    <to sec="1172898805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.80625,2.74057,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1407{
style=filled;
color=gray75;
27[label="172.179.6.145s;1pkt 1fpkt", shape=rectangle, color=red];
1606[label="172.179.6.145;s;116pkt 116fpkt", shape=diamond, color=yellow];
1685[label="37.213.171.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
8608[label="172.179.6.145;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12300[label="172.179.6.145;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1407[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.6.145:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (4.5082%)&lt;BR/&gt; 22086: (2.86885%)&lt;BR/&gt; 11706: (2.45902%)&lt;BR/&gt; 36636: (2.04918%)&lt;BR/&gt; 42000: (1.63934%)&gt;];
}
27--1606[label="1;1pkt 1fpkt"];
27--1685[label="1;1pkt 1fpkt"];
1606--1685[label="1;1pkt 1fpkt"];
1606--8608[label="0.5;1pkt 1fpkt"];
1606--12300[label="0.5;1pkt 1fpkt"];
8608--12300[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="172.179.6.145"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.248.109.145"/>
    </slice>
    <from sec="1172898691" usec="0"/>
    <to sec="1172898705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.199.168.145"/>
    </slice>
    <from sec="1172898103" usec="0"/>
    <to sec="1172898112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.19.169.146"/>
    </slice>
    <from sec="1172898034" usec="0"/>
    <to sec="1172898821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1411{
style=filled;
color=gray75;
8645[label="172.179.50.147;46pkt 46fpkt", shape=pentagon, color=darkviolet];
12319[label="172.179.50.147;45pkt 45fpkt", shape=invtriangle, color=brown];
14206[label="172.179.50.147;46pkt 46fpkt", shape=invhouse, color=bisque];
stat1411[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.50.147:80, 215.160.57.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58285: (1.09489%)&lt;BR/&gt; 58280: (1.09489%)&lt;BR/&gt; 58279: (1.09489%)&lt;BR/&gt; 58272: (1.09489%)&gt;];
}
8645--12319[label="1;45pkt 45fpkt"];
8645--14206[label="1;46pkt 46fpkt"];
12319--14206[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.57.178" src_ip="172.179.50.147" src_port="80"/>
    </slice>
    <from sec="1172898642" usec="0"/>
    <to sec="1172898646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.166.69.147"/>
    </slice>
    <from sec="1172898298" usec="0"/>
    <to sec="1172898869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.226.76.147"/>
    </slice>
    <from sec="1172898046" usec="0"/>
    <to sec="1172898061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.9.131.147"/>
    </slice>
    <from sec="1172898734" usec="0"/>
    <to sec="1172898763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.75.199.147"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.33.148"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.52.132.149"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1419{
style=filled;
color=gray75;
8686[label="171.77.136.149;25pkt 25fpkt", shape=pentagon, color=darkviolet];
12347[label="171.77.136.149;25pkt 25fpkt", shape=invtriangle, color=brown];
stat1419[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.77.136.149:*, 214.245.76.141:80}[84%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 29401: (2%)&lt;BR/&gt; 29137: (2%)&lt;BR/&gt; 29136: (2%)&lt;BR/&gt; 29135: (2%)&gt;];
}
8686--12347[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="214.245.76.141" dst_port="80" src_ip="171.77.136.149"/>
    </slice>
    <from sec="1172898108" usec="0"/>
    <to sec="1172898722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1420{
style=filled;
color=gray75;
8697[label="96.212.30.150;116pkt 116fpkt", shape=pentagon, color=darkviolet];
12352[label="96.212.30.150;116pkt 116fpkt", shape=invtriangle, color=brown];
stat1420[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.212.30.150:5655, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5655: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
8697--12352[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="96.212.30.150" src_port="5655"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.112.201.150"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.56.41.151"/>
    </slice>
    <from sec="1172898082" usec="0"/>
    <to sec="1172898096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.187.63.151"/>
    </slice>
    <from sec="1172898021" usec="0"/>
    <to sec="1172898050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1424{
style=filled;
color=gray75;
8717[label="112.101.64.151;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12361[label="112.101.64.151;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1424[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.101.64.151:80, 215.28.81.58:3086}[33.3333%]&lt;BR/&gt;{112.101.64.151:80, 215.28.81.58:3090}[33.3333%]&lt;BR/&gt;{112.101.64.151:80, 215.28.81.58:3095}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3095: (16.6667%)&lt;BR/&gt; 3090: (16.6667%)&lt;BR/&gt; 3086: (16.6667%)&gt;];
}
8717--12361[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.58" dst_port="3095" src_ip="112.101.64.151" src_port="80"/>
      <filter dst_ip="215.28.81.58" dst_port="3090" src_ip="112.101.64.151" src_port="80"/>
      <filter dst_ip="215.28.81.58" dst_port="3086" src_ip="112.101.64.151" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.71.209.151"/>
    </slice>
    <from sec="1172898295" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.0.5.153"/>
    </slice>
    <from sec="1172898670" usec="0"/>
    <to sec="1172898699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.164.81.153"/>
    </slice>
    <from sec="1172898667" usec="0"/>
    <to sec="1172898750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.132.110.153"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.242.131.153"/>
    </slice>
    <from sec="1172898804" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.33.234.153"/>
    </slice>
    <from sec="1172898633" usec="0"/>
    <to sec="1172898648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1431{
style=filled;
color=gray75;
3800[label="172.104.200.123;d;40pkt 40fpkt", shape=diamond, color=yellow];
8771[label="97.124.36.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10168[label="97.124.2.227;34pkt 34fpkt", shape=pentagon, color=darkviolet];
12397[label="97.124.36.154;1pkt 1fpkt", shape=invtriangle, color=brown];
14237[label="97.124.36.154;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1431[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.124.2.227:80, 172.104.200.123:*}[70.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4359%)&lt;BR/&gt; 53: (2.5641%)&lt;BR/&gt; 4319: (1.92308%)&lt;BR/&gt; 4318: (1.28205%)&lt;BR/&gt; 4302: (1.28205%)&gt;];
}
3800--8771[label="0.5;1pkt 1fpkt"];
3800--10168[label="0.911765;31pkt 31fpkt"];
8771--12397[label="1;1pkt 1fpkt"];
8771--14237[label="1;1pkt 1fpkt"];
12397--14237[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.104.200.123" src_ip="97.124.2.227" src_port="80"/>
    </slice>
    <from sec="1172898738" usec="0"/>
    <to sec="1172898833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1432{
style=filled;
color=gray75;
8775[label="170.123.72.154;34pkt 34fpkt", shape=pentagon, color=darkviolet];
12399[label="170.123.72.154;33pkt 33fpkt", shape=invtriangle, color=brown];
14238[label="170.123.72.154;33pkt 33fpkt", shape=invhouse, color=bisque];
stat1432[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.72.154:53, *:*}[50%]&lt;BR/&gt;{170.123.72.154:*, *:53}[32.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41%)&lt;BR/&gt; 80: (4.5%)&lt;BR/&gt; 25: (4.5%)&lt;BR/&gt; 64408: (1.5%)&lt;BR/&gt; 63158: (1.5%)&gt;];
}
8775--12399[label="1;33pkt 33fpkt"];
8775--14238[label="1;33pkt 33fpkt"];
12399--14238[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="170.123.72.154" src_port="53"/>
      <filter dst_port="53" src_ip="170.123.72.154"/>
    </slice>
    <from sec="1172898016" usec="0"/>
    <to sec="1172898874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1433{
style=filled;
color=gray75;
8776[label="214.125.78.154;358pkt 358fpkt", shape=pentagon, color=darkviolet];
12400[label="214.125.78.154;357pkt 357fpkt", shape=invtriangle, color=brown];
14239[label="214.125.78.154;357pkt 357fpkt", shape=invhouse, color=bisque];
stat1433[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.78.154:53, *:*}[99.7207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.819%)&lt;BR/&gt; 32768: (2.37873%)&lt;BR/&gt; 32772: (0.839552%)&lt;BR/&gt; 32831: (0.699627%)&lt;BR/&gt; 32769: (0.559701%)&gt;];
}
8776--12400[label="1;357pkt 357fpkt"];
8776--14239[label="1;357pkt 357fpkt"];
12400--14239[label="1;357pkt 357fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.78.154" src_port="53"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.44.128.154"/>
    </slice>
    <from sec="1172898426" usec="0"/>
    <to sec="1172898442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1435{
style=filled;
color=gray75;
8810[label="170.123.47.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12422[label="170.123.47.156;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1435[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.47.156:4565, 205.23.56.27:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4565: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8810--12422[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.23.56.27" dst_port="80" src_ip="170.123.47.156" src_port="4565"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.176.106.156"/>
    </slice>
    <from sec="1172898871" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.202.205.156"/>
    </slice>
    <from sec="1172898057" usec="0"/>
    <to sec="1172898141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.157.111.157"/>
    </slice>
    <from sec="1172898049" usec="0"/>
    <to sec="1172898361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.152.219.157"/>
    </slice>
    <from sec="1172898588" usec="0"/>
    <to sec="1172898603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.13.20.159"/>
    </slice>
    <from sec="1172898572" usec="0"/>
    <to sec="1172898585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.88.25.159"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.10.85.159"/>
    </slice>
    <from sec="1172898546" usec="0"/>
    <to sec="1172898568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.3.137.159"/>
    </slice>
    <from sec="1172898483" usec="0"/>
    <to sec="1172898512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.101.164.159"/>
    </slice>
    <from sec="1172898378" usec="0"/>
    <to sec="1172898387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1445{
style=filled;
color=gray75;
8878[label="171.41.2.160;93pkt 93fpkt", shape=pentagon, color=darkviolet];
12460[label="171.41.2.160;92pkt 92fpkt", shape=invtriangle, color=brown];
stat1445[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.41.2.160:80, 96.82.80.132:*}[48.3871%]&lt;BR/&gt;{171.41.2.160:80, 100.154.216.35:*}[47.3118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1132: (1.08108%)&lt;BR/&gt; 63997: (0.540541%)&lt;BR/&gt; 63867: (0.540541%)&lt;BR/&gt; 63723: (0.540541%)&gt;];
}
8878--12460[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="96.82.80.132" src_ip="171.41.2.160" src_port="80"/>
      <filter dst_ip="100.154.216.35" src_ip="171.41.2.160" src_port="80"/>
    </slice>
    <from sec="1172898079" usec="0"/>
    <to sec="1172898753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.176.23.160"/>
    </slice>
    <from sec="1172898287" usec="0"/>
    <to sec="1172898311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1447{
style=filled;
color=gray75;
8891[label="214.125.77.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12467[label="214.125.77.160;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1447[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.77.160:0, 207.110.152.52:0}[50%]&lt;BR/&gt;{214.125.77.160:0, 206.204.77.185:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
8891--12467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.204.77.185" src_ip="214.125.77.160"/>
      <filter dst_ip="207.110.152.52" src_ip="214.125.77.160"/>
    </slice>
    <from sec="1172898029" usec="0"/>
    <to sec="1172898680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.130.214.160"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1449{
style=filled;
color=gray75;
8914[label="171.41.2.161;166pkt 166fpkt", shape=pentagon, color=darkviolet];
12480[label="171.41.2.161;165pkt 165fpkt", shape=invtriangle, color=brown];
stat1449[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.41.2.161:80, 198.1.242.157:*}[57.8313%]&lt;BR/&gt;{171.41.2.161:80, 96.89.33.33:*}[41.5663%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32454: (0.302115%)&lt;BR/&gt; 3342: (0.302115%)&lt;BR/&gt; 3341: (0.302115%)&lt;BR/&gt; 3340: (0.302115%)&gt;];
}
8914--12480[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_ip="198.1.242.157" src_ip="171.41.2.161" src_port="80"/>
      <filter dst_ip="96.89.33.33" src_ip="171.41.2.161" src_port="80"/>
    </slice>
    <from sec="1172898237" usec="0"/>
    <to sec="1172898855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1450{
style=filled;
color=gray75;
8916[label="26.29.8.161;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12481[label="26.29.8.161;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1450[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.29.8.161:*, 153.21.195.224:9080}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9080: (45.4545%)&lt;BR/&gt; 63899: (4.54545%)&lt;BR/&gt; 61460: (4.54545%)&lt;BR/&gt; 58913: (4.54545%)&lt;BR/&gt; 58765: (4.54545%)&gt;];
}
8916--12481[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.224" dst_port="9080" src_ip="26.29.8.161"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1451{
style=filled;
color=gray75;
529[label="172.169.196.70;d;598pkt 598fpkt", shape=diamond, color=yellow];
1108[label="30.64.76.196;s;2pkt 2fpkt", shape=diamond, color=yellow];
1287[label="198.85.97.90;s;44pkt 44fpkt", shape=diamond, color=yellow];
2024[label="18.224.56.131;s;98pkt 98fpkt", shape=diamond, color=yellow];
4150[label="30.64.76.196;s;2pkt 2fpkt", shape=hexagon, color=black];
4610[label="18.224.56.131;s;82pkt 82fpkt", shape=hexagon, color=black];
5685[label="9.21.142.4;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5801[label="1.160.41.10;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6011[label="205.73.9.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7083[label="200.66.222.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7613[label="30.114.82.96;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8877[label="4.64.231.159;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8919[label="206.186.14.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9354[label="206.176.160.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9459[label="31.112.173.187;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9937[label="16.19.52.213;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10167[label="205.18.218.226;34pkt 34fpkt", shape=pentagon, color=darkviolet];
10192[label="30.167.64.228;24pkt 24fpkt", shape=pentagon, color=darkviolet];
10250[label="146.218.218.231;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10529[label="25.105.208.250;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10859[label="205.73.9.20;2pkt 2fpkt", shape=invtriangle, color=brown];
11716[label="30.114.82.96;5pkt 5fpkt", shape=invtriangle, color=brown];
12459[label="4.64.231.159;25pkt 25fpkt", shape=invtriangle, color=brown];
12482[label="206.186.14.161;1pkt 1fpkt", shape=invtriangle, color=brown];
12739[label="206.176.160.181;1pkt 1fpkt", shape=invtriangle, color=brown];
12798[label="31.112.173.187;5pkt 5fpkt", shape=invtriangle, color=brown];
13056[label="16.19.52.213;3pkt 3fpkt", shape=invtriangle, color=brown];
13194[label="30.167.64.228;24pkt 24fpkt", shape=invtriangle, color=brown];
13388[label="25.105.208.250;7pkt 7fpkt", shape=invtriangle, color=brown];
14272[label="206.186.14.161;1pkt 1fpkt", shape=invhouse, color=bisque];
14391[label="206.176.160.181;2pkt 2fpkt", shape=invhouse, color=bisque];
14591[label="30.167.64.228;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1451[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.169.196.70:80}[53.323%]&lt;BR/&gt;{*:80, 172.169.196.70:*}[39.5672%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9051%)&lt;BR/&gt; 60547: (0.189753%)&lt;BR/&gt; 60543: (0.189753%)&lt;BR/&gt; 60541: (0.189753%)&lt;BR/&gt; 60416: (0.189753%)&gt;];
}
529--1108[label="1;2pkt 2fpkt"];
529--1287[label="1;44pkt 44fpkt"];
529--1602[label="0.00943396;1pkt 1fpkt"];
529--1621[label="0.00454545;1pkt 1fpkt"];
529--2024[label="0.55102;54pkt 54fpkt"];
529--2426[label="0.00917431;1pkt 1fpkt"];
529--3886[label="0.0129032;2pkt 2fpkt"];
529--4150[label="1;2pkt 2fpkt"];
529--4610[label="0.609756;50pkt 50fpkt"];
529--5470[label="0.0334448;20pkt 20fpkt"];
529--5500[label="0.0334448;20pkt 20fpkt"];
529--5527[label="0.0334448;20pkt 20fpkt"];
529--5685[label="1;6pkt 6fpkt"];
529--5801[label="1;4pkt 4fpkt"];
529--6011[label="1;1pkt 1fpkt"];
529--7083[label="1;1pkt 1fpkt"];
529--7613[label="1;5pkt 5fpkt"];
529--8054[label="0.0434783;1pkt 1fpkt"];
529--8280[label="0.08;2pkt 2fpkt"];
529--8354[label="0.111111;1pkt 1fpkt"];
529--8483[label="0.00892857;1pkt 1fpkt"];
529--8877[label="0.88;22pkt 22fpkt"];
529--8919[label="1;1pkt 1fpkt"];
529--9200[label="0.003861;1pkt 1fpkt"];
529--9354[label="1;2pkt 2fpkt"];
529--9386[label="0.222222;2pkt 2fpkt"];
529--9459[label="1;6pkt 6fpkt"];
529--9684[label="0.027027;1pkt 1fpkt"];
529--9797[label="0.148148;4pkt 4fpkt"];
529--9899[label="0.00884956;1pkt 1fpkt"];
529--9935[label="0.0714286;1pkt 1fpkt"];
529--9937[label="1;4pkt 4fpkt"];
529--10167[label="1;34pkt 34fpkt"];
529--10192[label="1;24pkt 24fpkt"];
529--10250[label="1;7pkt 7fpkt"];
529--10529[label="0.75;6pkt 6fpkt"];
529--10560[label="0.00561798;1pkt 1fpkt"];
529--10859[label="1;2pkt 2fpkt"];
529--11716[label="1;5pkt 5fpkt"];
529--12110[label="0.08;2pkt 2fpkt"];
529--12141[label="0.125;1pkt 1fpkt"];
529--12227[label="0.00892857;1pkt 1fpkt"];
529--12459[label="0.88;22pkt 22fpkt"];
529--12482[label="1;1pkt 1fpkt"];
529--12644[label="0.003861;1pkt 1fpkt"];
529--12739[label="1;1pkt 1fpkt"];
529--12755[label="0.222222;2pkt 2fpkt"];
529--12798[label="1;5pkt 5fpkt"];
529--13040[label="0.00884956;1pkt 1fpkt"];
529--13054[label="0.0769231;1pkt 1fpkt"];
529--13056[label="1;3pkt 3fpkt"];
529--13194[label="1;24pkt 24fpkt"];
529--13388[label="0.714286;5pkt 5fpkt"];
529--13404[label="0.00561798;1pkt 1fpkt"];
529--14118[label="0.08;2pkt 2fpkt"];
529--14132[label="0.125;1pkt 1fpkt"];
529--14170[label="0.00900901;1pkt 1fpkt"];
529--14272[label="1;1pkt 1fpkt"];
529--14349[label="0.00387597;1pkt 1fpkt"];
529--14391[label="1;2pkt 2fpkt"];
529--14528[label="0.00892857;1pkt 1fpkt"];
529--14533[label="0.0714286;1pkt 1fpkt"];
529--14591[label="1;24pkt 24fpkt"];
1108--4150[label="1;2pkt 2fpkt"];
2024--4283[label="0.0204082;2pkt 2fpkt"];
2024--4495[label="0.0204082;2pkt 2fpkt"];
2024--4516[label="0.0102041;1pkt 1fpkt"];
2024--4610[label="1;82pkt 82fpkt"];
2024--4818[label="0.0121951;1pkt 1fpkt"];
2024--5396[label="0.0204082;2pkt 2fpkt"];
4610--4818[label="0.0121951;1pkt 1fpkt"];
4610--5396[label="0.0243902;2pkt 2fpkt"];
6011--10859[label="1;1pkt 1fpkt"];
7613--11716[label="1;5pkt 5fpkt"];
8877--12459[label="1;25pkt 25fpkt"];
8919--12482[label="1;1pkt 1fpkt"];
8919--14272[label="1;1pkt 1fpkt"];
9354--12739[label="1;1pkt 1fpkt"];
9354--14391[label="1;2pkt 2fpkt"];
9459--12798[label="1;5pkt 5fpkt"];
9937--13056[label="1;3pkt 3fpkt"];
10192--13194[label="1;24pkt 24fpkt"];
10192--14591[label="1;24pkt 24fpkt"];
10529--13388[label="1;7pkt 7fpkt"];
12482--14272[label="1;1pkt 1fpkt"];
12739--14391[label="1;1pkt 1fpkt"];
13194--14591[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="172.169.196.70" src_port="80"/>
      <filter dst_ip="172.169.196.70" dst_port="80"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1452{
style=filled;
color=gray75;
8927[label="16.52.111.161;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12487[label="16.52.111.161;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1452[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.52.111.161:3124, 170.123.105.85:80}[33.3333%]&lt;BR/&gt;{16.52.111.161:3125, 170.123.105.85:80}[33.3333%]&lt;BR/&gt;{16.52.111.161:3127, 170.123.105.85:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3127: (20%)&lt;BR/&gt; 3125: (20%)&lt;BR/&gt; 3124: (10%)&gt;];
}
8927--12487[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.105.85" dst_port="80" src_ip="16.52.111.161" src_port="3127"/>
      <filter dst_ip="170.123.105.85" dst_port="80" src_ip="16.52.111.161" src_port="3125"/>
      <filter dst_ip="170.123.105.85" dst_port="80" src_ip="16.52.111.161" src_port="3124"/>
    </slice>
    <from sec="1172898674" usec="0"/>
    <to sec="1172898679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.163.193.161"/>
    </slice>
    <from sec="1172898819" usec="0"/>
    <to sec="1172898834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1454{
style=filled;
color=gray75;
8942[label="194.159.24.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12493[label="194.159.24.162;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1454[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.159.24.162:1631, 214.125.79.100:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1631: (50%)&gt;];
}
8942--12493[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.79.100" dst_port="8080" src_ip="194.159.24.162" src_port="1631"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.112.218.162"/>
    </slice>
    <from sec="1172898570" usec="0"/>
    <to sec="1172898628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.16.198.163"/>
    </slice>
    <from sec="1172898437" usec="0"/>
    <to sec="1172898439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.117.95.164"/>
    </slice>
    <from sec="1172898298" usec="0"/>
    <to sec="1172898359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.192.108.164"/>
    </slice>
    <from sec="1172898536" usec="0"/>
    <to sec="1172898564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.204.237.164"/>
    </slice>
    <from sec="1172898226" usec="0"/>
    <to sec="1172898399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.211.241.164"/>
    </slice>
    <from sec="1172898146" usec="0"/>
    <to sec="1172898170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1461{
style=filled;
color=gray75;
9012[label="170.123.59.165;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12534[label="170.123.59.165;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1461[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.59.165:*, *:80}[40%]&lt;BR/&gt;{170.123.59.165:53, *:*}[35%]&lt;BR/&gt;{170.123.59.165:*, 18.224.5.5:995}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.5128%)&lt;BR/&gt; 53: (16.6667%)&lt;BR/&gt; 995: (12.8205%)&lt;BR/&gt; 1385: (5.12821%)&lt;BR/&gt; 1384: (5.12821%)&gt;];
}
9012--12534[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="170.123.59.165" src_port="53"/>
      <filter dst_port="80" src_ip="170.123.59.165"/>
      <filter dst_ip="18.224.5.5" dst_port="995" src_ip="170.123.59.165"/>
    </slice>
    <from sec="1172898092" usec="0"/>
    <to sec="1172898881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.65.66.165"/>
    </slice>
    <from sec="1172898128" usec="0"/>
    <to sec="1172898145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.176.70.165"/>
    </slice>
    <from sec="1172898518" usec="0"/>
    <to sec="1172898548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1464{
style=filled;
color=gray75;
9016[label="207.90.73.165;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12538[label="207.90.73.165;1pkt 1fpkt", shape=invtriangle, color=brown];
14298[label="207.90.73.165;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1464[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.90.73.165:80, 170.123.67.121:1906}[50%]&lt;BR/&gt;{207.90.73.165:80, 170.123.67.121:1907}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1907: (37.5%)&lt;BR/&gt; 1906: (12.5%)&gt;];
}
9016--12538[label="1;1pkt 1fpkt"];
9016--14298[label="1;1pkt 1fpkt"];
12538--14298[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.67.121" dst_port="1907" src_ip="207.90.73.165" src_port="80"/>
      <filter dst_ip="170.123.67.121" dst_port="1906" src_ip="207.90.73.165" src_port="80"/>
    </slice>
    <from sec="1172898842" usec="0"/>
    <to sec="1172898863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1465{
style=filled;
color=gray75;
9023[label="206.245.106.165;464pkt 464fpkt", shape=pentagon, color=darkviolet];
12542[label="206.245.106.165;458pkt 458fpkt", shape=invtriangle, color=brown];
stat1465[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.245.106.165:*, *:5900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 22674: (0.21692%)&lt;BR/&gt; 65273: (0.10846%)&lt;BR/&gt; 65185: (0.10846%)&lt;BR/&gt; 65100: (0.10846%)&gt;];
}
9023--12542[label="1;458pkt 458fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="206.245.106.165"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.238.243.165"/>
    </slice>
    <from sec="1172898350" usec="0"/>
    <to sec="1172898368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1467{
style=filled;
color=gray75;
9037[label="182.246.7.166;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12552[label="182.246.7.166;4pkt 4fpkt", shape=invtriangle, color=brown];
14305[label="182.246.7.166;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1467[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.7.166:59861, 37.169.150.233:80}[20%]&lt;BR/&gt;{182.246.7.166:59417, 37.169.150.232:80}[20%]&lt;BR/&gt;{182.246.7.166:61189, 37.169.150.232:80}[20%]&lt;BR/&gt;{182.246.7.166:60159, 37.169.150.242:80}[20%]&lt;BR/&gt;{182.246.7.166:61149, 37.169.150.242:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61189: (10.7143%)&lt;BR/&gt; 61149: (10.7143%)&lt;BR/&gt; 60159: (10.7143%)&lt;BR/&gt; 59861: (10.7143%)&gt;];
}
9037--12552[label="1;4pkt 4fpkt"];
9037--14305[label="1;5pkt 5fpkt"];
12552--14305[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="37.169.150.242" dst_port="80" src_ip="182.246.7.166" src_port="61149"/>
      <filter dst_ip="37.169.150.242" dst_port="80" src_ip="182.246.7.166" src_port="60159"/>
      <filter dst_ip="37.169.150.232" dst_port="80" src_ip="182.246.7.166" src_port="61189"/>
      <filter dst_ip="37.169.150.232" dst_port="80" src_ip="182.246.7.166" src_port="59417"/>
      <filter dst_ip="37.169.150.233" dst_port="80" src_ip="182.246.7.166" src_port="59861"/>
    </slice>
    <from sec="1172898871" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1468{
style=filled;
color=gray75;
9038[label="26.29.8.166;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12553[label="26.29.8.166;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1468[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.29.8.166:*, 172.169.96.162:80}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64537: (4.16667%)&lt;BR/&gt; 64212: (4.16667%)&lt;BR/&gt; 56230: (4.16667%)&lt;BR/&gt; 56170: (4.16667%)&gt;];
}
9038--12553[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="172.169.96.162" dst_port="80" src_ip="26.29.8.166"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.76.34.166"/>
    </slice>
    <from sec="1172898415" usec="0"/>
    <to sec="1172898430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.39.166"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1471{
style=filled;
color=gray75;
9046[label="214.125.79.166;26pkt 26fpkt", shape=pentagon, color=darkviolet];
12558[label="214.125.79.166;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1471[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.79.166:3731, *:*}[65.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3731: (32.6923%)&lt;BR/&gt; 80: (7.69231%)&lt;BR/&gt; 49024: (1.92308%)&lt;BR/&gt; 47979: (1.92308%)&lt;BR/&gt; 47857: (1.92308%)&gt;];
}
9046--12558[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="214.125.79.166" src_port="3731"/>
    </slice>
    <from sec="1172898038" usec="0"/>
    <to sec="1172898883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.103.87.166"/>
    </slice>
    <from sec="1172898011" usec="0"/>
    <to sec="1172898026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.216.150.166"/>
    </slice>
    <from sec="1172898566" usec="0"/>
    <to sec="1172898597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.242.161.166"/>
    </slice>
    <from sec="1172898088" usec="0"/>
    <to sec="1172898103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.23.4.167"/>
    </slice>
    <from sec="1172898705" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.220.33.167"/>
    </slice>
    <from sec="1172898299" usec="0"/>
    <to sec="1172898314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.37.167"/>
    </slice>
    <from sec="1172898603" usec="0"/>
    <to sec="1172898635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1478{
style=filled;
color=gray75;
9066[label="98.123.64.167;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12574[label="98.123.64.167;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1478[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.123.64.167:80, 172.169.29.52:49171}[33.3333%]&lt;BR/&gt;{98.123.64.167:80, 170.123.84.52:53663}[33.3333%]&lt;BR/&gt;{98.123.64.167:80, 153.21.171.71:1443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53663: (16.6667%)&lt;BR/&gt; 49171: (16.6667%)&lt;BR/&gt; 1443: (16.6667%)&gt;];
}
9066--12574[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.171.71" dst_port="1443" src_ip="98.123.64.167" src_port="80"/>
      <filter dst_ip="170.123.84.52" dst_port="53663" src_ip="98.123.64.167" src_port="80"/>
      <filter dst_ip="172.169.29.52" dst_port="49171" src_ip="98.123.64.167" src_port="80"/>
    </slice>
    <from sec="1172898323" usec="0"/>
    <to sec="1172898868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1479{
style=filled;
color=gray75;
9068[label="97.121.78.167;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12575[label="97.121.78.167;11pkt 11fpkt", shape=invtriangle, color=brown];
14313[label="97.121.78.167;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1479[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.121.78.167:80, 170.123.42.80:*}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1595: (4.54545%)&lt;BR/&gt; 1530: (4.54545%)&lt;BR/&gt; 1508: (4.54545%)&lt;BR/&gt; 1153: (4.54545%)&gt;];
}
9068--12575[label="1;11pkt 11fpkt"];
9068--14313[label="1;11pkt 11fpkt"];
12575--14313[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.42.80" src_ip="97.121.78.167" src_port="80"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.151.23.168"/>
    </slice>
    <from sec="1172898480" usec="0"/>
    <to sec="1172898495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.62.70.168"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.113.105.168"/>
    </slice>
    <from sec="1172898063" usec="0"/>
    <to sec="1172898078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.119.165.168"/>
    </slice>
    <from sec="1172898257" usec="0"/>
    <to sec="1172898287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1484{
style=filled;
color=gray75;
9107[label="153.21.9.169;15pkt 15fpkt", shape=pentagon, color=darkviolet];
12596[label="153.21.9.169;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1484[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.9.169:*, 215.8.34.122:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4225: (3.33333%)&lt;BR/&gt; 4224: (3.33333%)&lt;BR/&gt; 4223: (3.33333%)&lt;BR/&gt; 4222: (3.33333%)&gt;];
}
9107--12596[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="215.8.34.122" dst_port="80" src_ip="153.21.9.169"/>
    </slice>
    <from sec="1172898185" usec="0"/>
    <to sec="1172898206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.50.32.169"/>
    </slice>
    <from sec="1172898629" usec="0"/>
    <to sec="1172898644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.179.35.169"/>
    </slice>
    <from sec="1172898754" usec="0"/>
    <to sec="1172898780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.74.73.169"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.225.214.169"/>
    </slice>
    <from sec="1172898844" usec="0"/>
    <to sec="1172898866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.21.78.170"/>
    </slice>
    <from sec="1172898244" usec="0"/>
    <to sec="1172898255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.67.89.170"/>
    </slice>
    <from sec="1172898553" usec="0"/>
    <to sec="1172898592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1491{
style=filled;
color=gray75;
9141[label="207.90.102.170;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12617[label="207.90.102.170;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1491[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.90.102.170:80, 170.123.0.30:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4898: (6.25%)&lt;BR/&gt; 4896: (6.25%)&lt;BR/&gt; 4894: (6.25%)&lt;BR/&gt; 4892: (6.25%)&gt;];
}
9141--12617[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.0.30" src_ip="207.90.102.170" src_port="80"/>
    </slice>
    <from sec="1172898474" usec="0"/>
    <to sec="1172898479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.21.234.170"/>
    </slice>
    <from sec="1172898595" usec="0"/>
    <to sec="1172898749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.148.177.171"/>
    </slice>
    <from sec="1172898081" usec="0"/>
    <to sec="1172898105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.1.196.171"/>
    </slice>
    <from sec="1172898713" usec="0"/>
    <to sec="1172898725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.146.4.172"/>
    </slice>
    <from sec="1172898326" usec="0"/>
    <to sec="1172898341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.5.47.172"/>
    </slice>
    <from sec="1172898624" usec="0"/>
    <to sec="1172898648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08721,2.74556,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1497{
style=filled;
color=gray75;
3059[label="153.21.8.173;s;68pkt 68fpkt", shape=diamond, color=yellow];
3103[label="24.85.42.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
3519[label="24.85.37.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
9197[label="153.21.8.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12642[label="153.21.8.173;1pkt 1fpkt", shape=invtriangle, color=brown];
14348[label="153.21.8.173;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1497[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.8.173:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4078: (2.73973%)&lt;BR/&gt; 4046: (1.36986%)&lt;BR/&gt; 4014: (1.36986%)&lt;BR/&gt; 4077: (0.684932%)&gt;];
}
3059--3103[label="1;1pkt 1fpkt"];
3059--3519[label="1;1pkt 1fpkt"];
3059--3611[label="0.0441176;3pkt 3fpkt"];
3059--4478[label="0.0441176;3pkt 3fpkt"];
3059--9197[label="1;1pkt 1fpkt"];
3059--12642[label="1;1pkt 1fpkt"];
3059--14348[label="1;1pkt 1fpkt"];
9197--12642[label="1;1pkt 1fpkt"];
9197--14348[label="1;1pkt 1fpkt"];
12642--14348[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="153.21.8.173"/>
    </slice>
    <from sec="1172898535" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.102.76.173"/>
    </slice>
    <from sec="1172898310" usec="0"/>
    <to sec="1172898357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.134.93.173"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1500{
style=filled;
color=gray75;
9205[label="215.28.110.173;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12648[label="215.28.110.173;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1500[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.28.110.173:*, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32185: (5.55556%)&lt;BR/&gt; 32180: (5.55556%)&lt;BR/&gt; 32173: (5.55556%)&lt;BR/&gt; 32162: (5.55556%)&gt;];
}
9205--12648[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.28.110.173"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="97.78.117.173"/>
    </slice>
    <from sec="1172898452" usec="0"/>
    <to sec="1172898510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.125.148.173"/>
    </slice>
    <from sec="1172898760" usec="0"/>
    <to sec="1172898771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.72.35.174"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.201.162.174"/>
    </slice>
    <from sec="1172898696" usec="0"/>
    <to sec="1172898706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.47.20.176"/>
    </slice>
    <from sec="1172898012" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1506{
style=filled;
color=gray75;
282[label="153.21.10.165;d;7pkt 7fpkt", shape=diamond, color=yellow];
284[label="36.127.61.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
773[label="207.90.78.3;s;60pkt 60fpkt", shape=diamond, color=yellow];
774[label="170.123.18.88;d;62pkt 62fpkt", shape=diamond, color=yellow];
970[label="172.169.135.80;d;896pkt 896fpkt", shape=diamond, color=yellow];
1062[label="215.17.172.89;d;34pkt 34fpkt", shape=diamond, color=yellow];
1248[label="172.104.233.178;d;115pkt 115fpkt", shape=diamond, color=yellow];
1340[label="96.23.36.236;s;58pkt 58fpkt", shape=diamond, color=yellow];
1440[label="193.72.231.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1450[label="96.137.254.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
1455[label="199.17.16.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
1457[label="5.182.128.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
1732[label="170.123.47.222;d;37pkt 37fpkt", shape=diamond, color=yellow];
1741[label="214.55.12.148;s;34pkt 34fpkt", shape=diamond, color=yellow];
1853[label="101.46.85.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
2097[label="0.217.71.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
2256[label="37.169.148.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
2479[label="11.99.29.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
2598[label="204.217.21.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
2758[label="153.21.68.172;d;41pkt 41fpkt", shape=diamond, color=yellow];
3282[label="37.169.148.176;s;33pkt 33fpkt", shape=diamond, color=yellow];
3621[label="153.21.105.18;d;114pkt 114fpkt", shape=diamond, color=yellow];
3627[label="153.21.18.2;d;30pkt 30fpkt", shape=diamond, color=yellow];
3679[label="37.169.148.177;s;29pkt 29fpkt", shape=diamond, color=yellow];
3695[label="215.17.15.228;d;114pkt 114fpkt", shape=diamond, color=yellow];
3881[label="36.127.61.152;s;1pkt 1fpkt", shape=hexagon, color=black];
3930[label="170.123.18.88;d;4pkt 4fpkt", shape=hexagon, color=black];
4122[label="172.169.135.80;d;306pkt 306fpkt", shape=hexagon, color=black];
4208[label="172.104.233.178;d;115pkt 115fpkt", shape=hexagon, color=black];
4324[label="5.182.128.217;s;1pkt 1fpkt", shape=hexagon, color=black];
4491[label="153.21.10.165;d;6pkt 6fpkt", shape=hexagon, color=black];
4930[label="11.99.29.212;s;1pkt 1fpkt", shape=hexagon, color=black];
5166[label="101.46.85.206;s;1pkt 1fpkt", shape=hexagon, color=black];
5262[label="37.169.148.176;s;33pkt 33fpkt", shape=hexagon, color=black];
5601[label="193.72.231.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5648[label="207.90.78.3;61pkt 61fpkt", shape=pentagon, color=darkviolet];
5746[label="6.131.53.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6085[label="214.55.12.23;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7352[label="214.55.12.83;35pkt 35fpkt", shape=pentagon, color=darkviolet];
7462[label="214.55.12.88;29pkt 29fpkt", shape=pentagon, color=darkviolet];
7501[label="214.55.12.90;31pkt 31fpkt", shape=pentagon, color=darkviolet];
7570[label="215.80.84.94;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7630[label="196.32.6.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7925[label="214.55.12.112;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8242[label="211.51.86.129;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8654[label="214.55.12.148;40pkt 40fpkt", shape=pentagon, color=darkviolet];
8794[label="214.55.12.155;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8831[label="214.55.12.157;32pkt 32fpkt", shape=pentagon, color=darkviolet];
8955[label="37.169.148.162;34pkt 34fpkt", shape=pentagon, color=darkviolet];
8981[label="214.55.12.164;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8998[label="37.169.148.164;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9024[label="37.169.148.165;26pkt 26fpkt", shape=pentagon, color=darkviolet];
9261[label="37.169.148.176;33pkt 33fpkt", shape=pentagon, color=darkviolet];
9281[label="37.169.148.177;32pkt 32fpkt", shape=pentagon, color=darkviolet];
9352[label="37.169.148.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10313[label="96.23.36.236;58pkt 58fpkt", shape=pentagon, color=darkviolet];
10670[label="207.90.78.3;61pkt 61fpkt", shape=invtriangle, color=brown];
10903[label="214.55.12.23;12pkt 12fpkt", shape=invtriangle, color=brown];
11577[label="214.55.12.83;35pkt 35fpkt", shape=invtriangle, color=brown];
11639[label="214.55.12.88;29pkt 29fpkt", shape=invtriangle, color=brown];
11656[label="214.55.12.90;30pkt 30fpkt", shape=invtriangle, color=brown];
11897[label="214.55.12.112;9pkt 9fpkt", shape=invtriangle, color=brown];
12411[label="214.55.12.155;11pkt 11fpkt", shape=invtriangle, color=brown];
12434[label="214.55.12.157;32pkt 32fpkt", shape=invtriangle, color=brown];
12500[label="37.169.148.162;34pkt 34fpkt", shape=invtriangle, color=brown];
12543[label="37.169.148.165;26pkt 26fpkt", shape=invtriangle, color=brown];
12679[label="37.169.148.176;32pkt 32fpkt", shape=invtriangle, color=brown];
12737[label="37.169.148.181;1pkt 1fpkt", shape=invtriangle, color=brown];
13256[label="96.23.36.236;57pkt 57fpkt", shape=invtriangle, color=brown];
13457[label="207.90.78.3;62pkt 62fpkt", shape=invhouse, color=bisque];
13565[label="214.55.12.23;11pkt 11fpkt", shape=invhouse, color=bisque];
13865[label="214.55.12.83;34pkt 34fpkt", shape=invhouse, color=bisque];
14015[label="214.55.12.112;8pkt 8fpkt", shape=invhouse, color=bisque];
14245[label="214.55.12.155;10pkt 10fpkt", shape=invhouse, color=bisque];
14291[label="37.169.148.164;6pkt 6fpkt", shape=invhouse, color=bisque];
14299[label="37.169.148.165;26pkt 26fpkt", shape=invhouse, color=bisque];
14362[label="37.169.148.176;32pkt 32fpkt", shape=invhouse, color=bisque];
stat1506[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[43.5287%]&lt;BR/&gt;{*:4662, 172.169.135.80:*}[23.5653%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.3195%)&lt;BR/&gt; 4662: (8.23511%)&lt;BR/&gt; 17977: (1.95409%)&lt;BR/&gt; 4672: (0.899504%)&lt;BR/&gt; 443: (0.759926%)&gt;];
}
282--284[label="1;1pkt 1fpkt"];
282--3881[label="1;1pkt 1fpkt"];
282--4491[label="1;6pkt 6fpkt"];
282--7462[label="0.428571;3pkt 3fpkt"];
282--11639[label="0.428571;3pkt 3fpkt"];
284--3881[label="1;1pkt 1fpkt"];
284--4491[label="1;1pkt 1fpkt"];
773--774[label="1;60pkt 60fpkt"];
773--3930[label="1;4pkt 4fpkt"];
773--5648[label="1;60pkt 60fpkt"];
773--10670[label="1;60pkt 60fpkt"];
773--13457[label="1;60pkt 60fpkt"];
774--980[label="0.0322581;2pkt 2fpkt"];
774--3930[label="1;4pkt 4fpkt"];
774--4309[label="0.0322581;2pkt 2fpkt"];
774--5398[label="0.0322581;2pkt 2fpkt"];
774--5648[label="0.983607;60pkt 60fpkt"];
774--10670[label="0.983607;60pkt 60fpkt"];
774--13457[label="0.967742;60pkt 60fpkt"];
970--1440[label="1;1pkt 1fpkt"];
970--1450[label="1;1pkt 1fpkt"];
970--1455[label="1;1pkt 1fpkt"];
970--1457[label="1;1pkt 1fpkt"];
970--1853[label="1;1pkt 1fpkt"];
970--2097[label="1;1pkt 1fpkt"];
970--2479[label="1;1pkt 1fpkt"];
970--4122[label="1;306pkt 306fpkt"];
970--4324[label="1;1pkt 1fpkt"];
970--4930[label="1;1pkt 1fpkt"];
970--5166[label="1;1pkt 1fpkt"];
970--5601[label="1;1pkt 1fpkt"];
970--5746[label="1;1pkt 1fpkt"];
970--7462[label="0.0689655;2pkt 2fpkt"];
970--7630[label="1;1pkt 1fpkt"];
970--10061[label="0.333333;1pkt 1fpkt"];
970--11639[label="0.0689655;2pkt 2fpkt"];
970--13130[label="0.333333;1pkt 1fpkt"];
1062--2256[label="1;1pkt 1fpkt"];
1062--2598[label="1;1pkt 1fpkt"];
1062--7570[label="0.892857;25pkt 25fpkt"];
1062--8998[label="0.0909091;1pkt 1fpkt"];
1062--9352[label="0.5;1pkt 1fpkt"];
1248--1340[label="1;58pkt 58fpkt"];
1248--1469[label="0.00869565;1pkt 1fpkt"];
1248--3679[label="0.275862;8pkt 8fpkt"];
1248--3886[label="0.0347826;4pkt 4fpkt"];
1248--4208[label="1;115pkt 115fpkt"];
1248--5175[label="0.00869565;1pkt 1fpkt"];
1248--7023[label="0.00869565;1pkt 1fpkt"];
1248--7701[label="0.00869565;1pkt 1fpkt"];
1248--8242[label="0.125;2pkt 2fpkt"];
1248--8955[label="0.0882353;3pkt 3fpkt"];
1248--9281[label="0.25;8pkt 8fpkt"];
1248--10313[label="1;58pkt 58fpkt"];
1248--11411[label="0.00869565;1pkt 1fpkt"];
1248--11774[label="0.00869565;1pkt 1fpkt"];
1248--12500[label="0.0882353;3pkt 3fpkt"];
1248--13256[label="1;57pkt 57fpkt"];
1248--13793[label="0.00869565;1pkt 1fpkt"];
1340--4208[label="1;58pkt 58fpkt"];
1340--10313[label="1;58pkt 58fpkt"];
1340--13256[label="1;57pkt 57fpkt"];
1440--4122[label="1;1pkt 1fpkt"];
1440--5601[label="1;1pkt 1fpkt"];
1450--4122[label="1;1pkt 1fpkt"];
1455--4122[label="1;1pkt 1fpkt"];
1457--4122[label="1;1pkt 1fpkt"];
1457--4324[label="1;1pkt 1fpkt"];
1732--7501[label="0.193548;6pkt 6fpkt"];
1732--8654[label="0.135135;5pkt 5fpkt"];
1732--8794[label="0.545455;6pkt 6fpkt"];
1732--8831[label="0.5625;18pkt 18fpkt"];
1732--8981[label="0.0952381;2pkt 2fpkt"];
1732--11656[label="0.2;6pkt 6fpkt"];
1732--12411[label="0.545455;6pkt 6fpkt"];
1732--12434[label="0.5625;18pkt 18fpkt"];
1732--14245[label="0.6;6pkt 6fpkt"];
1741--8654[label="1;34pkt 34fpkt"];
1853--4122[label="1;1pkt 1fpkt"];
1853--5166[label="1;1pkt 1fpkt"];
2097--4122[label="1;1pkt 1fpkt"];
2256--9352[label="1;1pkt 1fpkt"];
2479--4930[label="1;1pkt 1fpkt"];
2758--3282[label="0.363636;12pkt 12fpkt"];
2758--3679[label="0.275862;8pkt 8fpkt"];
2758--5262[label="0.363636;12pkt 12fpkt"];
2758--5648[label="0.0243902;1pkt 1fpkt"];
2758--8955[label="0.323529;11pkt 11fpkt"];
2758--9024[label="0.269231;7pkt 7fpkt"];
2758--9261[label="0.363636;12pkt 12fpkt"];
2758--9281[label="0.25;8pkt 8fpkt"];
2758--10670[label="0.0243902;1pkt 1fpkt"];
2758--12500[label="0.323529;11pkt 11fpkt"];
2758--12543[label="0.269231;7pkt 7fpkt"];
2758--12679[label="0.375;12pkt 12fpkt"];
2758--13457[label="0.0487805;2pkt 2fpkt"];
2758--14299[label="0.269231;7pkt 7fpkt"];
2758--14362[label="0.375;12pkt 12fpkt"];
3282--3621[label="0.333333;11pkt 11fpkt"];
3282--3627[label="0.133333;4pkt 4fpkt"];
3282--5262[label="1;33pkt 33fpkt"];
3282--9261[label="1;33pkt 33fpkt"];
3282--12679[label="1;32pkt 32fpkt"];
3282--14362[label="1;32pkt 32fpkt"];
3621--4309[label="0.00877193;1pkt 1fpkt"];
3621--5262[label="0.333333;11pkt 11fpkt"];
3621--5398[label="0.00877193;1pkt 1fpkt"];
3621--6085[label="0.416667;5pkt 5fpkt"];
3621--6407[label="0.0350877;2pkt 2fpkt"];
3621--7352[label="0.228571;8pkt 8fpkt"];
3621--7462[label="0.137931;4pkt 4fpkt"];
3621--7501[label="0.0645161;2pkt 2fpkt"];
3621--7925[label="0.666667;6pkt 6fpkt"];
3621--8955[label="0.323529;11pkt 11fpkt"];
3621--8998[label="0.818182;9pkt 9fpkt"];
3621--9024[label="0.230769;6pkt 6fpkt"];
3621--9200[label="0.0175439;2pkt 2fpkt"];
3621--9261[label="0.333333;11pkt 11fpkt"];
3621--10903[label="0.416667;5pkt 5fpkt"];
3621--11078[label="0.0350877;2pkt 2fpkt"];
3621--11577[label="0.228571;8pkt 8fpkt"];
3621--11639[label="0.137931;4pkt 4fpkt"];
3621--11656[label="0.0666667;2pkt 2fpkt"];
3621--11897[label="0.666667;6pkt 6fpkt"];
3621--12500[label="0.323529;11pkt 11fpkt"];
3621--12543[label="0.230769;6pkt 6fpkt"];
3621--12644[label="0.0175439;2pkt 2fpkt"];
3621--12679[label="0.34375;11pkt 11fpkt"];
3621--13565[label="0.454545;5pkt 5fpkt"];
3621--13642[label="0.0357143;2pkt 2fpkt"];
3621--13865[label="0.235294;8pkt 8fpkt"];
3621--14015[label="0.625;5pkt 5fpkt"];
3621--14291[label="0.833333;5pkt 5fpkt"];
3621--14299[label="0.230769;6pkt 6fpkt"];
3621--14349[label="0.0175439;2pkt 2fpkt"];
3621--14362[label="0.34375;11pkt 11fpkt"];
3627--3679[label="0.137931;4pkt 4fpkt"];
3627--4309[label="0.0333333;1pkt 1fpkt"];
3627--5262[label="0.133333;4pkt 4fpkt"];
3627--5398[label="0.0333333;1pkt 1fpkt"];
3627--6005[label="0.0333333;1pkt 1fpkt"];
3627--7992[label="0.233333;7pkt 7fpkt"];
3627--8955[label="0.133333;4pkt 4fpkt"];
3627--9024[label="0.153846;4pkt 4fpkt"];
3627--9261[label="0.133333;4pkt 4fpkt"];
3627--9281[label="0.133333;4pkt 4fpkt"];
3627--11935[label="0.2;6pkt 6fpkt"];
3627--12500[label="0.133333;4pkt 4fpkt"];
3627--12543[label="0.153846;4pkt 4fpkt"];
3627--12679[label="0.133333;4pkt 4fpkt"];
3627--14299[label="0.153846;4pkt 4fpkt"];
3627--14362[label="0.133333;4pkt 4fpkt"];
3679--4208[label="0.275862;8pkt 8fpkt"];
3679--9281[label="1;29pkt 29fpkt"];
3695--3874[label="0.00877193;1pkt 1fpkt"];
3695--4309[label="0.0263158;3pkt 3fpkt"];
3695--5398[label="0.0263158;3pkt 3fpkt"];
3695--5606[label="0.0327869;2pkt 2fpkt"];
3695--6005[label="0.119403;8pkt 8fpkt"];
3695--7155[label="0.0384615;1pkt 1fpkt"];
3695--7306[label="0.186047;8pkt 8fpkt"];
3695--7352[label="0.257143;9pkt 9fpkt"];
3695--7415[label="0.241379;7pkt 7fpkt"];
3695--7462[label="0.206897;6pkt 6fpkt"];
3695--7501[label="0.0322581;1pkt 1fpkt"];
3695--7992[label="0.155556;7pkt 7fpkt"];
3695--8523[label="0.00877193;1pkt 1fpkt"];
3695--9128[label="0.0175439;2pkt 2fpkt"];
3695--9428[label="0.0138889;1pkt 1fpkt"];
3695--10651[label="0.0333333;2pkt 2fpkt"];
3695--11475[label="0.04;1pkt 1fpkt"];
3695--11577[label="0.257143;9pkt 9fpkt"];
3695--11639[label="0.206897;6pkt 6fpkt"];
3695--11656[label="0.0333333;1pkt 1fpkt"];
3695--11935[label="0.159091;7pkt 7fpkt"];
3695--12252[label="0.00877193;1pkt 1fpkt"];
3695--12609[label="0.0175439;2pkt 2fpkt"];
3695--12778[label="0.0140845;1pkt 1fpkt"];
3695--13452[label="0.0333333;2pkt 2fpkt"];
3695--13819[label="0.04;1pkt 1fpkt"];
3695--13865[label="0.264706;9pkt 9fpkt"];
3695--14180[label="0.00877193;1pkt 1fpkt"];
3881--4491[label="1;1pkt 1fpkt"];
3930--5648[label="1;4pkt 4fpkt"];
3930--10670[label="1;4pkt 4fpkt"];
3930--13457[label="1;4pkt 4fpkt"];
4122--4324[label="1;1pkt 1fpkt"];
4122--5166[label="1;1pkt 1fpkt"];
4122--5601[label="1;1pkt 1fpkt"];
4122--5746[label="1;1pkt 1fpkt"];
4122--7462[label="0.0344828;1pkt 1fpkt"];
4122--11639[label="0.0344828;1pkt 1fpkt"];
4208--5175[label="0.00869565;1pkt 1fpkt"];
4208--7023[label="0.00869565;1pkt 1fpkt"];
4208--7701[label="0.00869565;1pkt 1fpkt"];
4208--8242[label="0.125;2pkt 2fpkt"];
4208--8955[label="0.0882353;3pkt 3fpkt"];
4208--9281[label="0.25;8pkt 8fpkt"];
4208--10313[label="1;58pkt 58fpkt"];
4208--11411[label="0.00869565;1pkt 1fpkt"];
4208--11774[label="0.00869565;1pkt 1fpkt"];
4208--12500[label="0.0882353;3pkt 3fpkt"];
4208--13256[label="1;57pkt 57fpkt"];
4208--13793[label="0.00869565;1pkt 1fpkt"];
4491--7462[label="0.333333;2pkt 2fpkt"];
4491--11639[label="0.333333;2pkt 2fpkt"];
5262--9261[label="1;33pkt 33fpkt"];
5262--12679[label="1;32pkt 32fpkt"];
5262--14362[label="1;32pkt 32fpkt"];
5648--10670[label="1;61pkt 61fpkt"];
5648--13457[label="1;61pkt 61fpkt"];
6085--10903[label="1;12pkt 12fpkt"];
6085--13565[label="1;11pkt 11fpkt"];
7352--11577[label="1;35pkt 35fpkt"];
7352--13865[label="1;34pkt 34fpkt"];
7462--11639[label="1;29pkt 29fpkt"];
7501--11656[label="1;30pkt 30fpkt"];
7925--11897[label="1;9pkt 9fpkt"];
7925--14015[label="1;8pkt 8fpkt"];
8794--12411[label="1;11pkt 11fpkt"];
8794--14245[label="1;10pkt 10fpkt"];
8831--12434[label="1;32pkt 32fpkt"];
8955--12500[label="1;34pkt 34fpkt"];
8998--14291[label="1;6pkt 6fpkt"];
9024--12543[label="1;26pkt 26fpkt"];
9024--14299[label="1;26pkt 26fpkt"];
9261--12679[label="1;32pkt 32fpkt"];
9261--14362[label="1;32pkt 32fpkt"];
9352--12737[label="1;1pkt 1fpkt"];
10313--13256[label="1;57pkt 57fpkt"];
10670--13457[label="1;61pkt 61fpkt"];
10903--13565[label="1;11pkt 11fpkt"];
11577--13865[label="1;34pkt 34fpkt"];
11897--14015[label="1;8pkt 8fpkt"];
12411--14245[label="1;10pkt 10fpkt"];
12543--14299[label="1;26pkt 26fpkt"];
12679--14362[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="172.169.135.80" src_port="4662"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.96.238.176"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.138.17.177"/>
    </slice>
    <from sec="1172898517" usec="0"/>
    <to sec="1172898557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.235.193.177"/>
    </slice>
    <from sec="1172898103" usec="0"/>
    <to sec="1172898112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.56.22.178"/>
    </slice>
    <from sec="1172898725" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.135.39.178"/>
    </slice>
    <from sec="1172898565" usec="0"/>
    <to sec="1172898676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.156.17.179"/>
    </slice>
    <from sec="1172898499" usec="0"/>
    <to sec="1172898511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.112.226.179"/>
    </slice>
    <from sec="1172898502" usec="0"/>
    <to sec="1172898596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="174.40.174.180"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.66.96.181"/>
    </slice>
    <from sec="1172898435" usec="0"/>
    <to sec="1172898448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.162.102.181"/>
    </slice>
    <from sec="1172898816" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.31.151.181"/>
    </slice>
    <from sec="1172898528" usec="0"/>
    <to sec="1172898540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1518{
style=filled;
color=gray75;
9366[label="214.89.44.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12746[label="214.89.44.182;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1518[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.89.44.182:41239, 97.83.98.197:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41239: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9366--12746[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="97.83.98.197" dst_port="80" src_ip="214.89.44.182" src_port="41239"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.18.62.182"/>
    </slice>
    <from sec="1172898485" usec="0"/>
    <to sec="1172898590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1520{
style=filled;
color=gray75;
9379[label="97.184.134.182;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12751[label="97.184.134.182;5pkt 5fpkt", shape=invtriangle, color=brown];
14395[label="97.184.134.182;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1520[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.184.134.182:7200, 172.180.10.5:19756}[20%]&lt;BR/&gt;{97.184.134.182:7200, 182.130.203.33:4446}[20%]&lt;BR/&gt;{97.184.134.182:7200, 170.123.226.39:10533}[20%]&lt;BR/&gt;{97.184.134.182:7200, 172.169.173.136:65116}[20%]&lt;BR/&gt;{97.184.134.182:7200, 182.130.33.144:43011}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7200: (50%)&lt;BR/&gt; 65116: (10%)&lt;BR/&gt; 43011: (10%)&lt;BR/&gt; 19756: (10%)&lt;BR/&gt; 10533: (10%)&gt;];
}
9379--12751[label="1;5pkt 5fpkt"];
9379--14395[label="1;5pkt 5fpkt"];
12751--14395[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="182.130.33.144" dst_port="43011" src_ip="97.184.134.182" src_port="7200"/>
      <filter dst_ip="172.169.173.136" dst_port="65116" src_ip="97.184.134.182" src_port="7200"/>
      <filter dst_ip="170.123.226.39" dst_port="10533" src_ip="97.184.134.182" src_port="7200"/>
      <filter dst_ip="182.130.203.33" dst_port="4446" src_ip="97.184.134.182" src_port="7200"/>
      <filter dst_ip="172.180.10.5" dst_port="19756" src_ip="97.184.134.182" src_port="7200"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.72.38.185"/>
    </slice>
    <from sec="1172898736" usec="0"/>
    <to sec="1172898752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1522{
style=filled;
color=gray75;
9418[label="24.85.43.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12771[label="24.85.43.185;1pkt 1fpkt", shape=invtriangle, color=brown];
14404[label="24.85.43.185;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1522[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.85.43.185:80, 215.17.14.255:61847}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61847: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9418--12771[label="1;1pkt 1fpkt"];
9418--14404[label="1;1pkt 1fpkt"];
12771--14404[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.17.14.255" dst_port="61847" src_ip="24.85.43.185" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.148.169.185"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.219.76.186"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.52.165.186"/>
    </slice>
    <from sec="1172898462" usec="0"/>
    <to sec="1172898477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1526{
style=filled;
color=gray75;
9452[label="153.21.37.187;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12792[label="153.21.37.187;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1526[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.37.187:2063, 210.49.48.84:1863}[50%]&lt;BR/&gt;{153.21.37.187:1085, 210.49.90.99:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2063: (25%)&lt;BR/&gt; 1085: (25%)&gt;];
}
9452--12792[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.49.90.99" dst_port="1863" src_ip="153.21.37.187" src_port="1085"/>
      <filter dst_ip="210.49.48.84" dst_port="1863" src_ip="153.21.37.187" src_port="2063"/>
    </slice>
    <from sec="1172898032" usec="0"/>
    <to sec="1172898873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1527{
style=filled;
color=gray75;
9464[label="201.182.51.188;178pkt 178fpkt", shape=pentagon, color=darkviolet];
12801[label="201.182.51.188;157pkt 157fpkt", shape=invtriangle, color=brown];
stat1527[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.182.51.188:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
9464--12801[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.182.51.188" src_port="1029"/>
    </slice>
    <from sec="1172898216" usec="0"/>
    <to sec="1172898243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.8.83.188"/>
    </slice>
    <from sec="1172898534" usec="0"/>
    <to sec="1172898616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.55.84.188"/>
    </slice>
    <from sec="1172898099" usec="0"/>
    <to sec="1172898428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.105.148.188"/>
    </slice>
    <from sec="1172898425" usec="0"/>
    <to sec="1172898456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.186.44.189"/>
    </slice>
    <from sec="1172898098" usec="0"/>
    <to sec="1172898114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.29.144.189"/>
    </slice>
    <from sec="1172898882" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.67.161.189"/>
    </slice>
    <from sec="1172898634" usec="0"/>
    <to sec="1172898649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.215.221.189"/>
    </slice>
    <from sec="1172898801" usec="0"/>
    <to sec="1172898817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.76.8.190"/>
    </slice>
    <from sec="1172898509" usec="0"/>
    <to sec="1172898538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1536{
style=filled;
color=gray75;
2073[label="96.134.33.20;d;34pkt 34fpkt", shape=diamond, color=yellow];
2581[label="172.179.26.83;s;3pkt 3fpkt", shape=diamond, color=yellow];
3143[label="37.214.163.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
4709[label="172.179.26.83;s;3pkt 3fpkt", shape=hexagon, color=black];
5628[label="185.196.194.2;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7356[label="172.179.26.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9504[label="185.196.22.190;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11579[label="172.179.26.83;1pkt 1fpkt", shape=invtriangle, color=brown];
12824[label="185.196.22.190;13pkt 13fpkt", shape=invtriangle, color=brown];
13867[label="172.179.26.83;1pkt 1fpkt", shape=invhouse, color=bisque];
14429[label="185.196.22.190;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1536[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.196.22.190:*, 96.134.33.20:80}[37.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4706%)&lt;BR/&gt; 44312: (3.52941%)&lt;BR/&gt; 2139: (3.52941%)&lt;BR/&gt; 2644: (2.35294%)&lt;BR/&gt; 2643: (2.35294%)&gt;];
}
2073--2581[label="0.666667;2pkt 2fpkt"];
2073--4709[label="0.666667;2pkt 2fpkt"];
2073--5628[label="1;3pkt 3fpkt"];
2073--9504[label="1;13pkt 13fpkt"];
2073--12824[label="1;13pkt 13fpkt"];
2073--14429[label="1;12pkt 12fpkt"];
2581--3143[label="1;1pkt 1fpkt"];
2581--4709[label="1;3pkt 3fpkt"];
2581--7356[label="1;1pkt 1fpkt"];
2581--11579[label="1;1pkt 1fpkt"];
2581--13867[label="1;1pkt 1fpkt"];
3143--4709[label="1;1pkt 1fpkt"];
3143--7356[label="1;1pkt 1fpkt"];
3143--11579[label="1;1pkt 1fpkt"];
3143--13867[label="1;1pkt 1fpkt"];
4709--7356[label="1;1pkt 1fpkt"];
4709--11579[label="1;1pkt 1fpkt"];
4709--13867[label="1;1pkt 1fpkt"];
7356--11579[label="1;1pkt 1fpkt"];
7356--13867[label="1;1pkt 1fpkt"];
9504--12824[label="1;13pkt 13fpkt"];
9504--14429[label="1;12pkt 12fpkt"];
11579--13867[label="1;1pkt 1fpkt"];
12824--14429[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="96.134.33.20" dst_port="80" src_ip="185.196.22.190"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.186.69.190"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.31.179.190"/>
    </slice>
    <from sec="1172898696" usec="0"/>
    <to sec="1172898713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.42.235.190"/>
    </slice>
    <from sec="1172898706" usec="0"/>
    <to sec="1172898721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.197.20.191"/>
    </slice>
    <from sec="1172898496" usec="0"/>
    <to sec="1172898522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.207.13.192"/>
    </slice>
    <from sec="1172898192" usec="0"/>
    <to sec="1172898210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.42.192"/>
    </slice>
    <from sec="1172898603" usec="0"/>
    <to sec="1172898676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.168.177.192"/>
    </slice>
    <from sec="1172898641" usec="0"/>
    <to sec="1172898670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.25.178.192"/>
    </slice>
    <from sec="1172898489" usec="0"/>
    <to sec="1172898519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.3.1.193"/>
    </slice>
    <from sec="1172898115" usec="0"/>
    <to sec="1172898124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.20.11.193"/>
    </slice>
    <from sec="1172898295" usec="0"/>
    <to sec="1172898397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.178.149.193"/>
    </slice>
    <from sec="1172898792" usec="0"/>
    <to sec="1172898820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1548{
style=filled;
color=gray75;
328[label="214.125.67.64;d;439pkt 439fpkt", shape=diamond, color=yellow];
330[label="205.41.175.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
666[label="210.240.126.77;s;30pkt 30fpkt", shape=diamond, color=yellow];
684[label="172.180.31.144;d;359pkt 359fpkt", shape=diamond, color=yellow];
732[label="172.180.31.145;d;222pkt 222fpkt", shape=diamond, color=yellow];
748[label="172.180.31.151;d;127pkt 127fpkt", shape=diamond, color=yellow];
749[label="37.169.150.2;s;4pkt 4fpkt", shape=diamond, color=yellow];
806[label="219.233.3.74;s;3pkt 3fpkt", shape=diamond, color=yellow];
1019[label="37.169.150.31;s;9pkt 9fpkt", shape=diamond, color=yellow];
1057[label="172.180.31.150;d;63pkt 63fpkt", shape=diamond, color=yellow];
1105[label="170.123.249.85;d;16pkt 16fpkt", shape=diamond, color=yellow];
1242[label="215.202.200.10;s;8pkt 8fpkt", shape=diamond, color=yellow];
1346[label="24.85.33.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
1634[label="172.180.31.146;d;255pkt 255fpkt", shape=diamond, color=yellow];
1640[label="170.123.174.199;d;101pkt 101fpkt", shape=diamond, color=yellow];
1765[label="24.228.42.58;s;2pkt 2fpkt", shape=diamond, color=yellow];
2366[label="172.180.31.149;d;202pkt 202fpkt", shape=diamond, color=yellow];
2497[label="204.217.21.86;s;5pkt 5fpkt", shape=diamond, color=yellow];
2654[label="215.28.83.131;d;34pkt 34fpkt", shape=diamond, color=yellow];
2800[label="18.69.49.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
3043[label="29.18.62.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
3055[label="112.100.10.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
3094[label="204.211.81.4;s;19pkt 19fpkt", shape=diamond, color=yellow];
3402[label="204.217.25.203;s;6pkt 6fpkt", shape=diamond, color=yellow];
3478[label="146.160.192.24;s;82pkt 82fpkt", shape=diamond, color=yellow];
3495[label="18.241.32.39;s;3pkt 3fpkt", shape=diamond, color=yellow];
3758[label="18.241.38.12;s;33pkt 33fpkt", shape=diamond, color=yellow];
4015[label="170.123.249.85;d;16pkt 16fpkt", shape=hexagon, color=black];
4228[label="24.85.33.239;s;1pkt 1fpkt", shape=hexagon, color=black];
4495[label="214.125.67.64;d;225pkt 225fpkt", shape=hexagon, color=black];
4787[label="215.28.83.131;d;32pkt 32fpkt", shape=hexagon, color=black];
5072[label="219.233.3.74;s;3pkt 3fpkt", shape=hexagon, color=black];
5106[label="29.18.62.182;s;1pkt 1fpkt", shape=hexagon, color=black];
5621[label="37.169.150.2;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5646[label="101.48.70.3;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5677[label="204.211.81.4;57pkt 57fpkt", shape=pentagon, color=darkviolet];
5815[label="215.202.200.10;85pkt 85fpkt", shape=pentagon, color=darkviolet];
5851[label="18.241.38.12;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5878[label="101.48.70.13;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6013[label="96.134.33.20;83pkt 83fpkt", shape=pentagon, color=darkviolet];
6129[label="146.160.192.24;82pkt 82fpkt", shape=pentagon, color=darkviolet];
6432[label="18.241.32.39;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6604[label="101.48.70.47;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6704[label="101.48.70.52;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6733[label="208.144.111.53;45pkt 45fpkt", shape=pentagon, color=darkviolet];
6772[label="101.48.70.55;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7150[label="219.233.3.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7219[label="210.240.126.77;29pkt 29fpkt", shape=pentagon, color=darkviolet];
7277[label="215.66.90.80;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7533[label="194.128.191.91;498pkt 498fpkt", shape=pentagon, color=darkviolet];
7930[label="29.43.134.112;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7965[label="101.48.45.114;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8082[label="101.48.45.120;27pkt 27fpkt", shape=pentagon, color=darkviolet];
8102[label="101.48.45.121;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8438[label="101.48.35.138;59pkt 59fpkt", shape=pentagon, color=darkviolet];
8549[label="101.48.82.142;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8615[label="204.217.25.145;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8641[label="205.207.3.147;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8662[label="101.48.82.148;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8679[label="101.48.82.149;26pkt 26fpkt", shape=pentagon, color=darkviolet];
8699[label="101.48.82.150;23pkt 23fpkt", shape=pentagon, color=darkviolet];
8718[label="101.48.82.151;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8759[label="210.240.113.153;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8890[label="26.96.74.160;16pkt 16fpkt", shape=pentagon, color=darkviolet];
9021[label="101.48.82.165;31pkt 31fpkt", shape=pentagon, color=darkviolet];
9344[label="195.135.70.181;18pkt 18fpkt", shape=pentagon, color=darkviolet];
9439[label="101.48.82.186;21pkt 21fpkt", shape=pentagon, color=darkviolet];
9480[label="96.144.29.189;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9582[label="207.68.32.194;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9741[label="204.217.25.203;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10067[label="207.68.32.221;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10345[label="24.85.33.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10660[label="37.169.150.2;4pkt 4fpkt", shape=invtriangle, color=brown];
10668[label="101.48.70.3;7pkt 7fpkt", shape=invtriangle, color=brown];
10754[label="215.202.200.10;85pkt 85fpkt", shape=invtriangle, color=brown];
10932[label="146.160.192.24;81pkt 81fpkt", shape=invtriangle, color=brown];
11090[label="18.241.32.39;6pkt 6fpkt", shape=invtriangle, color=brown];
11183[label="101.48.70.47;17pkt 17fpkt", shape=invtriangle, color=brown];
11271[label="101.48.70.55;22pkt 22fpkt", shape=invtriangle, color=brown];
11471[label="219.233.3.74;3pkt 3fpkt", shape=invtriangle, color=brown];
11994[label="101.48.45.120;27pkt 27fpkt", shape=invtriangle, color=brown];
12267[label="101.48.82.142;21pkt 21fpkt", shape=invtriangle, color=brown];
12317[label="205.207.3.147;5pkt 5fpkt", shape=invtriangle, color=brown];
12330[label="101.48.82.148;17pkt 17fpkt", shape=invtriangle, color=brown];
12353[label="101.48.82.150;23pkt 23fpkt", shape=invtriangle, color=brown];
12466[label="26.96.74.160;15pkt 15fpkt", shape=invtriangle, color=brown];
12541[label="101.48.82.165;31pkt 31fpkt", shape=invtriangle, color=brown];
12731[label="195.135.70.181;18pkt 18fpkt", shape=invtriangle, color=brown];
12785[label="101.48.82.186;21pkt 21fpkt", shape=invtriangle, color=brown];
12808[label="96.144.29.189;10pkt 10fpkt", shape=invtriangle, color=brown];
12870[label="207.68.32.194;6pkt 6fpkt", shape=invtriangle, color=brown];
12955[label="204.217.25.203;6pkt 6fpkt", shape=invtriangle, color=brown];
13278[label="24.85.33.239;1pkt 1fpkt", shape=invtriangle, color=brown];
13455[label="37.169.150.2;4pkt 4fpkt", shape=invhouse, color=bisque];
13495[label="215.202.200.10;85pkt 85fpkt", shape=invhouse, color=bisque];
13649[label="18.241.32.39;7pkt 7fpkt", shape=invhouse, color=bisque];
13732[label="101.48.70.55;22pkt 22fpkt", shape=invhouse, color=bisque];
13816[label="219.233.3.74;3pkt 3fpkt", shape=invhouse, color=bisque];
13836[label="210.240.126.77;29pkt 29fpkt", shape=invhouse, color=bisque];
14059[label="101.48.45.120;27pkt 27fpkt", shape=invhouse, color=bisque];
14186[label="101.48.82.142;21pkt 21fpkt", shape=invhouse, color=bisque];
14223[label="101.48.82.150;23pkt 23fpkt", shape=invhouse, color=bisque];
14388[label="195.135.70.181;18pkt 18fpkt", shape=invhouse, color=bisque];
14411[label="101.48.82.186;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1548[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[64.9715%]&lt;BR/&gt;{194.128.191.91:*, *:5900}[20.2604%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.1212%)&lt;BR/&gt; 5900: (5.69736%)&lt;BR/&gt; 443: (4.35278%)&lt;BR/&gt; 8579: (1.5155%)&lt;BR/&gt; 19524: (0.467183%)&gt;];
}
328--330[label="1;1pkt 1fpkt"];
328--494[label="0.031746;2pkt 2fpkt"];
328--617[label="0.0508475;15pkt 15fpkt"];
328--634[label="0.0159453;7pkt 7fpkt"];
328--666[label="1;30pkt 30fpkt"];
328--668[label="0.0350877;2pkt 2fpkt"];
328--681[label="0.0194175;6pkt 6fpkt"];
328--887[label="0.0266667;8pkt 8fpkt"];
328--924[label="0.00460829;2pkt 2fpkt"];
328--980[label="0.0592255;26pkt 26fpkt"];
328--1114[label="0.0138889;1pkt 1fpkt"];
328--1242[label="0.5;4pkt 4fpkt"];
328--1535[label="0.0253165;2pkt 2fpkt"];
328--2024[label="0.183673;18pkt 18fpkt"];
328--2054[label="0.00724638;2pkt 2fpkt"];
328--3094[label="1;19pkt 19fpkt"];
328--3220[label="0.03125;1pkt 1fpkt"];
328--3495[label="0.666667;2pkt 2fpkt"];
328--3758[label="0.878788;29pkt 29fpkt"];
328--3874[label="0.012;3pkt 3fpkt"];
328--3958[label="0.0106383;1pkt 1fpkt"];
328--4309[label="0.0364465;16pkt 16fpkt"];
328--4495[label="1;225pkt 225fpkt"];
328--4610[label="0.109756;9pkt 9fpkt"];
328--5194[label="0.0350877;2pkt 2fpkt"];
328--5398[label="0.0273349;12pkt 12fpkt"];
328--5677[label="0.912281;52pkt 52fpkt"];
328--5815[label="0.0470588;4pkt 4fpkt"];
328--5851[label="0.90625;29pkt 29fpkt"];
328--6039[label="0.03125;1pkt 1fpkt"];
328--6386[label="0.0153846;1pkt 1fpkt"];
328--6432[label="0.285714;2pkt 2fpkt"];
328--7219[label="1;29pkt 29fpkt"];
328--8003[label="0.0357143;1pkt 1fpkt"];
328--8523[label="0.00990099;3pkt 3fpkt"];
328--8759[label="0.333333;1pkt 1fpkt"];
328--8890[label="0.25;4pkt 4fpkt"];
328--9262[label="0.0869565;2pkt 2fpkt"];
328--9365[label="0.0217391;1pkt 1fpkt"];
328--9443[label="0.00719424;2pkt 2fpkt"];
328--9588[label="0.0217391;1pkt 1fpkt"];
328--10179[label="0.0238095;2pkt 2fpkt"];
328--10754[label="0.0470588;4pkt 4fpkt"];
328--11069[label="0.0153846;1pkt 1fpkt"];
328--11090[label="0.333333;2pkt 2fpkt"];
328--11944[label="0.0357143;1pkt 1fpkt"];
328--12252[label="0.00990099;3pkt 3fpkt"];
328--12466[label="0.266667;4pkt 4fpkt"];
328--12745[label="0.0222222;1pkt 1fpkt"];
328--13495[label="0.0470588;4pkt 4fpkt"];
328--13638[label="0.015625;1pkt 1fpkt"];
328--13649[label="0.285714;2pkt 2fpkt"];
328--13836[label="1;29pkt 29fpkt"];
328--14180[label="0.00990099;3pkt 3fpkt"];
330--4495[label="1;1pkt 1fpkt"];
666--4495[label="1;30pkt 30fpkt"];
666--7219[label="1;29pkt 29fpkt"];
666--13836[label="1;29pkt 29fpkt"];
684--2497[label="1;5pkt 5fpkt"];
684--2738[label="0.142857;1pkt 1fpkt"];
684--3402[label="1;6pkt 6fpkt"];
684--3874[label="0.02;5pkt 5fpkt"];
684--5091[label="0.142857;1pkt 1fpkt"];
684--5646[label="0.428571;3pkt 3fpkt"];
684--5878[label="0.181818;2pkt 2fpkt"];
684--5930[label="0.05;1pkt 1fpkt"];
684--6403[label="0.0384615;1pkt 1fpkt"];
684--6604[label="0.470588;8pkt 8fpkt"];
684--6704[label="0.36;9pkt 9fpkt"];
684--6772[label="0.434783;10pkt 10fpkt"];
684--7306[label="0.0697674;3pkt 3fpkt"];
684--7415[label="0.0689655;2pkt 2fpkt"];
684--7930[label="0.666667;2pkt 2fpkt"];
684--7965[label="0.571429;8pkt 8fpkt"];
684--8082[label="0.555556;15pkt 15fpkt"];
684--8102[label="0.6;15pkt 15fpkt"];
684--8327[label="0.00649351;1pkt 1fpkt"];
684--8500[label="0.0075188;1pkt 1fpkt"];
684--8523[label="0.0165017;5pkt 5fpkt"];
684--8549[label="0.318182;7pkt 7fpkt"];
684--8615[label="1;4pkt 4fpkt"];
684--8641[label="1;6pkt 6fpkt"];
684--8662[label="0.555556;10pkt 10fpkt"];
684--8679[label="0.384615;10pkt 10fpkt"];
684--8699[label="0.391304;9pkt 9fpkt"];
684--8718[label="0.421053;8pkt 8fpkt"];
684--9021[label="0.419355;13pkt 13fpkt"];
684--9439[label="0.428571;9pkt 9fpkt"];
684--9588[label="0.0434783;2pkt 2fpkt"];
684--9646[label="0.0277778;1pkt 1fpkt"];
684--9741[label="1;5pkt 5fpkt"];
684--10083[label="0.166667;1pkt 1fpkt"];
684--10668[label="0.428571;3pkt 3fpkt"];
684--11183[label="0.470588;8pkt 8fpkt"];
684--11271[label="0.454545;10pkt 10fpkt"];
684--11994[label="0.555556;15pkt 15fpkt"];
684--12237[label="0.00757576;1pkt 1fpkt"];
684--12252[label="0.0165017;5pkt 5fpkt"];
684--12267[label="0.333333;7pkt 7fpkt"];
684--12317[label="1;5pkt 5fpkt"];
684--12330[label="0.588235;10pkt 10fpkt"];
684--12353[label="0.391304;9pkt 9fpkt"];
684--12541[label="0.419355;13pkt 13fpkt"];
684--12785[label="0.428571;9pkt 9fpkt"];
684--12908[label="0.0285714;1pkt 1fpkt"];
684--12955[label="1;6pkt 6fpkt"];
684--13140[label="0.166667;1pkt 1fpkt"];
684--13732[label="0.454545;10pkt 10fpkt"];
684--14059[label="0.555556;15pkt 15fpkt"];
684--14180[label="0.0165017;5pkt 5fpkt"];
684--14186[label="0.333333;7pkt 7fpkt"];
684--14223[label="0.391304;9pkt 9fpkt"];
684--14411[label="0.45;9pkt 9fpkt"];
732--806[label="0.666667;2pkt 2fpkt"];
732--2273[label="0.0643275;11pkt 11fpkt"];
732--3478[label="1;82pkt 82fpkt"];
732--3874[label="0.0045045;1pkt 1fpkt"];
732--5072[label="0.666667;2pkt 2fpkt"];
732--5878[label="0.0909091;1pkt 1fpkt"];
732--5986[label="0.0365854;3pkt 3fpkt"];
732--6129[label="1;82pkt 82fpkt"];
732--6604[label="0.0588235;1pkt 1fpkt"];
732--6704[label="0.28;7pkt 7fpkt"];
732--6772[label="0.173913;4pkt 4fpkt"];
732--7150[label="1;2pkt 2fpkt"];
732--7306[label="0.0232558;1pkt 1fpkt"];
732--7965[label="0.0714286;1pkt 1fpkt"];
732--8082[label="0.185185;5pkt 5fpkt"];
732--8102[label="0.12;3pkt 3fpkt"];
732--8438[label="0.169492;10pkt 10fpkt"];
732--8523[label="0.0045045;1pkt 1fpkt"];
732--8549[label="0.227273;5pkt 5fpkt"];
732--8662[label="0.222222;4pkt 4fpkt"];
732--8679[label="0.192308;5pkt 5fpkt"];
732--8699[label="0.26087;6pkt 6fpkt"];
732--8718[label="0.210526;4pkt 4fpkt"];
732--9021[label="0.193548;6pkt 6fpkt"];
732--9344[label="0.111111;2pkt 2fpkt"];
732--9439[label="0.285714;6pkt 6fpkt"];
732--10844[label="0.0365854;3pkt 3fpkt"];
732--10932[label="1;81pkt 81fpkt"];
732--11183[label="0.0588235;1pkt 1fpkt"];
732--11271[label="0.136364;3pkt 3fpkt"];
732--11471[label="0.666667;2pkt 2fpkt"];
732--11994[label="0.185185;5pkt 5fpkt"];
732--12252[label="0.0045045;1pkt 1fpkt"];
732--12267[label="0.190476;4pkt 4fpkt"];
732--12330[label="0.176471;3pkt 3fpkt"];
732--12353[label="0.26087;6pkt 6fpkt"];
732--12541[label="0.193548;6pkt 6fpkt"];
732--12731[label="0.111111;2pkt 2fpkt"];
732--12785[label="0.285714;6pkt 6fpkt"];
732--13538[label="0.037037;3pkt 3fpkt"];
732--13732[label="0.136364;3pkt 3fpkt"];
732--13816[label="0.666667;2pkt 2fpkt"];
732--14059[label="0.185185;5pkt 5fpkt"];
732--14180[label="0.0045045;1pkt 1fpkt"];
732--14186[label="0.190476;4pkt 4fpkt"];
732--14223[label="0.26087;6pkt 6fpkt"];
732--14388[label="0.111111;2pkt 2fpkt"];
732--14411[label="0.25;5pkt 5fpkt"];
748--749[label="1;4pkt 4fpkt"];
748--1019[label="0.333333;3pkt 3fpkt"];
748--2273[label="0.023622;3pkt 3fpkt"];
748--3874[label="0.0472441;6pkt 6fpkt"];
748--5621[label="1;4pkt 4fpkt"];
748--5646[label="0.142857;1pkt 1fpkt"];
748--5878[label="0.0909091;1pkt 1fpkt"];
748--6604[label="0.117647;2pkt 2fpkt"];
748--6704[label="0.04;1pkt 1fpkt"];
748--6772[label="0.130435;3pkt 3fpkt"];
748--7277[label="0.8;8pkt 8fpkt"];
748--8082[label="0.0740741;2pkt 2fpkt"];
748--8102[label="0.08;2pkt 2fpkt"];
748--8327[label="0.0708661;9pkt 9fpkt"];
748--8438[label="0.0847458;5pkt 5fpkt"];
748--8523[label="0.0472441;6pkt 6fpkt"];
748--8549[label="0.181818;4pkt 4fpkt"];
748--8662[label="0.0555556;1pkt 1fpkt"];
748--8679[label="0.0769231;2pkt 2fpkt"];
748--8699[label="0.130435;3pkt 3fpkt"];
748--8718[label="0.105263;2pkt 2fpkt"];
748--9021[label="0.258065;8pkt 8fpkt"];
748--9439[label="0.0952381;2pkt 2fpkt"];
748--9480[label="0.909091;10pkt 10fpkt"];
748--10660[label="1;4pkt 4fpkt"];
748--10668[label="0.142857;1pkt 1fpkt"];
748--11183[label="0.117647;2pkt 2fpkt"];
748--11271[label="0.136364;3pkt 3fpkt"];
748--11994[label="0.0740741;2pkt 2fpkt"];
748--12252[label="0.0472441;6pkt 6fpkt"];
748--12267[label="0.190476;4pkt 4fpkt"];
748--12330[label="0.0588235;1pkt 1fpkt"];
748--12353[label="0.130435;3pkt 3fpkt"];
748--12541[label="0.258065;8pkt 8fpkt"];
748--12785[label="0.0952381;2pkt 2fpkt"];
748--12808[label="1;10pkt 10fpkt"];
748--13455[label="1;4pkt 4fpkt"];
748--13732[label="0.136364;3pkt 3fpkt"];
748--14059[label="0.0740741;2pkt 2fpkt"];
748--14180[label="0.0472441;6pkt 6fpkt"];
748--14186[label="0.190476;4pkt 4fpkt"];
748--14223[label="0.130435;3pkt 3fpkt"];
748--14411[label="0.1;2pkt 2fpkt"];
749--5621[label="1;4pkt 4fpkt"];
749--10660[label="1;4pkt 4fpkt"];
749--13455[label="1;4pkt 4fpkt"];
806--1057[label="0.333333;1pkt 1fpkt"];
806--5072[label="1;3pkt 3fpkt"];
806--7150[label="1;2pkt 2fpkt"];
806--11471[label="1;3pkt 3fpkt"];
806--13816[label="1;3pkt 3fpkt"];
1019--1057[label="0.444444;4pkt 4fpkt"];
1057--2273[label="0.0793651;5pkt 5fpkt"];
1057--3874[label="0.031746;2pkt 2fpkt"];
1057--5072[label="0.333333;1pkt 1fpkt"];
1057--5878[label="0.0909091;1pkt 1fpkt"];
1057--6604[label="0.235294;4pkt 4fpkt"];
1057--8327[label="0.015873;1pkt 1fpkt"];
1057--8438[label="0.220339;13pkt 13fpkt"];
1057--8523[label="0.031746;2pkt 2fpkt"];
1057--9344[label="0.0555556;1pkt 1fpkt"];
1057--11183[label="0.235294;4pkt 4fpkt"];
1057--11471[label="0.333333;1pkt 1fpkt"];
1057--12252[label="0.031746;2pkt 2fpkt"];
1057--12731[label="0.0555556;1pkt 1fpkt"];
1057--13816[label="0.333333;1pkt 1fpkt"];
1057--14180[label="0.031746;2pkt 2fpkt"];
1057--14388[label="0.0555556;1pkt 1fpkt"];
1105--1242[label="0.25;2pkt 2fpkt"];
1105--1346[label="1;1pkt 1fpkt"];
1105--4015[label="1;16pkt 16fpkt"];
1105--4228[label="1;1pkt 1fpkt"];
1105--4309[label="0.0625;1pkt 1fpkt"];
1105--5398[label="0.0625;1pkt 1fpkt"];
1105--5815[label="0.125;2pkt 2fpkt"];
1105--8263[label="0.0625;1pkt 1fpkt"];
1105--9128[label="0.125;2pkt 2fpkt"];
1105--9252[label="0.0625;1pkt 1fpkt"];
1105--9453[label="0.0625;1pkt 1fpkt"];
1105--9973[label="0.0625;1pkt 1fpkt"];
1105--10345[label="1;1pkt 1fpkt"];
1105--10754[label="0.125;2pkt 2fpkt"];
1105--12101[label="0.0625;1pkt 1fpkt"];
1105--12609[label="0.125;2pkt 2fpkt"];
1105--12673[label="0.0625;1pkt 1fpkt"];
1105--12793[label="0.0625;1pkt 1fpkt"];
1105--13073[label="0.0625;1pkt 1fpkt"];
1105--13278[label="1;1pkt 1fpkt"];
1105--13495[label="0.125;2pkt 2fpkt"];
1105--14112[label="0.0625;1pkt 1fpkt"];
1105--14359[label="0.0625;1pkt 1fpkt"];
1105--14538[label="0.0625;1pkt 1fpkt"];
1242--4015[label="0.25;2pkt 2fpkt"];
1242--4041[label="0.25;2pkt 2fpkt"];
1242--4495[label="0.5;4pkt 4fpkt"];
1242--5815[label="1;8pkt 8fpkt"];
1242--10754[label="1;8pkt 8fpkt"];
1242--13495[label="1;8pkt 8fpkt"];
1346--4015[label="1;1pkt 1fpkt"];
1346--4228[label="1;1pkt 1fpkt"];
1346--10345[label="1;1pkt 1fpkt"];
1346--13278[label="1;1pkt 1fpkt"];
1634--5646[label="0.285714;2pkt 2fpkt"];
1634--5815[label="0.882353;75pkt 75fpkt"];
1634--5986[label="0.0121951;1pkt 1fpkt"];
1634--6604[label="0.0588235;1pkt 1fpkt"];
1634--6704[label="0.16;4pkt 4fpkt"];
1634--6772[label="0.0869565;2pkt 2fpkt"];
1634--6986[label="0.136364;3pkt 3fpkt"];
1634--7306[label="0.0465116;2pkt 2fpkt"];
1634--7415[label="0.137931;4pkt 4fpkt"];
1634--7965[label="0.214286;3pkt 3fpkt"];
1634--8082[label="0.0740741;2pkt 2fpkt"];
1634--8102[label="0.08;2pkt 2fpkt"];
1634--8309[label="0.130435;3pkt 3fpkt"];
1634--8327[label="0.025974;4pkt 4fpkt"];
1634--8549[label="0.0909091;2pkt 2fpkt"];
1634--8662[label="0.166667;3pkt 3fpkt"];
1634--8679[label="0.192308;5pkt 5fpkt"];
1634--8699[label="0.0869565;2pkt 2fpkt"];
1634--8718[label="0.210526;4pkt 4fpkt"];
1634--9021[label="0.0645161;2pkt 2fpkt"];
1634--9439[label="0.0952381;2pkt 2fpkt"];
1634--9582[label="1;7pkt 7fpkt"];
1634--9646[label="0.0277778;1pkt 1fpkt"];
1634--10067[label="1;22pkt 22fpkt"];
1634--10668[label="0.285714;2pkt 2fpkt"];
1634--10754[label="0.882353;75pkt 75fpkt"];
1634--10844[label="0.0121951;1pkt 1fpkt"];
1634--11183[label="0.0588235;1pkt 1fpkt"];
1634--11271[label="0.0909091;2pkt 2fpkt"];
1634--11387[label="0.142857;3pkt 3fpkt"];
1634--11994[label="0.0740741;2pkt 2fpkt"];
1634--12267[label="0.0952381;2pkt 2fpkt"];
1634--12330[label="0.176471;3pkt 3fpkt"];
1634--12353[label="0.0869565;2pkt 2fpkt"];
1634--12541[label="0.0645161;2pkt 2fpkt"];
1634--12785[label="0.0952381;2pkt 2fpkt"];
1634--12870[label="1;6pkt 6fpkt"];
1634--12908[label="0.0285714;1pkt 1fpkt"];
1634--13495[label="0.882353;75pkt 75fpkt"];
1634--13538[label="0.0123457;1pkt 1fpkt"];
1634--13732[label="0.0909091;2pkt 2fpkt"];
1634--13782[label="0.142857;3pkt 3fpkt"];
1634--14059[label="0.0740741;2pkt 2fpkt"];
1634--14186[label="0.0952381;2pkt 2fpkt"];
1634--14223[label="0.0869565;2pkt 2fpkt"];
1634--14411[label="0.1;2pkt 2fpkt"];
1640--1765[label="1;2pkt 2fpkt"];
1640--7930[label="0.333333;1pkt 1fpkt"];
1640--9128[label="0.019802;2pkt 2fpkt"];
1640--9252[label="0.0133333;1pkt 1fpkt"];
1640--9365[label="0.0217391;1pkt 1fpkt"];
1640--12609[label="0.019802;2pkt 2fpkt"];
1640--12673[label="0.0135135;1pkt 1fpkt"];
1640--12745[label="0.0222222;1pkt 1fpkt"];
1640--14359[label="0.0135135;1pkt 1fpkt"];
1640--14517[label="0.0169492;1pkt 1fpkt"];
2366--3874[label="0.0148515;3pkt 3fpkt"];
2366--5878[label="0.0909091;1pkt 1fpkt"];
2366--6013[label="0.457831;38pkt 38fpkt"];
2366--6704[label="0.08;2pkt 2fpkt"];
2366--6733[label="1;45pkt 45fpkt"];
2366--6772[label="0.0869565;2pkt 2fpkt"];
2366--6986[label="0.0909091;2pkt 2fpkt"];
2366--7306[label="0.116279;5pkt 5fpkt"];
2366--7415[label="0.0689655;2pkt 2fpkt"];
2366--7965[label="0.0714286;1pkt 1fpkt"];
2366--8082[label="0.037037;1pkt 1fpkt"];
2366--8102[label="0.08;2pkt 2fpkt"];
2366--8327[label="0.0584416;9pkt 9fpkt"];
2366--8438[label="0.118644;7pkt 7fpkt"];
2366--8500[label="0.0526316;7pkt 7fpkt"];
2366--8523[label="0.0148515;3pkt 3fpkt"];
2366--8679[label="0.0769231;2pkt 2fpkt"];
2366--8699[label="0.0434783;1pkt 1fpkt"];
2366--9021[label="0.0322581;1pkt 1fpkt"];
2366--9439[label="0.047619;1pkt 1fpkt"];
2366--9443[label="0.10396;21pkt 21fpkt"];
2366--11271[label="0.0909091;2pkt 2fpkt"];
2366--11387[label="0.0952381;2pkt 2fpkt"];
2366--11994[label="0.037037;1pkt 1fpkt"];
2366--12237[label="0.0530303;7pkt 7fpkt"];
2366--12252[label="0.0148515;3pkt 3fpkt"];
2366--12353[label="0.0434783;1pkt 1fpkt"];
2366--12541[label="0.0322581;1pkt 1fpkt"];
2366--12785[label="0.047619;1pkt 1fpkt"];
2366--13732[label="0.0909091;2pkt 2fpkt"];
2366--13782[label="0.0952381;2pkt 2fpkt"];
2366--14059[label="0.037037;1pkt 1fpkt"];
2366--14180[label="0.0148515;3pkt 3fpkt"];
2366--14223[label="0.0434783;1pkt 1fpkt"];
2366--14411[label="0.05;1pkt 1fpkt"];
2654--2800[label="1;1pkt 1fpkt"];
2654--3043[label="1;1pkt 1fpkt"];
2654--3055[label="1;1pkt 1fpkt"];
2654--4309[label="0.0294118;1pkt 1fpkt"];
2654--4389[label="0.0294118;1pkt 1fpkt"];
2654--4787[label="1;32pkt 32fpkt"];
2654--5106[label="1;1pkt 1fpkt"];
2654--5398[label="0.0294118;1pkt 1fpkt"];
2654--7533[label="0.0294118;1pkt 1fpkt"];
2654--8890[label="0.1875;3pkt 3fpkt"];
2654--9192[label="0.0294118;1pkt 1fpkt"];
2654--9344[label="0.0555556;1pkt 1fpkt"];
2654--10179[label="0.0294118;1pkt 1fpkt"];
2654--12466[label="0.2;3pkt 3fpkt"];
2654--12731[label="0.0555556;1pkt 1fpkt"];
2654--14388[label="0.0555556;1pkt 1fpkt"];
2800--4787[label="1;1pkt 1fpkt"];
3043--4787[label="1;1pkt 1fpkt"];
3043--5106[label="1;1pkt 1fpkt"];
3055--4787[label="1;1pkt 1fpkt"];
3094--5677[label="1;19pkt 19fpkt"];
3402--9741[label="1;5pkt 5fpkt"];
3402--12955[label="1;6pkt 6fpkt"];
3478--6129[label="1;82pkt 82fpkt"];
3478--10932[label="1;81pkt 81fpkt"];
3495--6432[label="1;3pkt 3fpkt"];
3495--11090[label="0.666667;2pkt 2fpkt"];
3495--13649[label="1;3pkt 3fpkt"];
3758--5851[label="1;32pkt 32fpkt"];
4015--4228[label="1;1pkt 1fpkt"];
4015--4309[label="0.0625;1pkt 1fpkt"];
4015--5398[label="0.0625;1pkt 1fpkt"];
4015--5815[label="0.125;2pkt 2fpkt"];
4015--8263[label="0.0625;1pkt 1fpkt"];
4015--9128[label="0.125;2pkt 2fpkt"];
4015--9252[label="0.0625;1pkt 1fpkt"];
4015--9453[label="0.0625;1pkt 1fpkt"];
4015--9973[label="0.0625;1pkt 1fpkt"];
4015--10345[label="1;1pkt 1fpkt"];
4015--10754[label="0.125;2pkt 2fpkt"];
4015--12101[label="0.0625;1pkt 1fpkt"];
4015--12609[label="0.125;2pkt 2fpkt"];
4015--12673[label="0.0625;1pkt 1fpkt"];
4015--12793[label="0.0625;1pkt 1fpkt"];
4015--13073[label="0.0625;1pkt 1fpkt"];
4015--13278[label="1;1pkt 1fpkt"];
4015--13495[label="0.125;2pkt 2fpkt"];
4015--14112[label="0.0625;1pkt 1fpkt"];
4015--14359[label="0.0625;1pkt 1fpkt"];
4015--14538[label="0.0625;1pkt 1fpkt"];
4228--10345[label="1;1pkt 1fpkt"];
4228--13278[label="1;1pkt 1fpkt"];
4495--4610[label="0.0243902;2pkt 2fpkt"];
4495--5194[label="0.0350877;2pkt 2fpkt"];
4495--5398[label="0.0533333;12pkt 12fpkt"];
4495--5677[label="0.403509;23pkt 23fpkt"];
4495--5815[label="0.0470588;4pkt 4fpkt"];
4495--6039[label="0.03125;1pkt 1fpkt"];
4495--6386[label="0.0153846;1pkt 1fpkt"];
4495--7219[label="1;29pkt 29fpkt"];
4495--8003[label="0.0357143;1pkt 1fpkt"];
4495--8523[label="0.0133333;3pkt 3fpkt"];
4495--8759[label="0.333333;1pkt 1fpkt"];
4495--8890[label="0.0625;1pkt 1fpkt"];
4495--9365[label="0.0217391;1pkt 1fpkt"];
4495--9588[label="0.0217391;1pkt 1fpkt"];
4495--10754[label="0.0470588;4pkt 4fpkt"];
4495--11069[label="0.0153846;1pkt 1fpkt"];
4495--11944[label="0.0357143;1pkt 1fpkt"];
4495--12252[label="0.0133333;3pkt 3fpkt"];
4495--12466[label="0.0666667;1pkt 1fpkt"];
4495--12745[label="0.0222222;1pkt 1fpkt"];
4495--13495[label="0.0470588;4pkt 4fpkt"];
4495--13638[label="0.015625;1pkt 1fpkt"];
4495--13836[label="1;29pkt 29fpkt"];
4495--14180[label="0.0133333;3pkt 3fpkt"];
4787--5106[label="1;1pkt 1fpkt"];
4787--5398[label="0.03125;1pkt 1fpkt"];
4787--7533[label="0.03125;1pkt 1fpkt"];
4787--8890[label="0.1875;3pkt 3fpkt"];
4787--9192[label="0.03125;1pkt 1fpkt"];
4787--9344[label="0.0555556;1pkt 1fpkt"];
4787--10179[label="0.03125;1pkt 1fpkt"];
4787--12466[label="0.2;3pkt 3fpkt"];
4787--12731[label="0.0555556;1pkt 1fpkt"];
4787--14388[label="0.0555556;1pkt 1fpkt"];
5072--7150[label="1;2pkt 2fpkt"];
5072--11471[label="1;3pkt 3fpkt"];
5072--13816[label="1;3pkt 3fpkt"];
5621--10660[label="1;4pkt 4fpkt"];
5621--13455[label="1;4pkt 4fpkt"];
5646--10668[label="1;7pkt 7fpkt"];
5815--10754[label="1;85pkt 85fpkt"];
5815--13495[label="1;85pkt 85fpkt"];
6129--10932[label="1;81pkt 81fpkt"];
6432--11090[label="1;6pkt 6fpkt"];
6432--13649[label="1;7pkt 7fpkt"];
6604--11183[label="1;17pkt 17fpkt"];
6772--11271[label="1;22pkt 22fpkt"];
6772--13732[label="1;22pkt 22fpkt"];
7150--11471[label="1;2pkt 2fpkt"];
7150--13816[label="1;2pkt 2fpkt"];
7219--13836[label="0.965517;28pkt 28fpkt"];
8082--11994[label="1;27pkt 27fpkt"];
8082--14059[label="1;27pkt 27fpkt"];
8549--12267[label="1;21pkt 21fpkt"];
8549--14186[label="1;21pkt 21fpkt"];
8641--12317[label="1;5pkt 5fpkt"];
8662--12330[label="1;17pkt 17fpkt"];
8699--12353[label="1;23pkt 23fpkt"];
8699--14223[label="1;23pkt 23fpkt"];
8890--12466[label="1;15pkt 15fpkt"];
9021--12541[label="1;31pkt 31fpkt"];
9344--12731[label="1;18pkt 18fpkt"];
9344--14388[label="1;18pkt 18fpkt"];
9439--12785[label="1;21pkt 21fpkt"];
9439--14411[label="1;20pkt 20fpkt"];
9480--12808[label="1;10pkt 10fpkt"];
9582--12870[label="1;6pkt 6fpkt"];
9741--12955[label="1;5pkt 5fpkt"];
10345--13278[label="1;1pkt 1fpkt"];
10660--13455[label="1;4pkt 4fpkt"];
10754--13495[label="1;85pkt 85fpkt"];
11090--13649[label="1;6pkt 6fpkt"];
11271--13732[label="1;22pkt 22fpkt"];
11471--13816[label="1;3pkt 3fpkt"];
11994--14059[label="1;27pkt 27fpkt"];
12267--14186[label="1;21pkt 21fpkt"];
12353--14223[label="1;23pkt 23fpkt"];
12731--14388[label="1;18pkt 18fpkt"];
12785--14411[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_port="5900" src_ip="194.128.191.91"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.187.40.194"/>
    </slice>
    <from sec="1172898507" usec="0"/>
    <to sec="1172898536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.102.0.195"/>
    </slice>
    <from sec="1172898135" usec="0"/>
    <to sec="1172898191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.47.109.195"/>
    </slice>
    <from sec="1172898498" usec="0"/>
    <to sec="1172898593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.82.213.195"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.139.164.197"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1554{
style=filled;
color=gray75;
9659[label="26.29.8.198;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12912[label="26.29.8.198;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1554[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.29.8.198:*, 172.169.48.200:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65455: (4.16667%)&lt;BR/&gt; 63012: (4.16667%)&lt;BR/&gt; 62021: (4.16667%)&lt;BR/&gt; 58449: (4.16667%)&gt;];
}
9659--12912[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="172.169.48.200" dst_port="80" src_ip="26.29.8.198"/>
    </slice>
    <from sec="1172898053" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.172.8.199"/>
    </slice>
    <from sec="1172898117" usec="0"/>
    <to sec="1172898129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.68.90.199"/>
    </slice>
    <from sec="1172898023" usec="0"/>
    <to sec="1172898038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1558{
style=filled;
color=gray75;
9691[label="30.65.243.199;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12929[label="30.65.243.199;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1558[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.65.243.199:80, 215.28.81.57:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59588: (4.54545%)&lt;BR/&gt; 59513: (4.54545%)&lt;BR/&gt; 59512: (4.54545%)&lt;BR/&gt; 59511: (4.54545%)&gt;];
}
9691--12929[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.57" src_ip="30.65.243.199" src_port="80"/>
    </slice>
    <from sec="1172898876" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1559{
style=filled;
color=gray75;
9703[label="96.52.110.200;473pkt 473fpkt", shape=pentagon, color=darkviolet];
12937[label="96.52.110.200;473pkt 473fpkt", shape=invtriangle, color=brown];
stat1559[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.52.110.200:*, 182.130.108.32:161}[50.74%]&lt;BR/&gt;{96.52.110.200:*, 182.130.108.33:161}[30.444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 161: (48.5201%)&lt;BR/&gt; 137: (0.634249%)&lt;BR/&gt; 80: (0.422833%)&lt;BR/&gt; 34943: (0.211416%)&lt;BR/&gt; 445: (0.211416%)&gt;];
}
9703--12937[label="1;473pkt 473fpkt"];
</description>
    <slice>
      <filter dst_ip="182.130.108.32" dst_port="161" src_ip="96.52.110.200"/>
      <filter dst_ip="182.130.108.33" dst_port="161" src_ip="96.52.110.200"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.124.136.200"/>
    </slice>
    <from sec="1172898162" usec="0"/>
    <to sec="1172898182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.79.141.200"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.144.21.201"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.47.34.202"/>
    </slice>
    <from sec="1172898721" usec="0"/>
    <to sec="1172898737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.184.191.202"/>
    </slice>
    <from sec="1172898303" usec="0"/>
    <to sec="1172898852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.21.212.202"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.66.133.203"/>
    </slice>
    <from sec="1172898435" usec="0"/>
    <to sec="1172898450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1568{
style=filled;
color=gray75;
9753[label="204.215.2.204;30pkt 30fpkt", shape=pentagon, color=darkviolet];
12962[label="204.215.2.204;29pkt 29fpkt", shape=invtriangle, color=brown];
14488[label="204.215.2.204;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1568[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.215.2.204:80, 153.21.9.160:*}[50%]&lt;BR/&gt;{204.215.2.204:80, 172.104.241.93:*}[26.6667%]&lt;BR/&gt;{204.215.2.204:80, 153.21.49.214:*}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37518: (1.68539%)&lt;BR/&gt; 37514: (1.68539%)&lt;BR/&gt; 37512: (1.68539%)&lt;BR/&gt; 37509: (1.68539%)&gt;];
}
9753--12962[label="1;29pkt 29fpkt"];
9753--14488[label="1;30pkt 30fpkt"];
12962--14488[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.9.160" src_ip="204.215.2.204" src_port="80"/>
      <filter dst_ip="172.104.241.93" src_ip="204.215.2.204" src_port="80"/>
      <filter dst_ip="153.21.49.214" src_ip="204.215.2.204" src_port="80"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1569{
style=filled;
color=gray75;
9756[label="28.40.12.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12965[label="28.40.12.204;1pkt 1fpkt", shape=invtriangle, color=brown];
14491[label="28.40.12.204;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1569[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.40.12.204:3432, 214.125.67.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3432: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9756--12965[label="1;1pkt 1fpkt"];
9756--14491[label="1;1pkt 1fpkt"];
12965--14491[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.55" dst_port="80" src_ip="28.40.12.204" src_port="3432"/>
    </slice>
    <from sec="1172898890" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.167.26.204"/>
    </slice>
    <from sec="1172898572" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.33.204"/>
    </slice>
    <from sec="1172898747" usec="0"/>
    <to sec="1172898751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1573{
style=filled;
color=gray75;
9761[label="201.80.41.204;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12969[label="201.80.41.204;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1573[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.80.41.204:80, 215.28.81.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54650: (8.33333%)&lt;BR/&gt; 54648: (8.33333%)&lt;BR/&gt; 54610: (8.33333%)&lt;BR/&gt; 54609: (8.33333%)&gt;];
}
9761--12969[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.73" src_ip="201.80.41.204" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.44.67.204"/>
    </slice>
    <from sec="1172898376" usec="0"/>
    <to sec="1172898391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1575{
style=filled;
color=gray75;
9774[label="205.234.193.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12975[label="205.234.193.204;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1575[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.234.193.204:80, 215.28.81.72:58585}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58585: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9774--12975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.72" dst_port="58585" src_ip="205.234.193.204" src_port="80"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.10.24.205"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.92.40.205"/>
    </slice>
    <from sec="1172898749" usec="0"/>
    <to sec="1172898765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.59.98.205"/>
    </slice>
    <from sec="1172898209" usec="0"/>
    <to sec="1172898350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.102.7.206"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1580{
style=filled;
color=gray75;
9801[label="153.21.8.206;79pkt 79fpkt", shape=pentagon, color=darkviolet];
12989[label="153.21.8.206;79pkt 79fpkt", shape=invtriangle, color=brown];
stat1580[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.8.206:*, 194.149.141.27:80}[34.1772%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3351: (0.632911%)&lt;BR/&gt; 3348: (0.632911%)&lt;BR/&gt; 3336: (0.632911%)&lt;BR/&gt; 3303: (0.632911%)&gt;];
}
9801--12989[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="194.149.141.27" dst_port="80" src_ip="153.21.8.206"/>
    </slice>
    <from sec="1172898092" usec="0"/>
    <to sec="1172898603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.85.33.206"/>
    </slice>
    <from sec="1172898080" usec="0"/>
    <to sec="1172898330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.46.85.206"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.172.25.207"/>
    </slice>
    <from sec="1172898418" usec="0"/>
    <to sec="1172898432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.133.140.207"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.64.105.208"/>
    </slice>
    <from sec="1172898590" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.232.54.209"/>
    </slice>
    <from sec="1172898470" usec="0"/>
    <to sec="1172898485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.169.162.209"/>
    </slice>
    <from sec="1172898527" usec="0"/>
    <to sec="1172898553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.145.227.209"/>
    </slice>
    <from sec="1172898440" usec="0"/>
    <to sec="1172898463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1589{
style=filled;
color=gray75;
2231[label="215.28.110.181;s;114pkt 114fpkt", shape=diamond, color=yellow];
2245[label="170.123.166.20;s;349pkt 349fpkt", shape=diamond, color=yellow];
2577[label="214.125.74.11;s;267pkt 267fpkt", shape=diamond, color=yellow];
2707[label="37.169.148.112;d;22pkt 22fpkt", shape=diamond, color=yellow];
3620[label="172.104.96.163;s;132pkt 132fpkt", shape=diamond, color=yellow];
3699[label="207.138.143.213;d;44pkt 44fpkt", shape=diamond, color=yellow];
4971[label="215.28.110.181;s;110pkt 110fpkt", shape=hexagon, color=black];
5148[label="214.125.74.11;s;267pkt 267fpkt", shape=hexagon, color=black];
5173[label="170.123.166.20;s;350pkt 350fpkt", shape=hexagon, color=black];
5230[label="172.104.96.163;s;132pkt 132fpkt", shape=hexagon, color=black];
5829[label="214.125.74.11;279pkt 279fpkt", shape=pentagon, color=darkviolet];
6029[label="170.123.166.20;360pkt 360fpkt", shape=pentagon, color=darkviolet];
6930[label="172.179.2.64;84pkt 84fpkt", shape=pentagon, color=darkviolet];
7469[label="215.28.82.88;113pkt 113fpkt", shape=pentagon, color=darkviolet];
7547[label="172.104.234.92;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7590[label="172.179.102.95;29pkt 29fpkt", shape=pentagon, color=darkviolet];
8968[label="172.104.96.163;137pkt 137fpkt", shape=pentagon, color=darkviolet];
9348[label="215.28.110.181;117pkt 117fpkt", shape=pentagon, color=darkviolet];
10117[label="185.196.28.224;169pkt 169fpkt", shape=pentagon, color=darkviolet];
10758[label="214.125.74.11;279pkt 279fpkt", shape=invtriangle, color=brown];
10871[label="170.123.166.20;360pkt 360fpkt", shape=invtriangle, color=brown];
11354[label="172.179.2.64;84pkt 84fpkt", shape=invtriangle, color=brown];
11642[label="215.28.82.88;113pkt 113fpkt", shape=invtriangle, color=brown];
11677[label="172.104.234.92;10pkt 10fpkt", shape=invtriangle, color=brown];
11704[label="172.179.102.95;29pkt 29fpkt", shape=invtriangle, color=brown];
12734[label="215.28.110.181;116pkt 116fpkt", shape=invtriangle, color=brown];
13550[label="170.123.166.20;360pkt 360fpkt", shape=invhouse, color=bisque];
13901[label="215.28.82.88;112pkt 112fpkt", shape=invhouse, color=bisque];
13919[label="172.104.234.92;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1589[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.166.20:*, *:*}[26.8801%]&lt;BR/&gt;{214.125.74.11:56220, *:53}[20.6999%]&lt;BR/&gt;{*:53, *:*}[20.2532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.0092%)&lt;BR/&gt; 56491: (13.778%)&lt;BR/&gt; 56220: (11.8583%)&lt;BR/&gt; 4172: (3.42255%)&lt;BR/&gt; 35736: (3.19219%)&gt;];
}
2231--2242[label="0.0188679;1pkt 1fpkt"];
2231--2275[label="0.0169492;1pkt 1fpkt"];
2231--2306[label="0.00877193;1pkt 1fpkt"];
2231--2572[label="0.00877193;1pkt 1fpkt"];
2231--2618[label="0.00877193;1pkt 1fpkt"];
2231--3183[label="0.00877193;1pkt 1fpkt"];
2231--4030[label="0.0123457;1pkt 1fpkt"];
2231--4359[label="0.00877193;1pkt 1fpkt"];
2231--4760[label="0.00877193;1pkt 1fpkt"];
2231--4971[label="1;110pkt 110fpkt"];
2231--5185[label="0.0169492;1pkt 1fpkt"];
2231--5451[label="0.00877193;1pkt 1fpkt"];
2231--5485[label="0.201754;23pkt 23fpkt"];
2231--5514[label="0.201754;23pkt 23fpkt"];
2231--5541[label="0.201754;23pkt 23fpkt"];
2231--9348[label="0.991228;113pkt 113fpkt"];
2231--12734[label="0.982456;112pkt 112fpkt"];
2245--2275[label="0.0169492;1pkt 1fpkt"];
2245--2306[label="0.00636943;1pkt 1fpkt"];
2245--2346[label="0.00983607;3pkt 3fpkt"];
2245--2572[label="0.00649351;1pkt 1fpkt"];
2245--2601[label="0.00840336;1pkt 1fpkt"];
2245--2618[label="0.00675676;1pkt 1fpkt"];
2245--2874[label="0.0117647;1pkt 1fpkt"];
2245--2891[label="0.00729927;1pkt 1fpkt"];
2245--3183[label="0.0078125;1pkt 1fpkt"];
2245--3215[label="0.00892857;1pkt 1fpkt"];
2245--3239[label="0.0128205;1pkt 1fpkt"];
2245--3699[label="0.0227273;1pkt 1fpkt"];
2245--4030[label="0.0123457;1pkt 1fpkt"];
2245--4359[label="0.00704225;1pkt 1fpkt"];
2245--4398[label="0.00452489;1pkt 1fpkt"];
2245--4731[label="0.0111111;1pkt 1fpkt"];
2245--4760[label="0.00636943;1pkt 1fpkt"];
2245--4961[label="0.00286533;1pkt 1fpkt"];
2245--5173[label="1;349pkt 349fpkt"];
2245--5185[label="0.0169492;1pkt 1fpkt"];
2245--5186[label="0.0117647;1pkt 1fpkt"];
2245--5451[label="0.00704225;1pkt 1fpkt"];
2245--5485[label="0.186246;65pkt 65fpkt"];
2245--5514[label="0.186246;65pkt 65fpkt"];
2245--5541[label="0.186246;65pkt 65fpkt"];
2245--6029[label="1;349pkt 349fpkt"];
2245--10871[label="1;349pkt 349fpkt"];
2245--13550[label="1;349pkt 349fpkt"];
2577--2618[label="0.00675676;1pkt 1fpkt"];
2577--2874[label="0.0117647;1pkt 1fpkt"];
2577--2891[label="0.00729927;1pkt 1fpkt"];
2577--3183[label="0.0078125;1pkt 1fpkt"];
2577--3239[label="0.0128205;1pkt 1fpkt"];
2577--3699[label="0.0227273;1pkt 1fpkt"];
2577--4030[label="0.0123457;1pkt 1fpkt"];
2577--4101[label="0.0232558;1pkt 1fpkt"];
2577--4359[label="0.00704225;1pkt 1fpkt"];
2577--4398[label="0.00452489;1pkt 1fpkt"];
2577--4760[label="0.00636943;1pkt 1fpkt"];
2577--5148[label="1;267pkt 267fpkt"];
2577--5185[label="0.0169492;1pkt 1fpkt"];
2577--5186[label="0.0117647;1pkt 1fpkt"];
2577--5389[label="0.0238095;1pkt 1fpkt"];
2577--5451[label="0.00704225;1pkt 1fpkt"];
2577--5485[label="0.191011;51pkt 51fpkt"];
2577--5514[label="0.191011;51pkt 51fpkt"];
2577--5541[label="0.191011;51pkt 51fpkt"];
2577--5829[label="0.992509;265pkt 265fpkt"];
2577--10758[label="0.992509;265pkt 265fpkt"];
2707--3620[label="0.0454545;1pkt 1fpkt"];
2707--4042[label="0.0909091;2pkt 2fpkt"];
2707--5230[label="0.0454545;1pkt 1fpkt"];
2707--5470[label="0.181818;4pkt 4fpkt"];
2707--5500[label="0.181818;4pkt 4fpkt"];
2707--5527[label="0.181818;4pkt 4fpkt"];
2707--6717[label="0.0555556;1pkt 1fpkt"];
2707--7547[label="1;10pkt 10fpkt"];
2707--8968[label="0.0454545;1pkt 1fpkt"];
2707--9877[label="0.166667;2pkt 2fpkt"];
2707--11239[label="0.0555556;1pkt 1fpkt"];
2707--11677[label="1;10pkt 10fpkt"];
2707--13029[label="0.166667;2pkt 2fpkt"];
2707--13715[label="0.0555556;1pkt 1fpkt"];
2707--13919[label="1;10pkt 10fpkt"];
3620--3699[label="0.0227273;1pkt 1fpkt"];
3620--4030[label="0.0123457;1pkt 1fpkt"];
3620--4359[label="0.00757576;1pkt 1fpkt"];
3620--4731[label="0.0111111;1pkt 1fpkt"];
3620--4760[label="0.00757576;1pkt 1fpkt"];
3620--5185[label="0.0169492;1pkt 1fpkt"];
3620--5186[label="0.0117647;1pkt 1fpkt"];
3620--5230[label="1;132pkt 132fpkt"];
3620--5451[label="0.00757576;1pkt 1fpkt"];
3620--5485[label="0.143939;19pkt 19fpkt"];
3620--5514[label="0.143939;19pkt 19fpkt"];
3620--5541[label="0.143939;19pkt 19fpkt"];
3620--8968[label="1;132pkt 132fpkt"];
3699--4260[label="0.0227273;1pkt 1fpkt"];
3699--4307[label="0.0227273;1pkt 1fpkt"];
3699--4793[label="0.0227273;1pkt 1fpkt"];
3699--5148[label="0.0227273;1pkt 1fpkt"];
3699--5173[label="0.0227273;1pkt 1fpkt"];
3699--5230[label="0.0227273;1pkt 1fpkt"];
3699--5485[label="0.0909091;4pkt 4fpkt"];
3699--5514[label="0.0909091;4pkt 4fpkt"];
3699--5541[label="0.0909091;4pkt 4fpkt"];
3699--5829[label="0.0227273;1pkt 1fpkt"];
3699--6029[label="0.0227273;1pkt 1fpkt"];
3699--6120[label="0.0277778;1pkt 1fpkt"];
3699--6138[label="0.0227273;1pkt 1fpkt"];
3699--6547[label="0.0227273;1pkt 1fpkt"];
3699--6930[label="0.0227273;1pkt 1fpkt"];
3699--7216[label="0.0227273;1pkt 1fpkt"];
3699--7469[label="0.0227273;1pkt 1fpkt"];
3699--7590[label="0.0344828;1pkt 1fpkt"];
3699--7938[label="0.0227273;1pkt 1fpkt"];
3699--8950[label="0.0227273;1pkt 1fpkt"];
3699--8968[label="0.0227273;1pkt 1fpkt"];
3699--10117[label="0.181818;8pkt 8fpkt"];
3699--10399[label="0.0227273;1pkt 1fpkt"];
3699--10504[label="0.0227273;1pkt 1fpkt"];
3699--10758[label="0.0227273;1pkt 1fpkt"];
3699--10871[label="0.0227273;1pkt 1fpkt"];
3699--11354[label="0.0227273;1pkt 1fpkt"];
3699--11508[label="0.0227273;1pkt 1fpkt"];
3699--11642[label="0.0227273;1pkt 1fpkt"];
3699--11704[label="0.0344828;1pkt 1fpkt"];
3699--11907[label="0.0227273;1pkt 1fpkt"];
3699--13312[label="0.0227273;1pkt 1fpkt"];
3699--13550[label="0.0227273;1pkt 1fpkt"];
3699--13851[label="0.0227273;1pkt 1fpkt"];
3699--13901[label="0.0227273;1pkt 1fpkt"];
3699--14019[label="0.0227273;1pkt 1fpkt"];
4971--5185[label="0.0169492;1pkt 1fpkt"];
4971--5451[label="0.00909091;1pkt 1fpkt"];
4971--5485[label="0.209091;23pkt 23fpkt"];
4971--5514[label="0.209091;23pkt 23fpkt"];
4971--5541[label="0.209091;23pkt 23fpkt"];
4971--9348[label="0.990909;109pkt 109fpkt"];
4971--12734[label="0.981818;108pkt 108fpkt"];
5148--5185[label="0.0169492;1pkt 1fpkt"];
5148--5186[label="0.0117647;1pkt 1fpkt"];
5148--5389[label="0.0238095;1pkt 1fpkt"];
5148--5451[label="0.00704225;1pkt 1fpkt"];
5148--5485[label="0.191011;51pkt 51fpkt"];
5148--5514[label="0.191011;51pkt 51fpkt"];
5148--5541[label="0.191011;51pkt 51fpkt"];
5148--5829[label="0.992509;265pkt 265fpkt"];
5148--10758[label="0.992509;265pkt 265fpkt"];
5173--5185[label="0.0169492;1pkt 1fpkt"];
5173--5186[label="0.0117647;1pkt 1fpkt"];
5173--5451[label="0.00704225;1pkt 1fpkt"];
5173--5485[label="0.185714;65pkt 65fpkt"];
5173--5514[label="0.185714;65pkt 65fpkt"];
5173--5541[label="0.185714;65pkt 65fpkt"];
5173--6029[label="0.997143;349pkt 349fpkt"];
5173--10871[label="0.997143;349pkt 349fpkt"];
5173--13550[label="0.997143;349pkt 349fpkt"];
5230--5451[label="0.00757576;1pkt 1fpkt"];
5230--5485[label="0.143939;19pkt 19fpkt"];
5230--5514[label="0.143939;19pkt 19fpkt"];
5230--5541[label="0.143939;19pkt 19fpkt"];
5230--8968[label="1;132pkt 132fpkt"];
5829--10758[label="1;279pkt 279fpkt"];
6029--10871[label="1;360pkt 360fpkt"];
6029--13550[label="1;360pkt 360fpkt"];
6930--11354[label="1;84pkt 84fpkt"];
7469--11642[label="1;113pkt 113fpkt"];
7469--13901[label="1;112pkt 112fpkt"];
7547--11677[label="1;10pkt 10fpkt"];
7547--13919[label="1;10pkt 10fpkt"];
7590--11704[label="1;29pkt 29fpkt"];
9348--12734[label="1;116pkt 116fpkt"];
10871--13550[label="1;360pkt 360fpkt"];
11642--13901[label="1;112pkt 112fpkt"];
11677--13919[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="170.123.166.20"/>
      <filter src_port="53"/>
      <filter dst_port="53" src_ip="214.125.74.11" src_port="56220"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1590{
style=filled;
color=gray75;
9887[label="172.179.128.210;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13034[label="172.179.128.210;2pkt 2fpkt", shape=invtriangle, color=brown];
14525[label="172.179.128.210;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1590[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.128.210:80, 193.163.231.84:1323}[33.3333%]&lt;BR/&gt;{172.179.128.210:80, 207.223.165.113:2076}[33.3333%]&lt;BR/&gt;{172.179.128.210:80, 193.162.232.127:58887}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2076: (21.4286%)&lt;BR/&gt; 1323: (21.4286%)&lt;BR/&gt; 58887: (7.14286%)&gt;];
}
9887--13034[label="1;2pkt 2fpkt"];
9887--14525[label="1;2pkt 2fpkt"];
13034--14525[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.162.232.127" dst_port="58887" src_ip="172.179.128.210" src_port="80"/>
      <filter dst_ip="207.223.165.113" dst_port="2076" src_ip="172.179.128.210" src_port="80"/>
      <filter dst_ip="193.163.231.84" dst_port="1323" src_ip="172.179.128.210" src_port="80"/>
    </slice>
    <from sec="1172898229" usec="0"/>
    <to sec="1172898874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.99.73.211"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.24.5.212"/>
    </slice>
    <from sec="1172898174" usec="0"/>
    <to sec="1172898187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.133.155.213"/>
    </slice>
    <from sec="1172898454" usec="0"/>
    <to sec="1172898468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.66.14.214"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.24.43.214"/>
    </slice>
    <from sec="1172898709" usec="0"/>
    <to sec="1172898722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1596{
style=filled;
color=gray75;
9966[label="206.42.130.215;155pkt 155fpkt", shape=pentagon, color=darkviolet];
13069[label="206.42.130.215;154pkt 154fpkt", shape=invtriangle, color=brown];
stat1596[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.42.130.215:80, 170.123.63.131:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55149: (0.323625%)&lt;BR/&gt; 55148: (0.323625%)&lt;BR/&gt; 55147: (0.323625%)&lt;BR/&gt; 55146: (0.323625%)&gt;];
}
9966--13069[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.63.131" src_ip="206.42.130.215" src_port="80"/>
    </slice>
    <from sec="1172898877" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.147.170.215"/>
    </slice>
    <from sec="1172898809" usec="0"/>
    <to sec="1172898823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.79.28.217"/>
    </slice>
    <from sec="1172898869" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.49.39.217"/>
    </slice>
    <from sec="1172898517" usec="0"/>
    <to sec="1172898535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1600{
style=filled;
color=gray75;
9997[label="37.197.64.217;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13091[label="37.197.64.217;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1600[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.197.64.217:*, 170.123.196.50:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1183: (5%)&lt;BR/&gt; 1182: (5%)&lt;BR/&gt; 1181: (5%)&lt;BR/&gt; 1180: (5%)&gt;];
}
9997--13091[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.196.50" dst_port="80" src_ip="37.197.64.217"/>
    </slice>
    <from sec="1172898698" usec="0"/>
    <to sec="1172898723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.31.10.218"/>
    </slice>
    <from sec="1172898876" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1602{
style=filled;
color=gray75;
10012[label="172.169.41.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13102[label="172.169.41.218;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1602[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.41.218:25, 1.88.174.55:3613}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3613: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
10012--13102[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.88.174.55" dst_port="3613" src_ip="172.169.41.218" src_port="25"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.35.139.218"/>
    </slice>
    <from sec="1172898592" usec="0"/>
    <to sec="1172898628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.139.147.218"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.37.198.218"/>
    </slice>
    <from sec="1172898306" usec="0"/>
    <to sec="1172898326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.77.221.218"/>
    </slice>
    <from sec="1172898334" usec="0"/>
    <to sec="1172898564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.166.24.219"/>
    </slice>
    <from sec="1172898721" usec="0"/>
    <to sec="1172898735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.251.26.219"/>
    </slice>
    <from sec="1172898575" usec="0"/>
    <to sec="1172898599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1609{
style=filled;
color=gray75;
10037[label="214.216.104.219;111pkt 111fpkt", shape=pentagon, color=darkviolet];
13117[label="214.216.104.219;111pkt 111fpkt", shape=invtriangle, color=brown];
stat1609[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.104.219:2613, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2613: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
10037--13117[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.216.104.219" src_port="2613"/>
    </slice>
    <from sec="1172898806" usec="0"/>
    <to sec="1172898826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1610{
style=filled;
color=gray75;
10041[label="170.123.172.219;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13120[label="170.123.172.219;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1610[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.172.219:80, 26.29.8.13:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64831: (5.55556%)&lt;BR/&gt; 60813: (5.55556%)&lt;BR/&gt; 60536: (5.55556%)&lt;BR/&gt; 52082: (5.55556%)&gt;];
}
10041--13120[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="26.29.8.13" src_ip="170.123.172.219" src_port="80"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.77.144.220"/>
    </slice>
    <from sec="1172898249" usec="0"/>
    <to sec="1172898260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51519,2.69589,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1613{
style=filled;
color=gray75;
790[label="170.123.228.87;d;78pkt 78fpkt", shape=diamond, color=yellow];
836[label="207.24.0.40;s;67pkt 67fpkt", shape=diamond, color=yellow];
4223[label="207.24.0.40;s;67pkt 67fpkt", shape=hexagon, color=black];
4811[label="170.123.228.87;d;78pkt 78fpkt", shape=hexagon, color=black];
6452[label="207.24.0.40;68pkt 68fpkt", shape=pentagon, color=darkviolet];
10057[label="206.202.202.220;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11099[label="207.24.0.40;68pkt 68fpkt", shape=invtriangle, color=brown];
13129[label="206.202.202.220;2pkt 2fpkt", shape=invtriangle, color=brown];
13655[label="207.24.0.40;68pkt 68fpkt", shape=invhouse, color=bisque];
14561[label="206.202.202.220;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1613[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.24.0.40:80, 170.123.228.87:*}[87.1795%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8%)&lt;BR/&gt; 52025: (0.7%)&lt;BR/&gt; 52012: (0.7%)&lt;BR/&gt; 51995: (0.7%)&lt;BR/&gt; 51946: (0.7%)&gt;];
}
790--836[label="1;67pkt 67fpkt"];
790--874[label="0.0128205;1pkt 1fpkt"];
790--980[label="0.025641;2pkt 2fpkt"];
790--1566[label="0.0128205;1pkt 1fpkt"];
790--4086[label="0.0128205;1pkt 1fpkt"];
790--4223[label="1;67pkt 67fpkt"];
790--4309[label="0.025641;2pkt 2fpkt"];
790--4385[label="0.0133333;1pkt 1fpkt"];
790--4811[label="1;78pkt 78fpkt"];
790--5398[label="0.025641;2pkt 2fpkt"];
790--6452[label="1;68pkt 68fpkt"];
790--7155[label="0.0384615;1pkt 1fpkt"];
790--7207[label="0.0227273;1pkt 1fpkt"];
790--10057[label="1;3pkt 3fpkt"];
790--11099[label="1;68pkt 68fpkt"];
790--13129[label="1;2pkt 2fpkt"];
790--13655[label="1;68pkt 68fpkt"];
790--14561[label="1;1pkt 1fpkt"];
836--4223[label="1;67pkt 67fpkt"];
836--4811[label="1;67pkt 67fpkt"];
836--6452[label="1;67pkt 67fpkt"];
836--11099[label="1;67pkt 67fpkt"];
836--13655[label="1;67pkt 67fpkt"];
4223--4811[label="1;67pkt 67fpkt"];
4223--6452[label="1;67pkt 67fpkt"];
4223--11099[label="1;67pkt 67fpkt"];
4223--13655[label="1;67pkt 67fpkt"];
4811--5398[label="0.025641;2pkt 2fpkt"];
4811--6452[label="1;68pkt 68fpkt"];
4811--7155[label="0.0384615;1pkt 1fpkt"];
4811--7207[label="0.0227273;1pkt 1fpkt"];
4811--10057[label="1;3pkt 3fpkt"];
4811--11099[label="1;68pkt 68fpkt"];
4811--13129[label="1;2pkt 2fpkt"];
4811--13655[label="1;68pkt 68fpkt"];
4811--14561[label="1;1pkt 1fpkt"];
6452--11099[label="1;68pkt 68fpkt"];
6452--13655[label="1;68pkt 68fpkt"];
10057--13129[label="1;2pkt 2fpkt"];
10057--14561[label="1;1pkt 1fpkt"];
11099--13655[label="1;68pkt 68fpkt"];
13129--14561[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.123.228.87" src_ip="207.24.0.40" src_port="80"/>
    </slice>
    <from sec="1172898031" usec="0"/>
    <to sec="1172898824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.150.67.221"/>
    </slice>
    <from sec="1172898454" usec="0"/>
    <to sec="1172898468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1615{
style=filled;
color=gray75;
10079[label="156.139.149.221;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13138[label="156.139.149.221;1pkt 1fpkt", shape=invtriangle, color=brown];
14563[label="156.139.149.221;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1615[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.139.149.221:43334, 211.130.117.154:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43334: (50%)&lt;BR/&gt; 6667: (50%)&gt;];
}
10079--13138[label="1;1pkt 1fpkt"];
10079--14563[label="1;1pkt 1fpkt"];
13138--14563[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.130.117.154" dst_port="6667" src_ip="156.139.149.221" src_port="43334"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.180.149.221"/>
    </slice>
    <from sec="1172898460" usec="0"/>
    <to sec="1172898824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.252.222.221"/>
    </slice>
    <from sec="1172898275" usec="0"/>
    <to sec="1172898669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1618{
style=filled;
color=gray75;
10094[label="215.28.110.222;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13145[label="215.28.110.222;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1618[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.28.110.222:*, 18.234.59.51:25}[37.5%]&lt;BR/&gt;{215.28.110.222:25, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 39387: (6.25%)&lt;BR/&gt; 39344: (6.25%)&lt;BR/&gt; 39343: (6.25%)&lt;BR/&gt; 39263: (6.25%)&gt;];
}
10094--13145[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="215.28.110.222" src_port="25"/>
      <filter dst_ip="18.234.59.51" dst_port="25" src_ip="215.28.110.222"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.15.9.223"/>
    </slice>
    <from sec="1172898735" usec="0"/>
    <to sec="1172898791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.167.27.223"/>
    </slice>
    <from sec="1172898523" usec="0"/>
    <to sec="1172898552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.217.163.223"/>
    </slice>
    <from sec="1172898221" usec="0"/>
    <to sec="1172898284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.138.50.224"/>
    </slice>
    <from sec="1172898579" usec="0"/>
    <to sec="1172898609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.9.140.224"/>
    </slice>
    <from sec="1172898571" usec="0"/>
    <to sec="1172898613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1625{
style=filled;
color=gray75;
10136[label="212.143.207.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13169[label="212.143.207.224;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1625[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.143.207.224:2480, 214.125.67.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2480: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10136--13169[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.55" dst_port="80" src_ip="212.143.207.224" src_port="2480"/>
    </slice>
    <from sec="1172898082" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.132.41.225"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1627{
style=filled;
color=gray75;
10156[label="153.21.64.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13179[label="153.21.64.226;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1627[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.64.226:3269, 210.240.113.245:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3269: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10156--13179[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.240.113.245" dst_port="80" src_ip="153.21.64.226" src_port="3269"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.10.84.226"/>
    </slice>
    <from sec="1172898029" usec="0"/>
    <to sec="1172898893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1629{
style=filled;
color=gray75;
10171[label="172.169.31.227;66pkt 66fpkt", shape=pentagon, color=darkviolet];
13185[label="172.169.31.227;65pkt 65fpkt", shape=invtriangle, color=brown];
stat1629[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.169.31.227:*, 206.77.133.129:80}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2366%)&lt;BR/&gt; 3718: (0.763359%)&lt;BR/&gt; 3716: (0.763359%)&lt;BR/&gt; 3714: (0.763359%)&lt;BR/&gt; 3711: (0.763359%)&gt;];
}
10171--13185[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="206.77.133.129" dst_port="80" src_ip="172.169.31.227"/>
    </slice>
    <from sec="1172898494" usec="0"/>
    <to sec="1172898744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.169.32.227"/>
    </slice>
    <from sec="1172898554" usec="0"/>
    <to sec="1172898588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.105.157.227"/>
    </slice>
    <from sec="1172898207" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.54.149.228"/>
    </slice>
    <from sec="1172898762" usec="0"/>
    <to sec="1172898783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.100.185.229"/>
    </slice>
    <from sec="1172898024" usec="0"/>
    <to sec="1172898034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.107.204.230"/>
    </slice>
    <from sec="1172898737" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.94.37.231"/>
    </slice>
    <from sec="1172898090" usec="0"/>
    <to sec="1172898126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.70.39.231"/>
    </slice>
    <from sec="1172898498" usec="0"/>
    <to sec="1172898528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1638{
style=filled;
color=gray75;
10254[label="153.21.10.232;29pkt 29fpkt", shape=pentagon, color=darkviolet];
13222[label="153.21.10.232;29pkt 29fpkt", shape=invtriangle, color=brown];
14602[label="153.21.10.232;29pkt 29fpkt", shape=invhouse, color=bisque];
stat1638[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.10.232:*, 210.163.86.33:80}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3929: (1.72414%)&lt;BR/&gt; 3928: (1.72414%)&lt;BR/&gt; 3927: (1.72414%)&lt;BR/&gt; 3924: (1.72414%)&gt;];
}
10254--13222[label="1;29pkt 29fpkt"];
10254--14602[label="1;29pkt 29fpkt"];
13222--14602[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="210.163.86.33" dst_port="80" src_ip="153.21.10.232"/>
    </slice>
    <from sec="1172898185" usec="0"/>
    <to sec="1172898373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.74.77.233"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.98.10.234"/>
    </slice>
    <from sec="1172898178" usec="0"/>
    <to sec="1172898185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1641{
style=filled;
color=gray75;
10285[label="153.21.13.234;27pkt 27fpkt", shape=pentagon, color=darkviolet];
13241[label="153.21.13.234;26pkt 26fpkt", shape=invtriangle, color=brown];
14612[label="153.21.13.234;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1641[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.21.13.234:*, 24.87.227.195:143}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (48.75%)&lt;BR/&gt; 4942: (1.875%)&lt;BR/&gt; 4941: (1.875%)&lt;BR/&gt; 4936: (1.875%)&lt;BR/&gt; 4935: (1.875%)&gt;];
}
10285--13241[label="1;26pkt 26fpkt"];
10285--14612[label="1;27pkt 27fpkt"];
13241--14612[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="24.87.227.195" dst_port="143" src_ip="153.21.13.234"/>
    </slice>
    <from sec="1172898059" usec="0"/>
    <to sec="1172898861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.196.84.234"/>
    </slice>
    <from sec="1172898017" usec="0"/>
    <to sec="1172898880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1643{
style=filled;
color=gray75;
10301[label="30.65.46.235;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13248[label="30.65.46.235;7pkt 7fpkt", shape=invtriangle, color=brown];
14615[label="30.65.46.235;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1643[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.65.46.235:80, 153.21.8.103:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33166: (6.81818%)&lt;BR/&gt; 32923: (6.81818%)&lt;BR/&gt; 32919: (6.81818%)&lt;BR/&gt; 32917: (6.81818%)&gt;];
}
10301--13248[label="1;7pkt 7fpkt"];
10301--14615[label="1;7pkt 7fpkt"];
13248--14615[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.8.103" src_ip="30.65.46.235" src_port="80"/>
    </slice>
    <from sec="1172898528" usec="0"/>
    <to sec="1172898541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1644{
style=filled;
color=gray75;
10304[label="214.76.80.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13250[label="214.76.80.235;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1644[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.76.80.235:50792, 214.125.67.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50792: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10304--13250[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.55" dst_port="80" src_ip="214.76.80.235" src_port="50792"/>
    </slice>
    <from sec="1172898273" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.6.129.237"/>
    </slice>
    <from sec="1172898498" usec="0"/>
    <to sec="1172898512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1646{
style=filled;
color=gray75;
10330[label="214.98.2.238;244pkt 244fpkt", shape=pentagon, color=darkviolet];
13267[label="214.98.2.238;243pkt 243fpkt", shape=invtriangle, color=brown];
14625[label="214.98.2.238;244pkt 244fpkt", shape=invhouse, color=bisque];
stat1646[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.98.2.238:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
10330--13267[label="1;243pkt 243fpkt"];
10330--14625[label="1;244pkt 244fpkt"];
13267--14625[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.98.2.238" src_port="1025"/>
    </slice>
    <from sec="1172898085" usec="0"/>
    <to sec="1172898100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1647{
style=filled;
color=gray75;
10332[label="214.125.68.238;186pkt 186fpkt", shape=pentagon, color=darkviolet];
13269[label="214.125.68.238;185pkt 185fpkt", shape=invtriangle, color=brown];
stat1647[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.125.68.238:*, 214.221.34.130:53}[50.5376%]&lt;BR/&gt;{214.125.68.238:*, 214.221.34.131:53}[48.9247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 62328: (0.539084%)&lt;BR/&gt; 62310: (0.539084%)&lt;BR/&gt; 62285: (0.539084%)&lt;BR/&gt; 62281: (0.539084%)&gt;];
}
10332--13269[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_ip="214.221.34.130" dst_port="53" src_ip="214.125.68.238"/>
      <filter dst_ip="214.221.34.131" dst_port="53" src_ip="214.125.68.238"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.153.136.238"/>
    </slice>
    <from sec="1172898328" usec="0"/>
    <to sec="1172898364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1649{
style=filled;
color=gray75;
10336[label="172.179.152.238;16pkt 16fpkt", shape=pentagon, color=darkviolet];
13272[label="172.179.152.238;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1649[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.179.152.238:25, *:*}[68.75%]&lt;BR/&gt;{172.179.152.238:53, *:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.375%)&lt;BR/&gt; 53: (15.625%)&lt;BR/&gt; 32768: (6.25%)&lt;BR/&gt; 63057: (3.125%)&lt;BR/&gt; 37743: (3.125%)&gt;];
}
10336--13272[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="172.179.152.238" src_port="25"/>
      <filter src_ip="172.179.152.238" src_port="53"/>
    </slice>
    <from sec="1172898024" usec="0"/>
    <to sec="1172898809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.150.157.238"/>
    </slice>
    <from sec="1172898823" usec="0"/>
    <to sec="1172898840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1651{
style=filled;
color=gray75;
10338[label="215.232.162.238;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13274[label="215.232.162.238;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1651[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.232.162.238:59700, 172.169.41.141:80}[50%]&lt;BR/&gt;{215.232.162.238:34419, 215.28.110.182:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34419: (33.3333%)&lt;BR/&gt; 59700: (16.6667%)&gt;];
}
10338--13274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.110.182" dst_port="80" src_ip="215.232.162.238" src_port="34419"/>
      <filter dst_ip="172.169.41.141" dst_port="80" src_ip="215.232.162.238" src_port="59700"/>
    </slice>
    <from sec="1172898792" usec="0"/>
    <to sec="1172898869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.107.231.238"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.134.58.239"/>
    </slice>
    <from sec="1172898563" usec="0"/>
    <to sec="1172898576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.215.190.239"/>
    </slice>
    <from sec="1172898219" usec="0"/>
    <to sec="1172898236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.212.245.239"/>
    </slice>
    <from sec="1172898013" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.123.64.240"/>
    </slice>
    <from sec="1172898735" usec="0"/>
    <to sec="1172898765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.151.1.241"/>
    </slice>
    <from sec="1172898512" usec="0"/>
    <to sec="1172898567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.147.163.241"/>
    </slice>
    <from sec="1172898439" usec="0"/>
    <to sec="1172898464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.108.36.242"/>
    </slice>
    <from sec="1172898417" usec="0"/>
    <to sec="1172898433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1660{
style=filled;
color=gray75;
10398[label="170.123.69.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13311[label="170.123.69.242;1pkt 1fpkt", shape=invtriangle, color=brown];
14646[label="170.123.69.242;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1660[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.123.69.242:1039, 5.208.238.163:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10398--13311[label="1;1pkt 1fpkt"];
10398--14646[label="1;1pkt 1fpkt"];
13311--14646[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="5.208.238.163" dst_port="80" src_ip="170.123.69.242" src_port="1039"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.153.118.242"/>
    </slice>
    <from sec="1172898427" usec="0"/>
    <to sec="1172898443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.85.8.243"/>
    </slice>
    <from sec="1172898037" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.17.75.244"/>
    </slice>
    <from sec="1172898300" usec="0"/>
    <to sec="1172898325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.240.113.245"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.101.121.246"/>
    </slice>
    <from sec="1172898034" usec="0"/>
    <to sec="1172898047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.54.215.246"/>
    </slice>
    <from sec="1172898284" usec="0"/>
    <to sec="1172898291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.192.19.247"/>
    </slice>
    <from sec="1172898803" usec="0"/>
    <to sec="1172898824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1668{
style=filled;
color=gray75;
10474[label="182.246.23.247;94pkt 94fpkt", shape=pentagon, color=darkviolet];
13356[label="182.246.23.247;93pkt 93fpkt", shape=invtriangle, color=brown];
stat1668[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.246.23.247:23860, *:*}[98.9362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23860: (49.4652%)&lt;BR/&gt; 64411: (0.534759%)&lt;BR/&gt; 60617: (0.534759%)&lt;BR/&gt; 59787: (0.534759%)&lt;BR/&gt; 56006: (0.534759%)&gt;];
}
10474--13356[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter src_ip="182.246.23.247" src_port="23860"/>
    </slice>
    <from sec="1172898018" usec="0"/>
    <to sec="1172898861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.216.24.247"/>
    </slice>
    <from sec="1172898500" usec="0"/>
    <to sec="1172898516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.38.119.247"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1671{
style=filled;
color=gray75;
10487[label="215.17.15.248;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13363[label="215.17.15.248;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1671[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.17.15.248:1179, 214.55.12.42:80}[50%]&lt;BR/&gt;{215.17.15.248:1174, 36.127.60.55:10212}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10212: (25%)&lt;BR/&gt; 1179: (25%)&lt;BR/&gt; 1174: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
10487--13363[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="36.127.60.55" dst_port="10212" src_ip="215.17.15.248" src_port="1174"/>
      <filter dst_ip="214.55.12.42" dst_port="80" src_ip="215.17.15.248" src_port="1179"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.64.28.248"/>
    </slice>
    <from sec="1172898825" usec="0"/>
    <to sec="1172898844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1673{
style=filled;
color=gray75;
10499[label="195.135.137.248;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13370[label="195.135.137.248;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1673[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.135.137.248:80, 215.28.81.57:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59353: (6.66667%)&lt;BR/&gt; 59352: (6.66667%)&lt;BR/&gt; 59351: (6.66667%)&lt;BR/&gt; 59337: (6.66667%)&gt;];
}
10499--13370[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="215.28.81.57" src_ip="195.135.137.248" src_port="80"/>
    </slice>
    <from sec="1172898856" usec="0"/>
    <to sec="1172898871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.222.44.249"/>
    </slice>
    <from sec="1172898416" usec="0"/>
    <to sec="1172898428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737382,2.79476,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1675{
style=filled;
color=gray75;
10518[label="7.190.103.249;158pkt 158fpkt", shape=pentagon, color=darkviolet];
13381[label="7.190.103.249;158pkt 158fpkt", shape=invtriangle, color=brown];
14678[label="7.190.103.249;157pkt 157fpkt", shape=invhouse, color=bisque];
stat1675[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.190.103.249:13011, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13011: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
10518--13381[label="1;158pkt 158fpkt"];
10518--14678[label="1;157pkt 157fpkt"];
13381--14678[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="7.190.103.249" src_port="13011"/>
    </slice>
    <from sec="1172898256" usec="0"/>
    <to sec="1172898368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.108.154.249"/>
    </slice>
    <from sec="1172898134" usec="0"/>
    <to sec="1172898146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.55.55.250"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.36.88.252"/>
    </slice>
    <from sec="1172898050" usec="0"/>
    <to sec="1172898566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.154.92.252"/>
    </slice>
    <from sec="1172898614" usec="0"/>
    <to sec="1172898644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.480289,2.81116,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1680{
style=filled;
color=gray75;
10563[label="96.144.42.253;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13406[label="96.144.42.253;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1680[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.144.42.253:*, 172.180.255.63:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1612: (4.7619%)&lt;BR/&gt; 1611: (4.7619%)&lt;BR/&gt; 1610: (4.7619%)&lt;BR/&gt; 1609: (4.7619%)&gt;];
}
10563--13406[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="172.180.255.63" dst_port="80" src_ip="96.144.42.253"/>
    </slice>
    <from sec="1172898845" usec="0"/>
    <to sec="1172898882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.212.166.253"/>
    </slice>
    <from sec="1172898088" usec="0"/>
    <to sec="1172898124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.49.226.253"/>
    </slice>
    <from sec="1172898427" usec="0"/>
    <to sec="1172898448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.37.146.254"/>
    </slice>
    <from sec="1172898553" usec="0"/>
    <to sec="1172898591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="11.94.149.255"/>
    </slice>
    <from sec="1172898864" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.495462,2.84581,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.144.173.255"/>
    </slice>
    <from sec="1172898075" usec="0"/>
    <to sec="1172898106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.109.6.1"/>
    </slice>
    <from sec="1172898085" usec="0"/>
    <to sec="1172898103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.70.204.1"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="31.236.216.1"/>
    </slice>
    <from sec="1172898780" usec="0"/>
    <to sec="1172898797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.121.119.3"/>
    </slice>
    <from sec="1172898423" usec="0"/>
    <to sec="1172898438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.9.229.5"/>
    </slice>
    <from sec="1172898678" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.56.116.7"/>
    </slice>
    <from sec="1172898685" usec="0"/>
    <to sec="1172898715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.11.160.7"/>
    </slice>
    <from sec="1172898576" usec="0"/>
    <to sec="1172898600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.43.162.8"/>
    </slice>
    <from sec="1172898708" usec="0"/>
    <to sec="1172898732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.156.70.9"/>
    </slice>
    <from sec="1172898636" usec="0"/>
    <to sec="1172898664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.123.66.11"/>
    </slice>
    <from sec="1172898573" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.55.17.12"/>
    </slice>
    <from sec="1172898699" usec="0"/>
    <to sec="1172898723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.96.25.12"/>
    </slice>
    <from sec="1172898665" usec="0"/>
    <to sec="1172898696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.94.139.12"/>
    </slice>
    <from sec="1172898716" usec="0"/>
    <to sec="1172898731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.85.33.13"/>
    </slice>
    <from sec="1172898194" usec="0"/>
    <to sec="1172898205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.67.69.14"/>
    </slice>
    <from sec="1172898446" usec="0"/>
    <to sec="1172898455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.51.70.14"/>
    </slice>
    <from sec="1172898031" usec="0"/>
    <to sec="1172898108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.23.137.16"/>
    </slice>
    <from sec="1172898778" usec="0"/>
    <to sec="1172898802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.168.107.17"/>
    </slice>
    <from sec="1172898555" usec="0"/>
    <to sec="1172898582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.97.109.17"/>
    </slice>
    <from sec="1172898092" usec="0"/>
    <to sec="1172898880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.128.142.17"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.193.233.18"/>
    </slice>
    <from sec="1172898708" usec="0"/>
    <to sec="1172898832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.22.161.19"/>
    </slice>
    <from sec="1172898292" usec="0"/>
    <to sec="1172898309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.43.162.20"/>
    </slice>
    <from sec="1172898217" usec="0"/>
    <to sec="1172898246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.118.163.20"/>
    </slice>
    <from sec="1172898743" usec="0"/>
    <to sec="1172898771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.167.165.20"/>
    </slice>
    <from sec="1172898471" usec="0"/>
    <to sec="1172898486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.102.208.20"/>
    </slice>
    <from sec="1172898427" usec="0"/>
    <to sec="1172898431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="97.8.55.21"/>
    </slice>
    <from sec="1172898817" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.72.71.22"/>
    </slice>
    <from sec="1172898309" usec="0"/>
    <to sec="1172898328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.98.10.23"/>
    </slice>
    <from sec="1172898819" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.253.19.23"/>
    </slice>
    <from sec="1172898575" usec="0"/>
    <to sec="1172898606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="97.116.49.23"/>
    </slice>
    <from sec="1172898457" usec="0"/>
    <to sec="1172898462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="31.137.162.24"/>
    </slice>
    <from sec="1172898531" usec="0"/>
    <to sec="1172898541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.85.36.25"/>
    </slice>
    <from sec="1172898883" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.167.147.25"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.85.37.28"/>
    </slice>
    <from sec="1172898343" usec="0"/>
    <to sec="1172898709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.17.111.28"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.44.249.28"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689411,2.82177,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1723{
style=filled;
color=gray75;
6224[label="214.93.68.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13597[label="214.93.68.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1723[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.93.68.29:1351, 153.21.195.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1351: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6224--13597[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" src_ip="214.93.68.29" src_port="1351"/>
    </slice>
    <from sec="1172898858" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.237.192.31"/>
    </slice>
    <from sec="1172898033" usec="0"/>
    <to sec="1172898837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="31.104.4.33"/>
    </slice>
    <from sec="1172898554" usec="0"/>
    <to sec="1172898574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.130.108.33"/>
    </slice>
    <from sec="1172898177" usec="0"/>
    <to sec="1172898877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.53.137.33"/>
    </slice>
    <from sec="1172898127" usec="0"/>
    <to sec="1172898139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.208.161.35"/>
    </slice>
    <from sec="1172898741" usec="0"/>
    <to sec="1172898812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.242.14.36"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689411,2.82177,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1730{
style=filled;
color=gray75;
6416[label="198.56.133.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13643[label="198.56.133.38;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1730[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.56.133.38:34235, 153.21.195.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34235: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6416--13643[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.21.195.212" dst_port="80" src_ip="198.56.133.38" src_port="34235"/>
    </slice>
    <from sec="1172898864" usec="0"/>
    <to sec="1172898875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.9.200.38"/>
    </slice>
    <from sec="1172898343" usec="0"/>
    <to sec="1172898625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.203.106.39"/>
    </slice>
    <from sec="1172898159" usec="0"/>
    <to sec="1172898271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.78.203.39"/>
    </slice>
    <from sec="1172898898" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.194.145.40"/>
    </slice>
    <from sec="1172898020" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.210.213.42"/>
    </slice>
    <from sec="1172898618" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.167.75.43"/>
    </slice>
    <from sec="1172898440" usec="0"/>
    <to sec="1172898469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.169.148.44"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.51.110.45"/>
    </slice>
    <from sec="1172898069" usec="0"/>
    <to sec="1172898097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.183.212.45"/>
    </slice>
    <from sec="1172898701" usec="0"/>
    <to sec="1172898719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.26.61.46"/>
    </slice>
    <from sec="1172898005" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.86.81.46"/>
    </slice>
    <from sec="1172898507" usec="0"/>
    <to sec="1172898542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.8.108.48"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.146.179.49"/>
    </slice>
    <from sec="1172898845" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.103.13.50"/>
    </slice>
    <from sec="1172898469" usec="0"/>
    <to sec="1172898586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.252.223.50"/>
    </slice>
    <from sec="1172898225" usec="0"/>
    <to sec="1172898390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.13.239.50"/>
    </slice>
    <from sec="1172898594" usec="0"/>
    <to sec="1172898653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.129.36.53"/>
    </slice>
    <from sec="1172898712" usec="0"/>
    <to sec="1172898777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.217.107.53"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.106.7.55"/>
    </slice>
    <from sec="1172898485" usec="0"/>
    <to sec="1172898500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.244.83.57"/>
    </slice>
    <from sec="1172898837" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.228.42.58"/>
    </slice>
    <from sec="1172898231" usec="0"/>
    <to sec="1172898242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.197.129.58"/>
    </slice>
    <from sec="1172898227" usec="0"/>
    <to sec="1172898247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.196.49.61"/>
    </slice>
    <from sec="1172898778" usec="0"/>
    <to sec="1172898793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.24.174.61"/>
    </slice>
    <from sec="1172898241" usec="0"/>
    <to sec="1172898385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="185.196.25.62"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.151.1.63"/>
    </slice>
    <from sec="1172898411" usec="0"/>
    <to sec="1172898458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.165.162.63"/>
    </slice>
    <from sec="1172898507" usec="0"/>
    <to sec="1172898518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.81.114.64"/>
    </slice>
    <from sec="1172898760" usec="0"/>
    <to sec="1172898782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.2.65.65"/>
    </slice>
    <from sec="1172898229" usec="0"/>
    <to sec="1172898233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.252.221.65"/>
    </slice>
    <from sec="1172898838" usec="0"/>
    <to sec="1172898852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.16.240.67"/>
    </slice>
    <from sec="1172898224" usec="0"/>
    <to sec="1172898237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.22.14.68"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="11.48.202.68"/>
    </slice>
    <from sec="1172898099" usec="0"/>
    <to sec="1172898120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.158.33.69"/>
    </slice>
    <from sec="1172898596" usec="0"/>
    <to sec="1172898609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.69.180.69"/>
    </slice>
    <from sec="1172898172" usec="0"/>
    <to sec="1172898183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.152.195.69"/>
    </slice>
    <from sec="1172898192" usec="0"/>
    <to sec="1172898221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.66.95.70"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.66.222.70"/>
    </slice>
    <from sec="1172898740" usec="0"/>
    <to sec="1172898743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.33.17.72"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.85.43.73"/>
    </slice>
    <from sec="1172898036" usec="0"/>
    <to sec="1172898198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.44.142.73"/>
    </slice>
    <from sec="1172898007" usec="0"/>
    <to sec="1172898667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.112.242.73"/>
    </slice>
    <from sec="1172898666" usec="0"/>
    <to sec="1172898834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.206.81.74"/>
    </slice>
    <from sec="1172898124" usec="0"/>
    <to sec="1172898142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.254.168.74"/>
    </slice>
    <from sec="1172898814" usec="0"/>
    <to sec="1172898844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.246.6.75"/>
    </slice>
    <from sec="1172898000" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.145.16.76"/>
    </slice>
    <from sec="1172898329" usec="0"/>
    <to sec="1172898354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.172.226.76"/>
    </slice>
    <from sec="1172898310" usec="0"/>
    <to sec="1172898320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.31.14.77"/>
    </slice>
    <from sec="1172898545" usec="0"/>
    <to sec="1172898572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.6.236.77"/>
    </slice>
    <from sec="1172898724" usec="0"/>
    <to sec="1172898732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.25.59.79"/>
    </slice>
    <from sec="1172898021" usec="0"/>
    <to sec="1172898039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.142.4.80"/>
    </slice>
    <from sec="1172898378" usec="0"/>
    <to sec="1172898397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.3.97.81"/>
    </slice>
    <from sec="1172898339" usec="0"/>
    <to sec="1172898347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.86.61.83"/>
    </slice>
    <from sec="1172898562" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="31.145.167.84"/>
    </slice>
    <from sec="1172898057" usec="0"/>
    <to sec="1172898089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.19.170.85"/>
    </slice>
    <from sec="1172898511" usec="0"/>
    <to sec="1172898540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.49.208.86"/>
    </slice>
    <from sec="1172898387" usec="0"/>
    <to sec="1172898449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.162.244.86"/>
    </slice>
    <from sec="1172898510" usec="0"/>
    <to sec="1172898546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.70.168.87"/>
    </slice>
    <from sec="1172898714" usec="0"/>
    <to sec="1172898726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="11.36.127.89"/>
    </slice>
    <from sec="1172898008" usec="0"/>
    <to sec="1172898032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.81.34.90"/>
    </slice>
    <from sec="1172898341" usec="0"/>
    <to sec="1172898500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.152.52.91"/>
    </slice>
    <from sec="1172898708" usec="0"/>
    <to sec="1172898722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.65.161.93"/>
    </slice>
    <from sec="1172898652" usec="0"/>
    <to sec="1172898765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.197.83.94"/>
    </slice>
    <from sec="1172898551" usec="0"/>
    <to sec="1172898569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.43.89.94"/>
    </slice>
    <from sec="1172898432" usec="0"/>
    <to sec="1172898469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="11.149.175.94"/>
    </slice>
    <from sec="1172898345" usec="0"/>
    <to sec="1172898364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.82.81.96"/>
    </slice>
    <from sec="1172898507" usec="0"/>
    <to sec="1172898548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.59.139.96"/>
    </slice>
    <from sec="1172898610" usec="0"/>
    <to sec="1172898621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.106.132.97"/>
    </slice>
    <from sec="1172898052" usec="0"/>
    <to sec="1172898063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.10.116.99"/>
    </slice>
    <from sec="1172898022" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.137.168.99"/>
    </slice>
    <from sec="1172898412" usec="0"/>
    <to sec="1172898427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.15.243.99"/>
    </slice>
    <from sec="1172898856" usec="0"/>
    <to sec="1172898870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.110.39.100"/>
    </slice>
    <from sec="1172898482" usec="0"/>
    <to sec="1172898517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.96.3.103"/>
    </slice>
    <from sec="1172898426" usec="0"/>
    <to sec="1172898463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.36.61.103"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.169.225.103"/>
    </slice>
    <from sec="1172898609" usec="0"/>
    <to sec="1172898631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.7.9.104"/>
    </slice>
    <from sec="1172898647" usec="0"/>
    <to sec="1172898655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="171.9.216.105"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.140.138.107"/>
    </slice>
    <from sec="1172898300" usec="0"/>
    <to sec="1172898317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="65.159.192.107"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.95.88.108"/>
    </slice>
    <from sec="1172898710" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.55.143.108"/>
    </slice>
    <from sec="1172898347" usec="0"/>
    <to sec="1172898445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.240.32.109"/>
    </slice>
    <from sec="1172898472" usec="0"/>
    <to sec="1172898476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.73.177.109"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.85.33.111"/>
    </slice>
    <from sec="1172898893" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.226.181.112"/>
    </slice>
    <from sec="1172898288" usec="0"/>
    <to sec="1172898334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.9.13.117"/>
    </slice>
    <from sec="1172898767" usec="0"/>
    <to sec="1172898878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.239.92.117"/>
    </slice>
    <from sec="1172898486" usec="0"/>
    <to sec="1172898526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.49.77.118"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.240.133.119"/>
    </slice>
    <from sec="1172898403" usec="0"/>
    <to sec="1172898502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.83.230.120"/>
    </slice>
    <from sec="1172898252" usec="0"/>
    <to sec="1172898286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.38.236.120"/>
    </slice>
    <from sec="1172898533" usec="0"/>
    <to sec="1172898554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.67.150.121"/>
    </slice>
    <from sec="1172898584" usec="0"/>
    <to sec="1172898595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.233.247.121"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.3.169.123"/>
    </slice>
    <from sec="1172898375" usec="0"/>
    <to sec="1172898388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.229.18.124"/>
    </slice>
    <from sec="1172898631" usec="0"/>
    <to sec="1172898647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.1.29.124"/>
    </slice>
    <from sec="1172898053" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.0.139.125"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.108.144.126"/>
    </slice>
    <from sec="1172898102" usec="0"/>
    <to sec="1172898183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.62.219.129"/>
    </slice>
    <from sec="1172898572" usec="0"/>
    <to sec="1172898594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.159.125.130"/>
    </slice>
    <from sec="1172898047" usec="0"/>
    <to sec="1172898063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.139.126.130"/>
    </slice>
    <from sec="1172898016" usec="0"/>
    <to sec="1172898898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.184.232.130"/>
    </slice>
    <from sec="1172898508" usec="0"/>
    <to sec="1172898669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.246.6.131"/>
    </slice>
    <from sec="1172898852" usec="0"/>
    <to sec="1172898860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.170.59.133"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.138.133.133"/>
    </slice>
    <from sec="1172898352" usec="0"/>
    <to sec="1172898571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.32.141.133"/>
    </slice>
    <from sec="1172898240" usec="0"/>
    <to sec="1172898342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.35.63.135"/>
    </slice>
    <from sec="1172898428" usec="0"/>
    <to sec="1172898437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.188.138.135"/>
    </slice>
    <from sec="1172898016" usec="0"/>
    <to sec="1172898031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.221.196.135"/>
    </slice>
    <from sec="1172898369" usec="0"/>
    <to sec="1172898387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.158.145.136"/>
    </slice>
    <from sec="1172898341" usec="0"/>
    <to sec="1172898466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.155.0.138"/>
    </slice>
    <from sec="1172898728" usec="0"/>
    <to sec="1172898745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.124.79.138"/>
    </slice>
    <from sec="1172898234" usec="0"/>
    <to sec="1172898241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.128.153.138"/>
    </slice>
    <from sec="1172898804" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.0.139.139"/>
    </slice>
    <from sec="1172898100" usec="0"/>
    <to sec="1172898312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.44.156.139"/>
    </slice>
    <from sec="1172898098" usec="0"/>
    <to sec="1172898107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.28.106.140"/>
    </slice>
    <from sec="1172898514" usec="0"/>
    <to sec="1172898530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.31.45.142"/>
    </slice>
    <from sec="1172898320" usec="0"/>
    <to sec="1172898329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="156.139.158.142"/>
    </slice>
    <from sec="1172898009" usec="0"/>
    <to sec="1172898894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="65.162.18.145"/>
    </slice>
    <from sec="1172898864" usec="0"/>
    <to sec="1172898891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.199.168.145"/>
    </slice>
    <from sec="1172898103" usec="0"/>
    <to sec="1172898112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.85.37.147"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.9.131.147"/>
    </slice>
    <from sec="1172898734" usec="0"/>
    <to sec="1172898763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.172.38.149"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.216.24.150"/>
    </slice>
    <from sec="1172898171" usec="0"/>
    <to sec="1172898216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.229.235.150"/>
    </slice>
    <from sec="1172898557" usec="0"/>
    <to sec="1172898568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.242.131.153"/>
    </slice>
    <from sec="1172898804" usec="0"/>
    <to sec="1172898818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.195.143.155"/>
    </slice>
    <from sec="1172898363" usec="0"/>
    <to sec="1172898372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.176.106.156"/>
    </slice>
    <from sec="1172898871" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.64.53.157"/>
    </slice>
    <from sec="1172898838" usec="0"/>
    <to sec="1172898853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.157.111.157"/>
    </slice>
    <from sec="1172898049" usec="0"/>
    <to sec="1172898361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.152.219.157"/>
    </slice>
    <from sec="1172898588" usec="0"/>
    <to sec="1172898603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.88.25.159"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.146.81.160"/>
    </slice>
    <from sec="1172898551" usec="0"/>
    <to sec="1172898567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.7.113.162"/>
    </slice>
    <from sec="1172898284" usec="0"/>
    <to sec="1172898298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.117.95.164"/>
    </slice>
    <from sec="1172898298" usec="0"/>
    <to sec="1172898359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.204.237.164"/>
    </slice>
    <from sec="1172898226" usec="0"/>
    <to sec="1172898399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.76.34.166"/>
    </slice>
    <from sec="1172898415" usec="0"/>
    <to sec="1172898430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.221.98.166"/>
    </slice>
    <from sec="1172898359" usec="0"/>
    <to sec="1172898364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.74.73.169"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.67.89.170"/>
    </slice>
    <from sec="1172898553" usec="0"/>
    <to sec="1172898592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.73.101.170"/>
    </slice>
    <from sec="1172898546" usec="0"/>
    <to sec="1172898559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.1.196.171"/>
    </slice>
    <from sec="1172898713" usec="0"/>
    <to sec="1172898725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.44.50.172"/>
    </slice>
    <from sec="1172898003" usec="0"/>
    <to sec="1172898900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.134.93.173"/>
    </slice>
    <from sec="1172898668" usec="0"/>
    <to sec="1172898676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.201.162.174"/>
    </slice>
    <from sec="1172898696" usec="0"/>
    <to sec="1172898706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.11.51.175"/>
    </slice>
    <from sec="1172898696" usec="0"/>
    <to sec="1172898708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.56.22.178"/>
    </slice>
    <from sec="1172898725" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.135.39.178"/>
    </slice>
    <from sec="1172898565" usec="0"/>
    <to sec="1172898676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.156.17.179"/>
    </slice>
    <from sec="1172898499" usec="0"/>
    <to sec="1172898511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689411,2.82177,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1880{
style=filled;
color=gray75;
9334[label="212.168.210.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14382[label="212.168.210.180;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1880[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.168.210.180:4299, 214.125.67.55:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4299: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9334--14382[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.125.67.55" dst_port="80" src_ip="212.168.210.180" src_port="4299"/>
    </slice>
    <from sec="1172898285" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.66.96.181"/>
    </slice>
    <from sec="1172898435" usec="0"/>
    <to sec="1172898448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.136.130.182"/>
    </slice>
    <from sec="1172898819" usec="0"/>
    <to sec="1172898831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.183.88.183"/>
    </slice>
    <from sec="1172898098" usec="0"/>
    <to sec="1172898113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.124.73.185"/>
    </slice>
    <from sec="1172898500" usec="0"/>
    <to sec="1172898527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.173.180.186"/>
    </slice>
    <from sec="1172898818" usec="0"/>
    <to sec="1172898840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="11.29.144.189"/>
    </slice>
    <from sec="1172898882" usec="0"/>
    <to sec="1172898895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.76.8.190"/>
    </slice>
    <from sec="1172898509" usec="0"/>
    <to sec="1172898538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.31.179.190"/>
    </slice>
    <from sec="1172898696" usec="0"/>
    <to sec="1172898713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.42.235.190"/>
    </slice>
    <from sec="1172898706" usec="0"/>
    <to sec="1172898721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.197.20.191"/>
    </slice>
    <from sec="1172898496" usec="0"/>
    <to sec="1172898522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.65.66.191"/>
    </slice>
    <from sec="1172898409" usec="0"/>
    <to sec="1172898424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="31.16.151.191"/>
    </slice>
    <from sec="1172898722" usec="0"/>
    <to sec="1172898744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.20.11.193"/>
    </slice>
    <from sec="1172898295" usec="0"/>
    <to sec="1172898397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.178.149.193"/>
    </slice>
    <from sec="1172898792" usec="0"/>
    <to sec="1172898820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.101.132.194"/>
    </slice>
    <from sec="1172898593" usec="0"/>
    <to sec="1172898899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.82.213.195"/>
    </slice>
    <from sec="1172898006" usec="0"/>
    <to sec="1172898817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="156.139.164.197"/>
    </slice>
    <from sec="1172898002" usec="0"/>
    <to sec="1172898208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="31.136.152.199"/>
    </slice>
    <from sec="1172898395" usec="0"/>
    <to sec="1172898428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="11.144.21.201"/>
    </slice>
    <from sec="1172898525" usec="0"/>
    <to sec="1172898563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.47.34.202"/>
    </slice>
    <from sec="1172898721" usec="0"/>
    <to sec="1172898737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.85.33.204"/>
    </slice>
    <from sec="1172898747" usec="0"/>
    <to sec="1172898751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.224.149.204"/>
    </slice>
    <from sec="1172898812" usec="0"/>
    <to sec="1172898836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.59.98.205"/>
    </slice>
    <from sec="1172898209" usec="0"/>
    <to sec="1172898350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.172.25.207"/>
    </slice>
    <from sec="1172898418" usec="0"/>
    <to sec="1172898432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.64.105.208"/>
    </slice>
    <from sec="1172898590" usec="0"/>
    <to sec="1172898614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.42.64.210"/>
    </slice>
    <from sec="1172898037" usec="0"/>
    <to sec="1172898052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.65.218.216"/>
    </slice>
    <from sec="1172898415" usec="0"/>
    <to sec="1172898447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.217.25.217"/>
    </slice>
    <from sec="1172898293" usec="0"/>
    <to sec="1172898301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.35.139.218"/>
    </slice>
    <from sec="1172898592" usec="0"/>
    <to sec="1172898628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.77.144.220"/>
    </slice>
    <from sec="1172898249" usec="0"/>
    <to sec="1172898260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.252.222.221"/>
    </slice>
    <from sec="1172898275" usec="0"/>
    <to sec="1172898669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.167.27.223"/>
    </slice>
    <from sec="1172898523" usec="0"/>
    <to sec="1172898552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.138.50.224"/>
    </slice>
    <from sec="1172898579" usec="0"/>
    <to sec="1172898609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.181.179.225"/>
    </slice>
    <from sec="1172898001" usec="0"/>
    <to sec="1172898886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.169.32.227"/>
    </slice>
    <from sec="1172898554" usec="0"/>
    <to sec="1172898588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.105.157.227"/>
    </slice>
    <from sec="1172898207" usec="0"/>
    <to sec="1172898887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.100.185.229"/>
    </slice>
    <from sec="1172898024" usec="0"/>
    <to sec="1172898034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.107.204.230"/>
    </slice>
    <from sec="1172898737" usec="0"/>
    <to sec="1172898739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.70.39.231"/>
    </slice>
    <from sec="1172898498" usec="0"/>
    <to sec="1172898528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.161.139.231"/>
    </slice>
    <from sec="1172898744" usec="0"/>
    <to sec="1172898759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.196.84.234"/>
    </slice>
    <from sec="1172898018" usec="0"/>
    <to sec="1172898880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.57.90.235"/>
    </slice>
    <from sec="1172898738" usec="0"/>
    <to sec="1172898741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.6.129.237"/>
    </slice>
    <from sec="1172898498" usec="0"/>
    <to sec="1172898512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.210.194.237"/>
    </slice>
    <from sec="1172898687" usec="0"/>
    <to sec="1172898738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.85.33.239"/>
    </slice>
    <from sec="1172898124" usec="0"/>
    <to sec="1172898137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.169.100.239"/>
    </slice>
    <from sec="1172898805" usec="0"/>
    <to sec="1172898832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.215.190.239"/>
    </slice>
    <from sec="1172898219" usec="0"/>
    <to sec="1172898236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.151.1.241"/>
    </slice>
    <from sec="1172898512" usec="0"/>
    <to sec="1172898567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.85.8.243"/>
    </slice>
    <from sec="1172898037" usec="0"/>
    <to sec="1172898888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.240.113.245"/>
    </slice>
    <from sec="1172898900" usec="0"/>
    <to sec="1172898901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.16.167.246"/>
    </slice>
    <from sec="1172898499" usec="0"/>
    <to sec="1172898536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.65.182.246"/>
    </slice>
    <from sec="1172898436" usec="0"/>
    <to sec="1172898443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="146.4.87.247"/>
    </slice>
    <from sec="1172898517" usec="0"/>
    <to sec="1172898541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.34.84.248"/>
    </slice>
    <from sec="1172898521" usec="0"/>
    <to sec="1172898544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.108.154.249"/>
    </slice>
    <from sec="1172898134" usec="0"/>
    <to sec="1172898146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.101.10.252"/>
    </slice>
    <from sec="1172898337" usec="0"/>
    <to sec="1172898350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700066,2.85629,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.154.92.252"/>
    </slice>
    <from sec="1172898614" usec="0"/>
    <to sec="1172898644" usec="0"/>
  </anomaly>

</admd:annotation>
