<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.31308,4.44419,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_6{
style=filled;
color=gray75;
68[label="12.109.172.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
71[label="214.163.229.28;s;97pkt 97fpkt", shape=diamond, color=yellow];
3102[label="68.163.202.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
5519[label="205.47.80.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
9477[label="68.177.40.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
13117[label="214.163.229.28;102pkt 102fpkt", shape=pentagon, color=darkviolet];
20942[label="214.163.229.28;102pkt 102fpkt", shape=invtriangle, color=brown];
26023[label="214.163.229.28;102pkt 102fpkt", shape=invhouse, color=bisque];
stat6[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.163.229.28:*, 68.163.202.115:7102}[34.3137%]&lt;BR/&gt;{214.163.229.28:*, 205.4.115.49:9000}[25.4902%]&lt;BR/&gt;{214.163.229.28:*, 205.4.115.58:8080}[24.5098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7102: (16.9533%)&lt;BR/&gt; 9000: (12.5307%)&lt;BR/&gt; 8080: (12.1622%)&lt;BR/&gt; 5063: (8.35381%)&lt;BR/&gt; 8000: (1.4742%)&gt;];
}
68--71[label="1;1pkt 1fpkt"];
68--13117[label="1;1pkt 1fpkt"];
68--20942[label="1;1pkt 1fpkt"];
68--26023[label="1;1pkt 1fpkt"];
71--3102[label="1;1pkt 1fpkt"];
71--5519[label="1;1pkt 1fpkt"];
71--9477[label="1;1pkt 1fpkt"];
71--11840[label="0.0103093;1pkt 1fpkt"];
71--13117[label="1;97pkt 97fpkt"];
71--20942[label="1;97pkt 97fpkt"];
71--26023[label="1;97pkt 97fpkt"];
3102--13117[label="1;1pkt 1fpkt"];
3102--20942[label="1;1pkt 1fpkt"];
3102--26023[label="1;1pkt 1fpkt"];
5519--13117[label="1;1pkt 1fpkt"];
5519--20942[label="1;1pkt 1fpkt"];
5519--26023[label="1;1pkt 1fpkt"];
9477--13117[label="1;1pkt 1fpkt"];
9477--20942[label="1;1pkt 1fpkt"];
9477--26023[label="1;1pkt 1fpkt"];
13117--20942[label="1;102pkt 102fpkt"];
13117--26023[label="1;102pkt 102fpkt"];
20942--26023[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="68.163.202.115" dst_port="7102" src_ip="214.163.229.28"/>
      <filter dst_ip="205.4.115.49" dst_port="9000" src_ip="214.163.229.28"/>
      <filter dst_ip="205.4.115.58" dst_port="8080" src_ip="214.163.229.28"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_7{
style=filled;
color=gray75;
93[label="134.73.26.32;d;31pkt 31fpkt", shape=diamond, color=yellow];
94[label="69.185.231.169;s;31pkt 31fpkt", shape=diamond, color=yellow];
9535[label="69.185.231.169;s;31pkt 31fpkt", shape=hexagon, color=black];
17896[label="69.185.231.169;31pkt 31fpkt", shape=pentagon, color=darkviolet];
24072[label="69.185.231.169;31pkt 31fpkt", shape=invtriangle, color=brown];
27757[label="69.185.231.169;31pkt 31fpkt", shape=invhouse, color=bisque];
stat7[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.185.231.169:*, 134.73.26.32:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3086: (1.6129%)&lt;BR/&gt; 3080: (1.6129%)&lt;BR/&gt; 3076: (1.6129%)&lt;BR/&gt; 3042: (1.6129%)&gt;];
}
93--94[label="1;31pkt 31fpkt"];
93--9535[label="1;31pkt 31fpkt"];
93--17896[label="1;31pkt 31fpkt"];
93--24072[label="1;31pkt 31fpkt"];
93--27757[label="1;31pkt 31fpkt"];
94--9535[label="1;31pkt 31fpkt"];
94--17896[label="1;31pkt 31fpkt"];
94--24072[label="1;31pkt 31fpkt"];
94--27757[label="1;31pkt 31fpkt"];
9535--17896[label="1;31pkt 31fpkt"];
9535--24072[label="1;31pkt 31fpkt"];
9535--27757[label="1;31pkt 31fpkt"];
17896--24072[label="1;31pkt 31fpkt"];
17896--27757[label="1;31pkt 31fpkt"];
24072--27757[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.26.32" dst_port="80" src_ip="69.185.231.169"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="43216136" usec="0"/>
    <to sec="43216136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500339" usec="0"/>
    </slice>
    <from sec="43216136" usec="0"/>
    <to sec="43216136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_10{
style=filled;
color=gray75;
187[label="214.163.229.161;s;56pkt 56fpkt", shape=diamond, color=yellow];
188[label="205.41.44.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat10[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.163.229.161:*, *:80}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.0877%)&lt;BR/&gt; 443: (6.14035%)&lt;BR/&gt; 8000: (4.38596%)&lt;BR/&gt; 50868: (1.75439%)&lt;BR/&gt; 41653: (1.75439%)&gt;];
}
187--188[label="1;1pkt 1fpkt"];
187--11840[label="0.0178571;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="214.163.229.161"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_11{
style=filled;
color=gray75;
225[label="43.1.95.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
226[label="128.156.5.169;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat11[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.5.169:50577, 43.1.95.17:80}[50%]&lt;BR/&gt;{128.156.5.169:0, 51.237.32.252:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50577: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
225--226[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="51.237.32.252" src_ip="128.156.5.169"/>
      <filter dst_ip="43.1.95.17" dst_port="80" src_ip="128.156.5.169" src_port="50577"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_12{
style=filled;
color=gray75;
312[label="128.156.219.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
313[label="71.26.197.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
9791[label="128.156.219.216;s;1pkt 1fpkt", shape=hexagon, color=black];
19241[label="128.156.219.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat12[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.219.216:1787, 71.26.197.138:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1787: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
312--313[label="1;1pkt 1fpkt"];
312--9791[label="1;1pkt 1fpkt"];
312--19241[label="1;1pkt 1fpkt"];
313--9791[label="1;1pkt 1fpkt"];
313--19241[label="1;1pkt 1fpkt"];
9791--19241[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="71.26.197.138" dst_port="80" src_ip="128.156.219.216" src_port="1787"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21537,4.48585,901,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_13{
style=filled;
color=gray75;
332[label="9.226.135.3;d;10pkt 10fpkt", shape=diamond, color=yellow];
333[label="134.73.16.130;s;18pkt 18fpkt", shape=diamond, color=yellow];
23200[label="134.73.16.130;18pkt 18fpkt", shape=invtriangle, color=brown];
stat13[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.16.130:443, 9.226.135.3:*}[55.5556%]&lt;BR/&gt;{134.73.16.130:443, 68.0.224.161:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1513: (3.26087%)&lt;BR/&gt; 1512: (3.26087%)&lt;BR/&gt; 1511: (3.26087%)&lt;BR/&gt; 1510: (3.26087%)&gt;];
}
332--333[label="1;10pkt 10fpkt"];
332--23200[label="1;10pkt 10fpkt"];
333--23200[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="9.226.135.3" src_ip="134.73.16.130" src_port="443"/>
      <filter dst_ip="68.0.224.161" src_ip="134.73.16.130" src_port="443"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_14{
style=filled;
color=gray75;
328[label="215.66.210.216;s;869pkt 869fpkt", shape=diamond, color=yellow];
329[label="209.168.2.199;d;1209pkt 1209fpkt", shape=diamond, color=yellow];
341[label="214.209.113.168;d;2311pkt 2311fpkt", shape=diamond, color=yellow];
2455[label="200.216.213.165;d;451pkt 451fpkt", shape=diamond, color=yellow];
19238[label="215.66.210.216;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat14[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, 214.209.113.168:*}[42.1859%]&lt;BR/&gt;{*:445, 209.168.2.199:*}[24.8995%]&lt;BR/&gt;{215.66.210.216:*, *:*}[22.0101%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (31.941%)&lt;BR/&gt; 1402: (13.0363%)&lt;BR/&gt; 3177: (4.44513%)&lt;BR/&gt; 3277: (0.484736%)&lt;BR/&gt; 0: (0.165017%)&gt;];
}
328--329[label="0.24626;214pkt 214fpkt"];
328--341[label="0.724971;630pkt 630fpkt"];
328--2455[label="0.0509978;23pkt 23fpkt"];
328--6349[label="0.00122549;1pkt 1fpkt"];
328--19238[label="0.125;1pkt 1fpkt"];
329--399[label="0.00082713;1pkt 1fpkt"];
329--405[label="0.00082713;1pkt 1fpkt"];
329--9581[label="0.00082713;1pkt 1fpkt"];
329--19238[label="0.125;1pkt 1fpkt"];
341--399[label="0.000432713;1pkt 1fpkt"];
341--535[label="0.000432713;1pkt 1fpkt"];
341--9581[label="0.000432713;1pkt 1fpkt"];
341--9808[label="0.000432713;1pkt 1fpkt"];
2455--9581[label="0.00221729;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.66.210.216"/>
      <filter dst_ip="214.209.113.168" src_port="445"/>
      <filter dst_ip="209.168.2.199" src_port="445"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_15{
style=filled;
color=gray75;
392[label="211.10.56.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
393[label="168.46.14.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
10937[label="168.46.14.28;s;1pkt 1fpkt", shape=hexagon, color=black];
13081[label="168.46.14.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20920[label="168.46.14.28;1pkt 1fpkt", shape=invtriangle, color=brown];
26010[label="168.46.14.28;1pkt 1fpkt", shape=invhouse, color=bisque];
stat15[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.46.14.28:2051, 211.10.56.27:8010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8010: (50%)&lt;BR/&gt; 2051: (50%)&gt;];
}
392--393[label="1;1pkt 1fpkt"];
392--10937[label="1;1pkt 1fpkt"];
392--13081[label="1;1pkt 1fpkt"];
392--20920[label="1;1pkt 1fpkt"];
392--26010[label="1;1pkt 1fpkt"];
393--10937[label="1;1pkt 1fpkt"];
393--13081[label="1;1pkt 1fpkt"];
393--20920[label="1;1pkt 1fpkt"];
393--26010[label="1;1pkt 1fpkt"];
10937--13081[label="1;1pkt 1fpkt"];
10937--20920[label="1;1pkt 1fpkt"];
10937--26010[label="1;1pkt 1fpkt"];
13081--20920[label="1;1pkt 1fpkt"];
13081--26010[label="1;1pkt 1fpkt"];
20920--26010[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.10.56.27" dst_port="8010" src_ip="168.46.14.28" src_port="2051"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_16{
style=filled;
color=gray75;
560[label="8.19.156.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
561[label="170.15.187.133;s;17pkt 17fpkt", shape=diamond, color=yellow];
9603[label="170.15.187.133;s;12pkt 12fpkt", shape=hexagon, color=black];
16716[label="170.15.187.133;17pkt 17fpkt", shape=pentagon, color=darkviolet];
23304[label="170.15.187.133;17pkt 17fpkt", shape=invtriangle, color=brown];
27324[label="170.15.187.133;17pkt 17fpkt", shape=invhouse, color=bisque];
stat16[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.187.133:*, 41.41.215.144:80}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2963%)&lt;BR/&gt; 8231: (3.7037%)&lt;BR/&gt; 2506: (3.7037%)&lt;BR/&gt; 2554: (3.08642%)&lt;BR/&gt; 2553: (3.08642%)&gt;];
}
560--561[label="1;1pkt 1fpkt"];
560--9603[label="1;1pkt 1fpkt"];
560--16716[label="1;1pkt 1fpkt"];
560--23304[label="1;1pkt 1fpkt"];
560--27324[label="1;1pkt 1fpkt"];
561--9603[label="1;12pkt 12fpkt"];
561--16716[label="1;17pkt 17fpkt"];
561--23304[label="1;17pkt 17fpkt"];
561--27324[label="1;17pkt 17fpkt"];
9603--16716[label="1;12pkt 12fpkt"];
9603--23304[label="1;12pkt 12fpkt"];
9603--27324[label="1;12pkt 12fpkt"];
16716--23304[label="1;17pkt 17fpkt"];
16716--27324[label="1;17pkt 17fpkt"];
23304--27324[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="41.41.215.144" dst_port="80" src_ip="170.15.187.133"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_17{
style=filled;
color=gray75;
563[label="34.237.73.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
564[label="170.15.186.96;s;20pkt 20fpkt", shape=diamond, color=yellow];
8725[label="41.98.6.68;d;10pkt 10fpkt", shape=diamond, color=yellow];
stat17[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.96:*, 41.98.6.68:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7742%)&lt;BR/&gt; 11113: (3.22581%)&lt;BR/&gt; 4417: (3.22581%)&lt;BR/&gt; 4385: (3.22581%)&lt;BR/&gt; 4383: (3.22581%)&gt;];
}
563--564[label="1;1pkt 1fpkt"];
564--4964[label="0.05;1pkt 1fpkt"];
564--8725[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="41.98.6.68" dst_port="80" src_ip="170.15.186.96"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
635[label="8.19.145.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
636[label="134.73.251.170;s;85pkt 85fpkt", shape=diamond, color=yellow];
738[label="206.196.21.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
9810[label="134.73.251.170;s;81pkt 81fpkt", shape=hexagon, color=black];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.251.170:18486, 8.16.61.86:*}[48.2353%]&lt;BR/&gt;{134.73.251.170:*, *:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18486: (23.2143%)&lt;BR/&gt; 80: (20.2381%)&lt;BR/&gt; 18428: (4.16667%)&lt;BR/&gt; 19101: (1.78571%)&lt;BR/&gt; 0: (1.19048%)&gt;];
}
635--636[label="1;1pkt 1fpkt"];
635--9810[label="1;1pkt 1fpkt"];
636--738[label="1;1pkt 1fpkt"];
636--4289[label="0.0117647;1pkt 1fpkt"];
636--6289[label="0.0185185;1pkt 1fpkt"];
636--9810[label="1;81pkt 81fpkt"];
738--9810[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="134.73.251.170"/>
      <filter dst_ip="8.16.61.86" src_ip="134.73.251.170" src_port="18486"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
536[label="170.15.81.216;s;62pkt 62fpkt", shape=diamond, color=yellow];
740[label="194.96.156.215;d;3pkt 3fpkt", shape=diamond, color=yellow];
906[label="194.96.156.214;d;15pkt 15fpkt", shape=diamond, color=yellow];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.81.216:*, 215.110.60.130:80}[38.7097%]&lt;BR/&gt;{170.15.81.216:*, 194.96.156.214:80}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 443: (5%)&lt;BR/&gt; 4546: (1.25%)&lt;BR/&gt; 4543: (1.25%)&lt;BR/&gt; 4540: (1.25%)&gt;];
}
536--740[label="1;3pkt 3fpkt"];
536--906[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="215.110.60.130" dst_port="80" src_ip="170.15.81.216"/>
      <filter dst_ip="194.96.156.214" dst_port="80" src_ip="170.15.81.216"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_20{
style=filled;
color=gray75;
818[label="134.73.149.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
819[label="24.24.12.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat20[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.24.12.65:34344, 134.73.149.176:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34344: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
818--819[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.149.176" dst_port="22" src_ip="24.24.12.65" src_port="34344"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,502,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
837[label="212.1.175.10;d;331pkt 331fpkt", shape=diamond, color=yellow];
838[label="194.212.11.45;s;376pkt 376fpkt", shape=diamond, color=yellow];
9641[label="212.1.175.10;d;49pkt 49fpkt", shape=hexagon, color=black];
11473[label="194.212.11.45;s;376pkt 376fpkt", shape=hexagon, color=black];
13667[label="194.212.11.45;408pkt 408fpkt", shape=pentagon, color=darkviolet];
21302[label="194.212.11.45;408pkt 408fpkt", shape=invtriangle, color=brown];
26204[label="194.212.11.45;408pkt 408fpkt", shape=invhouse, color=bisque];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.11.45:22, 212.1.175.10:*}[99.7549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.8939%)&lt;BR/&gt; 58120: (0.148557%)&lt;BR/&gt; 57852: (0.148557%)&lt;BR/&gt; 57674: (0.148557%)&lt;BR/&gt; 57113: (0.148557%)&gt;];
}
837--838[label="1;331pkt 331fpkt"];
837--9641[label="1;49pkt 49fpkt"];
837--11473[label="1;331pkt 331fpkt"];
837--13667[label="1;331pkt 331fpkt"];
837--21302[label="1;331pkt 331fpkt"];
837--26204[label="1;331pkt 331fpkt"];
838--9641[label="1;49pkt 49fpkt"];
838--11473[label="1;376pkt 376fpkt"];
838--13667[label="1;376pkt 376fpkt"];
838--21302[label="1;376pkt 376fpkt"];
838--26204[label="1;376pkt 376fpkt"];
9641--11473[label="1;49pkt 49fpkt"];
9641--13667[label="1;49pkt 49fpkt"];
9641--21302[label="1;49pkt 49fpkt"];
9641--26204[label="1;49pkt 49fpkt"];
11473--13667[label="1;376pkt 376fpkt"];
11473--21302[label="1;376pkt 376fpkt"];
11473--26204[label="1;376pkt 376fpkt"];
13667--21302[label="1;408pkt 408fpkt"];
13667--26204[label="1;408pkt 408fpkt"];
21302--26204[label="1;408pkt 408fpkt"];
</description>
    <slice>
      <filter dst_ip="212.1.175.10" src_ip="194.212.11.45" src_port="22"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04381,4.36364,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
867[label="69.128.240.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
868[label="156.224.199.239;s;9pkt 9fpkt", shape=diamond, color=yellow];
1046[label="206.88.129.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
9645[label="156.224.199.239;s;5pkt 5fpkt", shape=hexagon, color=black];
19766[label="156.224.199.239;10pkt 10fpkt", shape=pentagon, color=darkviolet];
25328[label="156.224.199.239;10pkt 10fpkt", shape=invtriangle, color=brown];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.224.199.239:8218, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8218: (50%)&lt;BR/&gt; 14997: (6.94444%)&lt;BR/&gt; 13566: (6.94444%)&lt;BR/&gt; 39496: (5.55556%)&lt;BR/&gt; 9167: (5.55556%)&gt;];
}
867--868[label="1;1pkt 1fpkt"];
867--9645[label="1;1pkt 1fpkt"];
867--19766[label="1;1pkt 1fpkt"];
867--25328[label="1;1pkt 1fpkt"];
868--1046[label="1;1pkt 1fpkt"];
868--9645[label="1;5pkt 5fpkt"];
868--19766[label="1;9pkt 9fpkt"];
868--25328[label="1;9pkt 9fpkt"];
1046--9645[label="1;1pkt 1fpkt"];
1046--19766[label="1;1pkt 1fpkt"];
1046--25328[label="1;1pkt 1fpkt"];
9645--19766[label="1;5pkt 5fpkt"];
9645--25328[label="1;5pkt 5fpkt"];
19766--25328[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="156.224.199.239" src_port="8218"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="12.69.46.151"/>
      <from sec="1241500285" usec="0"/>
      <to sec="1241500414" usec="0"/>
    </slice>
    <from sec="1241500285" usec="0"/>
    <to sec="1241500414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_24{
style=filled;
color=gray75;
1094[label="170.15.184.71;s;11pkt 11fpkt", shape=diamond, color=yellow];
1095[label="193.80.129.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
10699[label="170.15.184.71;s;11pkt 11fpkt", shape=hexagon, color=black];
14581[label="170.15.184.71;12pkt 12fpkt", shape=pentagon, color=darkviolet];
21913[label="170.15.184.71;12pkt 12fpkt", shape=invtriangle, color=brown];
26532[label="170.15.184.71;12pkt 12fpkt", shape=invhouse, color=bisque];
stat24[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.184.71:*, 70.235.25.232:8600}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8600: (25.4237%)&lt;BR/&gt; 5050: (8.47458%)&lt;BR/&gt; 80: (6.77966%)&lt;BR/&gt; 4734: (5.08475%)&lt;BR/&gt; 554: (5.08475%)&gt;];
}
1094--1095[label="1;1pkt 1fpkt"];
1094--10699[label="1;11pkt 11fpkt"];
1094--14581[label="1;11pkt 11fpkt"];
1094--21913[label="1;11pkt 11fpkt"];
1094--26532[label="1;11pkt 11fpkt"];
1095--10699[label="1;1pkt 1fpkt"];
1095--14581[label="1;1pkt 1fpkt"];
1095--21913[label="1;1pkt 1fpkt"];
1095--26532[label="1;1pkt 1fpkt"];
10699--14581[label="1;11pkt 11fpkt"];
10699--21913[label="1;11pkt 11fpkt"];
10699--26532[label="1;11pkt 11fpkt"];
14581--21913[label="1;12pkt 12fpkt"];
14581--26532[label="1;12pkt 12fpkt"];
21913--26532[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="70.235.25.232" dst_port="8600" src_ip="170.15.184.71"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
1147[label="32.187.217.228;d;795pkt 795fpkt", shape=diamond, color=yellow];
1148[label="134.73.246.249;s;796pkt 796fpkt", shape=diamond, color=yellow];
10472[label="134.73.246.249;s;502pkt 502fpkt", shape=hexagon, color=black];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.246.249:*, 32.187.217.228:80}[99.8744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9522%)&lt;BR/&gt; 0: (0.0955566%)&lt;BR/&gt; 45961: (0.0716675%)&lt;BR/&gt; 45960: (0.0716675%)&lt;BR/&gt; 45959: (0.0716675%)&gt;];
}
1147--1148[label="1;795pkt 795fpkt"];
1147--10472[label="0.998008;501pkt 501fpkt"];
1148--4289[label="0.00125628;1pkt 1fpkt"];
1148--10472[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter dst_ip="32.187.217.228" dst_port="80" src_ip="134.73.246.249"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
1261[label="170.15.186.113;s;81pkt 81fpkt", shape=diamond, color=yellow];
1348[label="222.64.100.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
6395[label="222.64.102.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
9439[label="222.64.100.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
10733[label="170.15.186.113;s;40pkt 40fpkt", shape=hexagon, color=black];
11218[label="222.64.102.50;d;1pkt 1fpkt", shape=hexagon, color=black];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.113:*, 40.234.15.230:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.6%)&lt;BR/&gt; 0: (6.4%)&lt;BR/&gt; 10358: (4%)&lt;BR/&gt; 1935: (3.6%)&lt;BR/&gt; 17788: (3.2%)&gt;];
}
1261--1348[label="1;1pkt 1fpkt"];
1261--4964[label="0.0123457;1pkt 1fpkt"];
1261--5707[label="0.0123457;1pkt 1fpkt"];
1261--6395[label="1;1pkt 1fpkt"];
1261--6469[label="0.0246914;2pkt 2fpkt"];
1261--6478[label="0.0123457;1pkt 1fpkt"];
1261--6495[label="0.0909091;1pkt 1fpkt"];
1261--7218[label="0.0246914;2pkt 2fpkt"];
1261--7273[label="0.0123457;1pkt 1fpkt"];
1261--8843[label="0.1;1pkt 1fpkt"];
1261--8867[label="0.0123457;1pkt 1fpkt"];
1261--9439[label="1;1pkt 1fpkt"];
1261--10733[label="1;40pkt 40fpkt"];
1261--11218[label="1;1pkt 1fpkt"];
1348--10733[label="1;1pkt 1fpkt"];
6395--10733[label="1;1pkt 1fpkt"];
6395--11218[label="1;1pkt 1fpkt"];
10733--11218[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.234.15.230" dst_port="80" src_ip="170.15.186.113"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
1365[label="172.204.171.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
1366[label="46.226.228.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.226.228.211:5999, 172.204.171.92:53476}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53476: (50%)&lt;BR/&gt; 5999: (50%)&gt;];
}
1365--1366[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.171.92" dst_port="53476" src_ip="46.226.228.211" src_port="5999"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04381,4.36364,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
1580[label="170.15.186.168;s;9pkt 9fpkt", shape=diamond, color=yellow];
1581[label="202.97.90.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
9736[label="170.15.186.168;s;9pkt 9fpkt", shape=hexagon, color=black];
17863[label="170.15.186.168;9pkt 9fpkt", shape=pentagon, color=darkviolet];
24049[label="170.15.186.168;9pkt 9fpkt", shape=invtriangle, color=brown];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.168:*, 193.60.255.104:80}[22.2222%]&lt;BR/&gt;{170.15.186.168:*, 41.148.173.152:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.2432%)&lt;BR/&gt; 50747: (6.75676%)&lt;BR/&gt; 1935: (6.75676%)&lt;BR/&gt; 50869: (5.40541%)&lt;BR/&gt; 50846: (5.40541%)&gt;];
}
1580--1581[label="1;1pkt 1fpkt"];
1580--9736[label="1;9pkt 9fpkt"];
1580--17863[label="1;9pkt 9fpkt"];
1580--24049[label="1;9pkt 9fpkt"];
1581--9736[label="1;1pkt 1fpkt"];
1581--17863[label="1;1pkt 1fpkt"];
1581--24049[label="1;1pkt 1fpkt"];
9736--17863[label="1;9pkt 9fpkt"];
9736--24049[label="1;9pkt 9fpkt"];
17863--24049[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="41.148.173.152" dst_port="80" src_ip="170.15.186.168"/>
      <filter dst_ip="193.60.255.104" dst_port="80" src_ip="170.15.186.168"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.34.89.58"/>
      <from sec="1241500261" usec="0"/>
      <to sec="1241500428" usec="0"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
1747[label="41.213.126.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
1748[label="156.224.113.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
9765[label="156.224.113.146;s;1pkt 1fpkt", shape=hexagon, color=black];
17152[label="156.224.113.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23582[label="156.224.113.146;1pkt 1fpkt", shape=invtriangle, color=brown];
27494[label="156.224.113.146;1pkt 1fpkt", shape=invhouse, color=bisque];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.224.113.146:80, 41.213.126.118:41703}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41703: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1747--1748[label="1;1pkt 1fpkt"];
1747--9765[label="1;1pkt 1fpkt"];
1747--17152[label="1;1pkt 1fpkt"];
1747--23582[label="1;1pkt 1fpkt"];
1747--27494[label="1;1pkt 1fpkt"];
1748--9765[label="1;1pkt 1fpkt"];
1748--17152[label="1;1pkt 1fpkt"];
1748--23582[label="1;1pkt 1fpkt"];
1748--27494[label="1;1pkt 1fpkt"];
9765--17152[label="1;1pkt 1fpkt"];
9765--23582[label="1;1pkt 1fpkt"];
9765--27494[label="1;1pkt 1fpkt"];
17152--23582[label="1;1pkt 1fpkt"];
17152--27494[label="1;1pkt 1fpkt"];
23582--27494[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.213.126.118" dst_port="41703" src_ip="156.224.113.146" src_port="80"/>
    </slice>
    <from sec="1241499646" usec="0"/>
    <to sec="1241499650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
638[label="170.15.187.76;s;40pkt 40fpkt", shape=diamond, color=yellow];
1768[label="87.243.65.65;d;4pkt 4fpkt", shape=diamond, color=yellow];
2008[label="193.76.193.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
4393[label="40.134.38.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.187.76:*, 200.189.105.78:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2729: (2.17391%)&lt;BR/&gt; 2725: (2.17391%)&lt;BR/&gt; 2724: (2.17391%)&lt;BR/&gt; 2709: (2.17391%)&gt;];
}
638--1768[label="1;4pkt 4fpkt"];
638--2008[label="1;1pkt 1fpkt"];
638--4393[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.189.105.78" dst_port="80" src_ip="170.15.187.76"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
777[label="215.66.209.41;d;990pkt 990fpkt", shape=diamond, color=yellow];
2081[label="12.66.42.153;s;984pkt 984fpkt", shape=diamond, color=yellow];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.66.42.153:*, 215.66.209.41:1080}[99.3939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (49.848%)&lt;BR/&gt; 1992: (0.0759878%)&lt;BR/&gt; 5000: (0.0506586%)&lt;BR/&gt; 4987: (0.0506586%)&lt;BR/&gt; 4985: (0.0506586%)&gt;];
}
777--1907[label="0.0010101;1pkt 1fpkt"];
777--2081[label="1;984pkt 984fpkt"];
777--6350[label="0.0010101;1pkt 1fpkt"];
777--9504[label="0.0010101;1pkt 1fpkt"];
777--10624[label="0.0010101;1pkt 1fpkt"];
777--11672[label="0.0010101;1pkt 1fpkt"];
777--11718[label="0.0010101;1pkt 1fpkt"];
777--11792[label="0.0010101;1pkt 1fpkt"];
777--13958[label="0.0010101;1pkt 1fpkt"];
777--14543[label="0.0010101;1pkt 1fpkt"];
777--15347[label="0.0010101;1pkt 1fpkt"];
777--21494[label="0.0010101;1pkt 1fpkt"];
777--22420[label="0.0010101;1pkt 1fpkt"];
777--26305[label="0.0010101;1pkt 1fpkt"];
777--26811[label="0.0010101;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.209.41" dst_port="1080" src_ip="12.66.42.153"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,901,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
1333[label="151.71.197.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
2447[label="116.3.192.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
12605[label="151.71.197.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20600[label="151.71.197.15;1pkt 1fpkt", shape=invtriangle, color=brown];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.71.197.15:49573, 116.3.192.115:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49573: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1333--2447[label="1;1pkt 1fpkt"];
1333--12605[label="1;1pkt 1fpkt"];
1333--20600[label="1;1pkt 1fpkt"];
2447--12605[label="1;1pkt 1fpkt"];
2447--20600[label="1;1pkt 1fpkt"];
12605--20600[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="116.3.192.115" dst_port="554" src_ip="151.71.197.15" src_port="49573"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
2632[label="128.128.199.91;d;876pkt 876fpkt", shape=diamond, color=yellow];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.128.199.91:14722}[97.8311%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14722: (48.9155%)&lt;BR/&gt; 0: (0.684932%)&lt;BR/&gt; 443: (0.570776%)&lt;BR/&gt; 49389: (0.171233%)&lt;BR/&gt; 80: (0.171233%)&gt;];
}
2632--11884[label="0.00114155;1pkt 1fpkt"];
2632--11917[label="0.00114155;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.128.199.91" dst_port="14722"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.73.123.201"/>
      <from sec="1241499654" usec="0"/>
      <to sec="1241499807" usec="0"/>
    </slice>
    <from sec="1241499654" usec="0"/>
    <to sec="1241499807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
1559[label="134.73.229.131;s;86pkt 86fpkt", shape=diamond, color=yellow];
2906[label="61.120.202.203;d;5pkt 5fpkt", shape=diamond, color=yellow];
4379[label="61.120.202.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.229.131:*, *:80}[94.186%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3118%)&lt;BR/&gt; 53619: (1.07527%)&lt;BR/&gt; 1847: (1.07527%)&lt;BR/&gt; 1845: (1.07527%)&lt;BR/&gt; 1841: (1.07527%)&gt;];
}
1559--2906[label="1;5pkt 5fpkt"];
1559--4289[label="0.0116279;1pkt 1fpkt"];
1559--4379[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="134.73.229.131"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
592[label="134.73.32.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
3153[label="222.74.126.250;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.74.126.250:80, 134.73.119.106:1177}[33.3333%]&lt;BR/&gt;{222.74.126.250:80, 134.73.32.112:49575}[33.3333%]&lt;BR/&gt;{222.74.126.250:80, 134.73.32.112:49576}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49576: (20%)&lt;BR/&gt; 49575: (20%)&lt;BR/&gt; 1177: (10%)&gt;];
}
592--3153[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.32.112" dst_port="49576" src_ip="222.74.126.250" src_port="80"/>
      <filter dst_ip="134.73.32.112" dst_port="49575" src_ip="222.74.126.250" src_port="80"/>
      <filter dst_ip="134.73.119.106" dst_port="1177" src_ip="222.74.126.250" src_port="80"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
3319[label="170.15.101.110;d;30pkt 30fpkt", shape=diamond, color=yellow];
3321[label="214.160.76.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.15.101.110:28090}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28090: (45.1613%)&lt;BR/&gt; 1584: (4.83871%)&lt;BR/&gt; 443: (3.22581%)&lt;BR/&gt; 0: (3.22581%)&lt;BR/&gt; 62906: (1.6129%)&gt;];
}
3319--3321[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.101.110" dst_port="28090"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="41.150.249.226"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500428" usec="0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.185.6.252"/>
      <from sec="1241500039" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500039" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
2818[label="151.71.179.100;s;15pkt 15fpkt", shape=diamond, color=yellow];
4253[label="9.13.67.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
9906[label="151.71.179.100;s;13pkt 13fpkt", shape=hexagon, color=black];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.71.179.100:8000, *:8000}[53.3333%]&lt;BR/&gt;{151.71.179.100:*, *:443}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (65.5172%)&lt;BR/&gt; 443: (8.62069%)&lt;BR/&gt; 51119: (3.44828%)&lt;BR/&gt; 51020: (3.44828%)&lt;BR/&gt; 50969: (3.44828%)&gt;];
}
2818--4253[label="1;1pkt 1fpkt"];
2818--9906[label="1;13pkt 13fpkt"];
4253--9906[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="151.71.179.100"/>
      <filter dst_port="8000" src_ip="151.71.179.100" src_port="8000"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241499948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,901,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
3101[label="170.15.186.177;s;139pkt 139fpkt", shape=diamond, color=yellow];
4402[label="193.80.212.165;d;28pkt 28fpkt", shape=diamond, color=yellow];
18142[label="170.15.186.177;141pkt 141fpkt", shape=pentagon, color=darkviolet];
24234[label="170.15.186.177;141pkt 141fpkt", shape=invtriangle, color=brown];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.177:*, 193.80.212.165:80}[28.8732%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3318%)&lt;BR/&gt; 2662: (0.445434%)&lt;BR/&gt; 2660: (0.445434%)&lt;BR/&gt; 2659: (0.445434%)&lt;BR/&gt; 2658: (0.445434%)&gt;];
}
3101--4402[label="1;28pkt 28fpkt"];
3101--7615[label="0.194175;20pkt 20fpkt"];
3101--18142[label="0.992806;138pkt 138fpkt"];
3101--24234[label="0.992806;138pkt 138fpkt"];
4402--18142[label="1;28pkt 28fpkt"];
4402--24234[label="1;28pkt 28fpkt"];
18142--24234[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_ip="193.80.212.165" dst_port="80" src_ip="170.15.186.177"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="1.191.165.118"/>
      <from sec="1241499767" usec="0"/>
      <to sec="1241499996" usec="0"/>
    </slice>
    <from sec="1241499767" usec="0"/>
    <to sec="1241499996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
4470[label="216.136.104.178;d;32pkt 32fpkt", shape=diamond, color=yellow];
4471[label="134.73.96.225;s;32pkt 32fpkt", shape=diamond, color=yellow];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.96.225:*, 216.136.104.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56835: (1.5625%)&lt;BR/&gt; 56751: (1.5625%)&lt;BR/&gt; 56509: (1.5625%)&lt;BR/&gt; 56415: (1.5625%)&lt;BR/&gt; 56308: (1.5625%)&gt;];
}
4470--4471[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="216.136.104.178" src_ip="134.73.96.225"/>
    </slice>
    <from sec="1241499789" usec="0"/>
    <to sec="1241499857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="46.143.86.143"/>
      <from sec="1241499827" usec="0"/>
      <to sec="1241499834" usec="0"/>
    </slice>
    <from sec="1241499827" usec="0"/>
    <to sec="1241499834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
3024[label="35.5.6.250;d;335pkt 335fpkt", shape=diamond, color=yellow];
4573[label="170.15.186.102;s;335pkt 335fpkt", shape=diamond, color=yellow];
11446[label="170.15.186.102;s;335pkt 335fpkt", shape=hexagon, color=black];
15684[label="170.15.186.102;363pkt 363fpkt", shape=pentagon, color=darkviolet];
22626[label="170.15.186.102;363pkt 363fpkt", shape=invtriangle, color=brown];
26941[label="170.15.186.102;363pkt 363fpkt", shape=invhouse, color=bisque];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.102:*, 35.5.6.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53380: (0.143266%)&lt;BR/&gt; 53378: (0.143266%)&lt;BR/&gt; 53376: (0.143266%)&lt;BR/&gt; 53374: (0.143266%)&gt;];
}
3024--4573[label="1;335pkt 335fpkt"];
3024--11446[label="1;335pkt 335fpkt"];
3024--15684[label="1;335pkt 335fpkt"];
3024--22626[label="1;335pkt 335fpkt"];
3024--26941[label="1;335pkt 335fpkt"];
4573--11446[label="1;335pkt 335fpkt"];
4573--15684[label="1;335pkt 335fpkt"];
4573--22626[label="1;335pkt 335fpkt"];
4573--26941[label="1;335pkt 335fpkt"];
11446--15684[label="1;335pkt 335fpkt"];
11446--22626[label="1;335pkt 335fpkt"];
11446--26941[label="1;335pkt 335fpkt"];
15684--22626[label="1;363pkt 363fpkt"];
15684--26941[label="1;363pkt 363fpkt"];
22626--26941[label="1;363pkt 363fpkt"];
</description>
    <slice>
      <filter dst_ip="35.5.6.250" dst_port="80" src_ip="170.15.186.102"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
3320[label="214.160.76.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
4718[label="170.15.101.110;s;56pkt 56fpkt", shape=diamond, color=yellow];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.101.110:28090, *:*}[98.2143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28090: (48.2456%)&lt;BR/&gt; 1584: (2.63158%)&lt;BR/&gt; 443: (1.75439%)&lt;BR/&gt; 62906: (0.877193%)&lt;BR/&gt; 59840: (0.877193%)&gt;];
}
3320--4718[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="170.15.101.110" src_port="28090"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
4880[label="134.73.208.69;s;1073pkt 1073fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.208.69:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4880--5741[label="0.00289855;1pkt 1fpkt"];
4880--7206[label="0.00295858;1pkt 1fpkt"];
4880--7346[label="0.00257732;1pkt 1fpkt"];
4880--7374[label="0.00423729;1pkt 1fpkt"];
4880--8216[label="0.00429185;1pkt 1fpkt"];
4880--8296[label="0.00444444;1pkt 1fpkt"];
4880--8789[label="0.0027027;1pkt 1fpkt"];
4880--8829[label="0.00452489;1pkt 1fpkt"];
4880--8845[label="0.00473934;1pkt 1fpkt"];
4880--8931[label="0.0131579;1pkt 1fpkt"];
4880--11851[label="0.000931966;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.73.208.69"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.66.214.132"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500427" usec="0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.1.2.95"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500427" usec="0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="41.150.249.251"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
4995[label="46.0.96.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
4996[label="170.15.187.138;s;4pkt 4fpkt", shape=diamond, color=yellow];
16896[label="170.15.187.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23424[label="170.15.187.138;1pkt 1fpkt", shape=invtriangle, color=brown];
27400[label="170.15.187.138;1pkt 1fpkt", shape=invhouse, color=bisque];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.187.138:1052, 47.17.132.0:5050}[25%]&lt;BR/&gt;{170.15.187.138:58330, 63.154.163.27:11113}[25%]&lt;BR/&gt;{170.15.187.138:1064, 47.38.222.91:443}[25%]&lt;BR/&gt;{170.15.187.138:3085, 46.0.96.145:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3085: (31.25%)&lt;BR/&gt; 80: (31.25%)&lt;BR/&gt; 58330: (6.25%)&lt;BR/&gt; 11113: (6.25%)&lt;BR/&gt; 5050: (6.25%)&gt;];
}
4995--4996[label="1;1pkt 1fpkt"];
4995--16896[label="1;1pkt 1fpkt"];
4995--23424[label="1;1pkt 1fpkt"];
4995--27400[label="1;1pkt 1fpkt"];
4996--16896[label="1;1pkt 1fpkt"];
4996--23424[label="1;1pkt 1fpkt"];
4996--27400[label="1;1pkt 1fpkt"];
16896--23424[label="1;1pkt 1fpkt"];
16896--27400[label="1;1pkt 1fpkt"];
23424--27400[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="46.0.96.145" dst_port="80" src_ip="170.15.187.138" src_port="3085"/>
      <filter dst_ip="47.38.222.91" dst_port="443" src_ip="170.15.187.138" src_port="1064"/>
      <filter dst_ip="63.154.163.27" dst_port="11113" src_ip="170.15.187.138" src_port="58330"/>
      <filter dst_ip="47.17.132.0" dst_port="5050" src_ip="170.15.187.138" src_port="1052"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.82.137.40"/>
      <from sec="1241500155" usec="0"/>
      <to sec="1241500354" usec="0"/>
    </slice>
    <from sec="1241500155" usec="0"/>
    <to sec="1241500354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.27.132.61"/>
      <from sec="1241499823" usec="0"/>
      <to sec="1241500108" usec="0"/>
    </slice>
    <from sec="1241499823" usec="0"/>
    <to sec="1241500108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
5139[label="134.73.24.128;d;203pkt 203fpkt", shape=diamond, color=yellow];
5446[label="55.74.22.181;s;169pkt 169fpkt", shape=diamond, color=yellow];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.74.22.181:*, 134.73.24.128:80}[98.0296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7312%)&lt;BR/&gt; 3131: (0.268817%)&lt;BR/&gt; 3130: (0.268817%)&lt;BR/&gt; 3129: (0.268817%)&lt;BR/&gt; 3128: (0.268817%)&gt;];
}
5139--5446[label="1;169pkt 169fpkt"];
5139--6233[label="0.00492611;1pkt 1fpkt"];
5139--11869[label="0.00492611;1pkt 1fpkt"];
5139--11904[label="0.00492611;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.24.128" dst_port="80" src_ip="55.74.22.181"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04381,4.36364,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
5463[label="12.246.16.115;d;2pkt 2fpkt", shape=diamond, color=yellow];
5464[label="128.46.105.21;s;2pkt 2fpkt", shape=diamond, color=yellow];
11197[label="128.46.105.21;s;2pkt 2fpkt", shape=hexagon, color=black];
12820[label="128.46.105.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20747[label="128.46.105.21;2pkt 2fpkt", shape=invtriangle, color=brown];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.46.105.21:500, 12.246.16.115:40689}[50%]&lt;BR/&gt;{128.46.105.21:42380, 12.246.16.115:40692}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42380: (25%)&lt;BR/&gt; 40692: (25%)&lt;BR/&gt; 40689: (25%)&lt;BR/&gt; 500: (25%)&gt;];
}
5463--5464[label="1;2pkt 2fpkt"];
5463--11197[label="1;2pkt 2fpkt"];
5463--12820[label="1;2pkt 2fpkt"];
5463--20747[label="1;2pkt 2fpkt"];
5464--11197[label="1;2pkt 2fpkt"];
5464--12820[label="1;2pkt 2fpkt"];
5464--20747[label="1;2pkt 2fpkt"];
11197--12820[label="1;2pkt 2fpkt"];
11197--20747[label="1;2pkt 2fpkt"];
12820--20747[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="12.246.16.115" dst_port="40692" src_ip="128.46.105.21" src_port="42380"/>
      <filter dst_ip="12.246.16.115" dst_port="40689" src_ip="128.46.105.21" src_port="500"/>
    </slice>
    <from sec="1241499865" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="134.73.214.119"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
5782[label="219.72.36.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
5783[label="128.156.98.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.98.161:51978, 219.72.36.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51978: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5782--5783[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.72.36.152" dst_port="80" src_ip="128.156.98.161" src_port="51978"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="151.12.61.168"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500339" usec="0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.15.149.241"/>
      <from sec="1241499602" usec="0"/>
      <to sec="1241500428" usec="0"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
2750[label="134.73.79.101;s;1pkt 1fpkt", shape=diamond, color=yellow];
6001[label="194.198.230.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
9899[label="134.73.79.101;s;1pkt 1fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.79.101:4500, 194.198.230.26:4500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4500: (100%)&gt;];
}
2750--6001[label="1;1pkt 1fpkt"];
2750--9899[label="1;1pkt 1fpkt"];
6001--9899[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.198.230.26" dst_port="4500" src_ip="134.73.79.101" src_port="4500"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
4185[label="134.73.127.77;s;261pkt 261fpkt", shape=diamond, color=yellow];
6103[label="46.226.226.85;d;156pkt 156fpkt", shape=diamond, color=yellow];
10164[label="134.73.127.77;s;92pkt 92fpkt", shape=hexagon, color=black];
14794[label="134.73.127.77;289pkt 289fpkt", shape=pentagon, color=darkviolet];
22046[label="134.73.127.77;289pkt 289fpkt", shape=invtriangle, color=brown];
26603[label="134.73.127.77;289pkt 289fpkt", shape=invhouse, color=bisque];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.127.77:*, 46.226.226.85:80}[62.9758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1642%)&lt;BR/&gt; 110: (0.472384%)&lt;BR/&gt; 0: (0.290698%)&lt;BR/&gt; 51154: (0.218023%)&lt;BR/&gt; 51153: (0.218023%)&gt;];
}
4185--4289[label="0.00383142;1pkt 1fpkt"];
4185--6103[label="1;156pkt 156fpkt"];
4185--10164[label="1;92pkt 92fpkt"];
4185--14794[label="1;261pkt 261fpkt"];
4185--22046[label="1;261pkt 261fpkt"];
4185--26603[label="1;261pkt 261fpkt"];
6103--10164[label="0.706522;65pkt 65fpkt"];
6103--14794[label="1;156pkt 156fpkt"];
6103--22046[label="1;156pkt 156fpkt"];
6103--26603[label="1;156pkt 156fpkt"];
10164--14794[label="1;92pkt 92fpkt"];
10164--22046[label="1;92pkt 92fpkt"];
10164--26603[label="1;92pkt 92fpkt"];
14794--22046[label="1;289pkt 289fpkt"];
14794--26603[label="1;289pkt 289fpkt"];
22046--26603[label="1;289pkt 289fpkt"];
</description>
    <slice>
      <filter dst_ip="46.226.226.85" dst_port="80" src_ip="134.73.127.77"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.132.34.48"/>
      <from sec="1241500248" usec="0"/>
      <to sec="1241500394" usec="0"/>
    </slice>
    <from sec="1241500248" usec="0"/>
    <to sec="1241500394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
5470[label="1.243.9.24;d;3pkt 3fpkt", shape=diamond, color=yellow];
6242[label="170.15.186.203;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.203:3558, 1.243.9.24:62408}[33.3333%]&lt;BR/&gt;{170.15.186.203:3559, 1.243.9.24:62409}[33.3333%]&lt;BR/&gt;{170.15.186.203:3560, 1.243.9.24:54210}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62409: (16.6667%)&lt;BR/&gt; 62408: (16.6667%)&lt;BR/&gt; 54210: (16.6667%)&lt;BR/&gt; 3560: (16.6667%)&lt;BR/&gt; 3559: (16.6667%)&gt;];
}
5470--6242[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="1.243.9.24" dst_port="54210" src_ip="170.15.186.203" src_port="3560"/>
      <filter dst_ip="1.243.9.24" dst_port="62409" src_ip="170.15.186.203" src_port="3559"/>
      <filter dst_ip="1.243.9.24" dst_port="62408" src_ip="170.15.186.203" src_port="3558"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.162.105.154"/>
      <from sec="1241499901" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241499901" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
6375[label="41.213.116.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
6376[label="128.133.90.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
10630[label="128.133.90.69;s;1pkt 1fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.133.90.69:80, 41.213.116.143:36747}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36747: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6375--6376[label="1;1pkt 1fpkt"];
6375--10630[label="1;1pkt 1fpkt"];
6376--10630[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.213.116.143" dst_port="36747" src_ip="128.133.90.69" src_port="80"/>
    </slice>
    <from sec="1241499981" usec="0"/>
    <to sec="1241499989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="69.249.2.32"/>
      <from sec="1241500007" usec="0"/>
      <to sec="1241500248" usec="0"/>
    </slice>
    <from sec="1241500007" usec="0"/>
    <to sec="1241500248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.170.118.12"/>
      <from sec="1241499601" usec="0"/>
      <to sec="1241500428" usec="0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
6651[label="172.204.232.229;d;46pkt 46fpkt", shape=diamond, color=yellow];
6652[label="193.80.195.37;s;48pkt 48fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.80.195.37:20, 172.204.232.229:*}[89.5833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (45.7447%)&lt;BR/&gt; 21: (3.19149%)&lt;BR/&gt; 0: (2.12766%)&lt;BR/&gt; 5046: (1.06383%)&lt;BR/&gt; 5045: (1.06383%)&gt;];
}
6651--6652[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.232.229" src_ip="193.80.195.37" src_port="20"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,004,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="66.75.212.89"/>
      <from sec="1241499602" usec="0"/>
      <to sec="1241500423" usec="0"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.204.211.146"/>
      <from sec="1241499605" usec="0"/>
      <to sec="1241500248" usec="0"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
5964[label="170.15.187.160;s;130pkt 130fpkt", shape=diamond, color=yellow];
6856[label="214.171.210.162;d;96pkt 96fpkt", shape=diamond, color=yellow];
11346[label="170.15.187.160;s;116pkt 116fpkt", shape=hexagon, color=black];
17596[label="170.15.187.160;140pkt 140fpkt", shape=pentagon, color=darkviolet];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.187.160:*, 214.171.210.162:80}[82.9787%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5685%)&lt;BR/&gt; 13391: (5.80913%)&lt;BR/&gt; 35930: (0.622407%)&lt;BR/&gt; 3946: (0.414938%)&lt;BR/&gt; 3944: (0.414938%)&gt;];
}
5964--6856[label="1;96pkt 96fpkt"];
5964--7239[label="0.037037;1pkt 1fpkt"];
5964--11346[label="1;116pkt 116fpkt"];
5964--17596[label="0.992308;129pkt 129fpkt"];
6856--11346[label="1;96pkt 96fpkt"];
6856--17596[label="1;96pkt 96fpkt"];
11346--17596[label="0.991379;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_ip="214.171.210.162" dst_port="80" src_ip="170.15.187.160"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="68.162.105.154"/>
      <from sec="1241499901" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241499901" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="69.249.2.32"/>
      <from sec="1241500007" usec="0"/>
      <to sec="1241500136" usec="0"/>
    </slice>
    <from sec="1241500007" usec="0"/>
    <to sec="1241500136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
7177[label="134.73.119.97;s;499pkt 499fpkt", shape=diamond, color=yellow];
7178[label="208.105.59.145;d;166pkt 166fpkt", shape=diamond, color=yellow];
8629[label="211.10.15.75;d;168pkt 168fpkt", shape=diamond, color=yellow];
8688[label="43.74.17.39;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.119.97:*, 208.105.59.145:80}[59.519%]&lt;BR/&gt;{134.73.119.97:*, 211.10.15.75:80}[33.6673%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3234%)&lt;BR/&gt; 8000: (0.299401%)&lt;BR/&gt; 8240: (0.239521%)&lt;BR/&gt; 51649: (0.11976%)&lt;BR/&gt; 51648: (0.11976%)&gt;];
}
7177--7178[label="1;166pkt 166fpkt"];
7177--8629[label="1;168pkt 168fpkt"];
7177--8688[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.105.59.145" dst_port="80" src_ip="134.73.119.97"/>
      <filter dst_ip="211.10.15.75" dst_port="80" src_ip="134.73.119.97"/>
    </slice>
    <from sec="1241500109" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
7439[label="214.163.51.217;d;139pkt 139fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 214.163.51.217:3006}[46.0432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3006: (48.5612%)&lt;BR/&gt; 1863: (23.3813%)&lt;BR/&gt; 5893: (2.15827%)&lt;BR/&gt; 2684: (1.07914%)&lt;BR/&gt; 33761: (0.719424%)&gt;];
}
7439--8752[label="0.00719424;1pkt 1fpkt"];
7439--11443[label="0.00719424;1pkt 1fpkt"];
7439--11784[label="0.00719424;1pkt 1fpkt"];
7439--18338[label="0.00719424;1pkt 1fpkt"];
7439--24367[label="0.00719424;1pkt 1fpkt"];
7439--27930[label="0.00719424;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.51.217" dst_port="3006" src_port="1863"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.168.2.240"/>
      <from sec="1241499603" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.15.154.243"/>
      <from sec="1241499603" usec="0"/>
      <to sec="1241500428" usec="0"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.6.132.93"/>
      <from sec="1241499926" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241499926" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.202.90.22"/>
      <from sec="1241499979" usec="0"/>
      <to sec="1241500406" usec="0"/>
    </slice>
    <from sec="1241499979" usec="0"/>
    <to sec="1241500406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
5784[label="170.15.186.121;s;35pkt 35fpkt", shape=diamond, color=yellow];
7902[label="215.173.85.134;d;13pkt 13fpkt", shape=diamond, color=yellow];
11514[label="170.15.186.121;s;35pkt 35fpkt", shape=hexagon, color=black];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.121:*, 202.8.252.58:443}[42.8571%]&lt;BR/&gt;{170.15.186.121:*, 215.173.85.134:443}[37.1429%]&lt;BR/&gt;{170.15.186.121:*, *:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (41.5663%)&lt;BR/&gt; 80: (8.43373%)&lt;BR/&gt; 49578: (1.80723%)&lt;BR/&gt; 49575: (1.80723%)&lt;BR/&gt; 49572: (1.80723%)&gt;];
}
5784--7902[label="1;13pkt 13fpkt"];
5784--11514[label="1;35pkt 35fpkt"];
7902--11514[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="170.15.186.121"/>
      <filter dst_ip="202.8.252.58" dst_port="443" src_ip="170.15.186.121"/>
      <filter dst_ip="215.173.85.134" dst_port="443" src_ip="170.15.186.121"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="206.242.46.52"/>
      <from sec="1241499999" usec="0"/>
      <to sec="1241500338" usec="0"/>
    </slice>
    <from sec="1241499999" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
7161[label="21.234.105.169;s;12pkt 12fpkt", shape=diamond, color=yellow];
8019[label="128.46.108.66;d;14pkt 14fpkt", shape=diamond, color=yellow];
17880[label="21.234.105.169;12pkt 12fpkt", shape=pentagon, color=darkviolet];
24064[label="21.234.105.169;12pkt 12fpkt", shape=invtriangle, color=brown];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.234.105.169:*, 128.46.108.66:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49607: (4%)&lt;BR/&gt; 49606: (4%)&lt;BR/&gt; 49605: (4%)&lt;BR/&gt; 49604: (4%)&gt;];
}
7161--8019[label="1;12pkt 12fpkt"];
7161--17880[label="1;12pkt 12fpkt"];
7161--24064[label="1;12pkt 12fpkt"];
8019--17880[label="1;12pkt 12fpkt"];
8019--24064[label="1;12pkt 12fpkt"];
17880--24064[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="128.46.108.66" dst_port="80" src_ip="21.234.105.169"/>
    </slice>
    <from sec="1241500091" usec="0"/>
    <to sec="1241500124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.6.80.20"/>
      <from sec="1241500111" usec="0"/>
      <to sec="1241500304" usec="0"/>
    </slice>
    <from sec="1241500111" usec="0"/>
    <to sec="1241500304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
8081[label="2.161.93.2;d;15pkt 15fpkt", shape=diamond, color=yellow];
8082[label="134.73.11.2;s;15pkt 15fpkt", shape=diamond, color=yellow];
12019[label="134.73.11.2;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.11.2:*, 2.161.93.2:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1553: (3.40909%)&lt;BR/&gt; 1552: (3.40909%)&lt;BR/&gt; 1551: (3.40909%)&lt;BR/&gt; 1550: (3.40909%)&gt;];
}
8081--8082[label="1;15pkt 15fpkt"];
8081--12019[label="1;14pkt 14fpkt"];
8082--12019[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="2.161.93.2" dst_port="80" src_ip="134.73.11.2"/>
    </slice>
    <from sec="1241500137" usec="0"/>
    <to sec="1241500222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
7924[label="134.73.24.39;s;57pkt 57fpkt", shape=diamond, color=yellow];
8084[label="174.134.210.128;d;53pkt 53fpkt", shape=diamond, color=yellow];
13473[label="134.73.24.39;57pkt 57fpkt", shape=pentagon, color=darkviolet];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.24.39:*, 174.134.210.128:80}[92.9825%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8024%)&lt;BR/&gt; 60561: (0.898204%)&lt;BR/&gt; 60540: (0.898204%)&lt;BR/&gt; 59718: (0.898204%)&lt;BR/&gt; 59489: (0.898204%)&gt;];
}
7924--8084[label="1;53pkt 53fpkt"];
7924--13473[label="1;57pkt 57fpkt"];
8084--13473[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="174.134.210.128" dst_port="80" src_ip="134.73.24.39"/>
    </slice>
    <from sec="1241500008" usec="0"/>
    <to sec="1241500251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
6014[label="128.156.218.96;s;192pkt 192fpkt", shape=diamond, color=yellow];
6392[label="203.237.32.17;d;30pkt 30fpkt", shape=diamond, color=yellow];
8146[label="219.157.104.71;d;7pkt 7fpkt", shape=diamond, color=yellow];
9265[label="32.154.16.55;d;19pkt 19fpkt", shape=diamond, color=yellow];
10818[label="128.156.218.96;s;124pkt 124fpkt", shape=hexagon, color=black];
15452[label="128.156.218.96;191pkt 191fpkt", shape=pentagon, color=darkviolet];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.218.96:*, *:80}[72.3958%]&lt;BR/&gt;{128.156.218.96:48530, *:*}[26.0417%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.1456%)&lt;BR/&gt; 48530: (13.0551%)&lt;BR/&gt; 9006: (0.53286%)&lt;BR/&gt; 443: (0.53286%)&lt;BR/&gt; 2076: (0.35524%)&gt;];
}
6014--6392[label="1;30pkt 30fpkt"];
6014--8146[label="1;7pkt 7fpkt"];
6014--9265[label="1;19pkt 19fpkt"];
6014--10818[label="1;124pkt 124fpkt"];
6014--15452[label="1;191pkt 191fpkt"];
6392--10818[label="0.966667;29pkt 29fpkt"];
6392--15452[label="1;30pkt 30fpkt"];
8146--15452[label="1;7pkt 7fpkt"];
9265--15452[label="1;19pkt 19fpkt"];
10818--15452[label="0.991935;123pkt 123fpkt"];
</description>
    <slice>
      <filter src_ip="128.156.218.96" src_port="48530"/>
      <filter dst_port="80" src_ip="128.156.218.96"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="206.179.148.60"/>
      <from sec="1241500214" usec="0"/>
      <to sec="1241500247" usec="0"/>
    </slice>
    <from sec="1241500214" usec="0"/>
    <to sec="1241500247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
5211[label="223.8.247.117;d;44pkt 44fpkt", shape=diamond, color=yellow];
8230[label="170.15.192.166;s;76pkt 76fpkt", shape=diamond, color=yellow];
17809[label="170.15.192.166;76pkt 76fpkt", shape=pentagon, color=darkviolet];
24020[label="170.15.192.166;76pkt 76fpkt", shape=invtriangle, color=brown];
27727[label="170.15.192.166;76pkt 76fpkt", shape=invhouse, color=bisque];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.192.166:*, 223.8.247.117:80}[57.8947%]&lt;BR/&gt;{170.15.192.166:*, 193.52.216.177:80}[39.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4787: (0.718391%)&lt;BR/&gt; 4786: (0.718391%)&lt;BR/&gt; 4785: (0.718391%)&lt;BR/&gt; 4784: (0.718391%)&gt;];
}
5211--8230[label="1;44pkt 44fpkt"];
5211--17809[label="1;44pkt 44fpkt"];
5211--24020[label="1;44pkt 44fpkt"];
5211--27727[label="1;44pkt 44fpkt"];
8230--17809[label="1;76pkt 76fpkt"];
8230--24020[label="1;76pkt 76fpkt"];
8230--27727[label="1;76pkt 76fpkt"];
17809--24020[label="1;76pkt 76fpkt"];
17809--27727[label="1;76pkt 76fpkt"];
24020--27727[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="223.8.247.117" dst_port="80" src_ip="170.15.192.166"/>
      <filter dst_ip="193.52.216.177" dst_port="80" src_ip="170.15.192.166"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="38.132.68.66"/>
      <from sec="1241499603" usec="0"/>
      <to sec="1241500425" usec="0"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
300[label="168.46.12.187;s;15617pkt 15617fpkt", shape=diamond, color=yellow];
6710[label="69.213.49.120;d;100pkt 100fpkt", shape=diamond, color=yellow];
8397[label="66.170.133.92;d;3pkt 3fpkt", shape=diamond, color=yellow];
18425[label="168.46.12.187;18329pkt 18329fpkt", shape=pentagon, color=darkviolet];
24428[label="168.46.12.187;18329pkt 18329fpkt", shape=invtriangle, color=brown];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.46.12.187:36141, *:*}[98.1123%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36141: (49.0635%)&lt;BR/&gt; 443: (0.803773%)&lt;BR/&gt; 80: (0.172782%)&lt;BR/&gt; 60000: (0.0782771%)&lt;BR/&gt; 54045: (0.0276834%)&gt;];
}
300--6710[label="0.89;89pkt 89fpkt"];
300--8397[label="1;3pkt 3fpkt"];
300--11838[label="0.00130293;14pkt 14fpkt"];
300--11868[label="0.00101781;10pkt 10fpkt"];
300--11875[label="0.00075594;7pkt 7fpkt"];
300--11884[label="0.00134424;12pkt 12fpkt"];
300--11897[label="0.00130293;14pkt 14fpkt"];
300--11903[label="0.00101781;10pkt 10fpkt"];
300--11909[label="0.000755858;7pkt 7fpkt"];
300--11917[label="0.00134409;12pkt 12fpkt"];
300--11928[label="0.000755858;7pkt 7fpkt"];
300--18425[label="1;15617pkt 15617fpkt"];
300--24428[label="1;15617pkt 15617fpkt"];
6710--18425[label="1;100pkt 100fpkt"];
6710--24428[label="1;100pkt 100fpkt"];
8397--18425[label="1;3pkt 3fpkt"];
8397--24428[label="1;3pkt 3fpkt"];
18425--24428[label="1;18329pkt 18329fpkt"];
</description>
    <slice>
      <filter src_ip="168.46.12.187" src_port="36141"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="20.206.17.2"/>
      <from sec="1241499911" usec="0"/>
      <to sec="1241500428" usec="0"/>
    </slice>
    <from sec="1241499911" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="5.6.80.20"/>
      <from sec="1241500111" usec="0"/>
      <to sec="1241500304" usec="0"/>
    </slice>
    <from sec="1241500111" usec="0"/>
    <to sec="1241500304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
8430[label="170.15.194.236;d;4pkt 4fpkt", shape=diamond, color=yellow];
8628[label="44.154.161.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.20.195.17:80, 170.15.194.236:4702}[25%]&lt;BR/&gt;{44.154.161.100:63745, 170.15.194.236:1032}[25%]&lt;BR/&gt;{116.20.195.83:8102, 170.15.194.236:1032}[25%]&lt;BR/&gt;{116.20.195.83:80, 170.15.194.236:4700}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (30%)&lt;BR/&gt; 63745: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 8102: (10%)&lt;BR/&gt; 4702: (10%)&gt;];
}
8430--8628[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.194.236" dst_port="4700" src_ip="116.20.195.83" src_port="80"/>
      <filter dst_ip="170.15.194.236" dst_port="1032" src_ip="116.20.195.83" src_port="8102"/>
      <filter dst_ip="170.15.194.236" dst_port="1032" src_ip="44.154.161.100" src_port="63745"/>
      <filter dst_ip="170.15.194.236" dst_port="4702" src_ip="116.20.195.17" src_port="80"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
8637[label="202.94.248.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
8638[label="134.73.158.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
11639[label="202.94.248.234;s;1pkt 1fpkt", shape=hexagon, color=black];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.94.248.234:8010, 134.73.158.166:49984}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49984: (50%)&lt;BR/&gt; 8010: (50%)&gt;];
}
8637--8638[label="1;1pkt 1fpkt"];
8637--11639[label="1;1pkt 1fpkt"];
8638--11639[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.158.166" dst_port="49984" src_ip="202.94.248.234" src_port="8010"/>
    </slice>
    <from sec="1241500179" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.73.158.166"/>
      <from sec="1241500179" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500179" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
8650[label="46.28.88.160;d;188pkt 188fpkt", shape=diamond, color=yellow];
8651[label="168.46.21.62;s;188pkt 188fpkt", shape=diamond, color=yellow];
11641[label="168.46.21.62;s;188pkt 188fpkt", shape=hexagon, color=black];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.46.21.62:*, 46.28.88.160:21}[49.4681%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.734%)&lt;BR/&gt; 60415: (0.531915%)&lt;BR/&gt; 65512: (0.265957%)&lt;BR/&gt; 65404: (0.265957%)&lt;BR/&gt; 65296: (0.265957%)&gt;];
}
8650--8651[label="1;188pkt 188fpkt"];
8650--11641[label="1;188pkt 188fpkt"];
8651--11641[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_ip="46.28.88.160" dst_port="21" src_ip="168.46.21.62"/>
    </slice>
    <from sec="1241500189" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="8.209.161.11"/>
      <from sec="1241500211" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500211" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.10.118.44"/>
      <from sec="1241500252" usec="0"/>
      <to sec="1241500325" usec="0"/>
    </slice>
    <from sec="1241500252" usec="0"/>
    <to sec="1241500325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="218.88.146.49"/>
      <from sec="1241500320" usec="0"/>
      <to sec="1241500342" usec="0"/>
    </slice>
    <from sec="1241500320" usec="0"/>
    <to sec="1241500342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
8903[label="214.163.225.83;d;562pkt 562fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.163.225.83:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56039: (7.38434%)&lt;BR/&gt; 44659: (7.38434%)&lt;BR/&gt; 19389: (7.38434%)&lt;BR/&gt; 53419: (7.29537%)&lt;BR/&gt; 20878: (7.11744%)&gt;];
}
8903--10185[label="0.00177936;1pkt 1fpkt"];
8903--11707[label="0.00177936;1pkt 1fpkt"];
8903--20008[label="0.00355872;2pkt 2fpkt"];
8903--25490[label="0.00355872;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.225.83"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.156.124.52"/>
      <from sec="1241499604" usec="0"/>
      <to sec="1241500426" usec="0"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.32.46.195"/>
      <from sec="1241499950" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241499950" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.14.202.59"/>
      <from sec="1241499999" usec="0"/>
      <to sec="1241500374" usec="0"/>
    </slice>
    <from sec="1241499999" usec="0"/>
    <to sec="1241500374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
9177[label="151.12.127.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
9178[label="68.183.20.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
15036[label="151.12.127.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22212[label="151.12.127.84;1pkt 1fpkt", shape=invtriangle, color=brown];
26693[label="151.12.127.84;1pkt 1fpkt", shape=invhouse, color=bisque];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.12.127.84:0, 68.183.20.76:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9177--9178[label="1;1pkt 1fpkt"];
9177--15036[label="1;1pkt 1fpkt"];
9177--22212[label="1;1pkt 1fpkt"];
9177--26693[label="1;1pkt 1fpkt"];
9178--15036[label="1;1pkt 1fpkt"];
9178--22212[label="1;1pkt 1fpkt"];
9178--26693[label="1;1pkt 1fpkt"];
15036--22212[label="1;1pkt 1fpkt"];
15036--26693[label="1;1pkt 1fpkt"];
22212--26693[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="68.183.20.76" src_ip="151.12.127.84"/>
    </slice>
    <from sec="1241500000" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.7.43.255"/>
      <from sec="1241500074" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500074" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="4.245.133.115"/>
      <from sec="1241500175" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500175" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="46.28.88.160"/>
      <from sec="1241500189" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500189" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.59.196.77"/>
      <from sec="1241500221" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500221" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04381,4.36364,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
8741[label="13.97.45.65;s;4pkt 4fpkt", shape=diamond, color=yellow];
9318[label="170.15.43.18;d;4pkt 4fpkt", shape=diamond, color=yellow];
11647[label="170.15.43.18;d;4pkt 4fpkt", shape=hexagon, color=black];
14322[label="13.97.45.65;4pkt 4fpkt", shape=pentagon, color=darkviolet];
21745[label="13.97.45.65;4pkt 4fpkt", shape=invtriangle, color=brown];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.97.45.65:443, 170.15.43.18:4172}[25%]&lt;BR/&gt;{13.97.45.65:443, 170.15.43.18:4173}[25%]&lt;BR/&gt;{13.97.45.65:443, 170.15.43.18:4174}[25%]&lt;BR/&gt;{13.97.45.65:443, 170.15.43.18:4175}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4175: (12.5%)&lt;BR/&gt; 4174: (12.5%)&lt;BR/&gt; 4173: (12.5%)&lt;BR/&gt; 4172: (12.5%)&gt;];
}
8741--9318[label="1;4pkt 4fpkt"];
8741--11647[label="1;4pkt 4fpkt"];
8741--14322[label="1;4pkt 4fpkt"];
8741--21745[label="1;4pkt 4fpkt"];
9318--11647[label="1;4pkt 4fpkt"];
9318--14322[label="1;4pkt 4fpkt"];
9318--21745[label="1;4pkt 4fpkt"];
11647--14322[label="1;4pkt 4fpkt"];
11647--21745[label="1;4pkt 4fpkt"];
14322--21745[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.43.18" dst_port="4175" src_ip="13.97.45.65" src_port="443"/>
      <filter dst_ip="170.15.43.18" dst_port="4174" src_ip="13.97.45.65" src_port="443"/>
      <filter dst_ip="170.15.43.18" dst_port="4173" src_ip="13.97.45.65" src_port="443"/>
      <filter dst_ip="170.15.43.18" dst_port="4172" src_ip="13.97.45.65" src_port="443"/>
    </slice>
    <from sec="1241500235" usec="0"/>
    <to sec="1241500299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.32.16.221"/>
      <from sec="1241500278" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500278" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="8.178.192.236"/>
      <from sec="1241500285" usec="0"/>
      <to sec="1241500426" usec="0"/>
    </slice>
    <from sec="1241500285" usec="0"/>
    <to sec="1241500426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.39.97.55"/>
      <from sec="1241500301" usec="0"/>
      <to sec="1241500310" usec="0"/>
    </slice>
    <from sec="1241500301" usec="0"/>
    <to sec="1241500310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.186.8.241"/>
      <from sec="1241500327" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500327" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="206.186.8.241"/>
      <from sec="1241500327" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500327" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="13.48.150.101"/>
      <from sec="1241500333" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500333" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="222.64.100.76"/>
      <from sec="1241500334" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500334" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="12.133.187.144"/>
      <from sec="1241500335" usec="0"/>
      <to sec="1241500374" usec="0"/>
    </slice>
    <from sec="1241500335" usec="0"/>
    <to sec="1241500374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="4.25.196.105"/>
      <from sec="1241500353" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.78.8.26"/>
      <from sec="1241500357" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500357" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.66.210.121"/>
      <from sec="1241500388" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500388" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="170.15.221.76"/>
      <from sec="1241500392" usec="0"/>
      <to sec="1241500428" usec="0"/>
    </slice>
    <from sec="1241500392" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.138.42.75"/>
      <from sec="1241500414" usec="0"/>
      <to sec="1241500429" usec="0"/>
    </slice>
    <from sec="1241500414" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04381,4.36364,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
58[label="2.128.145.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
60[label="134.73.144.161;s;2918pkt 2918fpkt", shape=diamond, color=yellow];
198[label="52.108.87.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
371[label="103.162.92.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
548[label="196.20.146.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
675[label="49.98.87.234;d;1pkt 1fpkt", shape=diamond, color=yellow];
703[label="32.97.202.217;d;2pkt 2fpkt", shape=diamond, color=yellow];
793[label="63.167.84.239;d;1pkt 1fpkt", shape=diamond, color=yellow];
794[label="45.238.165.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
905[label="9.86.25.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
944[label="193.72.204.196;d;4pkt 4fpkt", shape=diamond, color=yellow];
986[label="38.211.34.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
1062[label="36.177.225.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
1192[label="37.168.79.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
1236[label="51.219.183.97;d;7pkt 7fpkt", shape=diamond, color=yellow];
1350[label="55.245.168.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
1381[label="46.162.35.100;d;5pkt 5fpkt", shape=diamond, color=yellow];
1636[label="182.0.212.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
1711[label="8.170.82.24;d;2pkt 2fpkt", shape=diamond, color=yellow];
1736[label="55.196.34.104;d;10pkt 10fpkt", shape=diamond, color=yellow];
1744[label="142.37.37.147;d;2pkt 2fpkt", shape=diamond, color=yellow];
1843[label="21.63.126.244;d;2pkt 2fpkt", shape=diamond, color=yellow];
2311[label="60.221.7.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
2456[label="13.134.76.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
2763[label="212.41.105.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
2771[label="44.161.93.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
3737[label="36.180.22.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
3738[label="213.145.16.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
4678[label="56.56.80.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
4773[label="35.111.105.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
5413[label="55.176.164.175;d;7pkt 7fpkt", shape=diamond, color=yellow];
5434[label="57.101.90.118;d;3pkt 3fpkt", shape=diamond, color=yellow];
5486[label="150.65.90.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
5899[label="62.129.76.157;d;24pkt 24fpkt", shape=diamond, color=yellow];
6007[label="182.109.36.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
6074[label="47.238.78.245;d;3pkt 3fpkt", shape=diamond, color=yellow];
6158[label="55.118.105.140;d;4pkt 4fpkt", shape=diamond, color=yellow];
6168[label="8.86.8.101;d;2pkt 2fpkt", shape=diamond, color=yellow];
6238[label="43.224.20.5;d;2pkt 2fpkt", shape=diamond, color=yellow];
6441[label="48.157.155.13;d;3pkt 3fpkt", shape=diamond, color=yellow];
6706[label="56.146.34.91;d;2pkt 2fpkt", shape=diamond, color=yellow];
6852[label="61.16.205.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
6854[label="212.21.195.212;d;4pkt 4fpkt", shape=diamond, color=yellow];
7054[label="202.104.200.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
7146[label="3.11.45.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
7257[label="148.115.96.126;d;6pkt 6fpkt", shape=diamond, color=yellow];
7662[label="61.220.211.58;d;2pkt 2fpkt", shape=diamond, color=yellow];
7668[label="54.126.200.96;d;3pkt 3fpkt", shape=diamond, color=yellow];
7735[label="47.119.44.218;d;2pkt 2fpkt", shape=diamond, color=yellow];
7996[label="32.69.252.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
8468[label="70.130.93.17;d;2pkt 2fpkt", shape=diamond, color=yellow];
8668[label="32.115.144.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
8677[label="219.74.25.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
8924[label="103.158.29.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
8937[label="192.67.213.84;d;4pkt 4fpkt", shape=diamond, color=yellow];
9395[label="54.13.46.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
9489[label="40.200.64.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
9529[label="134.73.144.161;s;1117pkt 1117fpkt", shape=hexagon, color=black];
17634[label="134.73.144.161;3155pkt 3155fpkt", shape=pentagon, color=darkviolet];
23898[label="134.73.144.161;3155pkt 3155fpkt", shape=invtriangle, color=brown];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.144.161:20827, *:*}[72.1343%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20827: (36.1387%)&lt;BR/&gt; 6881: (0.982262%)&lt;BR/&gt; 44916: (0.557887%)&lt;BR/&gt; 51413: (0.424375%)&lt;BR/&gt; 57859: (0.252718%)&gt;];
}
58--60[label="1;1pkt 1fpkt"];
58--9529[label="1;1pkt 1fpkt"];
58--17634[label="1;1pkt 1fpkt"];
58--23898[label="1;1pkt 1fpkt"];
60--198[label="1;1pkt 1fpkt"];
60--371[label="1;1pkt 1fpkt"];
60--548[label="1;1pkt 1fpkt"];
60--675[label="1;1pkt 1fpkt"];
60--703[label="1;2pkt 2fpkt"];
60--793[label="1;1pkt 1fpkt"];
60--794[label="1;1pkt 1fpkt"];
60--905[label="1;1pkt 1fpkt"];
60--944[label="1;4pkt 4fpkt"];
60--986[label="1;1pkt 1fpkt"];
60--1062[label="1;1pkt 1fpkt"];
60--1192[label="1;1pkt 1fpkt"];
60--1236[label="1;7pkt 7fpkt"];
60--1350[label="1;1pkt 1fpkt"];
60--1381[label="1;5pkt 5fpkt"];
60--1636[label="1;1pkt 1fpkt"];
60--1711[label="1;2pkt 2fpkt"];
60--1736[label="1;10pkt 10fpkt"];
60--1744[label="1;2pkt 2fpkt"];
60--1843[label="1;2pkt 2fpkt"];
60--2311[label="1;1pkt 1fpkt"];
60--2456[label="1;1pkt 1fpkt"];
60--2763[label="1;1pkt 1fpkt"];
60--2771[label="1;1pkt 1fpkt"];
60--3535[label="0.333333;1pkt 1fpkt"];
60--3737[label="1;2pkt 2fpkt"];
60--3738[label="1;1pkt 1fpkt"];
60--4678[label="1;1pkt 1fpkt"];
60--4773[label="1;1pkt 1fpkt"];
60--5413[label="1;7pkt 7fpkt"];
60--5434[label="1;3pkt 3fpkt"];
60--5486[label="1;1pkt 1fpkt"];
60--5899[label="1;24pkt 24fpkt"];
60--6007[label="1;1pkt 1fpkt"];
60--6074[label="1;3pkt 3fpkt"];
60--6158[label="1;4pkt 4fpkt"];
60--6168[label="1;2pkt 2fpkt"];
60--6238[label="1;2pkt 2fpkt"];
60--6441[label="1;3pkt 3fpkt"];
60--6704[label="0.0797101;11pkt 11fpkt"];
60--6706[label="1;2pkt 2fpkt"];
60--6762[label="0.00520833;1pkt 1fpkt"];
60--6852[label="1;1pkt 1fpkt"];
60--6854[label="0.75;3pkt 3fpkt"];
60--7054[label="1;1pkt 1fpkt"];
60--7146[label="1;1pkt 1fpkt"];
60--7257[label="0.833333;5pkt 5fpkt"];
60--7662[label="1;2pkt 2fpkt"];
60--7668[label="1;3pkt 3fpkt"];
60--7735[label="1;2pkt 2fpkt"];
60--7996[label="1;1pkt 1fpkt"];
60--8468[label="1;2pkt 2fpkt"];
60--8568[label="0.166667;1pkt 1fpkt"];
60--8668[label="1;1pkt 1fpkt"];
60--8677[label="1;2pkt 2fpkt"];
60--8924[label="1;1pkt 1fpkt"];
60--8937[label="0.75;3pkt 3fpkt"];
60--9395[label="1;1pkt 1fpkt"];
60--9489[label="1;1pkt 1fpkt"];
60--9529[label="1;1117pkt 1117fpkt"];
60--10055[label="0.5;1pkt 1fpkt"];
60--17634[label="1;2918pkt 2918fpkt"];
60--23898[label="1;2918pkt 2918fpkt"];
198--9529[label="1;1pkt 1fpkt"];
198--17634[label="1;1pkt 1fpkt"];
198--23898[label="1;1pkt 1fpkt"];
371--9529[label="1;1pkt 1fpkt"];
371--17634[label="1;1pkt 1fpkt"];
371--23898[label="1;1pkt 1fpkt"];
548--9529[label="1;1pkt 1fpkt"];
548--17634[label="1;1pkt 1fpkt"];
548--23898[label="1;1pkt 1fpkt"];
675--9529[label="1;1pkt 1fpkt"];
675--17634[label="1;1pkt 1fpkt"];
675--23898[label="1;1pkt 1fpkt"];
703--9529[label="0.5;1pkt 1fpkt"];
703--17634[label="1;2pkt 2fpkt"];
703--23898[label="1;2pkt 2fpkt"];
793--9529[label="1;1pkt 1fpkt"];
793--17634[label="1;1pkt 1fpkt"];
793--23898[label="1;1pkt 1fpkt"];
794--9529[label="1;1pkt 1fpkt"];
794--17634[label="1;1pkt 1fpkt"];
794--23898[label="1;1pkt 1fpkt"];
905--9529[label="1;1pkt 1fpkt"];
905--17634[label="1;1pkt 1fpkt"];
905--23898[label="1;1pkt 1fpkt"];
944--9529[label="0.5;2pkt 2fpkt"];
944--17634[label="1;4pkt 4fpkt"];
944--23898[label="1;4pkt 4fpkt"];
986--9529[label="1;1pkt 1fpkt"];
986--17634[label="1;1pkt 1fpkt"];
986--23898[label="1;1pkt 1fpkt"];
1062--9529[label="1;1pkt 1fpkt"];
1062--17634[label="1;1pkt 1fpkt"];
1062--23898[label="1;1pkt 1fpkt"];
1192--9529[label="1;1pkt 1fpkt"];
1192--17634[label="1;1pkt 1fpkt"];
1192--23898[label="1;1pkt 1fpkt"];
1236--9529[label="0.285714;2pkt 2fpkt"];
1236--17634[label="1;7pkt 7fpkt"];
1236--23898[label="1;7pkt 7fpkt"];
1350--9529[label="1;1pkt 1fpkt"];
1350--17634[label="1;1pkt 1fpkt"];
1350--23898[label="1;1pkt 1fpkt"];
1381--9529[label="1;5pkt 5fpkt"];
1381--17634[label="1;5pkt 5fpkt"];
1381--23898[label="1;5pkt 5fpkt"];
1636--9529[label="1;1pkt 1fpkt"];
1636--17634[label="1;1pkt 1fpkt"];
1636--23898[label="1;1pkt 1fpkt"];
1711--9529[label="1;2pkt 2fpkt"];
1711--17634[label="1;2pkt 2fpkt"];
1711--23898[label="1;2pkt 2fpkt"];
1736--9529[label="0.4;4pkt 4fpkt"];
1736--17634[label="1;10pkt 10fpkt"];
1736--23898[label="1;10pkt 10fpkt"];
1744--9529[label="1;2pkt 2fpkt"];
1744--17634[label="1;2pkt 2fpkt"];
1744--23898[label="1;2pkt 2fpkt"];
1843--9529[label="1;2pkt 2fpkt"];
1843--17634[label="1;2pkt 2fpkt"];
1843--23898[label="1;2pkt 2fpkt"];
2311--9529[label="1;1pkt 1fpkt"];
2311--17634[label="1;1pkt 1fpkt"];
2311--23898[label="1;1pkt 1fpkt"];
2456--9529[label="1;1pkt 1fpkt"];
2456--17634[label="1;1pkt 1fpkt"];
2456--23898[label="1;1pkt 1fpkt"];
2763--9529[label="1;1pkt 1fpkt"];
2763--17634[label="1;1pkt 1fpkt"];
2763--23898[label="1;1pkt 1fpkt"];
2771--9529[label="1;1pkt 1fpkt"];
2771--17634[label="1;1pkt 1fpkt"];
2771--23898[label="1;1pkt 1fpkt"];
3737--9529[label="1;2pkt 2fpkt"];
3737--17634[label="1;2pkt 2fpkt"];
3737--23898[label="1;2pkt 2fpkt"];
3738--9529[label="1;1pkt 1fpkt"];
3738--17634[label="1;1pkt 1fpkt"];
3738--23898[label="1;1pkt 1fpkt"];
4678--9529[label="1;1pkt 1fpkt"];
4678--17634[label="1;1pkt 1fpkt"];
4678--23898[label="1;1pkt 1fpkt"];
4773--9529[label="1;1pkt 1fpkt"];
4773--17634[label="1;1pkt 1fpkt"];
4773--23898[label="1;1pkt 1fpkt"];
5413--9529[label="0.285714;2pkt 2fpkt"];
5413--17634[label="1;7pkt 7fpkt"];
5413--23898[label="1;7pkt 7fpkt"];
5434--9529[label="0.666667;2pkt 2fpkt"];
5434--17634[label="1;3pkt 3fpkt"];
5434--23898[label="1;3pkt 3fpkt"];
5486--9529[label="1;1pkt 1fpkt"];
5486--17634[label="1;1pkt 1fpkt"];
5486--23898[label="1;1pkt 1fpkt"];
5899--9529[label="0.416667;10pkt 10fpkt"];
5899--17634[label="1;24pkt 24fpkt"];
5899--23898[label="1;24pkt 24fpkt"];
6007--9529[label="1;1pkt 1fpkt"];
6007--17634[label="1;1pkt 1fpkt"];
6007--23898[label="1;1pkt 1fpkt"];
6074--9529[label="1;3pkt 3fpkt"];
6074--17634[label="1;3pkt 3fpkt"];
6074--23898[label="1;3pkt 3fpkt"];
6158--9529[label="1;4pkt 4fpkt"];
6158--17634[label="1;4pkt 4fpkt"];
6158--23898[label="1;4pkt 4fpkt"];
6168--9529[label="1;2pkt 2fpkt"];
6168--17634[label="1;2pkt 2fpkt"];
6168--23898[label="1;2pkt 2fpkt"];
6238--9529[label="1;2pkt 2fpkt"];
6238--17634[label="1;2pkt 2fpkt"];
6238--23898[label="1;2pkt 2fpkt"];
6441--9529[label="1;3pkt 3fpkt"];
6441--17634[label="1;3pkt 3fpkt"];
6441--23898[label="1;3pkt 3fpkt"];
6706--9529[label="1;2pkt 2fpkt"];
6706--17634[label="1;2pkt 2fpkt"];
6706--23898[label="1;2pkt 2fpkt"];
6852--9529[label="1;1pkt 1fpkt"];
6852--17634[label="1;1pkt 1fpkt"];
6852--23898[label="1;1pkt 1fpkt"];
6854--9529[label="0.75;3pkt 3fpkt"];
6854--9531[label="0.25;1pkt 1fpkt"];
6854--11676[label="0.25;1pkt 1fpkt"];
6854--17634[label="0.75;3pkt 3fpkt"];
6854--19673[label="0.25;1pkt 1fpkt"];
6854--23898[label="0.75;3pkt 3fpkt"];
6854--25265[label="0.25;1pkt 1fpkt"];
6854--28454[label="0.25;1pkt 1fpkt"];
7054--17634[label="1;1pkt 1fpkt"];
7054--23898[label="1;1pkt 1fpkt"];
7146--17634[label="1;1pkt 1fpkt"];
7146--23898[label="1;1pkt 1fpkt"];
7257--9529[label="0.5;3pkt 3fpkt"];
7257--9531[label="0.166667;1pkt 1fpkt"];
7257--11676[label="0.166667;1pkt 1fpkt"];
7257--17634[label="0.833333;5pkt 5fpkt"];
7257--19673[label="0.166667;1pkt 1fpkt"];
7257--23898[label="0.833333;5pkt 5fpkt"];
7257--25265[label="0.166667;1pkt 1fpkt"];
7257--28454[label="0.166667;1pkt 1fpkt"];
7662--9529[label="1;2pkt 2fpkt"];
7662--17634[label="1;2pkt 2fpkt"];
7662--23898[label="1;2pkt 2fpkt"];
7668--9529[label="1;3pkt 3fpkt"];
7668--17634[label="1;3pkt 3fpkt"];
7668--23898[label="1;3pkt 3fpkt"];
7735--9529[label="1;2pkt 2fpkt"];
7735--17634[label="1;2pkt 2fpkt"];
7735--23898[label="1;2pkt 2fpkt"];
7996--17634[label="1;1pkt 1fpkt"];
7996--23898[label="1;1pkt 1fpkt"];
8468--9529[label="1;2pkt 2fpkt"];
8468--17634[label="1;2pkt 2fpkt"];
8468--23898[label="1;2pkt 2fpkt"];
8668--17634[label="1;1pkt 1fpkt"];
8668--23898[label="1;1pkt 1fpkt"];
8677--17634[label="1;2pkt 2fpkt"];
8677--23898[label="1;2pkt 2fpkt"];
8924--9529[label="1;1pkt 1fpkt"];
8924--17634[label="1;1pkt 1fpkt"];
8924--23898[label="1;1pkt 1fpkt"];
8937--9529[label="0.25;1pkt 1fpkt"];
8937--9531[label="0.25;1pkt 1fpkt"];
8937--11676[label="0.25;1pkt 1fpkt"];
8937--17634[label="0.75;3pkt 3fpkt"];
8937--19673[label="0.25;1pkt 1fpkt"];
8937--23898[label="0.75;3pkt 3fpkt"];
8937--25265[label="0.25;1pkt 1fpkt"];
8937--28454[label="0.25;1pkt 1fpkt"];
9395--17634[label="1;1pkt 1fpkt"];
9395--23898[label="1;1pkt 1fpkt"];
9489--17634[label="1;1pkt 1fpkt"];
9489--23898[label="1;1pkt 1fpkt"];
9529--10055[label="0.5;1pkt 1fpkt"];
9529--17634[label="1;1117pkt 1117fpkt"];
9529--23898[label="1;1117pkt 1117fpkt"];
17634--23898[label="1;3155pkt 3155fpkt"];
</description>
    <slice>
      <filter src_ip="134.73.144.161" src_port="20827"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
1031[label="216.141.21.151;d;2pkt 2fpkt", shape=diamond, color=yellow];
1032[label="134.73.0.109;s;455pkt 455fpkt", shape=diamond, color=yellow];
2713[label="216.141.23.107;d;3pkt 3fpkt", shape=diamond, color=yellow];
4485[label="216.141.22.37;d;2pkt 2fpkt", shape=diamond, color=yellow];
4559[label="216.141.20.102;d;2pkt 2fpkt", shape=diamond, color=yellow];
7058[label="216.141.21.23;d;2pkt 2fpkt", shape=diamond, color=yellow];
9662[label="134.73.0.109;s;208pkt 208fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.0.109:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3066: (0.222552%)&lt;BR/&gt; 3054: (0.222552%)&lt;BR/&gt; 2976: (0.222552%)&lt;BR/&gt; 4262: (0.148368%)&gt;];
}
1031--1032[label="1;2pkt 2fpkt"];
1031--9662[label="1;2pkt 2fpkt"];
1032--2713[label="1;3pkt 3fpkt"];
1032--4485[label="1;2pkt 2fpkt"];
1032--4559[label="1;2pkt 2fpkt"];
1032--6633[label="0.00952381;1pkt 1fpkt"];
1032--7058[label="1;2pkt 2fpkt"];
1032--9662[label="1;208pkt 208fpkt"];
2713--9662[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="134.73.0.109"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04744,4.38574,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
1159[label="218.196.177.209;s;405pkt 405fpkt", shape=diamond, color=yellow];
9677[label="218.196.177.209;s;324pkt 324fpkt", shape=hexagon, color=black];
24844[label="218.196.177.209;420pkt 420fpkt", shape=invtriangle, color=brown];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.196.177.209:6667, *:*}[29.7872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (16.4491%)&lt;BR/&gt; 6668: (4.13403%)&lt;BR/&gt; 6666: (3.39426%)&lt;BR/&gt; 6664: (3.00261%)&lt;BR/&gt; 6660: (2.95909%)&gt;];
}
1159--9677[label="1;324pkt 324fpkt"];
1159--11840[label="0.00246914;1pkt 1fpkt"];
1159--24844[label="0.992593;402pkt 402fpkt"];
9677--24844[label="0.990741;321pkt 321fpkt"];
</description>
    <slice>
      <filter src_ip="218.196.177.209" src_port="6667"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1296[label="128.156.91.253;s;5pkt 5fpkt", shape=diamond, color=yellow];
9689[label="128.156.91.253;s;2pkt 2fpkt", shape=hexagon, color=black];
20094[label="128.156.91.253;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.91.253:*, 43.73.4.196:80}[60%]&lt;BR/&gt;{128.156.91.253:*, 116.20.195.17:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50412: (8.82353%)&lt;BR/&gt; 50395: (8.82353%)&lt;BR/&gt; 50417: (5.88235%)&lt;BR/&gt; 50414: (5.88235%)&gt;];
}
1296--9689[label="1;2pkt 2fpkt"];
1296--20094[label="1;5pkt 5fpkt"];
9689--20094[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="43.73.4.196" dst_port="80" src_ip="128.156.91.253"/>
      <filter dst_ip="116.20.195.17" dst_port="80" src_ip="128.156.91.253"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
153[label="170.15.19.144;s;1301pkt 1301fpkt", shape=diamond, color=yellow];
154[label="56.158.168.89;d;504pkt 504fpkt", shape=diamond, color=yellow];
999[label="87.229.227.138;d;930pkt 930fpkt", shape=diamond, color=yellow];
9939[label="170.15.19.144;s;489pkt 489fpkt", shape=hexagon, color=black];
17059[label="170.15.19.144;1560pkt 1560fpkt", shape=pentagon, color=darkviolet];
23521[label="170.15.19.144;1560pkt 1560fpkt", shape=invtriangle, color=brown];
27458[label="170.15.19.144;1560pkt 1560fpkt", shape=invhouse, color=bisque];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.19.144:*, 87.229.227.138:*}[64.1667%]&lt;BR/&gt;{170.15.19.144:*, 56.158.168.89:*}[35.1282%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (1.88512%)&lt;BR/&gt; 4227: (0.113866%)&lt;BR/&gt; 0: (0.113866%)&lt;BR/&gt; 4854: (0.10754%)&lt;BR/&gt; 4567: (0.10754%)&gt;];
}
153--154[label="0.884921;446pkt 446fpkt"];
153--999[label="0.911828;848pkt 848fpkt"];
153--9939[label="1;489pkt 489fpkt"];
153--17059[label="1;1301pkt 1301fpkt"];
153--23521[label="1;1301pkt 1301fpkt"];
153--27458[label="1;1301pkt 1301fpkt"];
154--9939[label="0.333333;163pkt 163fpkt"];
154--17059[label="1;504pkt 504fpkt"];
154--23521[label="1;504pkt 504fpkt"];
154--27458[label="1;504pkt 504fpkt"];
999--9939[label="0.658487;322pkt 322fpkt"];
999--17059[label="1;930pkt 930fpkt"];
999--23521[label="1;930pkt 930fpkt"];
999--27458[label="1;930pkt 930fpkt"];
9939--17059[label="1;489pkt 489fpkt"];
9939--23521[label="1;489pkt 489fpkt"];
9939--27458[label="1;489pkt 489fpkt"];
17059--23521[label="1;1560pkt 1560fpkt"];
17059--27458[label="1;1560pkt 1560fpkt"];
23521--27458[label="1;1560pkt 1560fpkt"];
</description>
    <slice>
      <filter dst_ip="87.229.227.138" src_ip="170.15.19.144"/>
      <filter dst_ip="56.158.168.89" src_ip="170.15.19.144"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
293[label="214.163.229.206;s;3110pkt 3110fpkt", shape=diamond, color=yellow];
795[label="7.1.142.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
1160[label="12.77.221.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
1605[label="206.25.184.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
1888[label="210.0.88.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
2040[label="61.142.88.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
4875[label="67.31.132.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
5371[label="67.21.175.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
5403[label="204.98.106.221;d;2pkt 2fpkt", shape=diamond, color=yellow];
7252[label="195.73.90.15;d;74pkt 74fpkt", shape=diamond, color=yellow];
7740[label="67.29.9.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
9950[label="214.163.229.206;s;2453pkt 2453fpkt", shape=hexagon, color=black];
10934[label="210.0.88.101;d;1pkt 1fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.163.229.206:4678, *:*}[62.8929%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4678: (29.7044%)&lt;BR/&gt; 8000: (10.0195%)&lt;BR/&gt; 0: (7.45265%)&lt;BR/&gt; 4672: (4.45212%)&lt;BR/&gt; 80: (3.41653%)&gt;];
}
293--795[label="1;1pkt 1fpkt"];
293--1160[label="1;1pkt 1fpkt"];
293--1605[label="1;1pkt 1fpkt"];
293--1888[label="1;1pkt 1fpkt"];
293--2040[label="1;1pkt 1fpkt"];
293--3328[label="0.644444;29pkt 29fpkt"];
293--3361[label="0.027027;2pkt 2fpkt"];
293--4875[label="1;1pkt 1fpkt"];
293--5371[label="1;2pkt 2fpkt"];
293--5403[label="1;2pkt 2fpkt"];
293--5677[label="0.5;1pkt 1fpkt"];
293--7252[label="0.891892;66pkt 66fpkt"];
293--7740[label="1;1pkt 1fpkt"];
293--9950[label="1;2453pkt 2453fpkt"];
293--10934[label="1;1pkt 1fpkt"];
293--11839[label="0.000321543;1pkt 1fpkt"];
293--11840[label="0.000643087;2pkt 2fpkt"];
293--11898[label="0.000321543;1pkt 1fpkt"];
795--9950[label="1;1pkt 1fpkt"];
1160--9950[label="1;1pkt 1fpkt"];
1605--9950[label="1;1pkt 1fpkt"];
1888--9950[label="1;1pkt 1fpkt"];
1888--10934[label="1;1pkt 1fpkt"];
2040--9950[label="1;1pkt 1fpkt"];
4875--9950[label="1;1pkt 1fpkt"];
5371--9950[label="1;2pkt 2fpkt"];
5403--9950[label="1;2pkt 2fpkt"];
7252--9950[label="0.486486;36pkt 36fpkt"];
7740--9950[label="1;1pkt 1fpkt"];
9950--10934[label="1;1pkt 1fpkt"];
9950--11839[label="0.000407664;1pkt 1fpkt"];
9950--11840[label="0.000815328;2pkt 2fpkt"];
9950--11898[label="0.000407664;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="214.163.229.206" src_port="4678"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
1125[label="214.163.235.137;s;47pkt 47fpkt", shape=diamond, color=yellow];
10049[label="214.163.235.137;s;47pkt 47fpkt", shape=hexagon, color=black];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.163.235.137:*, 209.1.59.94:80}[78.7234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1220: (1.06383%)&lt;BR/&gt; 1204: (1.06383%)&lt;BR/&gt; 1201: (1.06383%)&lt;BR/&gt; 1199: (1.06383%)&gt;];
}
1125--10049[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="209.1.59.94" dst_port="80" src_ip="214.163.235.137"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
3740[label="215.66.215.75;s;492pkt 492fpkt", shape=diamond, color=yellow];
10097[label="215.66.215.75;s;353pkt 353fpkt", shape=hexagon, color=black];
14735[label="215.66.215.75;4pkt 4fpkt", shape=pentagon, color=darkviolet];
22012[label="215.66.215.75;4pkt 4fpkt", shape=invtriangle, color=brown];
26587[label="215.66.215.75;493pkt 493fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.215.75:0, *:0}[99.5943%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7771%)&lt;BR/&gt; 35388: (0.0742942%)&lt;BR/&gt; 22: (0.0742942%)&lt;BR/&gt; 6000: (0.0371471%)&lt;BR/&gt; 445: (0.0371471%)&gt;];
}
3740--6349[label="0.00203252;1pkt 1fpkt"];
3740--8635[label="0.00203252;1pkt 1fpkt"];
3740--10097[label="1;353pkt 353fpkt"];
3740--14735[label="1;4pkt 4fpkt"];
3740--22012[label="1;4pkt 4fpkt"];
3740--26587[label="1;492pkt 492fpkt"];
10097--14735[label="1;4pkt 4fpkt"];
10097--22012[label="1;4pkt 4fpkt"];
10097--26587[label="1;353pkt 353fpkt"];
14735--22012[label="1;4pkt 4fpkt"];
14735--26587[label="1;4pkt 4fpkt"];
22012--26587[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="215.66.215.75"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
59[label="134.73.144.161;d;185pkt 185fpkt", shape=diamond, color=yellow];
199[label="52.108.87.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
704[label="32.97.202.217;s;2pkt 2fpkt", shape=diamond, color=yellow];
4107[label="182.109.36.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
4108[label="212.41.105.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
6898[label="47.119.44.218;s;2pkt 2fpkt", shape=diamond, color=yellow];
8669[label="32.115.144.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
9181[label="197.94.134.33;s;3pkt 3fpkt", shape=diamond, color=yellow];
10152[label="182.109.36.211;s;1pkt 1fpkt", shape=hexagon, color=black];
10153[label="212.41.105.211;s;1pkt 1fpkt", shape=hexagon, color=black];
10430[label="32.97.202.217;s;1pkt 1fpkt", shape=hexagon, color=black];
10638[label="52.108.87.44;s;1pkt 1fpkt", shape=hexagon, color=black];
12215[label="103.68.108.6;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13271[label="197.94.134.33;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19094[label="212.41.105.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19279[label="32.97.202.217;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19643[label="213.94.214.234;5pkt 5fpkt", shape=pentagon, color=darkviolet];
21049[label="197.94.134.33;3pkt 3fpkt", shape=invtriangle, color=brown];
24884[label="212.41.105.211;1pkt 1fpkt", shape=invtriangle, color=brown];
24995[label="32.97.202.217;3pkt 3fpkt", shape=invtriangle, color=brown];
25244[label="213.94.214.234;5pkt 5fpkt", shape=invtriangle, color=brown];
28225[label="212.41.105.211;1pkt 1fpkt", shape=invhouse, color=bisque];
28286[label="32.97.202.217;3pkt 3fpkt", shape=invhouse, color=bisque];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.73.144.161:20827}[65.4255%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20827: (36.0515%)&lt;BR/&gt; 0: (5.15021%)&lt;BR/&gt; 27835: (2.57511%)&lt;BR/&gt; 80: (2.36052%)&lt;BR/&gt; 58415: (1.28755%)&gt;];
}
59--199[label="1;1pkt 1fpkt"];
59--704[label="1;2pkt 2fpkt"];
59--3972[label="0.25;1pkt 1fpkt"];
59--4107[label="1;1pkt 1fpkt"];
59--4108[label="1;1pkt 1fpkt"];
59--5945[label="0.0797101;11pkt 11fpkt"];
59--6898[label="1;2pkt 2fpkt"];
59--8669[label="1;1pkt 1fpkt"];
59--9181[label="1;3pkt 3fpkt"];
59--10152[label="1;1pkt 1fpkt"];
59--10153[label="1;1pkt 1fpkt"];
59--10430[label="1;1pkt 1fpkt"];
59--10547[label="0.103448;9pkt 9fpkt"];
59--10638[label="1;1pkt 1fpkt"];
59--11553[label="0.25;1pkt 1fpkt"];
59--11838[label="0.00540541;1pkt 1fpkt"];
59--11884[label="0.0108108;2pkt 2fpkt"];
59--11897[label="0.00540541;1pkt 1fpkt"];
59--11917[label="0.0108108;2pkt 2fpkt"];
59--12215[label="0.8;4pkt 4fpkt"];
59--13271[label="0.666667;2pkt 2fpkt"];
59--15952[label="0.0738255;11pkt 11fpkt"];
59--16324[label="0.00775194;1pkt 1fpkt"];
59--19094[label="1;1pkt 1fpkt"];
59--19279[label="0.666667;2pkt 2fpkt"];
59--19643[label="1;5pkt 5fpkt"];
59--21049[label="0.666667;2pkt 2fpkt"];
59--22814[label="0.0738255;11pkt 11fpkt"];
59--24884[label="1;1pkt 1fpkt"];
59--24995[label="0.666667;2pkt 2fpkt"];
59--25244[label="1;5pkt 5fpkt"];
59--27046[label="0.0738255;11pkt 11fpkt"];
59--28225[label="1;1pkt 1fpkt"];
59--28286[label="0.666667;2pkt 2fpkt"];
199--10638[label="1;1pkt 1fpkt"];
704--10430[label="1;1pkt 1fpkt"];
704--19279[label="1;2pkt 2fpkt"];
704--24995[label="1;2pkt 2fpkt"];
704--28286[label="1;2pkt 2fpkt"];
4107--10152[label="1;1pkt 1fpkt"];
4108--10153[label="1;1pkt 1fpkt"];
4108--19094[label="1;1pkt 1fpkt"];
4108--24884[label="1;1pkt 1fpkt"];
4108--28225[label="1;1pkt 1fpkt"];
9181--13271[label="0.666667;2pkt 2fpkt"];
9181--21049[label="0.666667;2pkt 2fpkt"];
10153--19094[label="1;1pkt 1fpkt"];
10153--24884[label="1;1pkt 1fpkt"];
10153--28225[label="1;1pkt 1fpkt"];
10430--19279[label="1;1pkt 1fpkt"];
10430--24995[label="1;1pkt 1fpkt"];
10430--28286[label="1;1pkt 1fpkt"];
13271--21049[label="1;3pkt 3fpkt"];
19094--24884[label="1;1pkt 1fpkt"];
19094--28225[label="1;1pkt 1fpkt"];
19279--24995[label="1;3pkt 3fpkt"];
19279--28286[label="1;3pkt 3fpkt"];
19643--25244[label="1;5pkt 5fpkt"];
24884--28225[label="1;1pkt 1fpkt"];
24995--28286[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.144.161" dst_port="20827"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
125[label="134.73.78.156;d;393pkt 393fpkt", shape=diamond, color=yellow];
1045[label="57.70.142.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
4203[label="44.78.63.188;s;80pkt 80fpkt", shape=diamond, color=yellow];
4629[label="213.32.48.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
10168[label="44.78.63.188;s;39pkt 39fpkt", shape=hexagon, color=black];
10246[label="213.32.48.96;s;1pkt 1fpkt", shape=hexagon, color=black];
15156[label="57.70.142.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18680[label="47.136.161.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.73.78.156:56272}[67.1756%]&lt;BR/&gt;{44.78.63.188:*, 134.73.78.156:*}[20.3562%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56272: (25.8687%)&lt;BR/&gt; 0: (5.59846%)&lt;BR/&gt; 80: (3.66795%)&lt;BR/&gt; 53: (1.35135%)&lt;BR/&gt; 3466: (1.25483%)&gt;];
}
125--1045[label="1;1pkt 1fpkt"];
125--4203[label="1;80pkt 80fpkt"];
125--4629[label="1;1pkt 1fpkt"];
125--7621[label="0.00460829;1pkt 1fpkt"];
125--10168[label="1;39pkt 39fpkt"];
125--10246[label="1;1pkt 1fpkt"];
125--11884[label="0.00254453;1pkt 1fpkt"];
125--11917[label="0.00254453;1pkt 1fpkt"];
125--15156[label="1;1pkt 1fpkt"];
125--18680[label="1;2pkt 2fpkt"];
1045--15156[label="1;1pkt 1fpkt"];
4203--10168[label="1;39pkt 39fpkt"];
4203--11884[label="0.0125;1pkt 1fpkt"];
4203--11917[label="0.0125;1pkt 1fpkt"];
4629--10246[label="1;1pkt 1fpkt"];
10168--11884[label="0.025641;1pkt 1fpkt"];
10168--11917[label="0.025641;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.78.156" src_ip="44.78.63.188"/>
      <filter dst_ip="134.73.78.156" dst_port="56272"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
4710[label="215.66.215.140;s;494pkt 494fpkt", shape=diamond, color=yellow];
10258[label="215.66.215.140;s;413pkt 413fpkt", shape=hexagon, color=black];
16963[label="215.66.215.140;2pkt 2fpkt", shape=pentagon, color=darkviolet];
23463[label="215.66.215.140;2pkt 2fpkt", shape=invtriangle, color=brown];
27424[label="215.66.215.140;2pkt 2fpkt", shape=invhouse, color=bisque];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.215.140:0, *:0}[99.7976%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8905%)&lt;BR/&gt; 35388: (0.0547645%)&lt;BR/&gt; 22: (0.0547645%)&gt;];
}
4710--6349[label="0.00202429;1pkt 1fpkt"];
4710--10258[label="1;413pkt 413fpkt"];
4710--16963[label="1;2pkt 2fpkt"];
4710--23463[label="1;2pkt 2fpkt"];
4710--27424[label="1;2pkt 2fpkt"];
10258--16963[label="1;2pkt 2fpkt"];
10258--23463[label="1;2pkt 2fpkt"];
10258--27424[label="1;2pkt 2fpkt"];
16963--23463[label="1;2pkt 2fpkt"];
16963--27424[label="1;2pkt 2fpkt"];
23463--27424[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="215.66.215.140"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
1779[label="66.180.15.183;d;6pkt 6fpkt", shape=diamond, color=yellow];
2793[label="134.73.6.36;s;126pkt 126fpkt", shape=diamond, color=yellow];
8574[label="66.179.61.246;d;34pkt 34fpkt", shape=diamond, color=yellow];
10336[label="134.73.6.36;s;35pkt 35fpkt", shape=hexagon, color=black];
13369[label="134.73.6.36;130pkt 130fpkt", shape=pentagon, color=darkviolet];
21115[label="134.73.6.36;130pkt 130fpkt", shape=invtriangle, color=brown];
26116[label="134.73.6.36;130pkt 130fpkt", shape=invhouse, color=bisque];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.6.36:*, 66.179.61.246:80}[26.1538%]&lt;BR/&gt;{134.73.6.36:*, 43.89.12.241:80}[21.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3232%)&lt;BR/&gt; 49476: (0.507614%)&lt;BR/&gt; 49475: (0.507614%)&lt;BR/&gt; 49474: (0.507614%)&lt;BR/&gt; 49473: (0.507614%)&gt;];
}
1779--2793[label="1;6pkt 6fpkt"];
1779--10336[label="1;6pkt 6fpkt"];
1779--13369[label="1;6pkt 6fpkt"];
1779--21115[label="1;6pkt 6fpkt"];
1779--26116[label="1;6pkt 6fpkt"];
2793--4235[label="0.00793651;1pkt 1fpkt"];
2793--8574[label="1;34pkt 34fpkt"];
2793--10336[label="1;35pkt 35fpkt"];
2793--13369[label="1;126pkt 126fpkt"];
2793--21115[label="1;126pkt 126fpkt"];
2793--26116[label="1;126pkt 126fpkt"];
8574--13369[label="1;34pkt 34fpkt"];
8574--21115[label="1;34pkt 34fpkt"];
8574--26116[label="1;34pkt 34fpkt"];
10336--13369[label="1;35pkt 35fpkt"];
10336--21115[label="1;35pkt 35fpkt"];
10336--26116[label="1;35pkt 35fpkt"];
13369--21115[label="1;130pkt 130fpkt"];
13369--26116[label="1;130pkt 130fpkt"];
21115--26116[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_ip="66.179.61.246" dst_port="80" src_ip="134.73.6.36"/>
      <filter dst_ip="43.89.12.241" dst_port="80" src_ip="134.73.6.36"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
5484[label="170.15.186.236;s;140pkt 140fpkt", shape=diamond, color=yellow];
6356[label="193.50.179.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
7117[label="193.50.179.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
8202[label="193.50.179.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
8761[label="193.50.179.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
9452[label="193.50.179.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
10374[label="170.15.186.236;s;85pkt 85fpkt", shape=hexagon, color=black];
19699[label="170.15.186.236;140pkt 140fpkt", shape=pentagon, color=darkviolet];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.236:*, 192.244.246.56:80}[55.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63766: (0.540541%)&lt;BR/&gt; 63648: (0.540541%)&lt;BR/&gt; 64093: (0.405405%)&lt;BR/&gt; 64020: (0.405405%)&gt;];
}
5484--6356[label="1;1pkt 1fpkt"];
5484--7117[label="1;1pkt 1fpkt"];
5484--8202[label="1;1pkt 1fpkt"];
5484--8761[label="1;1pkt 1fpkt"];
5484--9452[label="1;1pkt 1fpkt"];
5484--10374[label="1;85pkt 85fpkt"];
5484--19699[label="1;140pkt 140fpkt"];
6356--10374[label="1;1pkt 1fpkt"];
6356--19699[label="1;1pkt 1fpkt"];
7117--10374[label="1;1pkt 1fpkt"];
7117--19699[label="1;1pkt 1fpkt"];
8202--19699[label="1;1pkt 1fpkt"];
8761--19699[label="1;1pkt 1fpkt"];
9452--19699[label="1;1pkt 1fpkt"];
10374--19699[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="192.244.246.56" dst_port="80" src_ip="170.15.186.236"/>
    </slice>
    <from sec="1241499872" usec="0"/>
    <to sec="1241500472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
166[label="218.196.177.214;s;1193pkt 1193fpkt", shape=diamond, color=yellow];
10386[label="218.196.177.214;s;1149pkt 1149fpkt", shape=hexagon, color=black];
19186[label="218.196.177.214;1223pkt 1223fpkt", shape=pentagon, color=darkviolet];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.196.177.214:6667, *:*}[27.3099%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (14.0393%)&lt;BR/&gt; 6660: (5.11921%)&lt;BR/&gt; 6666: (4.60028%)&lt;BR/&gt; 6664: (3.75877%)&lt;BR/&gt; 6662: (3.57644%)&gt;];
}
166--10386[label="1;1149pkt 1149fpkt"];
166--11810[label="0.00167645;2pkt 2fpkt"];
166--19186[label="1;1193pkt 1193fpkt"];
10386--11810[label="0.00174064;2pkt 2fpkt"];
10386--19186[label="1;1149pkt 1149fpkt"];
</description>
    <slice>
      <filter src_ip="218.196.177.214" src_port="6667"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04381,4.36364,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
5356[label="128.133.1.235;s;6pkt 6fpkt", shape=diamond, color=yellow];
10597[label="128.133.1.235;s;6pkt 6fpkt", shape=hexagon, color=black];
19648[label="128.133.1.235;6pkt 6fpkt", shape=pentagon, color=darkviolet];
25246[label="128.133.1.235;6pkt 6fpkt", shape=invtriangle, color=brown];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.133.1.235:*, 194.132.78.152:80}[66.6667%]&lt;BR/&gt;{128.133.1.235:*, 194.132.34.48:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1336: (8.33333%)&lt;BR/&gt; 1334: (8.33333%)&lt;BR/&gt; 1320: (8.33333%)&lt;BR/&gt; 1318: (8.33333%)&gt;];
}
5356--10597[label="1;6pkt 6fpkt"];
5356--19648[label="1;6pkt 6fpkt"];
5356--25246[label="1;6pkt 6fpkt"];
10597--19648[label="1;6pkt 6fpkt"];
10597--25246[label="1;6pkt 6fpkt"];
19648--25246[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="194.132.78.152" dst_port="80" src_ip="128.133.1.235"/>
      <filter dst_ip="194.132.34.48" dst_port="80" src_ip="128.133.1.235"/>
    </slice>
    <from sec="1241499777" usec="0"/>
    <to sec="1241500047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
124[label="60.217.50.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
126[label="134.73.78.156;s;3051pkt 3051fpkt", shape=diamond, color=yellow];
394[label="134.73.78.19;s;1121pkt 1121fpkt", shape=diamond, color=yellow];
489[label="21.39.173.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
537[label="213.32.48.96;d;330pkt 330fpkt", shape=diamond, color=yellow];
1011[label="20.214.14.185;d;2pkt 2fpkt", shape=diamond, color=yellow];
1026[label="46.164.76.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
1044[label="57.70.142.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
1121[label="36.149.129.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
1376[label="45.206.68.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
1452[label="59.34.29.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
2114[label="202.225.152.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
2744[label="39.179.221.130;d;3pkt 3fpkt", shape=diamond, color=yellow];
2825[label="44.9.217.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
3387[label="20.210.224.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
3495[label="20.216.55.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
3584[label="40.52.21.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
3662[label="55.180.30.226;d;3pkt 3fpkt", shape=diamond, color=yellow];
4158[label="34.201.192.172;d;138pkt 138fpkt", shape=diamond, color=yellow];
4202[label="44.78.63.188;d;62pkt 62fpkt", shape=diamond, color=yellow];
4594[label="52.110.253.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
4698[label="37.32.31.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
4833[label="23.97.205.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
4853[label="183.108.232.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
5265[label="48.75.154.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
5648[label="55.173.54.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
5654[label="62.208.29.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
5655[label="50.197.29.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
6022[label="39.97.214.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
6518[label="134.73.32.152;s;625pkt 625fpkt", shape=diamond, color=yellow];
6756[label="54.10.247.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
6776[label="62.251.103.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
7561[label="20.193.69.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
7569[label="62.133.10.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
7714[label="182.45.27.74;d;3pkt 3fpkt", shape=diamond, color=yellow];
7795[label="62.36.232.112;d;156pkt 156fpkt", shape=diamond, color=yellow];
7805[label="48.24.69.29;d;2pkt 2fpkt", shape=diamond, color=yellow];
8246[label="36.182.66.142;d;5pkt 5fpkt", shape=diamond, color=yellow];
8367[label="181.181.57.143;d;3pkt 3fpkt", shape=diamond, color=yellow];
9068[label="46.90.200.82;d;8pkt 8fpkt", shape=diamond, color=yellow];
9143[label="59.62.137.31;d;3pkt 3fpkt", shape=diamond, color=yellow];
10383[label="134.73.78.156;s;2095pkt 2095fpkt", shape=hexagon, color=black];
10717[label="23.97.205.209;d;1pkt 1fpkt", shape=hexagon, color=black];
11022[label="40.52.21.78;d;1pkt 1fpkt", shape=hexagon, color=black];
17470[label="134.73.78.156;3261pkt 3261fpkt", shape=pentagon, color=darkviolet];
23798[label="134.73.78.156;3261pkt 3261fpkt", shape=invtriangle, color=brown];
27610[label="134.73.78.156;3261pkt 3261fpkt", shape=invhouse, color=bisque];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.78.156:56272, *:*}[40.0798%]&lt;BR/&gt;{134.73.78.19:*, *:*}[22.3752%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56272: (27.3004%)&lt;BR/&gt; 0: (3.85741%)&lt;BR/&gt; 80: (3.0911%)&lt;BR/&gt; 42991: (1.53263%)&lt;BR/&gt; 6881: (0.932782%)&gt;];
}
124--126[label="1;1pkt 1fpkt"];
124--10383[label="1;1pkt 1fpkt"];
124--17470[label="1;1pkt 1fpkt"];
124--23798[label="1;1pkt 1fpkt"];
124--27610[label="1;1pkt 1fpkt"];
126--256[label="0.5;1pkt 1fpkt"];
126--489[label="1;1pkt 1fpkt"];
126--537[label="1;330pkt 330fpkt"];
126--1011[label="0.5;1pkt 1fpkt"];
126--1044[label="1;1pkt 1fpkt"];
126--1376[label="1;1pkt 1fpkt"];
126--1452[label="1;1pkt 1fpkt"];
126--2114[label="1;1pkt 1fpkt"];
126--2825[label="1;1pkt 1fpkt"];
126--3098[label="0.00416667;1pkt 1fpkt"];
126--3495[label="1;1pkt 1fpkt"];
126--3584[label="1;1pkt 1fpkt"];
126--4158[label="1;138pkt 138fpkt"];
126--4202[label="1;62pkt 62fpkt"];
126--4581[label="0.00465116;1pkt 1fpkt"];
126--4594[label="1;1pkt 1fpkt"];
126--4770[label="0.00401606;1pkt 1fpkt"];
126--4853[label="1;1pkt 1fpkt"];
126--4861[label="0.00564972;1pkt 1fpkt"];
126--5265[label="1;2pkt 2fpkt"];
126--5648[label="1;1pkt 1fpkt"];
126--5654[label="1;1pkt 1fpkt"];
126--6623[label="0.5;1pkt 1fpkt"];
126--6756[label="1;1pkt 1fpkt"];
126--6776[label="1;1pkt 1fpkt"];
126--7569[label="1;1pkt 1fpkt"];
126--7620[label="0.00564972;1pkt 1fpkt"];
126--7795[label="0.99359;155pkt 155fpkt"];
126--7805[label="0.5;1pkt 1fpkt"];
126--8367[label="0.666667;2pkt 2fpkt"];
126--9068[label="0.75;6pkt 6fpkt"];
126--9143[label="0.666667;2pkt 2fpkt"];
126--10383[label="1;2095pkt 2095fpkt"];
126--10996[label="0.00485437;1pkt 1fpkt"];
126--11022[label="1;1pkt 1fpkt"];
126--11138[label="0.00564972;1pkt 1fpkt"];
126--11806[label="0.00054407;1pkt 1fpkt"];
126--11808[label="0.000790514;2pkt 2fpkt"];
126--11824[label="0.000327761;1pkt 1fpkt"];
126--11838[label="0.000983284;3pkt 3fpkt"];
126--11839[label="0.000327761;1pkt 1fpkt"];
126--11868[label="0.00294985;9pkt 9fpkt"];
126--11875[label="0.00163881;5pkt 5fpkt"];
126--11884[label="0.000655523;2pkt 2fpkt"];
126--11886[label="0.000327761;1pkt 1fpkt"];
126--11896[label="0.000327761;1pkt 1fpkt"];
126--11897[label="0.000983284;3pkt 3fpkt"];
126--11898[label="0.000327761;1pkt 1fpkt"];
126--11903[label="0.00294985;9pkt 9fpkt"];
126--11909[label="0.00163881;5pkt 5fpkt"];
126--11917[label="0.000655523;2pkt 2fpkt"];
126--11922[label="0.000327761;1pkt 1fpkt"];
126--11928[label="0.00163881;5pkt 5fpkt"];
126--17470[label="1;3051pkt 3051fpkt"];
126--23798[label="1;3051pkt 3051fpkt"];
126--27610[label="1;3051pkt 3051fpkt"];
394--1026[label="1;1pkt 1fpkt"];
394--1121[label="1;1pkt 1fpkt"];
394--2744[label="1;3pkt 3fpkt"];
394--3387[label="1;1pkt 1fpkt"];
394--3662[label="1;3pkt 3fpkt"];
394--4698[label="1;1pkt 1fpkt"];
394--4833[label="1;1pkt 1fpkt"];
394--5655[label="1;1pkt 1fpkt"];
394--5791[label="0.5;1pkt 1fpkt"];
394--6022[label="1;1pkt 1fpkt"];
394--6762[label="0.00520833;1pkt 1fpkt"];
394--6812[label="0.00485437;1pkt 1fpkt"];
394--7561[label="1;1pkt 1fpkt"];
394--7712[label="0.833333;5pkt 5fpkt"];
394--7714[label="1;3pkt 3fpkt"];
394--8246[label="0.8;4pkt 4fpkt"];
394--10717[label="1;1pkt 1fpkt"];
489--10383[label="1;1pkt 1fpkt"];
489--17470[label="1;1pkt 1fpkt"];
489--23798[label="1;1pkt 1fpkt"];
489--27610[label="1;1pkt 1fpkt"];
537--10383[label="0.627273;207pkt 207fpkt"];
537--11808[label="0.0030303;1pkt 1fpkt"];
537--11824[label="0.0030303;1pkt 1fpkt"];
537--11838[label="0.00909091;3pkt 3fpkt"];
537--11839[label="0.0030303;1pkt 1fpkt"];
537--11868[label="0.0030303;1pkt 1fpkt"];
537--11875[label="0.0030303;1pkt 1fpkt"];
537--11884[label="0.00606061;2pkt 2fpkt"];
537--11886[label="0.0030303;1pkt 1fpkt"];
537--11896[label="0.0030303;1pkt 1fpkt"];
537--11897[label="0.00909091;3pkt 3fpkt"];
537--11898[label="0.0030303;1pkt 1fpkt"];
537--11903[label="0.0030303;1pkt 1fpkt"];
537--11909[label="0.0030303;1pkt 1fpkt"];
537--11917[label="0.00606061;2pkt 2fpkt"];
537--11922[label="0.0030303;1pkt 1fpkt"];
537--11928[label="0.0030303;1pkt 1fpkt"];
537--17470[label="1;330pkt 330fpkt"];
537--23798[label="1;330pkt 330fpkt"];
537--27610[label="1;330pkt 330fpkt"];
1011--6518[label="0.5;1pkt 1fpkt"];
1011--10383[label="0.5;1pkt 1fpkt"];
1011--17470[label="0.5;1pkt 1fpkt"];
1011--23798[label="0.5;1pkt 1fpkt"];
1011--27610[label="0.5;1pkt 1fpkt"];
1044--10383[label="1;1pkt 1fpkt"];
1044--17470[label="1;1pkt 1fpkt"];
1044--23798[label="1;1pkt 1fpkt"];
1044--27610[label="1;1pkt 1fpkt"];
1376--10383[label="1;1pkt 1fpkt"];
1376--17470[label="1;1pkt 1fpkt"];
1376--23798[label="1;1pkt 1fpkt"];
1376--27610[label="1;1pkt 1fpkt"];
1452--10383[label="1;1pkt 1fpkt"];
1452--17470[label="1;1pkt 1fpkt"];
1452--23798[label="1;1pkt 1fpkt"];
1452--27610[label="1;1pkt 1fpkt"];
2114--10383[label="1;1pkt 1fpkt"];
2114--17470[label="1;1pkt 1fpkt"];
2114--23798[label="1;1pkt 1fpkt"];
2114--27610[label="1;1pkt 1fpkt"];
2825--10383[label="1;1pkt 1fpkt"];
2825--17470[label="1;1pkt 1fpkt"];
2825--23798[label="1;1pkt 1fpkt"];
2825--27610[label="1;1pkt 1fpkt"];
3495--10383[label="1;1pkt 1fpkt"];
3495--17470[label="1;1pkt 1fpkt"];
3495--23798[label="1;1pkt 1fpkt"];
3495--27610[label="1;1pkt 1fpkt"];
3584--10383[label="1;1pkt 1fpkt"];
3584--11022[label="1;1pkt 1fpkt"];
3584--17470[label="1;1pkt 1fpkt"];
3584--23798[label="1;1pkt 1fpkt"];
3584--27610[label="1;1pkt 1fpkt"];
4158--10383[label="0.572464;79pkt 79fpkt"];
4158--17470[label="1;138pkt 138fpkt"];
4158--23798[label="1;138pkt 138fpkt"];
4158--27610[label="1;138pkt 138fpkt"];
4202--10383[label="1;62pkt 62fpkt"];
4202--11806[label="0.016129;1pkt 1fpkt"];
4202--11808[label="0.016129;1pkt 1fpkt"];
4202--17470[label="1;62pkt 62fpkt"];
4202--23798[label="1;62pkt 62fpkt"];
4202--27610[label="1;62pkt 62fpkt"];
4594--10383[label="1;1pkt 1fpkt"];
4594--17470[label="1;1pkt 1fpkt"];
4594--23798[label="1;1pkt 1fpkt"];
4594--27610[label="1;1pkt 1fpkt"];
4833--10717[label="1;1pkt 1fpkt"];
4853--10383[label="1;1pkt 1fpkt"];
4853--17470[label="1;1pkt 1fpkt"];
4853--23798[label="1;1pkt 1fpkt"];
4853--27610[label="1;1pkt 1fpkt"];
5265--10383[label="0.5;1pkt 1fpkt"];
5265--17470[label="1;2pkt 2fpkt"];
5265--23798[label="1;2pkt 2fpkt"];
5265--27610[label="1;2pkt 2fpkt"];
5648--10383[label="1;1pkt 1fpkt"];
5648--17470[label="1;1pkt 1fpkt"];
5648--23798[label="1;1pkt 1fpkt"];
5648--27610[label="1;1pkt 1fpkt"];
5654--10383[label="1;1pkt 1fpkt"];
5654--17470[label="1;1pkt 1fpkt"];
5654--23798[label="1;1pkt 1fpkt"];
5654--27610[label="1;1pkt 1fpkt"];
6518--7795[label="0.00641026;1pkt 1fpkt"];
6518--7805[label="0.5;1pkt 1fpkt"];
6518--8246[label="0.2;1pkt 1fpkt"];
6518--9143[label="0.333333;1pkt 1fpkt"];
6756--10383[label="1;1pkt 1fpkt"];
6756--17470[label="1;1pkt 1fpkt"];
6756--23798[label="1;1pkt 1fpkt"];
6756--27610[label="1;1pkt 1fpkt"];
6776--10383[label="1;1pkt 1fpkt"];
6776--17470[label="1;1pkt 1fpkt"];
6776--23798[label="1;1pkt 1fpkt"];
6776--27610[label="1;1pkt 1fpkt"];
7569--10383[label="1;1pkt 1fpkt"];
7569--17470[label="1;1pkt 1fpkt"];
7569--23798[label="1;1pkt 1fpkt"];
7569--27610[label="1;1pkt 1fpkt"];
7795--10383[label="0.0128205;2pkt 2fpkt"];
7795--11868[label="0.0192308;3pkt 3fpkt"];
7795--11875[label="0.00641026;1pkt 1fpkt"];
7795--11903[label="0.0192308;3pkt 3fpkt"];
7795--11909[label="0.00641026;1pkt 1fpkt"];
7795--11928[label="0.00641026;1pkt 1fpkt"];
7795--17470[label="0.99359;155pkt 155fpkt"];
7795--23798[label="0.99359;155pkt 155fpkt"];
7795--27610[label="0.99359;155pkt 155fpkt"];
7805--10383[label="0.5;1pkt 1fpkt"];
7805--17470[label="0.5;1pkt 1fpkt"];
7805--23798[label="0.5;1pkt 1fpkt"];
7805--27610[label="0.5;1pkt 1fpkt"];
8367--9531[label="0.333333;1pkt 1fpkt"];
8367--10383[label="0.666667;2pkt 2fpkt"];
8367--11676[label="0.333333;1pkt 1fpkt"];
8367--17470[label="0.666667;2pkt 2fpkt"];
8367--19673[label="0.333333;1pkt 1fpkt"];
8367--23798[label="0.666667;2pkt 2fpkt"];
8367--25265[label="0.333333;1pkt 1fpkt"];
8367--27610[label="0.666667;2pkt 2fpkt"];
8367--28454[label="0.333333;1pkt 1fpkt"];
9068--9531[label="0.25;2pkt 2fpkt"];
9068--10383[label="0.75;6pkt 6fpkt"];
9068--11676[label="0.25;2pkt 2fpkt"];
9068--17470[label="0.75;6pkt 6fpkt"];
9068--19673[label="0.25;2pkt 2fpkt"];
9068--23798[label="0.75;6pkt 6fpkt"];
9068--25265[label="0.25;2pkt 2fpkt"];
9068--27610[label="0.75;6pkt 6fpkt"];
9068--28454[label="0.25;2pkt 2fpkt"];
9143--10383[label="0.666667;2pkt 2fpkt"];
9143--17470[label="0.666667;2pkt 2fpkt"];
9143--23798[label="0.666667;2pkt 2fpkt"];
9143--27610[label="0.666667;2pkt 2fpkt"];
10383--10996[label="0.00485437;1pkt 1fpkt"];
10383--11022[label="1;1pkt 1fpkt"];
10383--11806[label="0.00054407;1pkt 1fpkt"];
10383--11808[label="0.000954654;2pkt 2fpkt"];
10383--11824[label="0.000477327;1pkt 1fpkt"];
10383--11838[label="0.000954654;2pkt 2fpkt"];
10383--11868[label="0.000477327;1pkt 1fpkt"];
10383--11884[label="0.000954654;2pkt 2fpkt"];
10383--11886[label="0.000477327;1pkt 1fpkt"];
10383--11896[label="0.000477327;1pkt 1fpkt"];
10383--11897[label="0.000954654;2pkt 2fpkt"];
10383--11903[label="0.000477327;1pkt 1fpkt"];
10383--11917[label="0.000954654;2pkt 2fpkt"];
10383--11922[label="0.000477327;1pkt 1fpkt"];
10383--17470[label="1;2095pkt 2095fpkt"];
10383--23798[label="1;2095pkt 2095fpkt"];
10383--27610[label="1;2095pkt 2095fpkt"];
11022--17470[label="1;1pkt 1fpkt"];
11022--23798[label="1;1pkt 1fpkt"];
11022--27610[label="1;1pkt 1fpkt"];
17470--23798[label="1;3261pkt 3261fpkt"];
17470--27610[label="1;3261pkt 3261fpkt"];
23798--27610[label="1;3261pkt 3261fpkt"];
</description>
    <slice>
      <filter src_ip="134.73.78.19"/>
      <filter src_ip="134.73.78.156" src_port="56272"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04744,4.38574,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
3631[label="41.150.249.232;s;31pkt 31fpkt", shape=diamond, color=yellow];
10736[label="41.150.249.232;s;31pkt 31fpkt", shape=hexagon, color=black];
25212[label="41.150.249.232;31pkt 31fpkt", shape=invtriangle, color=brown];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.232:5050, *:*}[78.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (38.7097%)&lt;BR/&gt; 23: (6.45161%)&lt;BR/&gt; 20: (4.83871%)&lt;BR/&gt; 1042: (3.22581%)&lt;BR/&gt; 65173: (1.6129%)&gt;];
}
3631--10736[label="1;31pkt 31fpkt"];
3631--25212[label="0.967742;30pkt 30fpkt"];
10736--25212[label="0.967742;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.232" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
5794[label="41.150.249.252;s;31pkt 31fpkt", shape=diamond, color=yellow];
10751[label="41.150.249.252;s;30pkt 30fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.252:5050, *:*}[83.871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.8033%)&lt;BR/&gt; 20: (6.55738%)&lt;BR/&gt; 60687: (1.63934%)&lt;BR/&gt; 57673: (1.63934%)&lt;BR/&gt; 54055: (1.63934%)&gt;];
}
5794--10751[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.252" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
6578[label="41.150.249.146;s;13pkt 13fpkt", shape=diamond, color=yellow];
10758[label="41.150.249.146;s;13pkt 13fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.146:5050, *:*}[76.9231%]&lt;BR/&gt;{41.150.249.146:23, *:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (38.4615%)&lt;BR/&gt; 23: (11.5385%)&lt;BR/&gt; 1051: (7.69231%)&lt;BR/&gt; 65505: (3.84615%)&lt;BR/&gt; 3239: (3.84615%)&gt;];
}
6578--10758[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.146" src_port="5050"/>
      <filter src_ip="41.150.249.146" src_port="23"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
3777[label="41.150.249.254;s;28pkt 28fpkt", shape=diamond, color=yellow];
10766[label="41.150.249.254;s;28pkt 28fpkt", shape=hexagon, color=black];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.254:5050, *:*}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (39.2857%)&lt;BR/&gt; 20: (7.14286%)&lt;BR/&gt; 1078: (3.57143%)&lt;BR/&gt; 1033: (3.57143%)&lt;BR/&gt; 23: (3.57143%)&gt;];
}
3777--9530[label="0.0357143;1pkt 1fpkt"];
3777--10766[label="1;28pkt 28fpkt"];
3777--11675[label="0.0357143;1pkt 1fpkt"];
3777--11802[label="0.0357143;1pkt 1fpkt"];
3777--11836[label="0.0357143;1pkt 1fpkt"];
3777--11860[label="0.0357143;1pkt 1fpkt"];
3777--11865[label="0.0357143;1pkt 1fpkt"];
3777--11882[label="0.0357143;1pkt 1fpkt"];
3777--11893[label="0.0357143;1pkt 1fpkt"];
3777--11901[label="0.0357143;1pkt 1fpkt"];
3777--11914[label="0.0357143;1pkt 1fpkt"];
10766--11675[label="0.0357143;1pkt 1fpkt"];
10766--11802[label="0.0357143;1pkt 1fpkt"];
10766--11836[label="0.0357143;1pkt 1fpkt"];
10766--11860[label="0.0357143;1pkt 1fpkt"];
10766--11865[label="0.0357143;1pkt 1fpkt"];
10766--11882[label="0.0357143;1pkt 1fpkt"];
10766--11893[label="0.0357143;1pkt 1fpkt"];
10766--11901[label="0.0357143;1pkt 1fpkt"];
10766--11914[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.254" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
6795[label="170.15.144.224;s;90pkt 90fpkt", shape=diamond, color=yellow];
10821[label="170.15.144.224;s;63pkt 63fpkt", shape=hexagon, color=black];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.144.224:*, 46.62.1.108:80}[81.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4631: (0.653595%)&lt;BR/&gt; 4630: (0.653595%)&lt;BR/&gt; 4629: (0.653595%)&lt;BR/&gt; 4628: (0.653595%)&gt;];
}
6795--10821[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="46.62.1.108" dst_port="80" src_ip="170.15.144.224"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04381,4.36364,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
7003[label="193.5.194.31;s;8pkt 8fpkt", shape=diamond, color=yellow];
10895[label="193.5.194.31;s;8pkt 8fpkt", shape=hexagon, color=black];
13213[label="193.5.194.31;10pkt 10fpkt", shape=pentagon, color=darkviolet];
21007[label="193.5.194.31;10pkt 10fpkt", shape=invtriangle, color=brown];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.5.194.31:80, 170.15.130.46:*}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54412: (5.55556%)&lt;BR/&gt; 34573: (5.55556%)&lt;BR/&gt; 3102: (5.55556%)&lt;BR/&gt; 3101: (5.55556%)&gt;];
}
7003--10895[label="1;8pkt 8fpkt"];
7003--13213[label="1;8pkt 8fpkt"];
7003--21007[label="1;8pkt 8fpkt"];
10895--13213[label="1;8pkt 8fpkt"];
10895--21007[label="1;8pkt 8fpkt"];
13213--21007[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.130.46" src_ip="193.5.194.31" src_port="80"/>
    </slice>
    <from sec="1241499922" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69735,4.48016,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="69.249.2.32"/>
      <from sec="1241500007" usec="0"/>
      <to sec="1241500136" usec="0"/>
    </slice>
    <from sec="1241500007" usec="0"/>
    <to sec="1241500136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
6505[label="215.66.210.6;s;109pkt 109fpkt", shape=diamond, color=yellow];
11001[label="215.66.210.6;s;80pkt 80fpkt", shape=hexagon, color=black];
12232[label="215.66.210.6;125pkt 125fpkt", shape=pentagon, color=darkviolet];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.210.6:11208, *:*}[92.0635%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11208: (45.7006%)&lt;BR/&gt; 3912: (2.38854%)&lt;BR/&gt; 13: (1.43312%)&lt;BR/&gt; 40586: (0.955414%)&lt;BR/&gt; 7046: (0.955414%)&gt;];
}
6505--11001[label="1;80pkt 80fpkt"];
6505--12232[label="0.990826;108pkt 108fpkt"];
11001--12232[label="0.9875;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="215.66.210.6" src_port="11208"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
5889[label="41.150.249.253;s;21pkt 21fpkt", shape=diamond, color=yellow];
11077[label="41.150.249.253;s;21pkt 21fpkt", shape=hexagon, color=black];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.253:5050, *:*}[90.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (45.2381%)&lt;BR/&gt; 23: (4.7619%)&lt;BR/&gt; 58362: (2.38095%)&lt;BR/&gt; 50149: (2.38095%)&lt;BR/&gt; 33771: (2.38095%)&gt;];
}
5889--11077[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.253" src_port="5050"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
5941[label="170.15.154.243;s;100pkt 100fpkt", shape=diamond, color=yellow];
7506[label="162.229.214.46;d;43pkt 43fpkt", shape=diamond, color=yellow];
11102[label="170.15.154.243;s;88pkt 88fpkt", shape=hexagon, color=black];
19875[label="170.15.154.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.154.243:*, 162.229.214.46:443}[40.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 59016: (0.646552%)&lt;BR/&gt; 57743: (0.646552%)&lt;BR/&gt; 57697: (0.646552%)&lt;BR/&gt; 57230: (0.646552%)&gt;];
}
5941--7506[label="0.883721;38pkt 38fpkt"];
5941--11102[label="1;88pkt 88fpkt"];
5941--19875[label="1;1pkt 1fpkt"];
7506--11102[label="0.72093;31pkt 31fpkt"];
7506--19875[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.229.214.46" dst_port="443" src_ip="170.15.154.243"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
7628[label="134.73.158.248;s;636pkt 636fpkt", shape=diamond, color=yellow];
11141[label="134.73.158.248;s;566pkt 566fpkt", shape=hexagon, color=black];
19981[label="134.73.158.248;698pkt 698fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.158.248:*, *:8612}[92.7039%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8612: (46.1842%)&lt;BR/&gt; 80: (3.36842%)&lt;BR/&gt; 7024: (0.447368%)&lt;BR/&gt; 14403: (0.0789474%)&lt;BR/&gt; 14402: (0.0789474%)&gt;];
}
7628--11141[label="1;566pkt 566fpkt"];
7628--19981[label="0.998428;635pkt 635fpkt"];
11141--19981[label="0.998233;565pkt 565fpkt"];
</description>
    <slice>
      <filter dst_port="8612" src_ip="134.73.158.248"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
3643[label="41.150.249.227;s;36pkt 36fpkt", shape=diamond, color=yellow];
11298[label="41.150.249.227;s;36pkt 36fpkt", shape=hexagon, color=black];
19487[label="41.150.249.227;2pkt 2fpkt", shape=pentagon, color=darkviolet];
25131[label="41.150.249.227;2pkt 2fpkt", shape=invtriangle, color=brown];
28372[label="41.150.249.227;2pkt 2fpkt", shape=invhouse, color=bisque];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.227:5050, *:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.8718%)&lt;BR/&gt; 1423: (3.20513%)&lt;BR/&gt; 1072: (3.20513%)&lt;BR/&gt; 1058: (2.5641%)&lt;BR/&gt; 23: (2.5641%)&gt;];
}
3643--11298[label="1;36pkt 36fpkt"];
3643--19487[label="1;2pkt 2fpkt"];
3643--25131[label="1;2pkt 2fpkt"];
3643--28372[label="1;2pkt 2fpkt"];
11298--19487[label="1;2pkt 2fpkt"];
11298--25131[label="1;2pkt 2fpkt"];
11298--28372[label="1;2pkt 2fpkt"];
19487--25131[label="1;2pkt 2fpkt"];
19487--28372[label="1;2pkt 2fpkt"];
25131--28372[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.227" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
8477[label="67.72.210.216;s;831pkt 831fpkt", shape=diamond, color=yellow];
11394[label="67.72.210.216;s;711pkt 711fpkt", shape=hexagon, color=black];
19239[label="67.72.210.216;926pkt 926fpkt", shape=pentagon, color=darkviolet];
24968[label="67.72.210.216;926pkt 926fpkt", shape=invtriangle, color=brown];
28266[label="67.72.210.216;926pkt 926fpkt", shape=invhouse, color=bisque];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.72.210.216:1720, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1720: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
8477--11394[label="1;711pkt 711fpkt"];
8477--19239[label="1;831pkt 831fpkt"];
8477--24968[label="1;831pkt 831fpkt"];
8477--28266[label="1;831pkt 831fpkt"];
11394--19239[label="1;711pkt 711fpkt"];
11394--24968[label="1;711pkt 711fpkt"];
11394--28266[label="1;711pkt 711fpkt"];
19239--24968[label="1;926pkt 926fpkt"];
19239--28266[label="1;926pkt 926fpkt"];
24968--28266[label="1;926pkt 926fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="67.72.210.216" src_port="1720"/>
    </slice>
    <from sec="1241499812" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
7052[label="170.15.19.248;s;52pkt 52fpkt", shape=diamond, color=yellow];
11414[label="170.15.19.248;s;52pkt 52fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.19.248:80, 66.33.13.47:*}[86.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64725: (0.961538%)&lt;BR/&gt; 63613: (0.961538%)&lt;BR/&gt; 61409: (0.961538%)&lt;BR/&gt; 61197: (0.961538%)&gt;];
}
7052--11414[label="1;52pkt 52fpkt"];
7052--11838[label="0.0192308;1pkt 1fpkt"];
7052--11897[label="0.0192308;1pkt 1fpkt"];
11414--11838[label="0.0192308;1pkt 1fpkt"];
11414--11897[label="0.0192308;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="66.33.13.47" src_ip="170.15.19.248" src_port="80"/>
    </slice>
    <from sec="1241499984" usec="0"/>
    <to sec="1241500211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
8043[label="9.204.59.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
11424[label="9.204.59.145;s;1pkt 1fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.204.59.145:47497, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47497: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8043--11424[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="9.204.59.145" src_port="47497"/>
    </slice>
    <from sec="1241500112" usec="0"/>
    <to sec="1241500204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
8107[label="170.15.186.30;s;82pkt 82fpkt", shape=diamond, color=yellow];
11429[label="170.15.186.30;s;82pkt 82fpkt", shape=hexagon, color=black];
13189[label="170.15.186.30;82pkt 82fpkt", shape=pentagon, color=darkviolet];
20988[label="170.15.186.30;82pkt 82fpkt", shape=invtriangle, color=brown];
26048[label="170.15.186.30;82pkt 82fpkt", shape=invhouse, color=bisque];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.30:*, 193.60.255.36:80}[75.6098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49258: (0.609756%)&lt;BR/&gt; 49257: (0.609756%)&lt;BR/&gt; 49256: (0.609756%)&lt;BR/&gt; 49255: (0.609756%)&gt;];
}
8107--11429[label="1;82pkt 82fpkt"];
8107--13189[label="1;82pkt 82fpkt"];
8107--20988[label="1;82pkt 82fpkt"];
8107--26048[label="1;82pkt 82fpkt"];
11429--13189[label="1;82pkt 82fpkt"];
11429--20988[label="1;82pkt 82fpkt"];
11429--26048[label="1;82pkt 82fpkt"];
13189--20988[label="1;82pkt 82fpkt"];
13189--26048[label="1;82pkt 82fpkt"];
20988--26048[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="193.60.255.36" dst_port="80" src_ip="170.15.186.30"/>
    </slice>
    <from sec="1241500151" usec="0"/>
    <to sec="1241500371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
8166[label="203.36.22.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
11434[label="203.36.22.145;s;1pkt 1fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.36.22.145:31943, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31943: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8166--11434[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="203.36.22.145" src_port="31943"/>
    </slice>
    <from sec="1241500190" usec="0"/>
    <to sec="1241500295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.08312,4.36317,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
8770[label="203.118.172.217;s;3pkt 3fpkt", shape=diamond, color=yellow];
11444[label="203.118.172.217;s;3pkt 3fpkt", shape=hexagon, color=black];
19277[label="203.118.172.217;3pkt 3fpkt", shape=pentagon, color=darkviolet];
28284[label="203.118.172.217;3pkt 3fpkt", shape=invhouse, color=bisque];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.118.172.217:57451, 215.66.214.16:80}[33.3333%]&lt;BR/&gt;{203.118.172.217:57452, 215.66.214.16:80}[33.3333%]&lt;BR/&gt;{203.118.172.217:57453, 215.66.214.16:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57453: (16.6667%)&lt;BR/&gt; 57452: (16.6667%)&lt;BR/&gt; 57451: (16.6667%)&gt;];
}
8770--11444[label="1;3pkt 3fpkt"];
8770--19277[label="1;3pkt 3fpkt"];
8770--28284[label="1;3pkt 3fpkt"];
11444--19277[label="1;3pkt 3fpkt"];
11444--28284[label="1;3pkt 3fpkt"];
19277--28284[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="203.118.172.217" src_port="57453"/>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="203.118.172.217" src_port="57452"/>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="203.118.172.217" src_port="57451"/>
    </slice>
    <from sec="1241500318" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
748[label="214.163.245.216;s;4802pkt 4802fpkt", shape=diamond, color=yellow];
11469[label="214.163.245.216;s;4802pkt 4802fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.163.245.216:20481, *:*}[99.9792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20481: (49.9896%)&lt;BR/&gt; 16001: (0.478967%)&lt;BR/&gt; 6881: (0.354019%)&lt;BR/&gt; 10000: (0.0832986%)&lt;BR/&gt; 6882: (0.0728863%)&gt;];
}
748--1081[label="0.5;1pkt 1fpkt"];
748--8859[label="0.0204082;1pkt 1fpkt"];
748--11469[label="1;4802pkt 4802fpkt"];
</description>
    <slice>
      <filter src_ip="214.163.245.216" src_port="20481"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.02296,4.40559,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
8255[label="170.15.82.150;s;105pkt 105fpkt", shape=diamond, color=yellow];
11498[label="170.15.82.150;s;105pkt 105fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.82.150:28818, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28818: (20%)&lt;BR/&gt; 8080: (1.90476%)&lt;BR/&gt; 62537: (0.952381%)&lt;BR/&gt; 48638: (0.952381%)&lt;BR/&gt; 41721: (0.952381%)&gt;];
}
8255--11498[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="170.15.82.150" src_port="28818"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
3640[label="41.150.249.234;s;28pkt 28fpkt", shape=diamond, color=yellow];
11509[label="41.150.249.234;s;28pkt 28fpkt", shape=hexagon, color=black];
19647[label="41.150.249.234;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.234:5050, *:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (35.7143%)&lt;BR/&gt; 23: (7.14286%)&lt;BR/&gt; 20: (7.14286%)&lt;BR/&gt; 56173: (1.78571%)&lt;BR/&gt; 51467: (1.78571%)&gt;];
}
3640--11509[label="1;28pkt 28fpkt"];
3640--19647[label="1;28pkt 28fpkt"];
11509--19647[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.234" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69735,4.48016,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="5.6.80.20"/>
      <from sec="1241500111" usec="0"/>
      <to sec="1241500304" usec="0"/>
    </slice>
    <from sec="1241500111" usec="0"/>
    <to sec="1241500304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69735,4.48016,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="8.178.192.236"/>
      <from sec="1241500285" usec="0"/>
      <to sec="1241500426" usec="0"/>
    </slice>
    <from sec="1241500285" usec="0"/>
    <to sec="1241500426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
8754[label="204.1.198.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
11656[label="204.1.198.97;s;1pkt 1fpkt", shape=hexagon, color=black];
15500[label="204.1.198.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22514[label="204.1.198.97;1pkt 1fpkt", shape=invtriangle, color=brown];
26875[label="204.1.198.97;1pkt 1fpkt", shape=invhouse, color=bisque];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.1.198.97:43858, 215.66.214.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43858: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8754--11656[label="1;1pkt 1fpkt"];
8754--15500[label="1;1pkt 1fpkt"];
8754--22514[label="1;1pkt 1fpkt"];
8754--26875[label="1;1pkt 1fpkt"];
11656--15500[label="1;1pkt 1fpkt"];
11656--22514[label="1;1pkt 1fpkt"];
11656--26875[label="1;1pkt 1fpkt"];
15500--22514[label="1;1pkt 1fpkt"];
15500--26875[label="1;1pkt 1fpkt"];
22514--26875[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="204.1.198.97" src_port="43858"/>
    </slice>
    <from sec="1241500291" usec="0"/>
    <to sec="1241500362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
9488[label="203.227.97.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
11671[label="203.227.97.240;s;1pkt 1fpkt", shape=hexagon, color=black];
19790[label="203.227.97.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25347[label="203.227.97.240;1pkt 1fpkt", shape=invtriangle, color=brown];
28503[label="203.227.97.240;1pkt 1fpkt", shape=invhouse, color=bisque];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.227.97.240:47331, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47331: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9488--11671[label="1;1pkt 1fpkt"];
9488--19790[label="1;1pkt 1fpkt"];
9488--25347[label="1;1pkt 1fpkt"];
9488--28503[label="1;1pkt 1fpkt"];
11671--19790[label="1;1pkt 1fpkt"];
11671--25347[label="1;1pkt 1fpkt"];
11671--28503[label="1;1pkt 1fpkt"];
19790--25347[label="1;1pkt 1fpkt"];
19790--28503[label="1;1pkt 1fpkt"];
25347--28503[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="203.227.97.240" src_port="47331"/>
    </slice>
    <from sec="1241500371" usec="0"/>
    <to sec="1241500426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
8735[label="54.51.98.79;s;4pkt 4fpkt", shape=diamond, color=yellow];
8738[label="170.15.44.74;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.51.98.79:80, 215.66.219.235:61676}[25%]&lt;BR/&gt;{54.51.98.79:80, 170.15.202.241:2609}[25%]&lt;BR/&gt;{54.51.98.79:80, 170.15.44.74:4125}[25%]&lt;BR/&gt;{54.51.98.79:80, 170.15.44.74:4126}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4126: (16.6667%)&lt;BR/&gt; 4125: (16.6667%)&lt;BR/&gt; 61676: (8.33333%)&lt;BR/&gt; 2609: (8.33333%)&gt;];
}
8735--8738[label="1;2pkt 2fpkt"];
8735--9530[label="0.25;1pkt 1fpkt"];
8735--11675[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.44.74" dst_port="4126" src_ip="54.51.98.79" src_port="80"/>
      <filter dst_ip="170.15.44.74" dst_port="4125" src_ip="54.51.98.79" src_port="80"/>
      <filter dst_ip="170.15.202.241" dst_port="2609" src_ip="54.51.98.79" src_port="80"/>
      <filter dst_ip="215.66.219.235" dst_port="61676" src_ip="54.51.98.79" src_port="80"/>
    </slice>
    <from sec="1241500269" usec="0"/>
    <to sec="1241500287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1093[label="170.15.184.71;d;5pkt 5fpkt", shape=diamond, color=yellow];
1096[label="193.80.129.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
17593[label="193.80.129.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.154.163.18:11113, 170.15.184.71:36332}[20%]&lt;BR/&gt;{47.17.132.19:5050, 170.15.184.71:1056}[20%]&lt;BR/&gt;{47.38.222.90:5050, 170.15.184.71:1077}[20%]&lt;BR/&gt;{193.80.129.160:554, 170.15.184.71:4734}[20%]&lt;BR/&gt;{67.9.93.169:1455, 170.15.184.71:60774}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4734: (21.4286%)&lt;BR/&gt; 554: (21.4286%)&lt;BR/&gt; 5050: (14.2857%)&lt;BR/&gt; 60774: (7.14286%)&lt;BR/&gt; 36332: (7.14286%)&gt;];
}
1093--1096[label="1;1pkt 1fpkt"];
1093--2066[label="0.2;1pkt 1fpkt"];
1093--17593[label="1;1pkt 1fpkt"];
1096--17593[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.184.71" dst_port="60774" src_ip="67.9.93.169" src_port="1455"/>
      <filter dst_ip="170.15.184.71" dst_port="4734" src_ip="193.80.129.160" src_port="554"/>
      <filter dst_ip="170.15.184.71" dst_port="1077" src_ip="47.38.222.90" src_port="5050"/>
      <filter dst_ip="170.15.184.71" dst_port="1056" src_ip="47.17.132.19" src_port="5050"/>
      <filter dst_ip="170.15.184.71" dst_port="36332" src_ip="63.154.163.18" src_port="11113"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
7921[label="40.220.87.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
14670[label="9.95.61.74;5pkt 5fpkt", shape=pentagon, color=darkviolet];
17452[label="47.38.222.155;10pkt 10fpkt", shape=pentagon, color=darkviolet];
17876[label="40.220.87.169;3pkt 3fpkt", shape=pentagon, color=darkviolet];
18609[label="205.180.152.193;9pkt 9fpkt", shape=pentagon, color=darkviolet];
21970[label="9.95.61.74;5pkt 5fpkt", shape=invtriangle, color=brown];
23783[label="47.38.222.155;10pkt 10fpkt", shape=invtriangle, color=brown];
24061[label="40.220.87.169;3pkt 3fpkt", shape=invtriangle, color=brown];
24559[label="205.180.152.193;9pkt 9fpkt", shape=invtriangle, color=brown];
26567[label="9.95.61.74;5pkt 5fpkt", shape=invhouse, color=bisque];
27750[label="40.220.87.169;3pkt 3fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.66.219.235:*}[40.7407%]&lt;BR/&gt;{47.38.222.155:5050, *:*}[33.3333%]&lt;BR/&gt;{205.180.152.193:*, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (14.2857%)&lt;BR/&gt; 26957: (11.9048%)&lt;BR/&gt; 10846: (7.93651%)&lt;BR/&gt; 445: (7.93651%)&lt;BR/&gt; 63146: (3.1746%)&gt;];
}
7921--9530[label="1;1pkt 1fpkt"];
7921--11675[label="1;1pkt 1fpkt"];
7921--11860[label="1;1pkt 1fpkt"];
7921--11865[label="1;1pkt 1fpkt"];
7921--11901[label="1;1pkt 1fpkt"];
7921--17876[label="1;1pkt 1fpkt"];
7921--24061[label="1;1pkt 1fpkt"];
7921--27750[label="1;1pkt 1fpkt"];
14670--21970[label="1;5pkt 5fpkt"];
14670--26567[label="1;5pkt 5fpkt"];
17452--23783[label="1;10pkt 10fpkt"];
17876--24061[label="1;3pkt 3fpkt"];
17876--27750[label="1;3pkt 3fpkt"];
18609--24559[label="1;9pkt 9fpkt"];
21970--26567[label="1;5pkt 5fpkt"];
24061--27750[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="205.180.152.193"/>
      <filter dst_ip="215.66.219.235"/>
      <filter src_ip="47.38.222.155" src_port="5050"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.58.14.0"/>
    </slice>
    <from sec="1241499770" usec="0"/>
    <to sec="1241499856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.155.14.0"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.28.17.0"/>
    </slice>
    <from sec="1241499635" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.244.23.0"/>
    </slice>
    <from sec="1241500020" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.88.24.0"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.183.76.0"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.231.83.0"/>
    </slice>
    <from sec="1241500178" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.168.99.0"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.67.103.0"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.162.0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.61.181.0"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.199.0"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.229.0"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241500219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.59.1"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.12.106.1"/>
    </slice>
    <from sec="1241500150" usec="0"/>
    <to sec="1241500230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.137.1"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.78.146.1"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.192.236.1"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.52.238.1"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.125.2.2"/>
    </slice>
    <from sec="1241500016" usec="0"/>
    <to sec="1241500076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.5.2"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.185.20.2"/>
    </slice>
    <from sec="1241499912" usec="0"/>
    <to sec="1241500091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.221.75.2"/>
    </slice>
    <from sec="1241499922" usec="0"/>
    <to sec="1241500054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.14.165.2"/>
    </slice>
    <from sec="1241500381" usec="0"/>
    <to sec="1241500389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.5.229.2"/>
    </slice>
    <from sec="1241499927" usec="0"/>
    <to sec="1241499946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.251.2"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.142.17.3"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.125.59.3"/>
    </slice>
    <from sec="1241500105" usec="0"/>
    <to sec="1241500149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.91.69.3"/>
    </slice>
    <from sec="1241499698" usec="0"/>
    <to sec="1241500306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.38.73.3"/>
    </slice>
    <from sec="1241499801" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.222.80.3"/>
    </slice>
    <from sec="1241499961" usec="0"/>
    <to sec="1241500250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.249.89.3"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.75.105.3"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.71.109.3"/>
    </slice>
    <from sec="1241500135" usec="0"/>
    <to sec="1241500419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.12.136.3"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.241.160.3"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241499901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.4.167.3"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.67.178.3"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.57.201.3"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.208.3"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.211.3"/>
    </slice>
    <from sec="1241500451" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.237.3"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.104.241.3"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.114.242.3"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.228.244.3"/>
    </slice>
    <from sec="1241499741" usec="0"/>
    <to sec="1241499803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.111.13.4"/>
    </slice>
    <from sec="1241500338" usec="0"/>
    <to sec="1241500418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.64.38.4"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.56.4"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.51.64.4"/>
    </slice>
    <from sec="1241499894" usec="0"/>
    <to sec="1241499910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.141.64.4"/>
    </slice>
    <from sec="1241500304" usec="0"/>
    <to sec="1241500336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.71.69.4"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.119.75.4"/>
    </slice>
    <from sec="1241499678" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.81.88.4"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.223.98.4"/>
    </slice>
    <from sec="1241500318" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.26.102.4"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.67.106.4"/>
    </slice>
    <from sec="1241500186" usec="0"/>
    <to sec="1241500214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.108.4"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.161.143.4"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.10.167.4"/>
    </slice>
    <from sec="1241499889" usec="0"/>
    <to sec="1241499898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.178.4"/>
    </slice>
    <from sec="1241499969" usec="0"/>
    <to sec="1241500066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.9.189.4"/>
    </slice>
    <from sec="1241499962" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.104.218.4"/>
    </slice>
    <from sec="1241500465" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.183.250.4"/>
    </slice>
    <from sec="1241500452" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.171.18.5"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.210.47.5"/>
    </slice>
    <from sec="1241499689" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.53.5"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
4961[label="172.16.64.5;s;169pkt 169fpkt", shape=diamond, color=yellow];
12158[label="172.16.64.5;168pkt 168fpkt", shape=pentagon, color=darkviolet];
20298[label="172.16.64.5;168pkt 168fpkt", shape=invtriangle, color=brown];
25666[label="172.16.64.5;168pkt 168fpkt", shape=invhouse, color=bisque];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.16.64.5:47117, *:623}[99.4083%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47117: (49.7028%)&lt;BR/&gt; 623: (49.7028%)&lt;BR/&gt; 123: (0.594354%)&gt;];
}
4961--12158[label="1;168pkt 168fpkt"];
4961--20298[label="1;168pkt 168fpkt"];
4961--25666[label="1;168pkt 168fpkt"];
12158--20298[label="1;168pkt 168fpkt"];
12158--25666[label="1;168pkt 168fpkt"];
20298--25666[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="623" src_ip="172.16.64.5" src_port="47117"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.167.70.5"/>
    </slice>
    <from sec="1241500028" usec="0"/>
    <to sec="1241500055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.19.77.5"/>
    </slice>
    <from sec="1241499943" usec="0"/>
    <to sec="1241500009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.151.79.5"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.125.83.5"/>
    </slice>
    <from sec="1241499656" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.239.93.5"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.213.113.5"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.161.141.5"/>
    </slice>
    <from sec="1241499863" usec="0"/>
    <to sec="1241500196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.86.168.5"/>
    </slice>
    <from sec="1241499980" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.179.5"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
12183[label="215.66.202.5;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.202.5:0, *:0}[98.0392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0392%)&lt;BR/&gt; 35388: (0.490196%)&lt;BR/&gt; 6000: (0.490196%)&lt;BR/&gt; 445: (0.490196%)&lt;BR/&gt; 22: (0.490196%)&gt;];
}
</description>
    <slice>
      <filter src_ip="215.66.202.5"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.224.231.5"/>
    </slice>
    <from sec="1241500115" usec="0"/>
    <to sec="1241500121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.77.11.6"/>
    </slice>
    <from sec="1241499638" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.212.36.6"/>
    </slice>
    <from sec="1241500051" usec="0"/>
    <to sec="1241500443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.247.38.6"/>
    </slice>
    <from sec="1241499905" usec="0"/>
    <to sec="1241499975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.56.6"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.65.6"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.143.66.6"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.179.68.6"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.241.74.6"/>
    </slice>
    <from sec="1241500307" usec="0"/>
    <to sec="1241500345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.75.86.6"/>
    </slice>
    <from sec="1241500343" usec="0"/>
    <to sec="1241500454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.50.131.6"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.191.136.6"/>
    </slice>
    <from sec="1241499722" usec="0"/>
    <to sec="1241499736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.161.143.6"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.159.6"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.177.196.6"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.193.210.6"/>
    </slice>
    <from sec="1241500111" usec="0"/>
    <to sec="1241500133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.16.224.6"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.71.228.6"/>
    </slice>
    <from sec="1241500295" usec="0"/>
    <to sec="1241500337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.118.0.7"/>
    </slice>
    <from sec="1241500496" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.8.21.7"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.24.7"/>
    </slice>
    <from sec="1241499959" usec="0"/>
    <to sec="1241499969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
7371[label="128.46.42.138;d;671pkt 671fpkt", shape=diamond, color=yellow];
12246[label="12.209.34.7;171pkt 171fpkt", shape=pentagon, color=darkviolet];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.209.34.7:*, 128.46.42.138:42778}[23.9221%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42778: (17.5178%)&lt;BR/&gt; 7100: (6.82898%)&lt;BR/&gt; 14183: (3.85986%)&lt;BR/&gt; 49459: (3.80048%)&lt;BR/&gt; 434: (3.80048%)&gt;];
}
7371--12246[label="0.719298;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="128.46.42.138" dst_port="42778" src_ip="12.209.34.7"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.27.53.7"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.176.58.7"/>
    </slice>
    <from sec="1241500097" usec="0"/>
    <to sec="1241500134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.72.78.7"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.86.7"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.68.95.7"/>
    </slice>
    <from sec="1241499664" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
8660[label="204.29.129.7;s;3pkt 3fpkt", shape=diamond, color=yellow];
12269[label="204.29.129.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.29.129.7:49267, 215.66.218.57:8080}[33.3333%]&lt;BR/&gt;{204.29.129.7:49268, 215.66.218.57:8080}[33.3333%]&lt;BR/&gt;{204.29.129.7:49273, 215.66.218.57:8080}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 49273: (20%)&lt;BR/&gt; 49267: (20%)&lt;BR/&gt; 49268: (10%)&gt;];
}
8660--12269[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.57" dst_port="8080" src_ip="204.29.129.7" src_port="49273"/>
      <filter dst_ip="215.66.218.57" dst_port="8080" src_ip="204.29.129.7" src_port="49268"/>
      <filter dst_ip="215.66.218.57" dst_port="8080" src_ip="204.29.129.7" src_port="49267"/>
    </slice>
    <from sec="1241500194" usec="0"/>
    <to sec="1241500381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.185.145.7"/>
    </slice>
    <from sec="1241499812" usec="0"/>
    <to sec="1241500010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.121.147.7"/>
    </slice>
    <from sec="1241499693" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.115.154.7"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241499935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.193.158.7"/>
    </slice>
    <from sec="1241500031" usec="0"/>
    <to sec="1241500239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.53.162.7"/>
    </slice>
    <from sec="1241499826" usec="0"/>
    <to sec="1241499894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.180.189.7"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.5.198.7"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.213.7"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.217.7"/>
    </slice>
    <from sec="1241499710" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.192.217.7"/>
    </slice>
    <from sec="1241499711" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.110.218.7"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.220.7"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.228.7"/>
    </slice>
    <from sec="1241500074" usec="0"/>
    <to sec="1241500091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.5.8"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.74.11.8"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.131.12.8"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.32.15.8"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.90.58.8"/>
    </slice>
    <from sec="1241499848" usec="0"/>
    <to sec="1241500478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.107.58.8"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.129.60.8"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.81.8"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.88.8"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.124.8"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241499850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.187.150.8"/>
    </slice>
    <from sec="1241499925" usec="0"/>
    <to sec="1241500410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.68.173.8"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.182.8"/>
    </slice>
    <from sec="1241500213" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.5.199.8"/>
    </slice>
    <from sec="1241499728" usec="0"/>
    <to sec="1241499967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.208.8"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.237.208.8"/>
    </slice>
    <from sec="1241499644" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.36.215.8"/>
    </slice>
    <from sec="1241499643" usec="0"/>
    <to sec="1241500456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.81.10.9"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.176.17.9"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.100.29.9"/>
    </slice>
    <from sec="1241499780" usec="0"/>
    <to sec="1241500418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.58.32.9"/>
    </slice>
    <from sec="1241500257" usec="0"/>
    <to sec="1241500318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.36.37.9"/>
    </slice>
    <from sec="1241499965" usec="0"/>
    <to sec="1241499992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.192.42.9"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.184.57.9"/>
    </slice>
    <from sec="1241500038" usec="0"/>
    <to sec="1241500066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.27.61.9"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.129.62.9"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.162.72.9"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.109.114.9"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.156.128.9"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.164.128.9"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.145.154.9"/>
    </slice>
    <from sec="1241500400" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.219.154.9"/>
    </slice>
    <from sec="1241499677" usec="0"/>
    <to sec="1241499759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.168.9"/>
    </slice>
    <from sec="1241500007" usec="0"/>
    <to sec="1241500425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.196.9"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.205.239.9"/>
    </slice>
    <from sec="1241499857" usec="0"/>
    <to sec="1241500109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.199.241.9"/>
    </slice>
    <from sec="1241499801" usec="0"/>
    <to sec="1241500415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.247.9"/>
    </slice>
    <from sec="1241500067" usec="0"/>
    <to sec="1241500112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.74.67.10"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241499947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.90.82.10"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.248.85.10"/>
    </slice>
    <from sec="1241500466" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.5.99.10"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.104.132.10"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.164.139.10"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.153.10"/>
    </slice>
    <from sec="1241500400" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.154.10"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.81.160.10"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.14.172.10"/>
    </slice>
    <from sec="1241499676" usec="0"/>
    <to sec="1241499817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.197.10"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.30.11"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.189.33.11"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.48.11"/>
    </slice>
    <from sec="1241499889" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.26.152.11"/>
    </slice>
    <from sec="1241500153" usec="0"/>
    <to sec="1241500199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.202.192.11"/>
    </slice>
    <from sec="1241500288" usec="0"/>
    <to sec="1241500298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.230.11"/>
    </slice>
    <from sec="1241500112" usec="0"/>
    <to sec="1241500139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.248.11"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.10.12"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.42.45.12"/>
    </slice>
    <from sec="1241500174" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
8773[label="68.80.51.12;s;19pkt 19fpkt", shape=diamond, color=yellow];
12477[label="68.80.51.12;19pkt 19fpkt", shape=pentagon, color=darkviolet];
20524[label="68.80.51.12;19pkt 19fpkt", shape=invtriangle, color=brown];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.80.51.12:*, 215.66.218.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7943: (2.63158%)&lt;BR/&gt; 7937: (2.63158%)&lt;BR/&gt; 7934: (2.63158%)&lt;BR/&gt; 7932: (2.63158%)&gt;];
}
8773--12477[label="1;19pkt 19fpkt"];
8773--20524[label="1;19pkt 19fpkt"];
12477--20524[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.56" dst_port="80" src_ip="68.80.51.12"/>
    </slice>
    <from sec="1241500322" usec="0"/>
    <to sec="1241500391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.143.64.12"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.65.105.12"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.10.153.12"/>
    </slice>
    <from sec="1241499973" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.53.156.12"/>
    </slice>
    <from sec="1241500115" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.161.209.12"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.248.226.12"/>
    </slice>
    <from sec="1241500417" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.182.10.13"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.96.11.13"/>
    </slice>
    <from sec="1241500054" usec="0"/>
    <to sec="1241500314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.26.19.13"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.21.31.13"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.64.13"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.188.65.13"/>
    </slice>
    <from sec="1241499647" usec="0"/>
    <to sec="1241500192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.130.193.13"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.208.36.14"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.163.52.14"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.68.14"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.68.94.14"/>
    </slice>
    <from sec="1241500454" usec="0"/>
    <to sec="1241500470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.195.130.14"/>
    </slice>
    <from sec="1241499813" usec="0"/>
    <to sec="1241500405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.145.14"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.189.9.15"/>
    </slice>
    <from sec="1241499660" usec="0"/>
    <to sec="1241500182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.55.65.15"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.179.73.15"/>
    </slice>
    <from sec="1241499984" usec="0"/>
    <to sec="1241500282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.132.88.15"/>
    </slice>
    <from sec="1241500105" usec="0"/>
    <to sec="1241500141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.89.15"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.68.94.15"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.128.15"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.67.166.15"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.189.15"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.108.226.15"/>
    </slice>
    <from sec="1241500302" usec="0"/>
    <to sec="1241500337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.211.227.15"/>
    </slice>
    <from sec="1241500162" usec="0"/>
    <to sec="1241500169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.238.7.16"/>
    </slice>
    <from sec="1241500032" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.153.11.16"/>
    </slice>
    <from sec="1241500035" usec="0"/>
    <to sec="1241500070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.139.14.16"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.15.18.16"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.72.21.16"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.221.23.16"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.228.81.16"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.229.121.16"/>
    </slice>
    <from sec="1241500265" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.151.16"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.165.16"/>
    </slice>
    <from sec="1241499691" usec="0"/>
    <to sec="1241500468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.52.182.16"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.82.32.17"/>
    </slice>
    <from sec="1241499798" usec="0"/>
    <to sec="1241500019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.37.17"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.212.75.17"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.5.99.17"/>
    </slice>
    <from sec="1241499788" usec="0"/>
    <to sec="1241500026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.174.99.17"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.171.17"/>
    </slice>
    <from sec="1241500199" usec="0"/>
    <to sec="1241500243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.41.205.17"/>
    </slice>
    <from sec="1241499913" usec="0"/>
    <to sec="1241500420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.82.244.17"/>
    </slice>
    <from sec="1241499901" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.129.60.18"/>
    </slice>
    <from sec="1241500051" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.68.92.18"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.77.102.18"/>
    </slice>
    <from sec="1241499728" usec="0"/>
    <to sec="1241499803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.131.138.18"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.139.18"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.100.146.18"/>
    </slice>
    <from sec="1241500335" usec="0"/>
    <to sec="1241500351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.235.156.18"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.70.72.19"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.182.128.19"/>
    </slice>
    <from sec="1241499760" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.137.19"/>
    </slice>
    <from sec="1241500071" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
9501[label="8.61.123.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
12758[label="170.15.184.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20703[label="170.15.184.19;1pkt 1fpkt", shape=invtriangle, color=brown];
25904[label="170.15.184.19;1pkt 1fpkt", shape=invhouse, color=bisque];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.184.19:61016, 8.61.123.27:1026}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61016: (50%)&lt;BR/&gt; 1026: (50%)&gt;];
}
9501--12758[label="1;1pkt 1fpkt"];
9501--20703[label="1;1pkt 1fpkt"];
9501--25904[label="1;1pkt 1fpkt"];
12758--20703[label="1;1pkt 1fpkt"];
12758--25904[label="1;1pkt 1fpkt"];
20703--25904[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.61.123.27" dst_port="1026" src_ip="170.15.184.19" src_port="61016"/>
    </slice>
    <from sec="1241500382" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
2522[label="215.66.208.19;s;594pkt 594fpkt", shape=diamond, color=yellow];
12764[label="215.66.208.19;605pkt 605fpkt", shape=pentagon, color=darkviolet];
20709[label="215.66.208.19;605pkt 605fpkt", shape=invtriangle, color=brown];
25906[label="215.66.208.19;605pkt 605fpkt", shape=invhouse, color=bisque];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.208.19:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2522--6349[label="0.0016835;1pkt 1fpkt"];
2522--7346[label="0.00257732;1pkt 1fpkt"];
2522--8635[label="0.0016835;1pkt 1fpkt"];
2522--8829[label="0.00452489;1pkt 1fpkt"];
2522--12764[label="1;594pkt 594fpkt"];
2522--20709[label="1;594pkt 594fpkt"];
2522--25906[label="1;594pkt 594fpkt"];
12764--20709[label="1;605pkt 605fpkt"];
12764--25906[label="1;605pkt 605fpkt"];
20709--25906[label="1;605pkt 605fpkt"];
</description>
    <slice>
      <filter src_ip="215.66.208.19"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.222.221.19"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.231.19"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.86.245.19"/>
    </slice>
    <from sec="1241499810" usec="0"/>
    <to sec="1241500282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.43.13.20"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.210.18.20"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.168.51.20"/>
    </slice>
    <from sec="1241499702" usec="0"/>
    <to sec="1241499790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.29.70.20"/>
    </slice>
    <from sec="1241499717" usec="0"/>
    <to sec="1241499759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.94.20"/>
    </slice>
    <from sec="1241499727" usec="0"/>
    <to sec="1241500433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.250.95.20"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.121.103.20"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.221.113.20"/>
    </slice>
    <from sec="1241500414" usec="0"/>
    <to sec="1241500459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.172.20"/>
    </slice>
    <from sec="1241499800" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.99.185.20"/>
    </slice>
    <from sec="1241500324" usec="0"/>
    <to sec="1241500366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
9522[label="66.224.206.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
12800[label="66.224.206.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20731[label="66.224.206.20;1pkt 1fpkt", shape=invtriangle, color=brown];
25916[label="66.224.206.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.224.206.20:59517, 215.66.214.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59517: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9522--12800[label="1;1pkt 1fpkt"];
9522--20731[label="1;1pkt 1fpkt"];
9522--25916[label="1;1pkt 1fpkt"];
12800--20731[label="1;1pkt 1fpkt"];
12800--25916[label="1;1pkt 1fpkt"];
20731--25916[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="66.224.206.20" src_port="59517"/>
    </slice>
    <from sec="1241500409" usec="0"/>
    <to sec="1241500417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.208.20"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.160.6.21"/>
    </slice>
    <from sec="1241499886" usec="0"/>
    <to sec="1241500003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
8689[label="204.105.8.21;s;208pkt 208fpkt", shape=diamond, color=yellow];
12808[label="204.105.8.21;249pkt 249fpkt", shape=pentagon, color=darkviolet];
20737[label="204.105.8.21;249pkt 249fpkt", shape=invtriangle, color=brown];
25919[label="204.105.8.21;249pkt 249fpkt", shape=invhouse, color=bisque];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.105.8.21:*, 215.66.218.57:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 44220: (0.209424%)&lt;BR/&gt; 44219: (0.209424%)&lt;BR/&gt; 44218: (0.209424%)&lt;BR/&gt; 44217: (0.209424%)&gt;];
}
8689--12808[label="1;208pkt 208fpkt"];
8689--20737[label="1;208pkt 208fpkt"];
8689--25919[label="1;208pkt 208fpkt"];
12808--20737[label="1;249pkt 249fpkt"];
12808--25919[label="1;249pkt 249fpkt"];
20737--25919[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.57" dst_port="3124" src_ip="204.105.8.21"/>
    </slice>
    <from sec="1241500229" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.68.17.21"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.1.81.21"/>
    </slice>
    <from sec="1241499977" usec="0"/>
    <to sec="1241500004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.104.21"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.91.144.21"/>
    </slice>
    <from sec="1241500142" usec="0"/>
    <to sec="1241500175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.136.159.21"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.81.160.21"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.165.21"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.172.21"/>
    </slice>
    <from sec="1241499783" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.74.173.21"/>
    </slice>
    <from sec="1241499839" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.223.21"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.104.17.22"/>
    </slice>
    <from sec="1241500369" usec="0"/>
    <to sec="1241500384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.179.32.22"/>
    </slice>
    <from sec="1241499909" usec="0"/>
    <to sec="1241499928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.74.46.22"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.56.22"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241499714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.169.57.22"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.88.69.22"/>
    </slice>
    <from sec="1241499831" usec="0"/>
    <to sec="1241499920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.216.96.22"/>
    </slice>
    <from sec="1241500003" usec="0"/>
    <to sec="1241500014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.12.122.22"/>
    </slice>
    <from sec="1241499734" usec="0"/>
    <to sec="1241499903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.12.149.22"/>
    </slice>
    <from sec="1241500172" usec="0"/>
    <to sec="1241500264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.30.209.22"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.33.249.22"/>
    </slice>
    <from sec="1241499707" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.227.63.23"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.81.23"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.15.100.23"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.185.136.23"/>
    </slice>
    <from sec="1241499861" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.176.167.23"/>
    </slice>
    <from sec="1241500178" usec="0"/>
    <to sec="1241500439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.68.168.23"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.2.176.23"/>
    </slice>
    <from sec="1241500128" usec="0"/>
    <to sec="1241500222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.161.240.23"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.221.25.24"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.222.37.24"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.79.48.24"/>
    </slice>
    <from sec="1241499976" usec="0"/>
    <to sec="1241500104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.40.65.24"/>
    </slice>
    <from sec="1241499664" usec="0"/>
    <to sec="1241500035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.116.69.24"/>
    </slice>
    <from sec="1241499968" usec="0"/>
    <to sec="1241499978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.174.158.24"/>
    </slice>
    <from sec="1241499961" usec="0"/>
    <to sec="1241499999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.164.24"/>
    </slice>
    <from sec="1241499627" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.165.24"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.185.24"/>
    </slice>
    <from sec="1241500243" usec="0"/>
    <to sec="1241500454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.86.194.24"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.83.21.25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.143.49.25"/>
    </slice>
    <from sec="1241499664" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.105.52.25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.60.72.25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.173.92.25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.5.168.25"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.77.209.25"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.212.14.26"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.181.38.26"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.65.26"/>
    </slice>
    <from sec="1241499706" usec="0"/>
    <to sec="1241499838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.67.69.26"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.238.91.26"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.96.26"/>
    </slice>
    <from sec="1241500105" usec="0"/>
    <to sec="1241500192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.125.26"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.244.145.26"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.91.160.26"/>
    </slice>
    <from sec="1241500058" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.182.162.26"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.10.234.26"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.189.2.27"/>
    </slice>
    <from sec="1241499723" usec="0"/>
    <to sec="1241499753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.185.32.27"/>
    </slice>
    <from sec="1241499876" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.46.27"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.165.82.27"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.214.147.27"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.6.151.27"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.5.175.27"/>
    </slice>
    <from sec="1241499677" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.75.177.27"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241499806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.208.27"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.222.27"/>
    </slice>
    <from sec="1241499841" usec="0"/>
    <to sec="1241500334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.2.224.27"/>
    </slice>
    <from sec="1241500173" usec="0"/>
    <to sec="1241500333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.164.16.28"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.83.128.28"/>
    </slice>
    <from sec="1241499883" usec="0"/>
    <to sec="1241500108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.28.137.28"/>
    </slice>
    <from sec="1241500421" usec="0"/>
    <to sec="1241500449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.101.156.28"/>
    </slice>
    <from sec="1241500103" usec="0"/>
    <to sec="1241500120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.27.170.28"/>
    </slice>
    <from sec="1241500233" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.194.28"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.123.203.28"/>
    </slice>
    <from sec="1241499707" usec="0"/>
    <to sec="1241499989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.167.204.28"/>
    </slice>
    <from sec="1241500330" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.229.28"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.25.29"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.215.105.29"/>
    </slice>
    <from sec="1241499637" usec="0"/>
    <to sec="1241499815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.63.137.29"/>
    </slice>
    <from sec="1241499663" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.173.29"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.100.176.29"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.187.29"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.184.213.29"/>
    </slice>
    <from sec="1241499656" usec="0"/>
    <to sec="1241500394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.1.238.29"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.19.10.30"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.104.34.30"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.210.101.30"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.103.30"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241499720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.206.30"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.67.235.30"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.87.116.31"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241499811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.146.31"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
1922[label="215.151.52.2;s;628pkt 628fpkt", shape=diamond, color=yellow];
3822[label="170.15.19.161;d;118pkt 118fpkt", shape=diamond, color=yellow];
3824[label="41.213.116.177;s;66pkt 66fpkt", shape=diamond, color=yellow];
4834[label="192.41.102.219;d;4pkt 4fpkt", shape=diamond, color=yellow];
19020[label="32.161.0.209;64pkt 64fpkt", shape=pentagon, color=darkviolet];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.151.52.2:0, *:0}[40.5263%]&lt;BR/&gt;{215.151.52.2:*, *:53}[40.2632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (35%)&lt;BR/&gt; 53: (19.2614%)&lt;BR/&gt; 80: (13.3523%)&lt;BR/&gt; 47340: (2.15909%)&lt;BR/&gt; 47147: (1.64773%)&gt;];
}
1922--3710[label="0.00477707;3pkt 3fpkt"];
1922--4625[label="0.00477707;3pkt 3fpkt"];
1922--4834[label="1;4pkt 4fpkt"];
1922--5046[label="0.00318471;2pkt 2fpkt"];
1922--5957[label="0.00477707;3pkt 3fpkt"];
1922--6533[label="0.00358423;2pkt 2fpkt"];
1922--6654[label="0.00477707;3pkt 3fpkt"];
1922--7291[label="0.00477707;3pkt 3fpkt"];
1922--7440[label="0.00598802;3pkt 3fpkt"];
1922--7515[label="0.00477707;3pkt 3fpkt"];
1922--8784[label="0.00686499;3pkt 3fpkt"];
1922--8832[label="0.00549451;3pkt 3fpkt"];
1922--11824[label="0.00636943;4pkt 4fpkt"];
1922--11839[label="0.0541401;34pkt 34fpkt"];
1922--11869[label="0.00796178;5pkt 5fpkt"];
1922--11886[label="0.00636943;4pkt 4fpkt"];
1922--11896[label="0.0111465;7pkt 7fpkt"];
1922--11898[label="0.0541401;34pkt 34fpkt"];
1922--11904[label="0.00796178;5pkt 5fpkt"];
1922--11922[label="0.0111465;7pkt 7fpkt"];
3822--3824[label="1;66pkt 66fpkt"];
3822--19020[label="0.78125;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.151.52.2"/>
      <filter src_ip="215.151.52.2"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.249.2.32"/>
    </slice>
    <from sec="1241499767" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.10.32"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.19.161.32"/>
    </slice>
    <from sec="1241499996" usec="0"/>
    <to sec="1241500082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.179.32"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.135.202.32"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.61.212.32"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
9214[label="172.204.221.87;d;5pkt 5fpkt", shape=diamond, color=yellow];
13251[label="41.150.227.32;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.227.44:*, 172.204.221.87:25}[22.2222%]&lt;BR/&gt;{41.150.227.32:*, 172.204.238.3:25}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 35246: (10%)&lt;BR/&gt; 40561: (5%)&lt;BR/&gt; 35234: (5%)&lt;BR/&gt; 35207: (5%)&gt;];
}
9214--13251[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.238.3" dst_port="25" src_ip="41.150.227.32"/>
      <filter dst_ip="172.204.221.87" dst_port="25" src_ip="41.150.227.44"/>
    </slice>
    <from sec="1241499917" usec="0"/>
    <to sec="1241500381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.8.7.33"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.29.33"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.120.105.33"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.111.132.33"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.8.34"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.142.13.34"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.114.23.34"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.33.34"/>
    </slice>
    <from sec="1241499781" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.66.158.34"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.27.162.34"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.214.34"/>
    </slice>
    <from sec="1241499736" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.15.35"/>
    </slice>
    <from sec="1241500325" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.36.17.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.99.26.35"/>
    </slice>
    <from sec="1241499826" usec="0"/>
    <to sec="1241499908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.49.72.35"/>
    </slice>
    <from sec="1241500236" usec="0"/>
    <to sec="1241500481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.109.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.141.109.35"/>
    </slice>
    <from sec="1241500280" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.89.145.35"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.135.202.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.234.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.214.237.35"/>
    </slice>
    <from sec="1241499760" usec="0"/>
    <to sec="1241499838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.6.36"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.218.74.36"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.128.142.36"/>
    </slice>
    <from sec="1241500120" usec="0"/>
    <to sec="1241500323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.132.143.36"/>
    </slice>
    <from sec="1241499783" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.237.36"/>
    </slice>
    <from sec="1241499805" usec="0"/>
    <to sec="1241500301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.127.37"/>
    </slice>
    <from sec="1241499907" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.116.140.37"/>
    </slice>
    <from sec="1241499754" usec="0"/>
    <to sec="1241499784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.174.37"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
8683[label="8.214.221.37;s;6pkt 6fpkt", shape=diamond, color=yellow];
13433[label="8.214.221.37;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.214.221.37:*, 214.163.228.3:80}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3333%)&lt;BR/&gt; 42976: (6.66667%)&lt;BR/&gt; 42975: (6.66667%)&lt;BR/&gt; 41858: (6.66667%)&lt;BR/&gt; 41350: (6.66667%)&gt;];
}
8683--13433[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.228.3" dst_port="80" src_ip="8.214.221.37"/>
    </slice>
    <from sec="1241500216" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.39.235.37"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.70.254.37"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.8.8.38"/>
    </slice>
    <from sec="1241500315" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.214.21.38"/>
    </slice>
    <from sec="1241500321" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.39.38"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.214.54.38"/>
    </slice>
    <from sec="1241500168" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.75.38"/>
    </slice>
    <from sec="1241499698" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.182.91.38"/>
    </slice>
    <from sec="1241499747" usec="0"/>
    <to sec="1241499847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.176.139.38"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.46.238.38"/>
    </slice>
    <from sec="1241499996" usec="0"/>
    <to sec="1241500175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.239.38"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.149.31.39"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.32.34.39"/>
    </slice>
    <from sec="1241499727" usec="0"/>
    <to sec="1241500024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.68.39"/>
    </slice>
    <from sec="1241500361" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.32.72.39"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.60.139.39"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.224.140.39"/>
    </slice>
    <from sec="1241500466" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.154.39"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.103.182.39"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.56.193.39"/>
    </slice>
    <from sec="1241499743" usec="0"/>
    <to sec="1241500305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.42.207.39"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.1.245.39"/>
    </slice>
    <from sec="1241499806" usec="0"/>
    <to sec="1241499834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.51.5.40"/>
    </slice>
    <from sec="1241499736" usec="0"/>
    <to sec="1241500331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.17.40"/>
    </slice>
    <from sec="1241499673" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.82.55.40"/>
    </slice>
    <from sec="1241500434" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
1592[label="128.128.84.200;d;146pkt 146fpkt", shape=diamond, color=yellow];
1704[label="204.87.100.40;s;125pkt 125fpkt", shape=diamond, color=yellow];
9741[label="128.128.84.200;d;127pkt 127fpkt", shape=hexagon, color=black];
13520[label="204.87.100.40;125pkt 125fpkt", shape=pentagon, color=darkviolet];
17209[label="204.40.4.148;17pkt 17fpkt", shape=pentagon, color=darkviolet];
21212[label="204.87.100.40;125pkt 125fpkt", shape=invtriangle, color=brown];
26163[label="204.87.100.40;125pkt 125fpkt", shape=invhouse, color=bisque];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.87.100.40:*, 128.128.84.200:443}[85.6164%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 63177: (0.379747%)&lt;BR/&gt; 63176: (0.379747%)&lt;BR/&gt; 63175: (0.379747%)&lt;BR/&gt; 63174: (0.379747%)&gt;];
}
1592--1704[label="1;125pkt 125fpkt"];
1592--9741[label="1;127pkt 127fpkt"];
1592--13520[label="1;125pkt 125fpkt"];
1592--17209[label="1;17pkt 17fpkt"];
1592--21212[label="1;125pkt 125fpkt"];
1592--26163[label="1;125pkt 125fpkt"];
1704--9741[label="1;125pkt 125fpkt"];
1704--13520[label="1;125pkt 125fpkt"];
1704--21212[label="1;125pkt 125fpkt"];
1704--26163[label="1;125pkt 125fpkt"];
9741--13520[label="1;125pkt 125fpkt"];
9741--17209[label="0.0588235;1pkt 1fpkt"];
9741--21212[label="1;125pkt 125fpkt"];
9741--26163[label="1;125pkt 125fpkt"];
13520--21212[label="1;125pkt 125fpkt"];
13520--26163[label="1;125pkt 125fpkt"];
21212--26163[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_ip="128.128.84.200" dst_port="443" src_ip="204.87.100.40"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.60.121.40"/>
    </slice>
    <from sec="1241500284" usec="0"/>
    <to sec="1241500289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.30.131.40"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.174.40"/>
    </slice>
    <from sec="1241500430" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.191.40"/>
    </slice>
    <from sec="1241500122" usec="0"/>
    <to sec="1241500211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.233.40"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.174.237.40"/>
    </slice>
    <from sec="1241500437" usec="0"/>
    <to sec="1241500444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.196.5.41"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241499702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.12.105.41"/>
    </slice>
    <from sec="1241499657" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.93.130.41"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.67.79.42"/>
    </slice>
    <from sec="1241499682" usec="0"/>
    <to sec="1241499778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.80.42"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.64.99.42"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.132.42"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.200.172.42"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.26.2.43"/>
    </slice>
    <from sec="1241500392" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.238.32.43"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.152.43.43"/>
    </slice>
    <from sec="1241499916" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.28.179.43"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.246.43"/>
    </slice>
    <from sec="1241500114" usec="0"/>
    <to sec="1241500131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.197.24.44"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.57.93.44"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.19.123.44"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.211.245.44"/>
    </slice>
    <from sec="1241500189" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.82.5.45"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.192.34.45"/>
    </slice>
    <from sec="1241499902" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.140.145.45"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.143.161.45"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.210.200.45"/>
    </slice>
    <from sec="1241499879" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.212.45"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.87.59.46"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.88.183.46"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.92.19.47"/>
    </slice>
    <from sec="1241499950" usec="0"/>
    <to sec="1241499967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.86.32.47"/>
    </slice>
    <from sec="1241499850" usec="0"/>
    <to sec="1241499875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.135.121.47"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241500173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.111.132.47"/>
    </slice>
    <from sec="1241500037" usec="0"/>
    <to sec="1241500070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.27.215.47"/>
    </slice>
    <from sec="1241499834" usec="0"/>
    <to sec="1241500181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.142.232.47"/>
    </slice>
    <from sec="1241499635" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.27.6.48"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.93.8.48"/>
    </slice>
    <from sec="1241499963" usec="0"/>
    <to sec="1241499988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.241.8.48"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.9.48"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.78.9.48"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.205.15.48"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241499618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.107.38.48"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241500181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.49.97.48"/>
    </slice>
    <from sec="1241500305" usec="0"/>
    <to sec="1241500438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.151.100.48"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.46.146.48"/>
    </slice>
    <from sec="1241499718" usec="0"/>
    <to sec="1241500009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
8715[label="66.87.229.48;s;20pkt 20fpkt", shape=diamond, color=yellow];
13788[label="66.87.229.48;20pkt 20fpkt", shape=pentagon, color=darkviolet];
21386[label="66.87.229.48;20pkt 20fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.87.229.48:*, 170.15.19.224:80}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2033: (2.5%)&lt;BR/&gt; 2032: (2.5%)&lt;BR/&gt; 2031: (2.5%)&lt;BR/&gt; 2023: (2.5%)&gt;];
}
8715--13788[label="1;20pkt 20fpkt"];
8715--21386[label="1;20pkt 20fpkt"];
13788--21386[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.224" dst_port="80" src_ip="66.87.229.48"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.128.0.49"/>
    </slice>
    <from sec="1241499853" usec="0"/>
    <to sec="1241499983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
8353[label="55.86.78.49;s;691pkt 691fpkt", shape=diamond, color=yellow];
13797[label="55.86.78.49;759pkt 759fpkt", shape=pentagon, color=darkviolet];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.86.78.49:418, *:8080}[33.9474%]&lt;BR/&gt;{55.86.78.49:418, *:80}[33.1579%]&lt;BR/&gt;{55.86.78.49:418, *:3128}[32.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 418: (50%)&lt;BR/&gt; 8080: (17.1724%)&lt;BR/&gt; 80: (16.4483%)&lt;BR/&gt; 3128: (16.3793%)&gt;];
}
8353--11810[label="0.015919;11pkt 11fpkt"];
8353--13797[label="0.998553;690pkt 690fpkt"];
</description>
    <slice>
      <filter dst_port="8080" src_ip="55.86.78.49" src_port="418"/>
      <filter dst_port="80" src_ip="55.86.78.49" src_port="418"/>
      <filter dst_port="3128" src_ip="55.86.78.49" src_port="418"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.185.95.49"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.53.131.49"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.82.134.49"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241499823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.152.49"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.171.169.49"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.179.208.49"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.27.50"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.84.34.50"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.132.131.50"/>
    </slice>
    <from sec="1241500435" usec="0"/>
    <to sec="1241500440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.178.133.50"/>
    </slice>
    <from sec="1241499662" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.83.146.50"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.95.159.50"/>
    </slice>
    <from sec="1241499865" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.238.176.50"/>
    </slice>
    <from sec="1241499916" usec="0"/>
    <to sec="1241499927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.218.200.50"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.185.209.50"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.195.212.50"/>
    </slice>
    <from sec="1241499700" usec="0"/>
    <to sec="1241500302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.208.217.50"/>
    </slice>
    <from sec="1241500433" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.255.50"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.78.5.51"/>
    </slice>
    <from sec="1241500314" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.29.9.51"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.164.10.51"/>
    </slice>
    <from sec="1241500226" usec="0"/>
    <to sec="1241500244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.211.25.51"/>
    </slice>
    <from sec="1241499864" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.61.51"/>
    </slice>
    <from sec="1241500442" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.252.90.51"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.87.152.51"/>
    </slice>
    <from sec="1241500037" usec="0"/>
    <to sec="1241500107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.211.37.52"/>
    </slice>
    <from sec="1241499916" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.242.46.52"/>
    </slice>
    <from sec="1241500000" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.71.213.52"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.189.8.53"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.28.17.53"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.164.33.53"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.62.36.53"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.63.75.53"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.226.78.53"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.74.81.53"/>
    </slice>
    <from sec="1241500467" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.2.84.53"/>
    </slice>
    <from sec="1241499960" usec="0"/>
    <to sec="1241499992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.53.131.53"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.187.202.53"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.162.27.54"/>
    </slice>
    <from sec="1241500036" usec="0"/>
    <to sec="1241500041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.74.103.54"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.114.54"/>
    </slice>
    <from sec="1241500033" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.9.55"/>
    </slice>
    <from sec="1241500061" usec="0"/>
    <to sec="1241500090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.40.13.55"/>
    </slice>
    <from sec="1241499998" usec="0"/>
    <to sec="1241500163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.9.90.55"/>
    </slice>
    <from sec="1241499933" usec="0"/>
    <to sec="1241499936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.250.158.55"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.17.56"/>
    </slice>
    <from sec="1241499668" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.148.49.56"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.233.68.56"/>
    </slice>
    <from sec="1241499659" usec="0"/>
    <to sec="1241499762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.165.146.56"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
1165[label="172.204.162.238;d;484pkt 484fpkt", shape=diamond, color=yellow];
4816[label="193.43.242.59;s;152pkt 152fpkt", shape=diamond, color=yellow];
4886[label="193.43.242.56;s;165pkt 165fpkt", shape=diamond, color=yellow];
5045[label="193.43.240.123;s;149pkt 149fpkt", shape=diamond, color=yellow];
6696[label="172.204.162.233;d;171pkt 171fpkt", shape=diamond, color=yellow];
10474[label="193.43.242.59;s;152pkt 152fpkt", shape=hexagon, color=black];
10743[label="193.43.242.56;s;139pkt 139fpkt", shape=hexagon, color=black];
14037[label="193.43.242.56;169pkt 169fpkt", shape=pentagon, color=darkviolet];
14131[label="193.43.242.59;170pkt 170fpkt", shape=pentagon, color=darkviolet];
14170[label="193.43.242.60;51pkt 51fpkt", shape=pentagon, color=darkviolet];
14204[label="193.43.242.61;53pkt 53fpkt", shape=pentagon, color=darkviolet];
16345[label="193.43.240.122;60pkt 60fpkt", shape=pentagon, color=darkviolet];
16362[label="193.43.240.123;166pkt 166fpkt", shape=pentagon, color=darkviolet];
21543[label="193.43.242.56;169pkt 169fpkt", shape=invtriangle, color=brown];
21610[label="193.43.242.59;170pkt 170fpkt", shape=invtriangle, color=brown];
21640[label="193.43.242.60;51pkt 51fpkt", shape=invtriangle, color=brown];
23057[label="193.43.240.122;60pkt 60fpkt", shape=invtriangle, color=brown];
23071[label="193.43.240.123;166pkt 166fpkt", shape=invtriangle, color=brown];
26359[label="193.43.242.59;170pkt 170fpkt", shape=invhouse, color=bisque];
26377[label="193.43.242.60;51pkt 51fpkt", shape=invhouse, color=bisque];
27187[label="193.43.240.122;60pkt 60fpkt", shape=invhouse, color=bisque];
27194[label="193.43.240.123;166pkt 166fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:2703, 172.204.162.238:*}[73.7389%]&lt;BR/&gt;{*:2703, 172.204.162.233:*}[26.1128%]&lt;BR/&gt;{193.43.242.59:2703, *:*}[25.3709%]&lt;BR/&gt;{193.43.242.56:2703, *:*}[25.0742%]&lt;BR/&gt;{193.43.240.123:2703, *:*}[24.7774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (49.9841%)&lt;BR/&gt; 61620: (0.174936%)&lt;BR/&gt; 59900: (0.174936%)&lt;BR/&gt; 53250: (0.174936%)&lt;BR/&gt; 50991: (0.174936%)&gt;];
}
1165--4816[label="0.75;114pkt 114fpkt"];
1165--4886[label="0.745455;123pkt 123fpkt"];
1165--5045[label="0.744966;111pkt 111fpkt"];
1165--10474[label="0.75;114pkt 114fpkt"];
1165--10743[label="0.741007;103pkt 103fpkt"];
1165--14037[label="0.727811;123pkt 123fpkt"];
1165--14131[label="0.717647;122pkt 122fpkt"];
1165--14170[label="0.686275;35pkt 35fpkt"];
1165--14204[label="0.716981;38pkt 38fpkt"];
1165--16345[label="0.716667;43pkt 43fpkt"];
1165--16362[label="0.716867;119pkt 119fpkt"];
1165--21543[label="0.727811;123pkt 123fpkt"];
1165--21610[label="0.717647;122pkt 122fpkt"];
1165--21640[label="0.686275;35pkt 35fpkt"];
1165--23057[label="0.716667;43pkt 43fpkt"];
1165--23071[label="0.716867;119pkt 119fpkt"];
1165--26359[label="0.717647;122pkt 122fpkt"];
1165--26377[label="0.686275;35pkt 35fpkt"];
1165--27187[label="0.716667;43pkt 43fpkt"];
1165--27194[label="0.716867;119pkt 119fpkt"];
4816--6696[label="0.25;38pkt 38fpkt"];
4816--10474[label="1;152pkt 152fpkt"];
4816--14131[label="0.993421;151pkt 151fpkt"];
4816--21610[label="0.993421;151pkt 151fpkt"];
4816--26359[label="0.993421;151pkt 151fpkt"];
4886--6696[label="0.254545;42pkt 42fpkt"];
4886--10743[label="1;139pkt 139fpkt"];
4886--14037[label="1;165pkt 165fpkt"];
4886--21543[label="1;165pkt 165fpkt"];
5045--6696[label="0.255034;38pkt 38fpkt"];
5045--16362[label="0.993289;148pkt 148fpkt"];
5045--23071[label="0.993289;148pkt 148fpkt"];
5045--27194[label="0.993289;148pkt 148fpkt"];
6696--10474[label="0.25;38pkt 38fpkt"];
6696--10743[label="0.258993;36pkt 36fpkt"];
6696--14037[label="0.248521;42pkt 42fpkt"];
6696--14131[label="0.241176;41pkt 41fpkt"];
6696--14170[label="0.313725;16pkt 16fpkt"];
6696--14204[label="0.264151;14pkt 14fpkt"];
6696--16345[label="0.266667;16pkt 16fpkt"];
6696--16362[label="0.246988;41pkt 41fpkt"];
6696--21543[label="0.248521;42pkt 42fpkt"];
6696--21610[label="0.241176;41pkt 41fpkt"];
6696--21640[label="0.313725;16pkt 16fpkt"];
6696--23057[label="0.266667;16pkt 16fpkt"];
6696--23071[label="0.246988;41pkt 41fpkt"];
6696--26359[label="0.241176;41pkt 41fpkt"];
6696--26377[label="0.313725;16pkt 16fpkt"];
6696--27187[label="0.266667;16pkt 16fpkt"];
6696--27194[label="0.246988;41pkt 41fpkt"];
10474--14131[label="0.993421;151pkt 151fpkt"];
10474--21610[label="0.993421;151pkt 151fpkt"];
10474--26359[label="0.993421;151pkt 151fpkt"];
10743--14037[label="1;139pkt 139fpkt"];
10743--21543[label="1;139pkt 139fpkt"];
14037--21543[label="1;169pkt 169fpkt"];
14131--21610[label="1;170pkt 170fpkt"];
14131--26359[label="1;170pkt 170fpkt"];
14170--21640[label="1;51pkt 51fpkt"];
14170--26377[label="1;51pkt 51fpkt"];
16345--23057[label="1;60pkt 60fpkt"];
16345--27187[label="1;60pkt 60fpkt"];
16362--23071[label="1;166pkt 166fpkt"];
16362--27194[label="1;166pkt 166fpkt"];
21610--26359[label="1;170pkt 170fpkt"];
21640--26377[label="1;51pkt 51fpkt"];
23057--27187[label="1;60pkt 60fpkt"];
23071--27194[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter src_ip="193.43.242.59" src_port="2703"/>
      <filter src_ip="193.43.242.56" src_port="2703"/>
      <filter src_ip="193.43.240.123" src_port="2703"/>
      <filter dst_ip="172.204.162.238" src_port="2703"/>
      <filter dst_ip="172.204.162.233" src_port="2703"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.208.244.56"/>
    </slice>
    <from sec="1241500463" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.182.250.56"/>
    </slice>
    <from sec="1241499658" usec="0"/>
    <to sec="1241500343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.254.14.57"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.34.57"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.239.34.57"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241499884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.28.51.57"/>
    </slice>
    <from sec="1241500300" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.104.8.58"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.68.58"/>
    </slice>
    <from sec="1241499678" usec="0"/>
    <to sec="1241499737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.24.96.58"/>
    </slice>
    <from sec="1241499627" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.36.163.58"/>
    </slice>
    <from sec="1241499876" usec="0"/>
    <to sec="1241500061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.184.180.58"/>
    </slice>
    <from sec="1241499928" usec="0"/>
    <to sec="1241500167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.231.70.59"/>
    </slice>
    <from sec="1241499966" usec="0"/>
    <to sec="1241500136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.69.73.59"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.141.106.59"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.236.128.59"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.190.157.59"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.226.59"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.103.231.59"/>
    </slice>
    <from sec="1241499775" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.210.243.59"/>
    </slice>
    <from sec="1241499644" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.129.26.60"/>
    </slice>
    <from sec="1241500320" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.80.72.60"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.226.91.60"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.56.101.60"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.16.219.60"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.8.237.60"/>
    </slice>
    <from sec="1241500183" usec="0"/>
    <to sec="1241500192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.93.38.61"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.6.77.61"/>
    </slice>
    <from sec="1241499976" usec="0"/>
    <to sec="1241500022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.81.101.61"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.140.62"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.88.160.62"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.84.173.62"/>
    </slice>
    <from sec="1241499773" usec="0"/>
    <to sec="1241499801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.175.62"/>
    </slice>
    <from sec="1241499645" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.80.232.62"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.250.62"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.131.0.63"/>
    </slice>
    <from sec="1241500218" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.217.81.63"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.119.63"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.135.63"/>
    </slice>
    <from sec="1241499710" usec="0"/>
    <to sec="1241500442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.135.201.63"/>
    </slice>
    <from sec="1241499849" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.5.242.63"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.150.249.63"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.79.6.64"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.224.23.64"/>
    </slice>
    <from sec="1241499696" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.41.64"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.193.81.64"/>
    </slice>
    <from sec="1241499900" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.97.107.64"/>
    </slice>
    <from sec="1241499667" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.53.108.64"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.156.136.64"/>
    </slice>
    <from sec="1241499641" usec="0"/>
    <to sec="1241500427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.134.164.64"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.192.64"/>
    </slice>
    <from sec="1241499707" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.78.203.64"/>
    </slice>
    <from sec="1241500077" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.200.7.65"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.6.23.65"/>
    </slice>
    <from sec="1241500493" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.240.48.65"/>
    </slice>
    <from sec="1241499868" usec="0"/>
    <to sec="1241500279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.131.98.65"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.122.100.65"/>
    </slice>
    <from sec="1241499688" usec="0"/>
    <to sec="1241500442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.103.119.65"/>
    </slice>
    <from sec="1241499891" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.210.141.65"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.160.65"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.215.236.65"/>
    </slice>
    <from sec="1241500435" usec="0"/>
    <to sec="1241500445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.35.17.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.100.21.66"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.238.45.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.71.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.172.167.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.172.66"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.37.204.66"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.134.228.66"/>
    </slice>
    <from sec="1241499836" usec="0"/>
    <to sec="1241500437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.3.67"/>
    </slice>
    <from sec="1241500216" usec="0"/>
    <to sec="1241500285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.19.20.67"/>
    </slice>
    <from sec="1241499861" usec="0"/>
    <to sec="1241499925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.74.34.67"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.36.67"/>
    </slice>
    <from sec="1241500084" usec="0"/>
    <to sec="1241500168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.19.44.67"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.5.88.67"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.24.135.67"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.8.140.67"/>
    </slice>
    <from sec="1241500049" usec="0"/>
    <to sec="1241500076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.145.151.67"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.182.182.67"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.66.194.67"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.110.218.67"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.235.67"/>
    </slice>
    <from sec="1241500372" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.253.67"/>
    </slice>
    <from sec="1241500172" usec="0"/>
    <to sec="1241500187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.37.4.68"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241499846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.81.68"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241499827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.67.99.68"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.24.147.68"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.177.187.68"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.148.193.68"/>
    </slice>
    <from sec="1241499642" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.206.225.68"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.54.234.68"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.252.68"/>
    </slice>
    <from sec="1241499836" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.6.4.69"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.37.69"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.35.45.69"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27457,4.46379,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
2087[label="134.73.78.69;s;137pkt 137fpkt", shape=diamond, color=yellow];
14500[label="134.73.78.69;144pkt 144fpkt", shape=pentagon, color=darkviolet];
26506[label="134.73.78.69;143pkt 143fpkt", shape=invhouse, color=bisque];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.78.69:13555, *:*}[65.9722%]&lt;BR/&gt;{134.73.78.69:*, 194.112.244.108:80}[23.6111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13555: (32.9009%)&lt;BR/&gt; 80: (16.3915%)&lt;BR/&gt; 13966: (1.06132%)&lt;BR/&gt; 8000: (1.06132%)&lt;BR/&gt; 13429: (0.707547%)&gt;];
}
2087--11840[label="0.0145985;2pkt 2fpkt"];
2087--14500[label="1;137pkt 137fpkt"];
2087--26506[label="0.992701;136pkt 136fpkt"];
14500--26506[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter src_ip="134.73.78.69" src_port="13555"/>
      <filter dst_ip="194.112.244.108" dst_port="80" src_ip="134.73.78.69"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.148.116.69"/>
    </slice>
    <from sec="1241500220" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.152.69"/>
    </slice>
    <from sec="1241499662" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.159.69"/>
    </slice>
    <from sec="1241499743" usec="0"/>
    <to sec="1241499750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.5.226.69"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.104.237.69"/>
    </slice>
    <from sec="1241499839" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.233.34.70"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.24.73.70"/>
    </slice>
    <from sec="1241499730" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.75.70"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.84.128.70"/>
    </slice>
    <from sec="1241500082" usec="0"/>
    <to sec="1241500106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
1260[label="170.15.186.113;d;41pkt 41fpkt", shape=diamond, color=yellow];
1349[label="222.64.100.225;s;1pkt 1fpkt", shape=diamond, color=yellow];
1907[label="0.88.180.70;s;3952pkt 3952fpkt", shape=diamond, color=yellow];
4088[label="170.15.187.177;d;18pkt 18fpkt", shape=diamond, color=yellow];
4141[label="192.138.155.130;s;25pkt 25fpkt", shape=diamond, color=yellow];
5057[label="170.15.18.35;d;24pkt 24fpkt", shape=diamond, color=yellow];
6396[label="222.64.102.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
8933[label="8.254.244.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
10157[label="192.138.155.130;s;11pkt 11fpkt", shape=hexagon, color=black];
10910[label="222.64.102.50;s;1pkt 1fpkt", shape=hexagon, color=black];
13839[label="222.64.102.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14543[label="0.88.180.70;4343pkt 4343fpkt", shape=pentagon, color=darkviolet];
14584[label="47.38.222.71;12pkt 12fpkt", shape=pentagon, color=darkviolet];
21416[label="222.64.102.50;1pkt 1fpkt", shape=invtriangle, color=brown];
21916[label="47.38.222.71;12pkt 12fpkt", shape=invtriangle, color=brown];
26534[label="47.38.222.71;12pkt 12fpkt", shape=invhouse, color=bisque];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.88.180.70:19865, *:22}[97.486%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19865: (49.0658%)&lt;BR/&gt; 22: (49.0658%)&lt;BR/&gt; 1863: (0.248344%)&lt;BR/&gt; 995: (0.153737%)&lt;BR/&gt; 5050: (0.135998%)&gt;];
}
1260--1349[label="1;1pkt 1fpkt"];
1260--1907[label="0.0243902;1pkt 1fpkt"];
1260--2113[label="0.0243902;1pkt 1fpkt"];
1260--3074[label="0.0294118;1pkt 1fpkt"];
1260--3774[label="0.0243902;1pkt 1fpkt"];
1260--4937[label="0.0333333;1pkt 1fpkt"];
1260--6396[label="1;1pkt 1fpkt"];
1260--9845[label="0.0243902;1pkt 1fpkt"];
1260--10910[label="1;1pkt 1fpkt"];
1260--10974[label="0.0243902;1pkt 1fpkt"];
1260--11838[label="0.0487805;2pkt 2fpkt"];
1260--11897[label="0.0487805;2pkt 2fpkt"];
1260--12486[label="0.117647;2pkt 2fpkt"];
1260--13839[label="1;1pkt 1fpkt"];
1260--14543[label="0.0243902;1pkt 1fpkt"];
1260--14584[label="0.0833333;1pkt 1fpkt"];
1260--16468[label="0.0243902;1pkt 1fpkt"];
1260--16673[label="0.0243902;1pkt 1fpkt"];
1260--18121[label="0.0487805;2pkt 2fpkt"];
1260--18859[label="0.0487805;2pkt 2fpkt"];
1260--21416[label="1;1pkt 1fpkt"];
1260--21916[label="0.0833333;1pkt 1fpkt"];
1260--23141[label="0.0243902;1pkt 1fpkt"];
1260--23278[label="0.0243902;1pkt 1fpkt"];
1260--24738[label="0.0487805;2pkt 2fpkt"];
1260--26534[label="0.0833333;1pkt 1fpkt"];
1260--27314[label="0.0243902;1pkt 1fpkt"];
1907--4088[label="0.0555556;1pkt 1fpkt"];
1907--5057[label="0.0416667;1pkt 1fpkt"];
1907--6968[label="0.0434783;1pkt 1fpkt"];
1907--14543[label="1;3952pkt 3952fpkt"];
4088--4141[label="0.222222;4pkt 4fpkt"];
4088--10157[label="0.363636;4pkt 4fpkt"];
4088--14543[label="0.0555556;1pkt 1fpkt"];
4141--9530[label="0.2;5pkt 5fpkt"];
4141--10157[label="1;11pkt 11fpkt"];
4141--11675[label="0.2;5pkt 5fpkt"];
4141--11836[label="0.04;1pkt 1fpkt"];
4141--11860[label="0.04;1pkt 1fpkt"];
4141--11893[label="0.04;1pkt 1fpkt"];
5057--8933[label="1;1pkt 1fpkt"];
5057--14543[label="0.0416667;1pkt 1fpkt"];
6396--10910[label="1;1pkt 1fpkt"];
6396--13839[label="1;1pkt 1fpkt"];
6396--21416[label="1;1pkt 1fpkt"];
10157--11675[label="0.181818;2pkt 2fpkt"];
10910--13839[label="1;1pkt 1fpkt"];
10910--21416[label="1;1pkt 1fpkt"];
13839--21416[label="1;1pkt 1fpkt"];
14584--21916[label="1;12pkt 12fpkt"];
14584--26534[label="1;12pkt 12fpkt"];
21916--26534[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="0.88.180.70" src_port="19865"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.134.228.70"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.17.71"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.77.19.71"/>
    </slice>
    <from sec="1241500363" usec="0"/>
    <to sec="1241500373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.36.24.71"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.42.71"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.57.71"/>
    </slice>
    <from sec="1241499644" usec="0"/>
    <to sec="1241499791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.20.88.71"/>
    </slice>
    <from sec="1241500296" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.27.98.71"/>
    </slice>
    <from sec="1241499734" usec="0"/>
    <to sec="1241499790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.123.153.71"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.91.85.72"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.194.114.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.11.163.72"/>
    </slice>
    <from sec="1241499663" usec="0"/>
    <to sec="1241499668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.168.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.200.170.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.11.202.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.72.8.73"/>
    </slice>
    <from sec="1241500054" usec="0"/>
    <to sec="1241500224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.54.76.73"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.68.92.73"/>
    </slice>
    <from sec="1241500228" usec="0"/>
    <to sec="1241500354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.147.121.73"/>
    </slice>
    <from sec="1241500076" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.84.133.73"/>
    </slice>
    <from sec="1241500210" usec="0"/>
    <to sec="1241500232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.117.200.73"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.237.73"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.66.10.74"/>
    </slice>
    <from sec="1241499956" usec="0"/>
    <to sec="1241499967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.33.20.74"/>
    </slice>
    <from sec="1241500182" usec="0"/>
    <to sec="1241500194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.20.74"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.136.37.74"/>
    </slice>
    <from sec="1241500452" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.219.86.74"/>
    </slice>
    <from sec="1241499641" usec="0"/>
    <to sec="1241500148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.27.115.74"/>
    </slice>
    <from sec="1241500364" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.51.126.74"/>
    </slice>
    <from sec="1241500128" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.156.137.74"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.161.74"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.137.170.74"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.9.247.74"/>
    </slice>
    <from sec="1241500141" usec="0"/>
    <to sec="1241500464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.16.250.74"/>
    </slice>
    <from sec="1241500198" usec="0"/>
    <to sec="1241500336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.25.75"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.160.36.75"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.134.116.75"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.124.75"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.57.141.75"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.197.162.75"/>
    </slice>
    <from sec="1241500278" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.254.226.75"/>
    </slice>
    <from sec="1241500270" usec="0"/>
    <to sec="1241500392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.87.232.75"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.51.244.75"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.69.16.76"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.36.20.76"/>
    </slice>
    <from sec="1241500272" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
9179[label="68.183.20.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
14750[label="68.183.20.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22021[label="68.183.20.76;1pkt 1fpkt", shape=invtriangle, color=brown];
26592[label="68.183.20.76;1pkt 1fpkt", shape=invhouse, color=bisque];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.183.20.76:16312, 151.12.127.84:7123}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16312: (50%)&lt;BR/&gt; 7123: (50%)&gt;];
}
9179--14750[label="1;1pkt 1fpkt"];
9179--22021[label="1;1pkt 1fpkt"];
9179--26592[label="1;1pkt 1fpkt"];
14750--22021[label="1;1pkt 1fpkt"];
14750--26592[label="1;1pkt 1fpkt"];
22021--26592[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.12.127.84" dst_port="7123" src_ip="68.183.20.76" src_port="16312"/>
    </slice>
    <from sec="1241500000" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.130.33.76"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.75.41.76"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.111.90.76"/>
    </slice>
    <from sec="1241500121" usec="0"/>
    <to sec="1241500155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.17.95.76"/>
    </slice>
    <from sec="1241500147" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.210.99.76"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.64.100.76"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.160.100.76"/>
    </slice>
    <from sec="1241500092" usec="0"/>
    <to sec="1241500322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.80.129.76"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.156.76"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.39.160.76"/>
    </slice>
    <from sec="1241499790" usec="0"/>
    <to sec="1241499824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.81.210.76"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241499964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.90.210.76"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.214.232.76"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.208.77"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.87.208.77"/>
    </slice>
    <from sec="1241500098" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.57.225.77"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.229.77"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.57.11.78"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.83.78"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.158.78"/>
    </slice>
    <from sec="1241500272" usec="0"/>
    <to sec="1241500348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.208.167.78"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.227.208.78"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241499905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.141.223.78"/>
    </slice>
    <from sec="1241499892" usec="0"/>
    <to sec="1241500222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.230.78"/>
    </slice>
    <from sec="1241499762" usec="0"/>
    <to sec="1241500456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.149.17.79"/>
    </slice>
    <from sec="1241499933" usec="0"/>
    <to sec="1241499937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.72.75.79"/>
    </slice>
    <from sec="1241499755" usec="0"/>
    <to sec="1241499775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.205.156.79"/>
    </slice>
    <from sec="1241499767" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.10.164.79"/>
    </slice>
    <from sec="1241500335" usec="0"/>
    <to sec="1241500341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.60.242.79"/>
    </slice>
    <from sec="1241499869" usec="0"/>
    <to sec="1241499892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.130.33.80"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.52.41.80"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.28.86.80"/>
    </slice>
    <from sec="1241499771" usec="0"/>
    <to sec="1241500364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.141.111.80"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241499791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.209.129.80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.28.138.80"/>
    </slice>
    <from sec="1241499819" usec="0"/>
    <to sec="1241499858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.176.144.80"/>
    </slice>
    <from sec="1241499934" usec="0"/>
    <to sec="1241499967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.186.150.80"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.98.151.80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.75.172.80"/>
    </slice>
    <from sec="1241500089" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.194.80"/>
    </slice>
    <from sec="1241500198" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.196.199.80"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.70.216.80"/>
    </slice>
    <from sec="1241499972" usec="0"/>
    <to sec="1241499978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.212.247.80"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.24.8.81"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241499827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.181.26.81"/>
    </slice>
    <from sec="1241500350" usec="0"/>
    <to sec="1241500381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.109.110.81"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.213.126.81"/>
    </slice>
    <from sec="1241499684" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.177.81"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.108.193.81"/>
    </slice>
    <from sec="1241499883" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.42.214.81"/>
    </slice>
    <from sec="1241499721" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.10.216.81"/>
    </slice>
    <from sec="1241500176" usec="0"/>
    <to sec="1241500215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.51.245.81"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.30.248.81"/>
    </slice>
    <from sec="1241499870" usec="0"/>
    <to sec="1241499984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.208.10.82"/>
    </slice>
    <from sec="1241499859" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.19.22.82"/>
    </slice>
    <from sec="1241499869" usec="0"/>
    <to sec="1241499903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.117.24.82"/>
    </slice>
    <from sec="1241499711" usec="0"/>
    <to sec="1241499718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.127.49.82"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.68.64.82"/>
    </slice>
    <from sec="1241499851" usec="0"/>
    <to sec="1241499968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.15.144.82"/>
    </slice>
    <from sec="1241500035" usec="0"/>
    <to sec="1241500073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.33.167.82"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.71.169.82"/>
    </slice>
    <from sec="1241499667" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.171.82"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.137.9.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.57.24.83"/>
    </slice>
    <from sec="1241500128" usec="0"/>
    <to sec="1241500187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.169.42.83"/>
    </slice>
    <from sec="1241499633" usec="0"/>
    <to sec="1241500373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.12.56.83"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.37.103.83"/>
    </slice>
    <from sec="1241499669" usec="0"/>
    <to sec="1241499674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.94.111.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.43.123.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.175.83"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.221.181.83"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.202.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.41.17.84"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241499654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.21.84"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.66.57.84"/>
    </slice>
    <from sec="1241499633" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.8.69.84"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.86.96.84"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.167.136.84"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.144.84"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.123.147.84"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.143.171.84"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.10.172.84"/>
    </slice>
    <from sec="1241500057" usec="0"/>
    <to sec="1241500102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.106.178.84"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.135.207.84"/>
    </slice>
    <from sec="1241500127" usec="0"/>
    <to sec="1241500207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.210.209.84"/>
    </slice>
    <from sec="1241499686" usec="0"/>
    <to sec="1241500077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.229.84"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.230.0.85"/>
    </slice>
    <from sec="1241499964" usec="0"/>
    <to sec="1241500000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.24.35.85"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.69.36.85"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.85.74.85"/>
    </slice>
    <from sec="1241499923" usec="0"/>
    <to sec="1241499927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.165.88.85"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.75.153.85"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.112.173.85"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.241.85"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.164.7.86"/>
    </slice>
    <from sec="1241499878" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.238.36.86"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.77.48.86"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.134.84.86"/>
    </slice>
    <from sec="1241500108" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.30.104.86"/>
    </slice>
    <from sec="1241500421" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.142.208.86"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.226.86"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.176.13.87"/>
    </slice>
    <from sec="1241499719" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.181.37.87"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.116.88.87"/>
    </slice>
    <from sec="1241499930" usec="0"/>
    <to sec="1241499934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.253.104.87"/>
    </slice>
    <from sec="1241499840" usec="0"/>
    <to sec="1241500174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.0.154.87"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.159.87"/>
    </slice>
    <from sec="1241499873" usec="0"/>
    <to sec="1241500263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.135.165.87"/>
    </slice>
    <from sec="1241500131" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.142.197.87"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.243.1.88"/>
    </slice>
    <from sec="1241499681" usec="0"/>
    <to sec="1241499689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.218.8.88"/>
    </slice>
    <from sec="1241500390" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.150.17.88"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.152.96.88"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.158.169.88"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.19.13.89"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.32.15.89"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.101.24.89"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.129.24.89"/>
    </slice>
    <from sec="1241500255" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.0.34.89"/>
    </slice>
    <from sec="1241499982" usec="0"/>
    <to sec="1241500006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.150.39.89"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.6.12.90"/>
    </slice>
    <from sec="1241499823" usec="0"/>
    <to sec="1241500383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.232.37.90"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.216.51.90"/>
    </slice>
    <from sec="1241499766" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.32.53.90"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.139.87.90"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.61.110.90"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.120.90"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.193.152.90"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.134.156.90"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.191.158.90"/>
    </slice>
    <from sec="1241499764" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.5.198.90"/>
    </slice>
    <from sec="1241500154" usec="0"/>
    <to sec="1241500187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.174.217.90"/>
    </slice>
    <from sec="1241499776" usec="0"/>
    <to sec="1241499833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.206.247.90"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.11.91"/>
    </slice>
    <from sec="1241500460" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.110.32.91"/>
    </slice>
    <from sec="1241500185" usec="0"/>
    <to sec="1241500205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.85.71.91"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.8.115.91"/>
    </slice>
    <from sec="1241499998" usec="0"/>
    <to sec="1241500064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.84.135.91"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.161.91"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.5.174.91"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.50.43.92"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.236.91.92"/>
    </slice>
    <from sec="1241500377" usec="0"/>
    <to sec="1241500389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.129.92"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.195.196.92"/>
    </slice>
    <from sec="1241500448" usec="0"/>
    <to sec="1241500484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.225.92"/>
    </slice>
    <from sec="1241499961" usec="0"/>
    <to sec="1241499968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.168.245.92"/>
    </slice>
    <from sec="1241500052" usec="0"/>
    <to sec="1241500295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.24.13.93"/>
    </slice>
    <from sec="1241499993" usec="0"/>
    <to sec="1241500404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.142.32.93"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.40.93"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.115.93.93"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.112.94.93"/>
    </slice>
    <from sec="1241499952" usec="0"/>
    <to sec="1241500419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.140.5.94"/>
    </slice>
    <from sec="1241499737" usec="0"/>
    <to sec="1241500201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.160.37.94"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.141.94"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.210.94"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.70.1.95"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.194.80.95"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.129.85.95"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.136.95"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.63.160.95"/>
    </slice>
    <from sec="1241500199" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.202.170.95"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.65.189.95"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.182.250.95"/>
    </slice>
    <from sec="1241500171" usec="0"/>
    <to sec="1241500194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.133.20.96"/>
    </slice>
    <from sec="1241500421" usec="0"/>
    <to sec="1241500482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.179.20.96"/>
    </slice>
    <from sec="1241499743" usec="0"/>
    <to sec="1241499798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.74.27.96"/>
    </slice>
    <from sec="1241500313" usec="0"/>
    <to sec="1241500448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.211.138.96"/>
    </slice>
    <from sec="1241500448" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.231.162.96"/>
    </slice>
    <from sec="1241499676" usec="0"/>
    <to sec="1241499741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.171.96"/>
    </slice>
    <from sec="1241499641" usec="0"/>
    <to sec="1241500361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.209.205.96"/>
    </slice>
    <from sec="1241499645" usec="0"/>
    <to sec="1241499753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.195.240.96"/>
    </slice>
    <from sec="1241500448" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.8.97"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.157.33.97"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.38.56.97"/>
    </slice>
    <from sec="1241500296" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.198.68.97"/>
    </slice>
    <from sec="1241499691" usec="0"/>
    <to sec="1241500448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.164.80.97"/>
    </slice>
    <from sec="1241500165" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.134.81.97"/>
    </slice>
    <from sec="1241499892" usec="0"/>
    <to sec="1241499953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
9306[label="205.176.97.97;s;8pkt 8fpkt", shape=diamond, color=yellow];
15485[label="205.176.97.97;11pkt 11fpkt", shape=pentagon, color=darkviolet];
22506[label="205.176.97.97;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.176.97.97:*, 214.163.228.3:80}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 23850: (5%)&lt;BR/&gt; 22570: (5%)&lt;BR/&gt; 21802: (5%)&lt;BR/&gt; 20778: (5%)&gt;];
}
9306--15485[label="1;8pkt 8fpkt"];
9306--22506[label="1;8pkt 8fpkt"];
15485--22506[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.228.3" dst_port="80" src_ip="205.176.97.97"/>
    </slice>
    <from sec="1241500222" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.242.122.97"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.26.161.97"/>
    </slice>
    <from sec="1241500257" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.75.163.97"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.189.97"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.74.213.97"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.56.10.98"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.216.76.98"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241499753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.12.126.98"/>
    </slice>
    <from sec="1241500453" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.204.137.98"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.180.18.99"/>
    </slice>
    <from sec="1241499645" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
5564[label="206.2.30.99;s;19pkt 19fpkt", shape=diamond, color=yellow];
15551[label="206.2.30.99;19pkt 19fpkt", shape=pentagon, color=darkviolet];
22543[label="206.2.30.99;19pkt 19fpkt", shape=invtriangle, color=brown];
26895[label="206.2.30.99;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.2.30.99:*, 170.15.19.236:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2007: (2.63158%)&lt;BR/&gt; 2006: (2.63158%)&lt;BR/&gt; 2005: (2.63158%)&lt;BR/&gt; 2004: (2.63158%)&gt;];
}
5564--15551[label="1;19pkt 19fpkt"];
5564--22543[label="1;19pkt 19fpkt"];
5564--26895[label="1;19pkt 19fpkt"];
15551--22543[label="1;19pkt 19fpkt"];
15551--26895[label="1;19pkt 19fpkt"];
22543--26895[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.236" dst_port="80" src_ip="206.2.30.99"/>
    </slice>
    <from sec="1241499951" usec="0"/>
    <to sec="1241499985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.173.49.99"/>
    </slice>
    <from sec="1241499701" usec="0"/>
    <to sec="1241499731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.148.82.99"/>
    </slice>
    <from sec="1241500067" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.118.99"/>
    </slice>
    <from sec="1241500137" usec="0"/>
    <to sec="1241500225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.14.178.99"/>
    </slice>
    <from sec="1241499854" usec="0"/>
    <to sec="1241499883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.72.185.99"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.186.251.99"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.8.100"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.190.15.100"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.161.22.100"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
8680[label="66.128.61.100;s;3pkt 3fpkt", shape=diamond, color=yellow];
15583[label="66.128.61.100;4pkt 4fpkt", shape=pentagon, color=darkviolet];
22565[label="66.128.61.100;4pkt 4fpkt", shape=invtriangle, color=brown];
26901[label="66.128.61.100;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.128.61.100:8965, 214.163.228.3:80}[25%]&lt;BR/&gt;{66.128.61.100:16160, 214.163.228.3:3466}[25%]&lt;BR/&gt;{66.128.61.100:17887, 214.163.228.3:80}[25%]&lt;BR/&gt;{66.128.61.100:50770, 214.163.228.3:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.6667%)&lt;BR/&gt; 17887: (13.3333%)&lt;BR/&gt; 16160: (13.3333%)&lt;BR/&gt; 8965: (13.3333%)&lt;BR/&gt; 3466: (13.3333%)&gt;];
}
8680--15583[label="1;3pkt 3fpkt"];
8680--22565[label="1;3pkt 3fpkt"];
8680--26901[label="1;3pkt 3fpkt"];
15583--22565[label="1;4pkt 4fpkt"];
15583--26901[label="1;4pkt 4fpkt"];
22565--26901[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.228.3" dst_port="80" src_ip="66.128.61.100" src_port="50770"/>
      <filter dst_ip="214.163.228.3" dst_port="80" src_ip="66.128.61.100" src_port="17887"/>
      <filter dst_ip="214.163.228.3" dst_port="3466" src_ip="66.128.61.100" src_port="16160"/>
      <filter dst_ip="214.163.228.3" dst_port="80" src_ip="66.128.61.100" src_port="8965"/>
    </slice>
    <from sec="1241500210" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.74.92.100"/>
    </slice>
    <from sec="1241499864" usec="0"/>
    <to sec="1241499890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
642[label="134.73.225.92;d;71pkt 71fpkt", shape=diamond, color=yellow];
645[label="9.233.27.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
733[label="12.69.97.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
4408[label="8.1.160.240;s;3pkt 3fpkt", shape=diamond, color=yellow];
6170[label="68.172.81.147;s;2pkt 2fpkt", shape=diamond, color=yellow];
7094[label="12.109.163.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
7302[label="200.85.156.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
11177[label="68.172.81.147;s;2pkt 2fpkt", shape=hexagon, color=black];
12783[label="5.6.80.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12914[label="13.180.208.23;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13617[label="13.183.76.43;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15219[label="8.13.155.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15587[label="12.69.97.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17189[label="68.172.81.147;6pkt 6fpkt", shape=pentagon, color=darkviolet];
18117[label="12.109.163.176;4pkt 4fpkt", shape=pentagon, color=darkviolet];
18262[label="8.219.154.181;4pkt 4fpkt", shape=pentagon, color=darkviolet];
19332[label="8.209.38.220;8pkt 8fpkt", shape=pentagon, color=darkviolet];
19652[label="9.233.27.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20720[label="5.6.80.20;1pkt 1fpkt", shape=invtriangle, color=brown];
21273[label="13.183.76.43;4pkt 4fpkt", shape=invtriangle, color=brown];
22341[label="8.13.155.89;1pkt 1fpkt", shape=invtriangle, color=brown];
22567[label="12.69.97.100;1pkt 1fpkt", shape=invtriangle, color=brown];
23608[label="68.172.81.147;6pkt 6fpkt", shape=invtriangle, color=brown];
24313[label="8.219.154.181;4pkt 4fpkt", shape=invtriangle, color=brown];
25031[label="8.209.38.220;8pkt 8fpkt", shape=invtriangle, color=brown];
25250[label="9.233.27.235;1pkt 1fpkt", shape=invtriangle, color=brown];
27897[label="8.219.154.181;4pkt 4fpkt", shape=invhouse, color=bisque];
28315[label="8.209.38.220;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.73.225.92:15000}[34.6667%]&lt;BR/&gt;{*:8000, 134.73.225.92:*}[21.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15000: (16.8831%)&lt;BR/&gt; 8000: (5.19481%)&lt;BR/&gt; 1873: (5.19481%)&lt;BR/&gt; 1538: (5.19481%)&lt;BR/&gt; 80: (5.19481%)&gt;];
}
642--645[label="1;1pkt 1fpkt"];
642--733[label="1;1pkt 1fpkt"];
642--4408[label="1;3pkt 3fpkt"];
642--5662[label="0.0769231;1pkt 1fpkt"];
642--6170[label="1;2pkt 2fpkt"];
642--7094[label="1;1pkt 1fpkt"];
642--7302[label="1;1pkt 1fpkt"];
642--10678[label="0.0833333;1pkt 1fpkt"];
642--11177[label="1;2pkt 2fpkt"];
642--11868[label="0.0140845;1pkt 1fpkt"];
642--11903[label="0.0140845;1pkt 1fpkt"];
642--12783[label="1;1pkt 1fpkt"];
642--12914[label="0.75;3pkt 3fpkt"];
642--13617[label="1;4pkt 4fpkt"];
642--15219[label="1;1pkt 1fpkt"];
642--15516[label="0.169014;12pkt 12fpkt"];
642--15587[label="1;1pkt 1fpkt"];
642--17189[label="0.666667;4pkt 4fpkt"];
642--18117[label="1;4pkt 4fpkt"];
642--18262[label="1;4pkt 4fpkt"];
642--19332[label="0.875;7pkt 7fpkt"];
642--19652[label="1;1pkt 1fpkt"];
642--20720[label="1;1pkt 1fpkt"];
642--21273[label="1;4pkt 4fpkt"];
642--22341[label="1;1pkt 1fpkt"];
642--22525[label="0.169014;12pkt 12fpkt"];
642--22567[label="1;1pkt 1fpkt"];
642--23608[label="0.666667;4pkt 4fpkt"];
642--24313[label="1;4pkt 4fpkt"];
642--25031[label="0.875;7pkt 7fpkt"];
642--25168[label="0.0434783;1pkt 1fpkt"];
642--25250[label="1;1pkt 1fpkt"];
642--26883[label="0.169014;12pkt 12fpkt"];
642--27897[label="1;4pkt 4fpkt"];
642--28315[label="0.875;7pkt 7fpkt"];
645--19652[label="1;1pkt 1fpkt"];
645--25250[label="1;1pkt 1fpkt"];
733--15587[label="1;1pkt 1fpkt"];
733--22567[label="1;1pkt 1fpkt"];
6170--11177[label="1;2pkt 2fpkt"];
6170--17189[label="1;2pkt 2fpkt"];
6170--23608[label="1;2pkt 2fpkt"];
7094--18117[label="1;1pkt 1fpkt"];
11177--17189[label="1;2pkt 2fpkt"];
11177--23608[label="1;2pkt 2fpkt"];
12783--20720[label="1;1pkt 1fpkt"];
13617--21273[label="1;4pkt 4fpkt"];
15219--22341[label="1;1pkt 1fpkt"];
15587--22567[label="1;1pkt 1fpkt"];
17189--23608[label="1;6pkt 6fpkt"];
18262--24313[label="1;4pkt 4fpkt"];
18262--27897[label="1;4pkt 4fpkt"];
19332--25031[label="1;8pkt 8fpkt"];
19332--28315[label="1;8pkt 8fpkt"];
19652--25250[label="1;1pkt 1fpkt"];
24313--27897[label="1;4pkt 4fpkt"];
25031--28315[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.225.92" src_port="8000"/>
      <filter dst_ip="134.73.225.92" dst_port="15000"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.154.161.100"/>
    </slice>
    <from sec="1241500171" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.227.180.100"/>
    </slice>
    <from sec="1241499734" usec="0"/>
    <to sec="1241499812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.177.187.100"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.206.218.100"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.132.219.100"/>
    </slice>
    <from sec="1241499807" usec="0"/>
    <to sec="1241499818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.136.225.100"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.229.100"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.9.28.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.179.49.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.148.66.101"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.79.101"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.59.129.101"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.134.101"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.48.150.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.141.160.101"/>
    </slice>
    <from sec="1241499837" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.214.211.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.221.101"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.42.19.102"/>
    </slice>
    <from sec="1241499966" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.129.89.102"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.109.105.102"/>
    </slice>
    <from sec="1241500144" usec="0"/>
    <to sec="1241500162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.116.102"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.128.20.103"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.187.21.103"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.63.26.103"/>
    </slice>
    <from sec="1241500418" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.50.103"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.166.67.103"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241500414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.112.68.103"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.163.88.103"/>
    </slice>
    <from sec="1241499805" usec="0"/>
    <to sec="1241499824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.212.109.103"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.162.103"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.225.210.103"/>
    </slice>
    <from sec="1241500090" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.70.215.103"/>
    </slice>
    <from sec="1241500269" usec="0"/>
    <to sec="1241500275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.193.43.104"/>
    </slice>
    <from sec="1241499801" usec="0"/>
    <to sec="1241499830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.65.92.104"/>
    </slice>
    <from sec="1241500299" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.67.100.104"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
5754[label="170.15.193.119;d;751pkt 751fpkt", shape=diamond, color=yellow];
15736[label="8.107.106.104;176pkt 176fpkt", shape=pentagon, color=darkviolet];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.107.106.104:*, 170.15.193.119:*}[21.9725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25679: (8.14455%)&lt;BR/&gt; 12365: (8.14455%)&lt;BR/&gt; 50132: (6.90399%)&lt;BR/&gt; 38161: (3.50593%)&lt;BR/&gt; 1763: (3.50593%)&gt;];
}
5754--15736[label="0.715909;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.193.119" src_ip="8.107.106.104"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.14.109.104"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.190.117.104"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.75.148.104"/>
    </slice>
    <from sec="1241500046" usec="0"/>
    <to sec="1241500057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.226.152.104"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.216.179.104"/>
    </slice>
    <from sec="1241499733" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.244.104"/>
    </slice>
    <from sec="1241500069" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.142.248.104"/>
    </slice>
    <from sec="1241499936" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.204.28.105"/>
    </slice>
    <from sec="1241500144" usec="0"/>
    <to sec="1241500149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.65.105"/>
    </slice>
    <from sec="1241499633" usec="0"/>
    <to sec="1241500333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.28.66.105"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.104.149.105"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.146.162.105"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241499891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.15.195.105"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.198.105"/>
    </slice>
    <from sec="1241500172" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.254.244.105"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.67.0.106"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.61.23.106"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.232.38.106"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241500104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.43.106"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241499828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.61.78.106"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.4.119.106"/>
    </slice>
    <from sec="1241500307" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.248.133.106"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.214.198.106"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.212.106"/>
    </slice>
    <from sec="1241499824" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.17.107"/>
    </slice>
    <from sec="1241500193" usec="0"/>
    <to sec="1241500201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.132.68.107"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.69.80.107"/>
    </slice>
    <from sec="1241500236" usec="0"/>
    <to sec="1241500292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.42.155.107"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.75.166.107"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.210.193.107"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.116.2.108"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
8168[label="114.56.11.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
15874[label="114.56.11.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22761[label="114.56.11.108;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{114.56.11.108:51264, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51264: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8168--15874[label="1;1pkt 1fpkt"];
8168--22761[label="1;1pkt 1fpkt"];
15874--22761[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="114.56.11.108" src_port="51264"/>
    </slice>
    <from sec="1241500191" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.172.20.108"/>
    </slice>
    <from sec="1241499874" usec="0"/>
    <to sec="1241500017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.177.36.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.41.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.162.72.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.225.80.108"/>
    </slice>
    <from sec="1241499908" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.181.120.108"/>
    </slice>
    <from sec="1241500084" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.56.153.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.157.170.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.128.199.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.167.0.109"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.214.25.109"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.30.109"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.39.51.109"/>
    </slice>
    <from sec="1241500283" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.99.111.109"/>
    </slice>
    <from sec="1241500372" usec="0"/>
    <to sec="1241500466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.120.143.109"/>
    </slice>
    <from sec="1241500361" usec="0"/>
    <to sec="1241500386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.10.154.109"/>
    </slice>
    <from sec="1241500029" usec="0"/>
    <to sec="1241500102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.196.109"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.226.109"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.37.4.110"/>
    </slice>
    <from sec="1241499654" usec="0"/>
    <to sec="1241499669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.24.110"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.202.117.110"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.225.139.110"/>
    </slice>
    <from sec="1241499764" usec="0"/>
    <to sec="1241499899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.78.215.110"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.78.225.110"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241499669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.68.8.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.111.15.111"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.147.33.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.138.55.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.129.63.111"/>
    </slice>
    <from sec="1241500285" usec="0"/>
    <to sec="1241500355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.75.111"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.36.135.111"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.173.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.186.251.111"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.198.255.111"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1153{
style=filled;
color=gray75;
3152[label="134.73.32.112;s;10pkt 10fpkt", shape=diamond, color=yellow];
16019[label="134.73.32.112;10pkt 10fpkt", shape=pentagon, color=darkviolet];
22862[label="134.73.32.112;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1153[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.32.112:*, 214.160.64.131:443}[80%]&lt;BR/&gt;{134.73.32.112:*, 222.74.126.250:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (40%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 60794: (5%)&lt;BR/&gt; 58052: (5%)&lt;BR/&gt; 49576: (5%)&gt;];
}
3152--16019[label="1;10pkt 10fpkt"];
3152--22862[label="1;10pkt 10fpkt"];
16019--22862[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="214.160.64.131" dst_port="443" src_ip="134.73.32.112"/>
      <filter dst_ip="222.74.126.250" dst_port="80" src_ip="134.73.32.112"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.147.40.112"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.193.102.112"/>
    </slice>
    <from sec="1241500293" usec="0"/>
    <to sec="1241500325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.13.184.112"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.112.239.112"/>
    </slice>
    <from sec="1241499929" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.56.12.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.164.69.113"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.102.145.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.85.156.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.15.186.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.190.113"/>
    </slice>
    <from sec="1241499713" usec="0"/>
    <to sec="1241500107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.26.203.113"/>
    </slice>
    <from sec="1241500055" usec="0"/>
    <to sec="1241500293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.79.114"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241499877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.9.87.114"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.211.163.114"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.88.7.115"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.23.115"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.52.37.115"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.35.85.115"/>
    </slice>
    <from sec="1241500111" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.41.236.115"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.33.8.116"/>
    </slice>
    <from sec="1241500174" usec="0"/>
    <to sec="1241500230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.24.116"/>
    </slice>
    <from sec="1241499638" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.11.55.116"/>
    </slice>
    <from sec="1241500017" usec="0"/>
    <to sec="1241500066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.2.72.116"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.187.73.116"/>
    </slice>
    <from sec="1241499820" usec="0"/>
    <to sec="1241499827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.48.178.116"/>
    </slice>
    <from sec="1241500109" usec="0"/>
    <to sec="1241500129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.62.196.116"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.186.23.117"/>
    </slice>
    <from sec="1241499881" usec="0"/>
    <to sec="1241499982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.215.29.117"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.69.77.117"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.182.80.117"/>
    </slice>
    <from sec="1241500307" usec="0"/>
    <to sec="1241500475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1185{
style=filled;
color=gray75;
4325[label="214.170.72.220;d;184pkt 184fpkt", shape=diamond, color=yellow];
4451[label="12.12.22.118;s;8pkt 8fpkt", shape=diamond, color=yellow];
4460[label="12.12.22.97;s;7pkt 7fpkt", shape=diamond, color=yellow];
4462[label="12.12.22.64;s;3pkt 3fpkt", shape=diamond, color=yellow];
8382[label="46.47.46.116;s;136pkt 136fpkt", shape=diamond, color=yellow];
10214[label="12.12.22.118;s;3pkt 3fpkt", shape=hexagon, color=black];
10215[label="12.12.22.97;s;3pkt 3fpkt", shape=hexagon, color=black];
14275[label="12.12.22.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15467[label="12.12.22.97;7pkt 7fpkt", shape=pentagon, color=darkviolet];
16141[label="46.47.46.116;143pkt 143fpkt", shape=pentagon, color=darkviolet];
16189[label="12.12.22.118;7pkt 7fpkt", shape=pentagon, color=darkviolet];
21716[label="12.12.22.64;3pkt 3fpkt", shape=invtriangle, color=brown];
22495[label="12.12.22.97;7pkt 7fpkt", shape=invtriangle, color=brown];
22933[label="46.47.46.116;143pkt 143fpkt", shape=invtriangle, color=brown];
22961[label="12.12.22.118;7pkt 7fpkt", shape=invtriangle, color=brown];
26421[label="12.12.22.64;3pkt 3fpkt", shape=invhouse, color=bisque];
26864[label="12.12.22.97;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1185[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.47.46.116:80, 214.170.72.220:*}[40.0844%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4392%)&lt;BR/&gt; 53: (2.96736%)&lt;BR/&gt; 3981: (0.445104%)&lt;BR/&gt; 3972: (0.445104%)&lt;BR/&gt; 3960: (0.445104%)&gt;];
}
4325--4451[label="1;8pkt 8fpkt"];
4325--4460[label="1;7pkt 7fpkt"];
4325--4462[label="1;3pkt 3fpkt"];
4325--6464[label="0.173913;32pkt 32fpkt"];
4325--8382[label="0.661765;90pkt 90fpkt"];
4325--8752[label="0.00543478;1pkt 1fpkt"];
4325--9845[label="0.00543478;1pkt 1fpkt"];
4325--9889[label="0.0204082;2pkt 2fpkt"];
4325--10163[label="0.0309278;3pkt 3fpkt"];
4325--10214[label="1;3pkt 3fpkt"];
4325--10215[label="1;3pkt 3fpkt"];
4325--11443[label="0.00543478;1pkt 1fpkt"];
4325--11784[label="0.00543478;1pkt 1fpkt"];
4325--11838[label="0.0978261;18pkt 18fpkt"];
4325--11868[label="0.0815217;15pkt 15fpkt"];
4325--11875[label="0.0923913;17pkt 17fpkt"];
4325--11884[label="0.0706522;13pkt 13fpkt"];
4325--11896[label="0.00543478;1pkt 1fpkt"];
4325--11897[label="0.0978261;18pkt 18fpkt"];
4325--11903[label="0.0815217;15pkt 15fpkt"];
4325--11909[label="0.0923913;17pkt 17fpkt"];
4325--11917[label="0.0706522;13pkt 13fpkt"];
4325--11922[label="0.00543478;1pkt 1fpkt"];
4325--11928[label="0.0923913;17pkt 17fpkt"];
4325--14275[label="1;3pkt 3fpkt"];
4325--14605[label="0.0265487;3pkt 3fpkt"];
4325--15467[label="1;7pkt 7fpkt"];
4325--16141[label="0.629371;90pkt 90fpkt"];
4325--16189[label="1;7pkt 7fpkt"];
4325--16432[label="0.25;1pkt 1fpkt"];
4325--16450[label="0.0588235;1pkt 1fpkt"];
4325--16673[label="0.00543478;1pkt 1fpkt"];
4325--18299[label="0.0333333;2pkt 2fpkt"];
4325--18308[label="0.0108696;2pkt 2fpkt"];
4325--18338[label="0.00543478;1pkt 1fpkt"];
4325--19705[label="0.115385;3pkt 3fpkt"];
4325--21716[label="1;3pkt 3fpkt"];
4325--21927[label="0.0265487;3pkt 3fpkt"];
4325--22495[label="1;7pkt 7fpkt"];
4325--22933[label="0.629371;90pkt 90fpkt"];
4325--22961[label="1;7pkt 7fpkt"];
4325--23118[label="0.25;1pkt 1fpkt"];
4325--23278[label="0.00543478;1pkt 1fpkt"];
4325--24339[label="0.0333333;2pkt 2fpkt"];
4325--24346[label="0.0108696;2pkt 2fpkt"];
4325--24367[label="0.00543478;1pkt 1fpkt"];
4325--26421[label="1;3pkt 3fpkt"];
4325--26539[label="0.0265487;3pkt 3fpkt"];
4325--26864[label="1;7pkt 7fpkt"];
4325--27314[label="0.00543478;1pkt 1fpkt"];
4325--27913[label="0.0333333;2pkt 2fpkt"];
4325--27916[label="0.0108696;2pkt 2fpkt"];
4325--27930[label="0.00543478;1pkt 1fpkt"];
4451--10214[label="1;3pkt 3fpkt"];
4451--11884[label="0.125;1pkt 1fpkt"];
4451--11917[label="0.125;1pkt 1fpkt"];
4451--16189[label="1;7pkt 7fpkt"];
4451--22961[label="1;7pkt 7fpkt"];
4460--10215[label="1;3pkt 3fpkt"];
4460--15467[label="1;7pkt 7fpkt"];
4460--22495[label="1;7pkt 7fpkt"];
4460--26864[label="1;7pkt 7fpkt"];
4462--14275[label="1;3pkt 3fpkt"];
4462--21716[label="1;3pkt 3fpkt"];
4462--26421[label="1;3pkt 3fpkt"];
8382--11838[label="0.125;17pkt 17fpkt"];
8382--11868[label="0.125;17pkt 17fpkt"];
8382--11875[label="0.125;17pkt 17fpkt"];
8382--11884[label="0.0367647;5pkt 5fpkt"];
8382--11897[label="0.125;17pkt 17fpkt"];
8382--11903[label="0.125;17pkt 17fpkt"];
8382--11909[label="0.125;17pkt 17fpkt"];
8382--11917[label="0.0367647;5pkt 5fpkt"];
8382--11928[label="0.125;17pkt 17fpkt"];
8382--16141[label="1;136pkt 136fpkt"];
8382--22933[label="1;136pkt 136fpkt"];
10214--11884[label="0.333333;1pkt 1fpkt"];
10214--11917[label="0.333333;1pkt 1fpkt"];
10214--16189[label="0.666667;2pkt 2fpkt"];
10214--22961[label="0.666667;2pkt 2fpkt"];
10215--15467[label="1;3pkt 3fpkt"];
10215--22495[label="1;3pkt 3fpkt"];
10215--26864[label="1;3pkt 3fpkt"];
14275--21716[label="1;3pkt 3fpkt"];
14275--26421[label="1;3pkt 3fpkt"];
15467--22495[label="1;7pkt 7fpkt"];
15467--26864[label="1;7pkt 7fpkt"];
16141--22933[label="1;143pkt 143fpkt"];
16189--22961[label="1;7pkt 7fpkt"];
21716--26421[label="1;3pkt 3fpkt"];
22495--26864[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="214.170.72.220" src_ip="46.47.46.116" src_port="80"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.6.29.118"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.81.43.118"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.54.71.118"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.76.118"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.144.88.118"/>
    </slice>
    <from sec="1241499982" usec="0"/>
    <to sec="1241500177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.101.100.118"/>
    </slice>
    <from sec="1241500150" usec="0"/>
    <to sec="1241500197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.82.146.118"/>
    </slice>
    <from sec="1241499703" usec="0"/>
    <to sec="1241500125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.75.148.118"/>
    </slice>
    <from sec="1241500457" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.165.118"/>
    </slice>
    <from sec="1241499854" usec="0"/>
    <to sec="1241499903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.213.118"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.110.9.119"/>
    </slice>
    <from sec="1241499777" usec="0"/>
    <to sec="1241500459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.162.38.119"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.65.119"/>
    </slice>
    <from sec="1241500065" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
3739[label="215.66.215.75;d;446pkt 446fpkt", shape=diamond, color=yellow];
3768[label="215.66.208.19;d;452pkt 452fpkt", shape=diamond, color=yellow];
4709[label="215.66.215.140;d;447pkt 447fpkt", shape=diamond, color=yellow];
8820[label="128.156.122.217;d;100pkt 100fpkt", shape=diamond, color=yellow];
16252[label="69.176.37.120;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 215.66.208.19:0}[31.1419%]&lt;BR/&gt;{*:0, 215.66.215.140:0}[30.8651%]&lt;BR/&gt;{*:0, 215.66.215.75:0}[30.7266%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6549%)&lt;BR/&gt; 35388: (0.10352%)&lt;BR/&gt; 22: (0.10352%)&lt;BR/&gt; 6000: (0.0690131%)&lt;BR/&gt; 445: (0.0690131%)&gt;];
}
3739--6350[label="0.00224215;1pkt 1fpkt"];
3739--9504[label="0.00224215;1pkt 1fpkt"];
3739--10624[label="0.00224215;1pkt 1fpkt"];
3739--11672[label="0.00224215;1pkt 1fpkt"];
3739--11718[label="0.00224215;1pkt 1fpkt"];
3739--11792[label="0.00224215;1pkt 1fpkt"];
3739--13958[label="0.00224215;1pkt 1fpkt"];
3739--15347[label="0.00224215;1pkt 1fpkt"];
3739--16252[label="0.25;1pkt 1fpkt"];
3739--21494[label="0.00224215;1pkt 1fpkt"];
3739--22420[label="0.00224215;1pkt 1fpkt"];
3739--26305[label="0.00224215;1pkt 1fpkt"];
3739--26811[label="0.00224215;1pkt 1fpkt"];
3768--6350[label="0.00221239;1pkt 1fpkt"];
3768--9504[label="0.00221239;1pkt 1fpkt"];
3768--10624[label="0.00221239;1pkt 1fpkt"];
3768--11672[label="0.00221239;1pkt 1fpkt"];
3768--11718[label="0.00221239;1pkt 1fpkt"];
3768--11792[label="0.00221239;1pkt 1fpkt"];
3768--13958[label="0.00221239;1pkt 1fpkt"];
3768--15347[label="0.00221239;1pkt 1fpkt"];
3768--16252[label="0.25;1pkt 1fpkt"];
3768--21494[label="0.00221239;1pkt 1fpkt"];
3768--22420[label="0.00221239;1pkt 1fpkt"];
3768--26305[label="0.00221239;1pkt 1fpkt"];
3768--26811[label="0.00221239;1pkt 1fpkt"];
4709--6350[label="0.00223714;1pkt 1fpkt"];
4709--10624[label="0.00223714;1pkt 1fpkt"];
4709--11718[label="0.00223714;1pkt 1fpkt"];
4709--15347[label="0.00223714;1pkt 1fpkt"];
4709--16252[label="0.25;1pkt 1fpkt"];
4709--22420[label="0.00223714;1pkt 1fpkt"];
4709--26811[label="0.00223714;1pkt 1fpkt"];
8820--16252[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.208.19"/>
      <filter dst_ip="215.66.215.140"/>
      <filter dst_ip="215.66.215.75"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.231.42.120"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.132.61.120"/>
    </slice>
    <from sec="1241499727" usec="0"/>
    <to sec="1241499960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.81.65.120"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.119.19.121"/>
    </slice>
    <from sec="1241500405" usec="0"/>
    <to sec="1241500423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.177.29.121"/>
    </slice>
    <from sec="1241500395" usec="0"/>
    <to sec="1241500415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.160.121"/>
    </slice>
    <from sec="1241499656" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.6.161.121"/>
    </slice>
    <from sec="1241500108" usec="0"/>
    <to sec="1241500169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.237.190.121"/>
    </slice>
    <from sec="1241500386" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.79.20.122"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.65.99.122"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.142.158.122"/>
    </slice>
    <from sec="1241500418" usec="0"/>
    <to sec="1241500439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.224.212.122"/>
    </slice>
    <from sec="1241499684" usec="0"/>
    <to sec="1241500451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.72.67.123"/>
    </slice>
    <from sec="1241500143" usec="0"/>
    <to sec="1241500175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.222.65.124"/>
    </slice>
    <from sec="1241499794" usec="0"/>
    <to sec="1241499942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1215{
style=filled;
color=gray75;
7362[label="38.132.68.124;s;12pkt 12fpkt", shape=diamond, color=yellow];
16377[label="38.132.68.124;12pkt 12fpkt", shape=pentagon, color=darkviolet];
23081[label="38.132.68.124;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1215[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.132.68.124:5050, *:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (45.8333%)&lt;BR/&gt; 63270: (4.16667%)&lt;BR/&gt; 63081: (4.16667%)&lt;BR/&gt; 52757: (4.16667%)&lt;BR/&gt; 49309: (4.16667%)&gt;];
}
7362--9530[label="0.0833333;1pkt 1fpkt"];
7362--11675[label="0.0833333;1pkt 1fpkt"];
7362--11802[label="0.0833333;1pkt 1fpkt"];
7362--11836[label="0.0833333;1pkt 1fpkt"];
7362--11860[label="0.0833333;1pkt 1fpkt"];
7362--11865[label="0.0833333;1pkt 1fpkt"];
7362--11882[label="0.0833333;1pkt 1fpkt"];
7362--11893[label="0.0833333;1pkt 1fpkt"];
7362--11901[label="0.0833333;1pkt 1fpkt"];
7362--11914[label="0.0833333;1pkt 1fpkt"];
7362--16377[label="1;12pkt 12fpkt"];
7362--23081[label="1;12pkt 12fpkt"];
16377--23081[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="38.132.68.124" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.130.167.124"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.202.124"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.75.225.124"/>
    </slice>
    <from sec="1241500128" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.49.238.124"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.8.125"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.93.31.125"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.60.85.125"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.104.24.126"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.74.126"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.224.112.126"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241500398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.04381,4.36364,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1226{
style=filled;
color=gray75;
460[label="170.15.192.2;d;7pkt 7fpkt", shape=diamond, color=yellow];
463[label="47.138.134.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
610[label="46.199.220.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
9610[label="46.199.220.221;s;1pkt 1fpkt", shape=hexagon, color=black];
16445[label="47.138.134.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23127[label="47.138.134.126;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1226[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.199.220.221:*, 170.15.192.2:1068}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1068: (45.8333%)&lt;BR/&gt; 1047: (16.6667%)&lt;BR/&gt; 15448: (12.5%)&lt;BR/&gt; 55986: (4.16667%)&lt;BR/&gt; 15845: (4.16667%)&gt;];
}
460--463[label="1;1pkt 1fpkt"];
460--610[label="1;1pkt 1fpkt"];
460--9610[label="1;1pkt 1fpkt"];
460--11884[label="0.142857;1pkt 1fpkt"];
460--11917[label="0.142857;1pkt 1fpkt"];
460--16445[label="1;1pkt 1fpkt"];
460--23127[label="1;1pkt 1fpkt"];
463--16445[label="1;1pkt 1fpkt"];
463--23127[label="1;1pkt 1fpkt"];
610--9610[label="1;1pkt 1fpkt"];
16445--23127[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.192.2" dst_port="1068" src_ip="46.199.220.221"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.71.192.126"/>
    </slice>
    <from sec="1241499697" usec="0"/>
    <to sec="1241500015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.134.78.127"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.228.96.127"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.53.105.127"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.85.203.127"/>
    </slice>
    <from sec="1241499744" usec="0"/>
    <to sec="1241500411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.71.236.127"/>
    </slice>
    <from sec="1241500046" usec="0"/>
    <to sec="1241500405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.220.2.128"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.36.32.128"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.218.50.128"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.95.128"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.5.99.128"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.154.128"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.229.128"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.3.12.129"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.196.38.129"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.145.41.129"/>
    </slice>
    <from sec="1241500156" usec="0"/>
    <to sec="1241500208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.60.81.129"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.94.129"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.90.149.129"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.176.222.129"/>
    </slice>
    <from sec="1241500413" usec="0"/>
    <to sec="1241500431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.205.21.130"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.27.130"/>
    </slice>
    <from sec="1241499761" usec="0"/>
    <to sec="1241500407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.176.130"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.142.188.130"/>
    </slice>
    <from sec="1241500459" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.213.214.130"/>
    </slice>
    <from sec="1241499696" usec="0"/>
    <to sec="1241500363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.57.244.130"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.175.244.130"/>
    </slice>
    <from sec="1241499961" usec="0"/>
    <to sec="1241499999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.136.37.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.242.41.131"/>
    </slice>
    <from sec="1241499988" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.95.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.196.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.200.131"/>
    </slice>
    <from sec="1241500188" usec="0"/>
    <to sec="1241500248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.16.224.131"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.84.41.132"/>
    </slice>
    <from sec="1241500269" usec="0"/>
    <to sec="1241500286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.40.81.132"/>
    </slice>
    <from sec="1241500198" usec="0"/>
    <to sec="1241500343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.44.204.132"/>
    </slice>
    <from sec="1241500266" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.66.214.132"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.215.132"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.232.132"/>
    </slice>
    <from sec="1241500232" usec="0"/>
    <to sec="1241500282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.60.9.133"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.21.21.133"/>
    </slice>
    <from sec="1241500322" usec="0"/>
    <to sec="1241500329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.166.43.133"/>
    </slice>
    <from sec="1241499902" usec="0"/>
    <to sec="1241499926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.29.78.133"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.30.83.133"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.95.133"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.71.110.133"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.104.142.133"/>
    </slice>
    <from sec="1241500100" usec="0"/>
    <to sec="1241500185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.67.147.133"/>
    </slice>
    <from sec="1241500117" usec="0"/>
    <to sec="1241500147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.100.150.133"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241499789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.54.201.133"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.72.6.134"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.84.20.134"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.36.134"/>
    </slice>
    <from sec="1241499639" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.60.61.134"/>
    </slice>
    <from sec="1241500123" usec="0"/>
    <to sec="1241500145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.235.100.134"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.149.134"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.65.158.134"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.71.193.134"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.65.226.134"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.112.238.134"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.1.135"/>
    </slice>
    <from sec="1241499793" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.35.22.135"/>
    </slice>
    <from sec="1241500161" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.212.87.135"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.67.124.135"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.239.131.135"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241499902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.67.165.135"/>
    </slice>
    <from sec="1241500316" usec="0"/>
    <to sec="1241500347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.186.168.135"/>
    </slice>
    <from sec="1241500146" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.16.169.135"/>
    </slice>
    <from sec="1241499954" usec="0"/>
    <to sec="1241500058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.68.196.135"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.141.216.135"/>
    </slice>
    <from sec="1241500149" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.188.0.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.98.34.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.226.37.136"/>
    </slice>
    <from sec="1241500300" usec="0"/>
    <to sec="1241500417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.27.53.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.74.89.136"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.67.100.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.56.110.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.1.118.136"/>
    </slice>
    <from sec="1241500023" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.53.167.136"/>
    </slice>
    <from sec="1241500439" usec="0"/>
    <to sec="1241500475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.5.172.136"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.214.196.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.61.230.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.32.232.136"/>
    </slice>
    <from sec="1241499674" usec="0"/>
    <to sec="1241499685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.203.51.137"/>
    </slice>
    <from sec="1241499943" usec="0"/>
    <to sec="1241499976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.106.74.137"/>
    </slice>
    <from sec="1241499902" usec="0"/>
    <to sec="1241499940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.81.120.137"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.136.137"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.104.164.137"/>
    </slice>
    <from sec="1241499894" usec="0"/>
    <to sec="1241500445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.168.208.137"/>
    </slice>
    <from sec="1241499661" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.211.3.138"/>
    </slice>
    <from sec="1241499699" usec="0"/>
    <to sec="1241499750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.12.41.138"/>
    </slice>
    <from sec="1241499988" usec="0"/>
    <to sec="1241500184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.2.47.138"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.27.61.138"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
9039[label="128.156.94.138;s;60pkt 60fpkt", shape=diamond, color=yellow];
16886[label="128.156.94.138;63pkt 63fpkt", shape=pentagon, color=darkviolet];
23417[label="128.156.94.138;63pkt 63fpkt", shape=invtriangle, color=brown];
27395[label="128.156.94.138;63pkt 63fpkt", shape=invhouse, color=bisque];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.94.138:*, 192.13.188.38:80}[41.2698%]&lt;BR/&gt;{128.156.94.138:*, 46.47.46.115:80}[26.9841%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3936%)&lt;BR/&gt; 49524: (0.803213%)&lt;BR/&gt; 49520: (0.803213%)&lt;BR/&gt; 49519: (0.803213%)&lt;BR/&gt; 49516: (0.803213%)&gt;];
}
9039--16886[label="1;60pkt 60fpkt"];
9039--23417[label="1;60pkt 60fpkt"];
9039--27395[label="1;60pkt 60fpkt"];
16886--23417[label="1;63pkt 63fpkt"];
16886--27395[label="1;63pkt 63fpkt"];
23417--27395[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="192.13.188.38" dst_port="80" src_ip="128.156.94.138"/>
      <filter dst_ip="46.47.46.115" dst_port="80" src_ip="128.156.94.138"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.6.97.138"/>
    </slice>
    <from sec="1241499832" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.210.196.138"/>
    </slice>
    <from sec="1241499761" usec="0"/>
    <to sec="1241499830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.12.225.138"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.19.139"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.10.22.139"/>
    </slice>
    <from sec="1241499748" usec="0"/>
    <to sec="1241499860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.72.139"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.132.90.139"/>
    </slice>
    <from sec="1241500267" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.107.139"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.60.177.139"/>
    </slice>
    <from sec="1241500042" usec="0"/>
    <to sec="1241500176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.226.139"/>
    </slice>
    <from sec="1241499986" usec="0"/>
    <to sec="1241500210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.54.0.140"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.131.140"/>
    </slice>
    <from sec="1241500272" usec="0"/>
    <to sec="1241500333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.221.166.140"/>
    </slice>
    <from sec="1241500473" usec="0"/>
    <to sec="1241500484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.49.210.140"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.5.227.140"/>
    </slice>
    <from sec="1241500300" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.49.14.141"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241499976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.162.36.141"/>
    </slice>
    <from sec="1241499986" usec="0"/>
    <to sec="1241500060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.76.122.141"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.10.160.141"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.94.168.141"/>
    </slice>
    <from sec="1241500484" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.214.250.141"/>
    </slice>
    <from sec="1241499749" usec="0"/>
    <to sec="1241500158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.181.20.142"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.177.40.142"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.153.88.142"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.15.128.142"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.132.142"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.77.168.142"/>
    </slice>
    <from sec="1241500186" usec="0"/>
    <to sec="1241500210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.237.233.142"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.4.143"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.132.71.143"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.6.129.143"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.89.133.143"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.128.139.143"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.172.142.143"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.168.143"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.79.190.143"/>
    </slice>
    <from sec="1241500366" usec="0"/>
    <to sec="1241500436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.195.143"/>
    </slice>
    <from sec="1241500214" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.30.213.143"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.81.18.144"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.92.20.144"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.22.144"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.158.32.144"/>
    </slice>
    <from sec="1241499885" usec="0"/>
    <to sec="1241499914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.64.144"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.5.98.144"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241500003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.214.130.144"/>
    </slice>
    <from sec="1241499840" usec="0"/>
    <to sec="1241499939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.109.170.144"/>
    </slice>
    <from sec="1241499807" usec="0"/>
    <to sec="1241500253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.218.173.144"/>
    </slice>
    <from sec="1241499722" usec="0"/>
    <to sec="1241499814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.217.144"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.123.24.145"/>
    </slice>
    <from sec="1241500005" usec="0"/>
    <to sec="1241500457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.35.32.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.78.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.63.88.145"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.4.119.145"/>
    </slice>
    <from sec="1241500307" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.104.133.145"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.152.145"/>
    </slice>
    <from sec="1241499783" usec="0"/>
    <to sec="1241499953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.89.193.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.199.145"/>
    </slice>
    <from sec="1241499688" usec="0"/>
    <to sec="1241500154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.130.220.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.238.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.8.3.146"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.102.146"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.29.130.146"/>
    </slice>
    <from sec="1241500210" usec="0"/>
    <to sec="1241500229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.136.146"/>
    </slice>
    <from sec="1241500084" usec="0"/>
    <to sec="1241500178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.104.182.146"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.44.183.146"/>
    </slice>
    <from sec="1241499655" usec="0"/>
    <to sec="1241499942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.199.146"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.188.236.146"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.0.147"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.82.85.147"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.131.129.147"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.168.147"/>
    </slice>
    <from sec="1241500217" usec="0"/>
    <to sec="1241500331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.15.19.148"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.27.148"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.53.41.148"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.189.65.148"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.176.188.148"/>
    </slice>
    <from sec="1241499971" usec="0"/>
    <to sec="1241500008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.157.230.148"/>
    </slice>
    <from sec="1241500299" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.52.0.149"/>
    </slice>
    <from sec="1241500265" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.185.4.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.77.33.149"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.6.76.149"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.217.82.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.24.107.149"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.211.140.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.172.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.111.206.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.29.228.149"/>
    </slice>
    <from sec="1241500216" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.15.19.150"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.81.34.150"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.162.46.150"/>
    </slice>
    <from sec="1241499756" usec="0"/>
    <to sec="1241500425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.21.94.150"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.100.94.150"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1415{
style=filled;
color=gray75;
8751[label="103.222.96.150;s;4pkt 4fpkt", shape=diamond, color=yellow];
17301[label="103.222.96.150;4pkt 4fpkt", shape=pentagon, color=darkviolet];
23688[label="103.222.96.150;4pkt 4fpkt", shape=invtriangle, color=brown];
27550[label="103.222.96.150;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1415[shape=component, label=&lt;Rules:&lt;BR/&gt;{103.222.96.150:50064, 215.66.218.56:8080}[25%]&lt;BR/&gt;{103.222.96.150:50065, 215.66.218.56:8080}[25%]&lt;BR/&gt;{103.222.96.150:50066, 215.66.218.56:8080}[25%]&lt;BR/&gt;{103.222.96.150:50067, 215.66.218.56:8080}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 50067: (12.5%)&lt;BR/&gt; 50066: (12.5%)&lt;BR/&gt; 50065: (12.5%)&lt;BR/&gt; 50064: (12.5%)&gt;];
}
8751--17301[label="1;4pkt 4fpkt"];
8751--23688[label="1;4pkt 4fpkt"];
8751--27550[label="1;4pkt 4fpkt"];
17301--23688[label="1;4pkt 4fpkt"];
17301--27550[label="1;4pkt 4fpkt"];
23688--27550[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.56" dst_port="8080" src_ip="103.222.96.150" src_port="50067"/>
      <filter dst_ip="215.66.218.56" dst_port="8080" src_ip="103.222.96.150" src_port="50066"/>
      <filter dst_ip="215.66.218.56" dst_port="8080" src_ip="103.222.96.150" src_port="50065"/>
      <filter dst_ip="215.66.218.56" dst_port="8080" src_ip="103.222.96.150" src_port="50064"/>
    </slice>
    <from sec="1241500288" usec="0"/>
    <to sec="1241500312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.146.150"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.20.67.151"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.105.151"/>
    </slice>
    <from sec="1241499641" usec="0"/>
    <to sec="1241499660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.192.154.151"/>
    </slice>
    <from sec="1241500310" usec="0"/>
    <to sec="1241500323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.82.185.151"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.66.1.152"/>
    </slice>
    <from sec="1241500159" usec="0"/>
    <to sec="1241500273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.46.21.152"/>
    </slice>
    <from sec="1241499773" usec="0"/>
    <to sec="1241500365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.45.152"/>
    </slice>
    <from sec="1241500134" usec="0"/>
    <to sec="1241500178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.222.93.152"/>
    </slice>
    <from sec="1241500056" usec="0"/>
    <to sec="1241500302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.161.102.152"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.106.152"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.236.168.152"/>
    </slice>
    <from sec="1241500420" usec="0"/>
    <to sec="1241500433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1428{
style=filled;
color=gray75;
214[label="40.134.58.78;d;1114pkt 1114fpkt", shape=diamond, color=yellow];
216[label="128.156.140.73;s;2605pkt 2605fpkt", shape=diamond, color=yellow];
410[label="40.134.59.98;d;529pkt 529fpkt", shape=diamond, color=yellow];
965[label="69.210.21.41;d;11pkt 11fpkt", shape=diamond, color=yellow];
4418[label="35.18.20.60;d;13pkt 13fpkt", shape=diamond, color=yellow];
6008[label="46.1.64.226;d;64pkt 64fpkt", shape=diamond, color=yellow];
7220[label="192.73.123.39;d;68pkt 68fpkt", shape=diamond, color=yellow];
8008[label="169.117.85.249;d;35pkt 35fpkt", shape=diamond, color=yellow];
8515[label="195.68.135.175;d;64pkt 64fpkt", shape=diamond, color=yellow];
10931[label="128.156.140.73;s;2049pkt 2049fpkt", shape=hexagon, color=black];
14645[label="128.156.140.73;2831pkt 2831fpkt", shape=pentagon, color=darkviolet];
21952[label="128.156.140.73;2831pkt 2831fpkt", shape=invtriangle, color=brown];
26553[label="128.156.140.73;2831pkt 2831fpkt", shape=invhouse, color=bisque];
stat1428[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.140.73:8080, 40.134.58.78:*}[41.3988%]&lt;BR/&gt;{128.156.140.73:*, *:80}[33.4511%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (33.1539%)&lt;BR/&gt; 80: (15.3041%)&lt;BR/&gt; 113: (1.45896%)&lt;BR/&gt; 0: (0.166168%)&lt;BR/&gt; 56401: (0.0398804%)&gt;];
}
214--216[label="1;1114pkt 1114fpkt"];
214--10931[label="0.78456;874pkt 874fpkt"];
214--14645[label="1;1114pkt 1114fpkt"];
214--21952[label="1;1114pkt 1114fpkt"];
214--26553[label="1;1114pkt 1114fpkt"];
216--410[label="1;529pkt 529fpkt"];
216--965[label="1;11pkt 11fpkt"];
216--4418[label="1;13pkt 13fpkt"];
216--6008[label="1;64pkt 64fpkt"];
216--6708[label="0.0178571;1pkt 1fpkt"];
216--7220[label="1;68pkt 68fpkt"];
216--8008[label="1;35pkt 35fpkt"];
216--8020[label="0.0125;1pkt 1fpkt"];
216--8515[label="1;64pkt 64fpkt"];
216--10931[label="1;2049pkt 2049fpkt"];
216--14645[label="1;2605pkt 2605fpkt"];
216--21952[label="1;2605pkt 2605fpkt"];
216--26553[label="1;2605pkt 2605fpkt"];
410--10931[label="0.807183;427pkt 427fpkt"];
410--14645[label="1;529pkt 529fpkt"];
410--21952[label="1;529pkt 529fpkt"];
410--26553[label="1;529pkt 529fpkt"];
965--10931[label="1;11pkt 11fpkt"];
965--14645[label="1;11pkt 11fpkt"];
965--21952[label="1;11pkt 11fpkt"];
965--26553[label="1;11pkt 11fpkt"];
4418--10931[label="1;13pkt 13fpkt"];
4418--14645[label="1;13pkt 13fpkt"];
4418--21952[label="1;13pkt 13fpkt"];
4418--26553[label="1;13pkt 13fpkt"];
6008--10931[label="0.75;48pkt 48fpkt"];
6008--14645[label="1;64pkt 64fpkt"];
6008--21952[label="1;64pkt 64fpkt"];
6008--26553[label="1;64pkt 64fpkt"];
7220--10931[label="1;68pkt 68fpkt"];
7220--14645[label="1;68pkt 68fpkt"];
7220--21952[label="1;68pkt 68fpkt"];
7220--26553[label="1;68pkt 68fpkt"];
8008--10931[label="1;35pkt 35fpkt"];
8008--14645[label="1;35pkt 35fpkt"];
8008--21952[label="1;35pkt 35fpkt"];
8008--26553[label="1;35pkt 35fpkt"];
8515--10931[label="0.765625;49pkt 49fpkt"];
8515--14645[label="1;64pkt 64fpkt"];
8515--21952[label="1;64pkt 64fpkt"];
8515--26553[label="1;64pkt 64fpkt"];
10931--14645[label="1;2049pkt 2049fpkt"];
10931--21952[label="1;2049pkt 2049fpkt"];
10931--26553[label="1;2049pkt 2049fpkt"];
14645--21952[label="1;2831pkt 2831fpkt"];
14645--26553[label="1;2831pkt 2831fpkt"];
21952--26553[label="1;2831pkt 2831fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.156.140.73"/>
      <filter dst_ip="40.134.58.78" src_ip="128.156.140.73" src_port="8080"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.55.24.153"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.72.74.153"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.12.85.153"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.95.153"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.177.153"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.105.224.153"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.100.241.153"/>
    </slice>
    <from sec="1241500001" usec="0"/>
    <to sec="1241500050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.149.23.154"/>
    </slice>
    <from sec="1241500255" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1437{
style=filled;
color=gray75;
17408[label="170.15.25.154;116pkt 116fpkt", shape=pentagon, color=darkviolet];
stat1437[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.25.154:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="170.15.25.154"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.141.148.154"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.91.173.154"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241499804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.128.199.154"/>
    </slice>
    <from sec="1241500065" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.224.154"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.142.89.155"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.81.166.155"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241499770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.97.184.155"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1445{
style=filled;
color=gray75;
7100[label="55.3.4.156;s;4pkt 4fpkt", shape=diamond, color=yellow];
17459[label="55.3.4.156;4pkt 4fpkt", shape=pentagon, color=darkviolet];
23789[label="55.3.4.156;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1445[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.3.4.156:1270, 170.15.19.236:8080}[25%]&lt;BR/&gt;{55.3.4.156:1272, 170.15.19.236:8080}[25%]&lt;BR/&gt;{55.3.4.156:1274, 170.15.19.236:8080}[25%]&lt;BR/&gt;{55.3.4.156:1276, 170.15.19.236:8080}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1276: (12.5%)&lt;BR/&gt; 1274: (12.5%)&lt;BR/&gt; 1272: (12.5%)&lt;BR/&gt; 1270: (12.5%)&gt;];
}
7100--17459[label="1;4pkt 4fpkt"];
7100--23789[label="1;4pkt 4fpkt"];
17459--23789[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.236" dst_port="8080" src_ip="55.3.4.156" src_port="1276"/>
      <filter dst_ip="170.15.19.236" dst_port="8080" src_ip="55.3.4.156" src_port="1274"/>
      <filter dst_ip="170.15.19.236" dst_port="8080" src_ip="55.3.4.156" src_port="1272"/>
      <filter dst_ip="170.15.19.236" dst_port="8080" src_ip="55.3.4.156" src_port="1270"/>
    </slice>
    <from sec="1241500042" usec="0"/>
    <to sec="1241500083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.238.6.156"/>
    </slice>
    <from sec="1241500091" usec="0"/>
    <to sec="1241500121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.218.16.156"/>
    </slice>
    <from sec="1241499760" usec="0"/>
    <to sec="1241499886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.35.156"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.250.77.156"/>
    </slice>
    <from sec="1241500456" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.110.156"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.179.112.156"/>
    </slice>
    <from sec="1241500109" usec="0"/>
    <to sec="1241500216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.65.14.157"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.163.19.157"/>
    </slice>
    <from sec="1241500223" usec="0"/>
    <to sec="1241500404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.207.52.157"/>
    </slice>
    <from sec="1241500166" usec="0"/>
    <to sec="1241500202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.81.157"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.48.106.157"/>
    </slice>
    <from sec="1241500298" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.35.163.157"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.33.164.157"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.134.172.157"/>
    </slice>
    <from sec="1241500213" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.214.232.157"/>
    </slice>
    <from sec="1241499865" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.234.157"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.146.34.158"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.64.36.158"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241499934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.95.44.158"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.100.58.158"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.157.158"/>
    </slice>
    <from sec="1241499945" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.158.158"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.161.158"/>
    </slice>
    <from sec="1241500157" usec="0"/>
    <to sec="1241500210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.111.178.158"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.137.178.158"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.77.216.158"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.160.254.158"/>
    </slice>
    <from sec="1241499918" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.17.16.159"/>
    </slice>
    <from sec="1241499713" usec="0"/>
    <to sec="1241499803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.8.35.159"/>
    </slice>
    <from sec="1241499979" usec="0"/>
    <to sec="1241500022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.142.47.159"/>
    </slice>
    <from sec="1241499780" usec="0"/>
    <to sec="1241500404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.86.213.159"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.98.28.160"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.226.37.160"/>
    </slice>
    <from sec="1241499642" usec="0"/>
    <to sec="1241499682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.49.160"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.54.160"/>
    </slice>
    <from sec="1241500263" usec="0"/>
    <to sec="1241500348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.56.74.160"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.33.84.160"/>
    </slice>
    <from sec="1241500315" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.17.106.160"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.130.143.160"/>
    </slice>
    <from sec="1241499899" usec="0"/>
    <to sec="1241499973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.70.216.160"/>
    </slice>
    <from sec="1241499875" usec="0"/>
    <to sec="1241499896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.70.229.160"/>
    </slice>
    <from sec="1241500065" usec="0"/>
    <to sec="1241500372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.120.41.161"/>
    </slice>
    <from sec="1241499900" usec="0"/>
    <to sec="1241499915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.146.68.161"/>
    </slice>
    <from sec="1241500347" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.95.161"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.96.161"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.156.98.161"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.214.102.161"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.185.161"/>
    </slice>
    <from sec="1241500280" usec="0"/>
    <to sec="1241500308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.41.204.161"/>
    </slice>
    <from sec="1241499640" usec="0"/>
    <to sec="1241499905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.53.247.161"/>
    </slice>
    <from sec="1241499938" usec="0"/>
    <to sec="1241500048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.172.21.162"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.27.162"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241499854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.123.34.162"/>
    </slice>
    <from sec="1241499698" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.43.162"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.164.68.162"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.161.83.162"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.42.86.162"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.139.162"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.145.151.162"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.2.153.162"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.199.250.162"/>
    </slice>
    <from sec="1241500141" usec="0"/>
    <to sec="1241500237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.252.162"/>
    </slice>
    <from sec="1241500131" usec="0"/>
    <to sec="1241500292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.168.26.163"/>
    </slice>
    <from sec="1241500284" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.162.105.163"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.116.172.163"/>
    </slice>
    <from sec="1241499999" usec="0"/>
    <to sec="1241500331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.189.232.163"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.142.237.163"/>
    </slice>
    <from sec="1241500372" usec="0"/>
    <to sec="1241500466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.20.164"/>
    </slice>
    <from sec="1241499737" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.211.27.164"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.162.37.164"/>
    </slice>
    <from sec="1241499639" usec="0"/>
    <to sec="1241500238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.52.164"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.142.64.164"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.129.115.164"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.8.162.164"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241499934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.162.164"/>
    </slice>
    <from sec="1241499644" usec="0"/>
    <to sec="1241499791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.137.175.164"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.99.22.165"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.184.165"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.55.186.165"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.18.197.165"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.167.211.165"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.119.166"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.162.166"/>
    </slice>
    <from sec="1241499788" usec="0"/>
    <to sec="1241500455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.37.171.166"/>
    </slice>
    <from sec="1241500149" usec="0"/>
    <to sec="1241500181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.189.166"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.70.191.166"/>
    </slice>
    <from sec="1241500020" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.66.210.166"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.77.216.166"/>
    </slice>
    <from sec="1241499639" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.78.12.167"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.62.167"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.17.72.167"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.27.81.167"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241499811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.218.85.167"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.24.98.167"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.131.167"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.164.13.168"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.80.168"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.165.110.168"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.108.128.168"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.65.192.168"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.54.238.168"/>
    </slice>
    <from sec="1241500247" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.238.168"/>
    </slice>
    <from sec="1241500304" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.137.243.168"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.46.91.169"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.108.107.169"/>
    </slice>
    <from sec="1241500175" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.124.169"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.18.178.169"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241499729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.148.201.169"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.71.235.169"/>
    </slice>
    <from sec="1241500041" usec="0"/>
    <to sec="1241500068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.67.236.169"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.89.2.170"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.3.14.170"/>
    </slice>
    <from sec="1241500432" usec="0"/>
    <to sec="1241500458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.187.33.170"/>
    </slice>
    <from sec="1241500295" usec="0"/>
    <to sec="1241500309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.197.44.170"/>
    </slice>
    <from sec="1241500168" usec="0"/>
    <to sec="1241500209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.188.60.170"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.95.170"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.185.136.170"/>
    </slice>
    <from sec="1241500244" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.237.137.170"/>
    </slice>
    <from sec="1241499638" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.59.23.171"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.196.23.171"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.240.34.171"/>
    </slice>
    <from sec="1241500217" usec="0"/>
    <to sec="1241500246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.56.57.171"/>
    </slice>
    <from sec="1241499688" usec="0"/>
    <to sec="1241500445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.234.148.171"/>
    </slice>
    <from sec="1241500153" usec="0"/>
    <to sec="1241500162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.146.220.171"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.2.235.171"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.83.0.172"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.134.25.172"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.5.32.172"/>
    </slice>
    <from sec="1241499842" usec="0"/>
    <to sec="1241500468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.143.42.172"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.218.51.172"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.177.54.172"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.143.81.172"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.149.110.172"/>
    </slice>
    <from sec="1241499888" usec="0"/>
    <to sec="1241499905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.117.172"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241499812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.35.146.172"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.20.160.172"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241499971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.110.188.172"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.37.6.173"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.11.25.173"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1586{
style=filled;
color=gray75;
4508[label="204.173.40.173;s;246pkt 246fpkt", shape=diamond, color=yellow];
18009[label="204.173.40.173;385pkt 385fpkt", shape=pentagon, color=darkviolet];
24147[label="204.173.40.173;385pkt 385fpkt", shape=invtriangle, color=brown];
27804[label="204.173.40.173;385pkt 385fpkt", shape=invhouse, color=bisque];
stat1586[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.173.40.173:51401, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51401: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4508--18009[label="1;246pkt 246fpkt"];
4508--24147[label="1;246pkt 246fpkt"];
4508--27804[label="1;246pkt 246fpkt"];
18009--24147[label="1;385pkt 385fpkt"];
18009--27804[label="1;385pkt 385fpkt"];
24147--27804[label="1;385pkt 385fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="204.173.40.173" src_port="51401"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241499819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1587{
style=filled;
color=gray75;
9070[label="128.46.65.173;s;19pkt 19fpkt", shape=diamond, color=yellow];
18013[label="128.46.65.173;23pkt 23fpkt", shape=pentagon, color=darkviolet];
24151[label="128.46.65.173;23pkt 23fpkt", shape=invtriangle, color=brown];
27806[label="128.46.65.173;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1587[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.46.65.173:*, 32.91.33.248:80}[43.4783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7273%)&lt;BR/&gt; 53700: (2.27273%)&lt;BR/&gt; 53699: (2.27273%)&lt;BR/&gt; 53698: (2.27273%)&lt;BR/&gt; 53697: (2.27273%)&gt;];
}
9070--18013[label="1;19pkt 19fpkt"];
9070--24151[label="1;19pkt 19fpkt"];
9070--27806[label="1;19pkt 19fpkt"];
18013--24151[label="1;23pkt 23fpkt"];
18013--27806[label="1;23pkt 23fpkt"];
24151--27806[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="32.91.33.248" dst_port="80" src_ip="128.46.65.173"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.219.73.173"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.134.173"/>
    </slice>
    <from sec="1241500242" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.173.173"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.5.198.173"/>
    </slice>
    <from sec="1241500165" usec="0"/>
    <to sec="1241500334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.231.173"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.245.4.174"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.42.16.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.54.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.168.56.174"/>
    </slice>
    <from sec="1241499638" usec="0"/>
    <to sec="1241500281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.204.93.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.26.112.174"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241499990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.56.120.174"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.41.152.174"/>
    </slice>
    <from sec="1241500093" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.57.156.174"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.105.169.174"/>
    </slice>
    <from sec="1241499780" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.187.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.196.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.82.247.174"/>
    </slice>
    <from sec="1241499709" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.71.33.175"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241500474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.108.61.175"/>
    </slice>
    <from sec="1241500304" usec="0"/>
    <to sec="1241500334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.107.81.175"/>
    </slice>
    <from sec="1241499946" usec="0"/>
    <to sec="1241499953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.85.106.175"/>
    </slice>
    <from sec="1241500040" usec="0"/>
    <to sec="1241500053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.2.158.175"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.99.211.175"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.145.253.175"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.36.22.176"/>
    </slice>
    <from sec="1241499831" usec="0"/>
    <to sec="1241500399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.24.176"/>
    </slice>
    <from sec="1241499943" usec="0"/>
    <to sec="1241500094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.129.60.176"/>
    </slice>
    <from sec="1241500419" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.1.114.176"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.61.150.176"/>
    </slice>
    <from sec="1241499941" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.64.202.176"/>
    </slice>
    <from sec="1241499861" usec="0"/>
    <to sec="1241500058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.81.222.176"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.236.18.177"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.49.56.177"/>
    </slice>
    <from sec="1241499839" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.172.71.177"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.85.97.177"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1625{
style=filled;
color=gray75;
9430[label="214.46.115.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
18138[label="214.46.115.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24232[label="214.46.115.177;1pkt 1fpkt", shape=invtriangle, color=brown];
27848[label="214.46.115.177;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1625[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.46.115.177:50290, 215.66.214.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50290: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9430--18138[label="1;1pkt 1fpkt"];
9430--24232[label="1;1pkt 1fpkt"];
9430--27848[label="1;1pkt 1fpkt"];
18138--24232[label="1;1pkt 1fpkt"];
18138--27848[label="1;1pkt 1fpkt"];
24232--27848[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="214.46.115.177" src_port="50290"/>
    </slice>
    <from sec="1241500327" usec="0"/>
    <to sec="1241500343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.73.144.177"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.58.195.177"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.77.178"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.101.149.178"/>
    </slice>
    <from sec="1241500109" usec="0"/>
    <to sec="1241500142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.68.164.178"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.162.219.178"/>
    </slice>
    <from sec="1241500449" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.163.225.178"/>
    </slice>
    <from sec="1241499864" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.78.237.178"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.37.6.179"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.77.25.179"/>
    </slice>
    <from sec="1241499660" usec="0"/>
    <to sec="1241499775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.210.33.179"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.149.179"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.71.210.179"/>
    </slice>
    <from sec="1241500045" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.215.6.180"/>
    </slice>
    <from sec="1241500093" usec="0"/>
    <to sec="1241500126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.21.180"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.212.83.180"/>
    </slice>
    <from sec="1241499831" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.96.180"/>
    </slice>
    <from sec="1241500136" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.176.135.180"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241499960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.188.136.180"/>
    </slice>
    <from sec="1241500058" usec="0"/>
    <to sec="1241500155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.223.200.180"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.149.43.181"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.79.58.181"/>
    </slice>
    <from sec="1241499742" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.161.181"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.60.177.181"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.108.200.181"/>
    </slice>
    <from sec="1241499991" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.230.208.181"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.252.181"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.50.182"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.231.85.182"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.77.88.182"/>
    </slice>
    <from sec="1241499755" usec="0"/>
    <to sec="1241500080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.149.182"/>
    </slice>
    <from sec="1241500102" usec="0"/>
    <to sec="1241500243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.85.12.183"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.38.36.183"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1660{
style=filled;
color=gray75;
8730[label="217.39.37.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
18306[label="217.39.37.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24344[label="217.39.37.183;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1660[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.39.37.183:58519, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58519: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8730--18306[label="1;1pkt 1fpkt"];
8730--24344[label="1;1pkt 1fpkt"];
18306--24344[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="217.39.37.183" src_port="58519"/>
    </slice>
    <from sec="1241500263" usec="0"/>
    <to sec="1241500279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.68.47.183"/>
    </slice>
    <from sec="1241499859" usec="0"/>
    <to sec="1241499928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.41.74.183"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.164.95.183"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.132.96.183"/>
    </slice>
    <from sec="1241499958" usec="0"/>
    <to sec="1241499998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.178.228.183"/>
    </slice>
    <from sec="1241500402" usec="0"/>
    <to sec="1241500447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.115.62.184"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.215.83.184"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.84.184"/>
    </slice>
    <from sec="1241500301" usec="0"/>
    <to sec="1241500464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.67.97.184"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.240.151.184"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.177.1.185"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.36.26.185"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.161.49.185"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.125.185"/>
    </slice>
    <from sec="1241499935" usec="0"/>
    <to sec="1241499951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.176.163.185"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.16.209.185"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.29.44.186"/>
    </slice>
    <from sec="1241499864" usec="0"/>
    <to sec="1241499924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.79.186"/>
    </slice>
    <from sec="1241499648" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1679{
style=filled;
color=gray75;
8729[label="9.203.120.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
18407[label="9.203.120.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24418[label="9.203.120.186;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1679[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.203.120.186:38459, 215.66.214.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38459: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8729--18407[label="1;1pkt 1fpkt"];
8729--24418[label="1;1pkt 1fpkt"];
18407--24418[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="9.203.120.186" src_port="38459"/>
    </slice>
    <from sec="1241500262" usec="0"/>
    <to sec="1241500313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.234.155.186"/>
    </slice>
    <from sec="1241500409" usec="0"/>
    <to sec="1241500424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.236.173.186"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.162.190.186"/>
    </slice>
    <from sec="1241500192" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.197.186"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.229.186"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.129.65.187"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.77.187"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.50.111.187"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.33.135.187"/>
    </slice>
    <from sec="1241499639" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.196.167.187"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.195.238.187"/>
    </slice>
    <from sec="1241500281" usec="0"/>
    <to sec="1241500311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.14.19.188"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.118.31.188"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.130.58.188"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.150.58.188"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.130.108.188"/>
    </slice>
    <from sec="1241499957" usec="0"/>
    <to sec="1241499967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1696{
style=filled;
color=gray75;
2840[label="215.171.132.188;s;28pkt 28fpkt", shape=diamond, color=yellow];
4680[label="195.96.131.202;s;442pkt 442fpkt", shape=diamond, color=yellow];
6797[label="67.100.129.125;s;264pkt 264fpkt", shape=diamond, color=yellow];
7254[label="215.66.216.16;d;176pkt 176fpkt", shape=diamond, color=yellow];
7294[label="215.66.216.53;d;252pkt 252fpkt", shape=diamond, color=yellow];
8805[label="215.66.216.102;d;458pkt 458fpkt", shape=diamond, color=yellow];
11471[label="195.96.131.202;s;442pkt 442fpkt", shape=hexagon, color=black];
18473[label="215.171.132.188;30pkt 30fpkt", shape=pentagon, color=darkviolet];
19671[label="204.87.209.235;7pkt 7fpkt", shape=pentagon, color=darkviolet];
24457[label="215.171.132.188;30pkt 30fpkt", shape=invtriangle, color=brown];
25264[label="204.87.209.235;7pkt 7fpkt", shape=invtriangle, color=brown];
27980[label="215.171.132.188;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1696[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.96.131.202:*, 215.66.216.102:80}[31.636%]&lt;BR/&gt;{*:*, 215.66.216.53:80}[30.5525%]&lt;BR/&gt;{67.100.129.125:*, *:80}[28.6024%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4524%)&lt;BR/&gt; 53: (3.62419%)&lt;BR/&gt; 25: (0.323176%)&lt;BR/&gt; 993: (0.207756%)&lt;BR/&gt; 22: (0.138504%)&gt;];
}
2840--7294[label="0.857143;24pkt 24fpkt"];
2840--18473[label="1;28pkt 28fpkt"];
2840--24457[label="1;28pkt 28fpkt"];
2840--27980[label="1;28pkt 28fpkt"];
4680--7294[label="0.535714;135pkt 135fpkt"];
4680--8805[label="0.658371;291pkt 291fpkt"];
4680--11471[label="1;442pkt 442fpkt"];
6797--7294[label="0.357143;90pkt 90fpkt"];
6797--8805[label="0.613636;162pkt 162fpkt"];
7254--7525[label="0.00568182;1pkt 1fpkt"];
7254--7588[label="0.0113636;2pkt 2fpkt"];
7254--8262[label="0.0113636;2pkt 2fpkt"];
7254--8384[label="0.00568182;1pkt 1fpkt"];
7254--8387[label="0.00568182;1pkt 1fpkt"];
7254--10624[label="0.00568182;1pkt 1fpkt"];
7254--10801[label="0.0113636;2pkt 2fpkt"];
7254--11718[label="0.00568182;1pkt 1fpkt"];
7254--11824[label="0.0227273;4pkt 4fpkt"];
7254--11839[label="0.0113636;2pkt 2fpkt"];
7254--11869[label="0.00568182;1pkt 1fpkt"];
7254--11886[label="0.0227273;4pkt 4fpkt"];
7254--11896[label="0.0170455;3pkt 3fpkt"];
7254--11898[label="0.0113636;2pkt 2fpkt"];
7254--11904[label="0.00568182;1pkt 1fpkt"];
7254--11922[label="0.0170455;3pkt 3fpkt"];
7254--12025[label="0.00568182;1pkt 1fpkt"];
7254--12377[label="0.00568182;1pkt 1fpkt"];
7254--12447[label="0.00568182;1pkt 1fpkt"];
7254--12911[label="0.00568182;1pkt 1fpkt"];
7254--13065[label="0.00568182;1pkt 1fpkt"];
7254--13235[label="0.00568182;1pkt 1fpkt"];
7254--14601[label="0.00568182;1pkt 1fpkt"];
7254--15347[label="0.00568182;1pkt 1fpkt"];
7254--15957[label="0.0434783;1pkt 1fpkt"];
7254--17923[label="0.00826446;1pkt 1fpkt"];
7254--18761[label="0.00568182;1pkt 1fpkt"];
7254--18974[label="0.00568182;1pkt 1fpkt"];
7254--19150[label="0.0113636;2pkt 2fpkt"];
7254--19671[label="0.428571;3pkt 3fpkt"];
7254--20021[label="0.00568182;1pkt 1fpkt"];
7254--20212[label="0.00568182;1pkt 1fpkt"];
7254--20448[label="0.00568182;1pkt 1fpkt"];
7254--20502[label="0.00568182;1pkt 1fpkt"];
7254--20806[label="0.00568182;1pkt 1fpkt"];
7254--20912[label="0.00568182;1pkt 1fpkt"];
7254--21021[label="0.00568182;1pkt 1fpkt"];
7254--22420[label="0.00568182;1pkt 1fpkt"];
7254--22817[label="0.0434783;1pkt 1fpkt"];
7254--24094[label="0.00826446;1pkt 1fpkt"];
7254--24806[label="0.00568182;1pkt 1fpkt"];
7254--24917[label="0.0113636;2pkt 2fpkt"];
7254--25264[label="0.428571;3pkt 3fpkt"];
7254--25500[label="0.00568182;1pkt 1fpkt"];
7254--25616[label="0.00568182;1pkt 1fpkt"];
7254--25745[label="0.00568182;1pkt 1fpkt"];
7254--25955[label="0.00568182;1pkt 1fpkt"];
7254--26063[label="0.00568182;1pkt 1fpkt"];
7254--26811[label="0.00568182;1pkt 1fpkt"];
7254--28183[label="0.00568182;1pkt 1fpkt"];
7254--28594[label="0.00568182;1pkt 1fpkt"];
7294--10624[label="0.00396825;1pkt 1fpkt"];
7294--11471[label="0.535714;135pkt 135fpkt"];
7294--11718[label="0.00396825;1pkt 1fpkt"];
7294--15347[label="0.00396825;1pkt 1fpkt"];
7294--18473[label="0.8;24pkt 24fpkt"];
7294--22420[label="0.00396825;1pkt 1fpkt"];
7294--24457[label="0.8;24pkt 24fpkt"];
7294--26811[label="0.00396825;1pkt 1fpkt"];
7294--27980[label="0.8;24pkt 24fpkt"];
8805--9504[label="0.00218341;1pkt 1fpkt"];
8805--10624[label="0.00218341;1pkt 1fpkt"];
8805--11471[label="0.658371;291pkt 291fpkt"];
8805--11672[label="0.00218341;1pkt 1fpkt"];
8805--11718[label="0.00218341;1pkt 1fpkt"];
8805--11792[label="0.00218341;1pkt 1fpkt"];
8805--13958[label="0.00218341;1pkt 1fpkt"];
8805--15347[label="0.00218341;1pkt 1fpkt"];
8805--19671[label="0.142857;1pkt 1fpkt"];
8805--21494[label="0.00218341;1pkt 1fpkt"];
8805--22420[label="0.00218341;1pkt 1fpkt"];
8805--25264[label="0.142857;1pkt 1fpkt"];
8805--26305[label="0.00218341;1pkt 1fpkt"];
8805--26811[label="0.00218341;1pkt 1fpkt"];
18473--24457[label="1;30pkt 30fpkt"];
18473--27980[label="1;30pkt 30fpkt"];
19671--25264[label="1;7pkt 7fpkt"];
24457--27980[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="67.100.129.125"/>
      <filter dst_ip="215.66.216.53" dst_port="80"/>
      <filter dst_ip="215.66.216.102" dst_port="80" src_ip="195.96.131.202"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.188.150.188"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.80.168.188"/>
    </slice>
    <from sec="1241500086" usec="0"/>
    <to sec="1241500116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.32.227.188"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.107.66.189"/>
    </slice>
    <from sec="1241499839" usec="0"/>
    <to sec="1241499957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.237.9.190"/>
    </slice>
    <from sec="1241499717" usec="0"/>
    <to sec="1241499902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.162.92.190"/>
    </slice>
    <from sec="1241499643" usec="0"/>
    <to sec="1241499684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.161.190"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.205.78.191"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.141.191"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.163.191"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.32.245.191"/>
    </slice>
    <from sec="1241500184" usec="0"/>
    <to sec="1241500356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.85.192"/>
    </slice>
    <from sec="1241499714" usec="0"/>
    <to sec="1241499988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.17.94.192"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.144.124.192"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.107.136.192"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.86.60.193"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.80.88.193"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.149.118.193"/>
    </slice>
    <from sec="1241500018" usec="0"/>
    <to sec="1241500048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.147.216.193"/>
    </slice>
    <from sec="1241500023" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.221.227.193"/>
    </slice>
    <from sec="1241499646" usec="0"/>
    <to sec="1241499947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.49.55.194"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.242.140.194"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.196.194"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.24.242.194"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.30.195"/>
    </slice>
    <from sec="1241499891" usec="0"/>
    <to sec="1241499985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.146.80.195"/>
    </slice>
    <from sec="1241499936" usec="0"/>
    <to sec="1241500182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.214.145.195"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.44.188.195"/>
    </slice>
    <from sec="1241500259" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.208.195"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.209.195"/>
    </slice>
    <from sec="1241500177" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.214.82.196"/>
    </slice>
    <from sec="1241499802" usec="0"/>
    <to sec="1241500451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.253.84.196"/>
    </slice>
    <from sec="1241499627" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.65.85.196"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.75.157.196"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.162.196"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.23.174.196"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.141.175.196"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.229.2.197"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.77.6.197"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.24.67.197"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.71.108.197"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.3.110.197"/>
    </slice>
    <from sec="1241500462" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.67.139.197"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.249.197"/>
    </slice>
    <from sec="1241499803" usec="0"/>
    <to sec="1241499967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.77.8.198"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.193.32.198"/>
    </slice>
    <from sec="1241500034" usec="0"/>
    <to sec="1241500121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.107.44.198"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.73.98.198"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.77.151.198"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.33.160.198"/>
    </slice>
    <from sec="1241499633" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.2.165.198"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.71.193.198"/>
    </slice>
    <from sec="1241499977" usec="0"/>
    <to sec="1241500249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.0.199"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.171.75.199"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.117.199"/>
    </slice>
    <from sec="1241499772" usec="0"/>
    <to sec="1241500072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.193.175.199"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.59.183.199"/>
    </slice>
    <from sec="1241500074" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.213.196.199"/>
    </slice>
    <from sec="1241500433" usec="0"/>
    <to sec="1241500436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.5.210.199"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.0.76.200"/>
    </slice>
    <from sec="1241500044" usec="0"/>
    <to sec="1241500090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.30.130.200"/>
    </slice>
    <from sec="1241500205" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.21.246.200"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.225.15.201"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.21.77.201"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.87.139.201"/>
    </slice>
    <from sec="1241499766" usec="0"/>
    <to sec="1241500438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.12.148.201"/>
    </slice>
    <from sec="1241499718" usec="0"/>
    <to sec="1241500405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.41.217.201"/>
    </slice>
    <from sec="1241499688" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.163.234.201"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.236.201"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.55.27.202"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.107.60.202"/>
    </slice>
    <from sec="1241500135" usec="0"/>
    <to sec="1241500144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.234.92.202"/>
    </slice>
    <from sec="1241499952" usec="0"/>
    <to sec="1241500087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.64.118.202"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.39.192.202"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.78.192.202"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.42.198.202"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.105.199.202"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.133.242.202"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.66.29.203"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.219.36.203"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.235.185.203"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.70.194.203"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.207.88.204"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.227.204"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.109.15.205"/>
    </slice>
    <from sec="1241500434" usec="0"/>
    <to sec="1241500464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.35.62.205"/>
    </slice>
    <from sec="1241500453" usec="0"/>
    <to sec="1241500472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.82.141.205"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.128.179.205"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.196.205"/>
    </slice>
    <from sec="1241500255" usec="0"/>
    <to sec="1241500436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.74.196.205"/>
    </slice>
    <from sec="1241500293" usec="0"/>
    <to sec="1241500385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.189.197.205"/>
    </slice>
    <from sec="1241500246" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.91.5.206"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.117.12.206"/>
    </slice>
    <from sec="1241499730" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.36.20.206"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.202.21.206"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.165.24.206"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.53.206"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.45.95.206"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241499811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.55.113.206"/>
    </slice>
    <from sec="1241499640" usec="0"/>
    <to sec="1241499761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.142.206"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.161.166.206"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.58.27.207"/>
    </slice>
    <from sec="1241500134" usec="0"/>
    <to sec="1241500142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.161.48.207"/>
    </slice>
    <from sec="1241500466" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.15.130.207"/>
    </slice>
    <from sec="1241500317" usec="0"/>
    <to sec="1241500354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.168.207"/>
    </slice>
    <from sec="1241500182" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.144.5.208"/>
    </slice>
    <from sec="1241500062" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.216.9.208"/>
    </slice>
    <from sec="1241499960" usec="0"/>
    <to sec="1241499965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.181.20.208"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.73.21.208"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.196.121.208"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.226.138.208"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.6.141.208"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.105.169.208"/>
    </slice>
    <from sec="1241500010" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.41.203.208"/>
    </slice>
    <from sec="1241500439" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.201.219.208"/>
    </slice>
    <from sec="1241500357" usec="0"/>
    <to sec="1241500419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.82.209"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.58.122.209"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.54.134.209"/>
    </slice>
    <from sec="1241499908" usec="0"/>
    <to sec="1241499983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.110.1.210"/>
    </slice>
    <from sec="1241499994" usec="0"/>
    <to sec="1241500019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.150.1.210"/>
    </slice>
    <from sec="1241499867" usec="0"/>
    <to sec="1241500066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.105.6.210"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.6.19.210"/>
    </slice>
    <from sec="1241499729" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.55.210"/>
    </slice>
    <from sec="1241499640" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.170.72.210"/>
    </slice>
    <from sec="1241499642" usec="0"/>
    <to sec="1241500376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.125.144.210"/>
    </slice>
    <from sec="1241499743" usec="0"/>
    <to sec="1241499748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.26.205.210"/>
    </slice>
    <from sec="1241499692" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.81.220.210"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.43.211"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.74.49.211"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.108.82.211"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.125.95.211"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.84.132.211"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.114.193.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.25.206.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.178.206.211"/>
    </slice>
    <from sec="1241500119" usec="0"/>
    <to sec="1241500132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.34.217.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.242.46.212"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.239.61.212"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.91.100.212"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.159.125.212"/>
    </slice>
    <from sec="1241500441" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.204.141.212"/>
    </slice>
    <from sec="1241499927" usec="0"/>
    <to sec="1241499939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.142.212"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.157.212"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.235.236.212"/>
    </slice>
    <from sec="1241500043" usec="0"/>
    <to sec="1241500057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.4.43.213"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.211.148.213"/>
    </slice>
    <from sec="1241500049" usec="0"/>
    <to sec="1241500062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.157.213"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.200.213"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.97.214"/>
    </slice>
    <from sec="1241499902" usec="0"/>
    <to sec="1241500472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.149.130.214"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.70.1.215"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.72.140.215"/>
    </slice>
    <from sec="1241500063" usec="0"/>
    <to sec="1241500163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.211.159.215"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.230.209.215"/>
    </slice>
    <from sec="1241500374" usec="0"/>
    <to sec="1241500400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.100.251.215"/>
    </slice>
    <from sec="1241499799" usec="0"/>
    <to sec="1241500261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.197.27.216"/>
    </slice>
    <from sec="1241499925" usec="0"/>
    <to sec="1241500241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.137.34.216"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.226.82.216"/>
    </slice>
    <from sec="1241500331" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.189.94.216"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.233.136.216"/>
    </slice>
    <from sec="1241499704" usec="0"/>
    <to sec="1241499851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.25.140.216"/>
    </slice>
    <from sec="1241499870" usec="0"/>
    <to sec="1241500408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.213.164.216"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.111.0.217"/>
    </slice>
    <from sec="1241499880" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.142.41.217"/>
    </slice>
    <from sec="1241500018" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.65.73.217"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.211.102.217"/>
    </slice>
    <from sec="1241499776" usec="0"/>
    <to sec="1241499811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.86.246.217"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.95.218"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.226.179.218"/>
    </slice>
    <from sec="1241500104" usec="0"/>
    <to sec="1241500261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.21.219"/>
    </slice>
    <from sec="1241499802" usec="0"/>
    <to sec="1241500113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.223.56.219"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.12.78.219"/>
    </slice>
    <from sec="1241499977" usec="0"/>
    <to sec="1241500407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.62.120.219"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.210.219"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.211.210.219"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.166.211.219"/>
    </slice>
    <from sec="1241500170" usec="0"/>
    <to sec="1241500177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.31.248.219"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.20.220"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.172.51.220"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16732,4.48376,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1876{
style=filled;
color=gray75;
8775[label="69.249.77.220;s;19pkt 19fpkt", shape=diamond, color=yellow];
19340[label="69.249.77.220;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat1876[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.249.77.220:*, 215.66.218.57:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 60207: (2.63158%)&lt;BR/&gt; 60206: (2.63158%)&lt;BR/&gt; 60181: (2.63158%)&lt;BR/&gt; 60180: (2.63158%)&gt;];
}
8775--19340[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.57" dst_port="3124" src_ip="69.249.77.220"/>
    </slice>
    <from sec="1241500322" usec="0"/>
    <to sec="1241500343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.170.97.220"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.246.151.220"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241499922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.223.220"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.8.221"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.218.8.221"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.10.77.221"/>
    </slice>
    <from sec="1241499850" usec="0"/>
    <to sec="1241499884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.190.98.221"/>
    </slice>
    <from sec="1241499752" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.122.121.221"/>
    </slice>
    <from sec="1241500113" usec="0"/>
    <to sec="1241500323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.217.80.222"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.64.81.222"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.81.83.222"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.70.164.222"/>
    </slice>
    <from sec="1241499703" usec="0"/>
    <to sec="1241500215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.226.200.222"/>
    </slice>
    <from sec="1241499802" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.226.205.222"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.68.37.223"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.188.85.223"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.42.112.223"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.209.145.223"/>
    </slice>
    <from sec="1241500047" usec="0"/>
    <to sec="1241500067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.156.153.223"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.180.181.223"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241499973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.34.192.223"/>
    </slice>
    <from sec="1241499723" usec="0"/>
    <to sec="1241500481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.111.207.223"/>
    </slice>
    <from sec="1241499895" usec="0"/>
    <to sec="1241500288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.154.3.224"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.205.118.224"/>
    </slice>
    <from sec="1241500482" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.220.196.224"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.106.67.225"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.108.68.225"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.60.80.225"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.98.121.225"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.239.142.225"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.143.188.225"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.78.243.225"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.0.59.226"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.64.226"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.38.211.226"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.54.224.226"/>
    </slice>
    <from sec="1241500079" usec="0"/>
    <to sec="1241500086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1913{
style=filled;
color=gray75;
6313[label="162.4.51.227;s;8pkt 8fpkt", shape=diamond, color=yellow];
19469[label="162.4.51.227;8pkt 8fpkt", shape=pentagon, color=darkviolet];
25118[label="162.4.51.227;8pkt 8fpkt", shape=invtriangle, color=brown];
28363[label="162.4.51.227;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1913[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.4.51.227:80, 128.46.64.109:*}[50%]&lt;BR/&gt;{162.4.51.227:80, 128.46.65.173:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53685: (6.25%)&lt;BR/&gt; 53684: (6.25%)&lt;BR/&gt; 53683: (6.25%)&lt;BR/&gt; 53682: (6.25%)&gt;];
}
6313--19469[label="1;8pkt 8fpkt"];
6313--25118[label="1;8pkt 8fpkt"];
6313--28363[label="1;8pkt 8fpkt"];
19469--25118[label="1;8pkt 8fpkt"];
19469--28363[label="1;8pkt 8fpkt"];
25118--28363[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="128.46.65.173" src_ip="162.4.51.227" src_port="80"/>
      <filter dst_ip="128.46.64.109" src_ip="162.4.51.227" src_port="80"/>
    </slice>
    <from sec="1241499921" usec="0"/>
    <to sec="1241499956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.84.51.227"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.49.66.227"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.121.112.227"/>
    </slice>
    <from sec="1241500136" usec="0"/>
    <to sec="1241500160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.224.203.227"/>
    </slice>
    <from sec="1241499880" usec="0"/>
    <to sec="1241500474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.189.240.227"/>
    </slice>
    <from sec="1241499729" usec="0"/>
    <to sec="1241499736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.143.38.228"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.96.81.228"/>
    </slice>
    <from sec="1241499779" usec="0"/>
    <to sec="1241499955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.156.105.228"/>
    </slice>
    <from sec="1241500293" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.173.228"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.70.218.229"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.133.111.230"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.205.134.230"/>
    </slice>
    <from sec="1241500392" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.59.142.230"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.166.230"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.227.188.230"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.212.40.231"/>
    </slice>
    <from sec="1241499879" usec="0"/>
    <to sec="1241499921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.16.100.231"/>
    </slice>
    <from sec="1241500057" usec="0"/>
    <to sec="1241500064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.4.136.231"/>
    </slice>
    <from sec="1241499898" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.153.136.231"/>
    </slice>
    <from sec="1241499703" usec="0"/>
    <to sec="1241499812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.162.147.231"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.160.204.231"/>
    </slice>
    <from sec="1241499919" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.69.6.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.221.10.232"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.18.166.232"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.200.181.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.10.188.232"/>
    </slice>
    <from sec="1241499924" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.105.201.232"/>
    </slice>
    <from sec="1241500302" usec="0"/>
    <to sec="1241500322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.110.210.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.150.0.233"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.5.4.233"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.134.58.233"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.234.95.233"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.189.239.233"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.74.25.234"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.75.25.234"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.72.190.234"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.129.228.234"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.64.17.235"/>
    </slice>
    <from sec="1241500306" usec="0"/>
    <to sec="1241500308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.30.32.235"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.154.32.235"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.176.137.235"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.145.151.235"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.178.205.235"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.62.234.235"/>
    </slice>
    <from sec="1241499670" usec="0"/>
    <to sec="1241500404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.206.251.235"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.217.36.236"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.61.43.236"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.160.85.236"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.153.197.236"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.43.226.236"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.80.0.237"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.65.97.237"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.6.41.238"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.189.89.238"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.136.238"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.209.196.238"/>
    </slice>
    <from sec="1241499905" usec="0"/>
    <to sec="1241499975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.70.22.239"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.97.53.239"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.73.165.239"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.211.240.239"/>
    </slice>
    <from sec="1241499924" usec="0"/>
    <to sec="1241500118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1974{
style=filled;
color=gray75;
3701[label="41.150.249.239;s;29pkt 29fpkt", shape=diamond, color=yellow];
19772[label="41.150.249.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25332[label="41.150.249.239;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1974[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.239:5050, *:*}[86.2069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.5484%)&lt;BR/&gt; 49452: (4.83871%)&lt;BR/&gt; 1036: (3.22581%)&lt;BR/&gt; 23: (3.22581%)&lt;BR/&gt; 20: (3.22581%)&gt;];
}
3701--19772[label="1;1pkt 1fpkt"];
3701--25332[label="1;1pkt 1fpkt"];
19772--25332[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.239" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.184.42.240"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241499965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.152.54.240"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241499729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.227.178.240"/>
    </slice>
    <from sec="1241499967" usec="0"/>
    <to sec="1241500414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.162.204.240"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.186.8.241"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.8.13.241"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.185.92.241"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.14.150.241"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.139.170.241"/>
    </slice>
    <from sec="1241500151" usec="0"/>
    <to sec="1241500174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.150.249.241"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.81.9.242"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.54.16.242"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.22.97.242"/>
    </slice>
    <from sec="1241499913" usec="0"/>
    <to sec="1241499918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.67.128.242"/>
    </slice>
    <from sec="1241500086" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.119.147.242"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.255.0.243"/>
    </slice>
    <from sec="1241500473" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.80.18.243"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241499638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.171.210.243"/>
    </slice>
    <from sec="1241500463" usec="0"/>
    <to sec="1241500478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.229.15.244"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.181.20.244"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.98.66.244"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.128.176.244"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.36.185.244"/>
    </slice>
    <from sec="1241500131" usec="0"/>
    <to sec="1241500153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.150.249.244"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.105.12.245"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.45.245"/>
    </slice>
    <from sec="1241500199" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.72.58.245"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.68.81.245"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.43.189.245"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.105.215.245"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.105.217.245"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.93.223.245"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.72.33.246"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.20.53.246"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241500419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.167.102.246"/>
    </slice>
    <from sec="1241500084" usec="0"/>
    <to sec="1241500250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.233.114.246"/>
    </slice>
    <from sec="1241499895" usec="0"/>
    <to sec="1241500434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.210.247.246"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.88.52.247"/>
    </slice>
    <from sec="1241499816" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.192.128.247"/>
    </slice>
    <from sec="1241499844" usec="0"/>
    <to sec="1241499874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.69.229.247"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.176.243.247"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.77.8.248"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.214.45.248"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.198.50.248"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.64.248"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.6.97.248"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.82.98.248"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.172.178.248"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.87.209.248"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.232.26.249"/>
    </slice>
    <from sec="1241500217" usec="0"/>
    <to sec="1241500275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.184.146.249"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.238.172.249"/>
    </slice>
    <from sec="1241500053" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.25.250"/>
    </slice>
    <from sec="1241499806" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.186.32.250"/>
    </slice>
    <from sec="1241499768" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.225.56.250"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.66.117.250"/>
    </slice>
    <from sec="1241500312" usec="0"/>
    <to sec="1241500364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.34.228.250"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2033{
style=filled;
color=gray75;
6523[label="41.150.249.250;s;29pkt 29fpkt", shape=diamond, color=yellow];
20038[label="41.150.249.250;31pkt 31fpkt", shape=pentagon, color=darkviolet];
25514[label="41.150.249.250;31pkt 31fpkt", shape=invtriangle, color=brown];
stat2033[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.250:5050, *:*}[87.0968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (43.4066%)&lt;BR/&gt; 1068: (3.2967%)&lt;BR/&gt; 1061: (3.2967%)&lt;BR/&gt; 23: (3.2967%)&lt;BR/&gt; 20: (3.2967%)&gt;];
}
6523--20038[label="1;29pkt 29fpkt"];
6523--25514[label="1;29pkt 29fpkt"];
20038--25514[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.250" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.81.0.251"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.229.33.251"/>
    </slice>
    <from sec="1241500494" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.49.41.251"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.38.102.251"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.164.164.251"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.182.171.251"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.110.40.252"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.3.64.252"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.253.122.252"/>
    </slice>
    <from sec="1241499720" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.208.128.253"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.172.178.253"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.220.244.253"/>
    </slice>
    <from sec="1241500326" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.161.194.254"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.38894,4.55704,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.128.192.255"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.34.0"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.94.40.0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.183.76.0"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.231.83.0"/>
    </slice>
    <from sec="1241500178" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.19.92.0"/>
    </slice>
    <from sec="1241499687" usec="0"/>
    <to sec="1241499697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.168.99.0"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.67.103.0"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2055{
style=filled;
color=gray75;
11952[label="134.73.119.0;10pkt 10fpkt", shape=pentagon, color=darkviolet];
20160[label="134.73.119.0;10pkt 10fpkt", shape=invtriangle, color=brown];
stat2055[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.119.0:*, 41.197.160.50:80}[20%]&lt;BR/&gt;{134.73.119.0:*, 41.197.160.51:80}[20%]&lt;BR/&gt;{134.73.119.0:*, 8.78.162.161:80}[20%]&lt;BR/&gt;{134.73.119.0:*, 41.197.25.210:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 8888: (5%)&lt;BR/&gt; 1219: (5%)&lt;BR/&gt; 1184: (5%)&lt;BR/&gt; 1137: (5%)&gt;];
}
11952--20160[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="41.197.25.210" dst_port="80" src_ip="134.73.119.0"/>
      <filter dst_ip="8.78.162.161" dst_port="80" src_ip="134.73.119.0"/>
      <filter dst_ip="41.197.160.51" dst_port="80" src_ip="134.73.119.0"/>
      <filter dst_ip="41.197.160.50" dst_port="80" src_ip="134.73.119.0"/>
    </slice>
    <from sec="1241499888" usec="0"/>
    <to sec="1241500182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.32.136.0"/>
    </slice>
    <from sec="1241499957" usec="0"/>
    <to sec="1241499994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.99.177.0"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.199.0"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2059{
style=filled;
color=gray75;
11974[label="69.34.209.0;8pkt 8fpkt", shape=pentagon, color=darkviolet];
20177[label="69.34.209.0;8pkt 8fpkt", shape=invtriangle, color=brown];
stat2059[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.34.209.0:*, 134.73.160.79:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40732: (6.25%)&lt;BR/&gt; 40659: (6.25%)&lt;BR/&gt; 40658: (6.25%)&lt;BR/&gt; 40657: (6.25%)&gt;];
}
11974--20177[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.160.79" dst_port="80" src_ip="69.34.209.0"/>
    </slice>
    <from sec="1241500065" usec="0"/>
    <to sec="1241500437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.229.0"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241500219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.143.8.1"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.219.60.1"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.12.106.1"/>
    </slice>
    <from sec="1241500150" usec="0"/>
    <to sec="1241500230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.5.198.1"/>
    </slice>
    <from sec="1241500263" usec="0"/>
    <to sec="1241500324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2065{
style=filled;
color=gray75;
12015[label="128.133.1.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20203[label="128.133.1.2;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2065[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.133.1.2:80, 41.213.127.68:54361}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54361: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12015--20203[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.213.127.68" dst_port="54361" src_ip="128.133.1.2" src_port="80"/>
    </slice>
    <from sec="1241499651" usec="0"/>
    <to sec="1241500112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.5.2"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2067{
style=filled;
color=gray75;
12020[label="12.212.14.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20207[label="12.212.14.2;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2067[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.212.14.2:51328, 215.66.218.57:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51328: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
12020--20207[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.57" dst_port="8080" src_ip="12.212.14.2" src_port="51328"/>
    </slice>
    <from sec="1241500445" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.185.20.2"/>
    </slice>
    <from sec="1241499912" usec="0"/>
    <to sec="1241500091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.221.75.2"/>
    </slice>
    <from sec="1241499922" usec="0"/>
    <to sec="1241500054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.96.85.2"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.42.157.2"/>
    </slice>
    <from sec="1241500229" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.14.165.2"/>
    </slice>
    <from sec="1241500381" usec="0"/>
    <to sec="1241500389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2073{
style=filled;
color=gray75;
12041[label="67.115.179.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20225[label="67.115.179.2;1pkt 1fpkt", shape=invtriangle, color=brown];
25624[label="67.115.179.2;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2073[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.115.179.2:52275, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52275: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12041--20225[label="1;1pkt 1fpkt"];
12041--25624[label="1;1pkt 1fpkt"];
20225--25624[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="67.115.179.2" src_port="52275"/>
    </slice>
    <from sec="1241500463" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.5.229.2"/>
    </slice>
    <from sec="1241499927" usec="0"/>
    <to sec="1241499946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2075{
style=filled;
color=gray75;
12055[label="66.24.248.2;11pkt 11fpkt", shape=pentagon, color=darkviolet];
20236[label="66.24.248.2;12pkt 12fpkt", shape=invtriangle, color=brown];
25628[label="66.24.248.2;11pkt 11fpkt", shape=invhouse, color=bisque];
stat2075[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.24.248.2:*, 215.66.214.16:21}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (23.5294%)&lt;BR/&gt; 61369: (4.41176%)&lt;BR/&gt; 59599: (4.41176%)&lt;BR/&gt; 59597: (4.41176%)&lt;BR/&gt; 59595: (4.41176%)&gt;];
}
12055--20236[label="1;11pkt 11fpkt"];
12055--25628[label="1;11pkt 11fpkt"];
20236--25628[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="21" src_ip="66.24.248.2"/>
    </slice>
    <from sec="1241500256" usec="0"/>
    <to sec="1241500275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2076{
style=filled;
color=gray75;
12056[label="103.176.249.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20237[label="103.176.249.2;1pkt 1fpkt", shape=invtriangle, color=brown];
25629[label="103.176.249.2;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2076[shape=component, label=&lt;Rules:&lt;BR/&gt;{103.176.249.2:63052, 215.66.219.235:61802}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63052: (50%)&lt;BR/&gt; 61802: (50%)&gt;];
}
12056--20237[label="1;1pkt 1fpkt"];
12056--25629[label="1;1pkt 1fpkt"];
20237--25629[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="61802" src_ip="103.176.249.2" src_port="63052"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.125.59.3"/>
    </slice>
    <from sec="1241500105" usec="0"/>
    <to sec="1241500149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.91.69.3"/>
    </slice>
    <from sec="1241499698" usec="0"/>
    <to sec="1241500306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.241.160.3"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241499901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.4.167.3"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.171.211.3"/>
    </slice>
    <from sec="1241500451" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2082{
style=filled;
color=gray75;
179[label="215.66.216.81;d;565pkt 565fpkt", shape=diamond, color=yellow];
551[label="57.184.113.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
1733[label="69.200.215.97;s;7pkt 7fpkt", shape=diamond, color=yellow];
5554[label="182.135.121.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
6382[label="63.218.101.154;s;2pkt 2fpkt", shape=diamond, color=yellow];
7082[label="194.132.13.36;s;36pkt 36fpkt", shape=diamond, color=yellow];
8691[label="35.105.197.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
9333[label="4.47.16.24;s;69pkt 69fpkt", shape=diamond, color=yellow];
10904[label="63.218.101.154;s;2pkt 2fpkt", shape=hexagon, color=black];
11955[label="56.32.136.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12103[label="12.15.244.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12523[label="4.107.90.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12532[label="219.219.168.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12577[label="22.234.2.15;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12657[label="57.81.17.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12682[label="181.178.135.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12730[label="12.15.229.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12751[label="67.190.136.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12778[label="177.96.36.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12825[label="40.180.157.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12835[label="215.243.175.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12919[label="4.47.16.24;69pkt 69fpkt", shape=pentagon, color=darkviolet];
13201[label="56.63.28.31;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13224[label="192.71.24.32;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13350[label="181.194.87.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13435[label="2.54.240.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13461[label="52.175.170.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13482[label="197.15.74.39;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13575[label="194.34.75.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13730[label="40.210.250.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13735[label="204.98.72.47;17pkt 17fpkt", shape=pentagon, color=darkviolet];
13799[label="44.78.91.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13902[label="59.228.241.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13921[label="66.18.176.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14087[label="40.144.123.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14120[label="9.229.148.59;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14281[label="57.254.35.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14455[label="12.193.50.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14489[label="38.154.2.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14498[label="67.66.63.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14529[label="12.13.53.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14546[label="9.192.202.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14629[label="46.138.13.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14636[label="69.45.74.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14655[label="205.55.178.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14677[label="12.14.109.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14690[label="213.81.191.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14787[label="203.40.41.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14821[label="46.66.72.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14825[label="37.46.107.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14895[label="9.108.212.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15161[label="2.86.162.87;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15177[label="182.248.19.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15242[label="39.193.97.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15272[label="57.249.19.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15301[label="66.226.208.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15418[label="217.161.0.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15469[label="39.175.28.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15540[label="69.200.215.98;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15553[label="66.214.48.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15568[label="38.87.184.99;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15576[label="203.120.11.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15612[label="69.200.215.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15614[label="103.141.218.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15644[label="181.57.154.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15647[label="56.252.163.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15838[label="69.200.215.106;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15840[label="21.182.236.106;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15885[label="38.92.80.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16000[label="32.117.156.111;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16039[label="12.15.248.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16133[label="47.11.246.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16137[label="196.28.17.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16228[label="39.190.68.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16274[label="12.14.160.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16302[label="32.108.152.121;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16413[label="213.150.70.125;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16430[label="47.204.48.126;3pkt 3fpkt", shape=pentagon, color=darkviolet];
16543[label="51.160.178.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16688[label="103.200.64.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16754[label="59.207.215.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16839[label="219.213.4.137;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16912[label="62.176.43.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17126[label="34.199.163.145;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17153[label="55.64.129.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17265[label="206.49.162.149;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17315[label="69.213.1.151;15pkt 15fpkt", shape=pentagon, color=darkviolet];
17364[label="34.150.169.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17382[label="43.217.78.153;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17415[label="63.218.101.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17468[label="9.226.76.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17543[label="215.210.208.158;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17569[label="12.15.250.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17614[label="63.253.41.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17629[label="8.65.99.161;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17660[label="91.251.61.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17707[label="9.231.88.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17725[label="47.239.8.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17760[label="8.120.41.165;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17786[label="52.64.3.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17798[label="55.239.137.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17942[label="9.193.42.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17962[label="57.64.245.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17989[label="34.202.152.172;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18050[label="215.116.126.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18061[label="217.199.186.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18104[label="212.5.49.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18118[label="12.14.172.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18270[label="160.85.192.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18752[label="160.83.220.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18768[label="4.71.184.199;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18876[label="66.33.42.203;4pkt 4fpkt", shape=pentagon, color=darkviolet];
18977[label="12.14.64.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19058[label="43.4.37.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19106[label="9.63.212.211;16pkt 16fpkt", shape=pentagon, color=darkviolet];
19146[label="116.5.40.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19156[label="46.147.137.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19183[label="44.205.135.214;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19208[label="51.78.6.216;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19299[label="20.31.148.218;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19313[label="35.115.115.219;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19379[label="59.192.9.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19471[label="182.161.55.227;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19590[label="40.207.178.232;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19696[label="8.65.114.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19697[label="192.138.160.236;9pkt 9fpkt", shape=pentagon, color=darkviolet];
19839[label="68.130.82.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20057[label="57.46.148.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20082[label="46.67.180.252;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20106[label="12.15.180.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20150[label="48.244.23.0;1pkt 1fpkt", shape=invtriangle, color=brown];
20261[label="12.15.244.3;1pkt 1fpkt", shape=invtriangle, color=brown];
20557[label="219.219.168.13;2pkt 2fpkt", shape=invtriangle, color=brown];
20654[label="181.178.135.17;1pkt 1fpkt", shape=invtriangle, color=brown];
20681[label="12.15.229.18;2pkt 2fpkt", shape=invtriangle, color=brown];
20717[label="177.96.36.20;1pkt 1fpkt", shape=invtriangle, color=brown];
20748[label="40.180.157.21;1pkt 1fpkt", shape=invtriangle, color=brown];
20813[label="4.47.16.24;69pkt 69fpkt", shape=invtriangle, color=brown];
20997[label="56.63.28.31;2pkt 2fpkt", shape=invtriangle, color=brown];
21102[label="181.194.87.35;1pkt 1fpkt", shape=invtriangle, color=brown];
21159[label="2.54.240.37;1pkt 1fpkt", shape=invtriangle, color=brown];
21174[label="52.175.170.38;1pkt 1fpkt", shape=invtriangle, color=brown];
21345[label="204.98.72.47;17pkt 17fpkt", shape=invtriangle, color=brown];
21575[label="40.144.123.58;1pkt 1fpkt", shape=invtriangle, color=brown];
21719[label="57.254.35.64;1pkt 1fpkt", shape=invtriangle, color=brown];
21831[label="12.193.50.68;1pkt 1fpkt", shape=invtriangle, color=brown];
21861[label="67.66.63.69;1pkt 1fpkt", shape=invtriangle, color=brown];
21881[label="12.13.53.70;1pkt 1fpkt", shape=invtriangle, color=brown];
21960[label="205.55.178.73;1pkt 1fpkt", shape=invtriangle, color=brown];
21976[label="12.14.109.74;2pkt 2fpkt", shape=invtriangle, color=brown];
22042[label="203.40.41.77;1pkt 1fpkt", shape=invtriangle, color=brown];
22065[label="46.66.72.78;2pkt 2fpkt", shape=invtriangle, color=brown];
22067[label="37.46.107.78;2pkt 2fpkt", shape=invtriangle, color=brown];
22115[label="9.108.212.80;2pkt 2fpkt", shape=invtriangle, color=brown];
22300[label="2.86.162.87;2pkt 2fpkt", shape=invtriangle, color=brown];
22315[label="182.248.19.88;1pkt 1fpkt", shape=invtriangle, color=brown];
22374[label="57.249.19.91;1pkt 1fpkt", shape=invtriangle, color=brown];
22470[label="217.161.0.96;2pkt 2fpkt", shape=invtriangle, color=brown];
22497[label="39.175.28.97;2pkt 2fpkt", shape=invtriangle, color=brown];
22544[label="66.214.48.99;1pkt 1fpkt", shape=invtriangle, color=brown];
22584[label="69.200.215.100;2pkt 2fpkt", shape=invtriangle, color=brown];
22603[label="181.57.154.101;1pkt 1fpkt", shape=invtriangle, color=brown];
22738[label="21.182.236.106;2pkt 2fpkt", shape=invtriangle, color=brown];
22771[label="38.92.80.108;1pkt 1fpkt", shape=invtriangle, color=brown];
22874[label="12.15.248.112;1pkt 1fpkt", shape=invtriangle, color=brown];
23010[label="12.14.160.120;1pkt 1fpkt", shape=invtriangle, color=brown];
23103[label="213.150.70.125;2pkt 2fpkt", shape=invtriangle, color=brown];
23190[label="51.160.178.129;1pkt 1fpkt", shape=invtriangle, color=brown];
23331[label="59.207.215.134;1pkt 1fpkt", shape=invtriangle, color=brown];
23390[label="219.213.4.137;2pkt 2fpkt", shape=invtriangle, color=brown];
23563[label="34.199.163.145;2pkt 2fpkt", shape=invtriangle, color=brown];
23583[label="55.64.129.146;2pkt 2fpkt", shape=invtriangle, color=brown];
23664[label="206.49.162.149;2pkt 2fpkt", shape=invtriangle, color=brown];
23698[label="69.213.1.151;15pkt 15fpkt", shape=invtriangle, color=brown];
23731[label="34.150.169.152;1pkt 1fpkt", shape=invtriangle, color=brown];
23758[label="63.218.101.154;2pkt 2fpkt", shape=invtriangle, color=brown];
23796[label="9.226.76.156;1pkt 1fpkt", shape=invtriangle, color=brown];
23844[label="215.210.208.158;2pkt 2fpkt", shape=invtriangle, color=brown];
23894[label="8.65.99.161;2pkt 2fpkt", shape=invtriangle, color=brown];
23917[label="91.251.61.162;1pkt 1fpkt", shape=invtriangle, color=brown];
23946[label="9.231.88.163;1pkt 1fpkt", shape=invtriangle, color=brown];
23959[label="47.239.8.164;1pkt 1fpkt", shape=invtriangle, color=brown];
23982[label="8.120.41.165;2pkt 2fpkt", shape=invtriangle, color=brown];
24004[label="52.64.3.166;2pkt 2fpkt", shape=invtriangle, color=brown];
24014[label="55.239.137.166;1pkt 1fpkt", shape=invtriangle, color=brown];
24132[label="34.202.152.172;2pkt 2fpkt", shape=invtriangle, color=brown];
24175[label="215.116.126.174;2pkt 2fpkt", shape=invtriangle, color=brown];
24218[label="12.14.172.176;1pkt 1fpkt", shape=invtriangle, color=brown];
24662[label="160.83.220.198;1pkt 1fpkt", shape=invtriangle, color=brown];
24674[label="4.71.184.199;1pkt 1fpkt", shape=invtriangle, color=brown];
24857[label="43.4.37.210;1pkt 1fpkt", shape=invtriangle, color=brown];
24915[label="116.5.40.213;2pkt 2fpkt", shape=invtriangle, color=brown];
24951[label="51.78.6.216;2pkt 2fpkt", shape=invtriangle, color=brown];
25009[label="20.31.148.218;2pkt 2fpkt", shape=invtriangle, color=brown];
25018[label="35.115.115.219;2pkt 2fpkt", shape=invtriangle, color=brown];
25059[label="59.192.9.223;1pkt 1fpkt", shape=invtriangle, color=brown];
25120[label="182.161.55.227;2pkt 2fpkt", shape=invtriangle, color=brown];
25202[label="40.207.178.232;2pkt 2fpkt", shape=invtriangle, color=brown];
25280[label="8.65.114.236;1pkt 1fpkt", shape=invtriangle, color=brown];
25281[label="192.138.160.236;9pkt 9fpkt", shape=invtriangle, color=brown];
25378[label="68.130.82.242;1pkt 1fpkt", shape=invtriangle, color=brown];
25526[label="57.46.148.251;1pkt 1fpkt", shape=invtriangle, color=brown];
25557[label="12.15.180.253;1pkt 1fpkt", shape=invtriangle, color=brown];
25645[label="12.15.244.3;2pkt 2fpkt", shape=invhouse, color=bisque];
25889[label="12.15.229.18;2pkt 2fpkt", shape=invhouse, color=bisque];
25909[label="177.96.36.20;1pkt 1fpkt", shape=invhouse, color=bisque];
25959[label="4.47.16.24;69pkt 69fpkt", shape=invhouse, color=bisque];
26052[label="56.63.28.31;2pkt 2fpkt", shape=invhouse, color=bisque];
26228[label="204.98.72.47;17pkt 17fpkt", shape=invhouse, color=bisque];
26484[label="12.193.50.68;1pkt 1fpkt", shape=invhouse, color=bisque];
26505[label="67.66.63.69;1pkt 1fpkt", shape=invhouse, color=bisque];
26558[label="205.55.178.73;1pkt 1fpkt", shape=invhouse, color=bisque];
26569[label="12.14.109.74;2pkt 2fpkt", shape=invhouse, color=bisque];
26602[label="203.40.41.77;1pkt 1fpkt", shape=invhouse, color=bisque];
26637[label="9.108.212.80;2pkt 2fpkt", shape=invhouse, color=bisque];
26720[label="12.14.102.86;1pkt 1fpkt", shape=invhouse, color=bisque];
26739[label="2.86.162.87;2pkt 2fpkt", shape=invhouse, color=bisque];
26749[label="182.248.19.88;1pkt 1fpkt", shape=invhouse, color=bisque];
26849[label="217.161.0.96;2pkt 2fpkt", shape=invhouse, color=bisque];
26866[label="39.175.28.97;2pkt 2fpkt", shape=invhouse, color=bisque];
26924[label="181.57.154.101;1pkt 1fpkt", shape=invhouse, color=bisque];
27010[label="21.182.236.106;2pkt 2fpkt", shape=invhouse, color=bisque];
27027[label="38.92.80.108;1pkt 1fpkt", shape=invhouse, color=bisque];
27164[label="12.14.160.120;1pkt 1fpkt", shape=invhouse, color=bisque];
27495[label="55.64.129.146;2pkt 2fpkt", shape=invhouse, color=bisque];
27590[label="63.218.101.154;2pkt 2fpkt", shape=invhouse, color=bisque];
27609[label="9.226.76.156;1pkt 1fpkt", shape=invhouse, color=bisque];
27662[label="8.65.99.161;2pkt 2fpkt", shape=invhouse, color=bisque];
27674[label="91.251.61.162;1pkt 1fpkt", shape=invhouse, color=bisque];
27697[label="47.239.8.164;1pkt 1fpkt", shape=invhouse, color=bisque];
27719[label="52.64.3.166;2pkt 2fpkt", shape=invhouse, color=bisque];
27795[label="34.202.152.172;2pkt 2fpkt", shape=invhouse, color=bisque];
27840[label="12.14.172.176;1pkt 1fpkt", shape=invhouse, color=bisque];
28209[label="43.4.37.210;1pkt 1fpkt", shape=invhouse, color=bisque];
28296[label="20.31.148.218;2pkt 2fpkt", shape=invhouse, color=bisque];
28328[label="59.192.9.223;1pkt 1fpkt", shape=invhouse, color=bisque];
28417[label="40.207.178.232;2pkt 2fpkt", shape=invhouse, color=bisque];
28464[label="192.138.160.236;9pkt 9fpkt", shape=invhouse, color=bisque];
28525[label="68.130.82.242;1pkt 1fpkt", shape=invhouse, color=bisque];
28608[label="57.46.148.251;1pkt 1fpkt", shape=invhouse, color=bisque];
28624[label="12.15.180.253;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2082[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.66.216.81:80}[96.6325%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3299%)&lt;BR/&gt; 53: (0.372301%)&lt;BR/&gt; 3640: (0.297841%)&lt;BR/&gt; 57546: (0.22338%)&lt;BR/&gt; 3515: (0.22338%)&gt;];
}
179--551[label="1;1pkt 1fpkt"];
179--627[label="0.5;1pkt 1fpkt"];
179--1733[label="1;7pkt 7fpkt"];
179--5554[label="1;1pkt 1fpkt"];
179--6350[label="0.00176991;1pkt 1fpkt"];
179--6382[label="0.5;1pkt 1fpkt"];
179--6387[label="0.429825;49pkt 49fpkt"];
179--7082[label="0.833333;30pkt 30fpkt"];
179--8564[label="0.5;1pkt 1fpkt"];
179--8691[label="1;1pkt 1fpkt"];
179--9333[label="0.173913;12pkt 12fpkt"];
179--10624[label="0.00176991;1pkt 1fpkt"];
179--10904[label="0.5;1pkt 1fpkt"];
179--11718[label="0.00176991;1pkt 1fpkt"];
179--11955[label="1;1pkt 1fpkt"];
179--12103[label="1;2pkt 2fpkt"];
179--12523[label="1;1pkt 1fpkt"];
179--12532[label="0.5;1pkt 1fpkt"];
179--12577[label="0.5;2pkt 2fpkt"];
179--12657[label="1;1pkt 1fpkt"];
179--12682[label="1;1pkt 1fpkt"];
179--12730[label="0.5;1pkt 1fpkt"];
179--12751[label="0.5;1pkt 1fpkt"];
179--12778[label="1;1pkt 1fpkt"];
179--12825[label="1;1pkt 1fpkt"];
179--12835[label="1;1pkt 1fpkt"];
179--12919[label="0.173913;12pkt 12fpkt"];
179--13201[label="0.5;1pkt 1fpkt"];
179--13224[label="0.5;1pkt 1fpkt"];
179--13350[label="1;1pkt 1fpkt"];
179--13435[label="1;1pkt 1fpkt"];
179--13461[label="1;1pkt 1fpkt"];
179--13482[label="0.5;2pkt 2fpkt"];
179--13575[label="1;1pkt 1fpkt"];
179--13730[label="1;1pkt 1fpkt"];
179--13735[label="1;17pkt 17fpkt"];
179--13799[label="1;2pkt 2fpkt"];
179--13902[label="1;1pkt 1fpkt"];
179--13917[label="0.333333;1pkt 1fpkt"];
179--13921[label="1;1pkt 1fpkt"];
179--14087[label="1;1pkt 1fpkt"];
179--14120[label="0.5;1pkt 1fpkt"];
179--14281[label="1;1pkt 1fpkt"];
179--14455[label="1;1pkt 1fpkt"];
179--14489[label="0.5;1pkt 1fpkt"];
179--14498[label="1;1pkt 1fpkt"];
179--14529[label="1;1pkt 1fpkt"];
179--14546[label="1;1pkt 1fpkt"];
179--14629[label="0.5;1pkt 1fpkt"];
179--14636[label="1;1pkt 1fpkt"];
179--14655[label="1;1pkt 1fpkt"];
179--14677[label="0.5;1pkt 1fpkt"];
179--14690[label="1;1pkt 1fpkt"];
179--14787[label="1;1pkt 1fpkt"];
179--14821[label="0.5;1pkt 1fpkt"];
179--14825[label="0.5;1pkt 1fpkt"];
179--14895[label="0.5;1pkt 1fpkt"];
179--15161[label="0.5;1pkt 1fpkt"];
179--15177[label="1;1pkt 1fpkt"];
179--15242[label="1;1pkt 1fpkt"];
179--15272[label="1;1pkt 1fpkt"];
179--15301[label="1;1pkt 1fpkt"];
179--15347[label="0.00176991;1pkt 1fpkt"];
179--15418[label="0.5;1pkt 1fpkt"];
179--15469[label="0.5;1pkt 1fpkt"];
179--15540[label="1;5pkt 5fpkt"];
179--15553[label="1;1pkt 1fpkt"];
179--15568[label="0.5;1pkt 1fpkt"];
179--15576[label="1;1pkt 1fpkt"];
179--15612[label="1;2pkt 2fpkt"];
179--15614[label="0.5;1pkt 1fpkt"];
179--15644[label="1;1pkt 1fpkt"];
179--15647[label="1;1pkt 1fpkt"];
179--15665[label="0.0714286;1pkt 1fpkt"];
179--15696[label="0.333333;1pkt 1fpkt"];
179--15838[label="1;4pkt 4fpkt"];
179--15840[label="0.5;1pkt 1fpkt"];
179--15885[label="1;1pkt 1fpkt"];
179--15892[label="0.333333;1pkt 1fpkt"];
179--16000[label="0.5;1pkt 1fpkt"];
179--16039[label="1;1pkt 1fpkt"];
179--16133[label="1;1pkt 1fpkt"];
179--16137[label="1;1pkt 1fpkt"];
179--16228[label="1;1pkt 1fpkt"];
179--16274[label="1;1pkt 1fpkt"];
179--16302[label="0.5;1pkt 1fpkt"];
179--16413[label="0.5;1pkt 1fpkt"];
179--16430[label="0.666667;2pkt 2fpkt"];
179--16543[label="1;1pkt 1fpkt"];
179--16618[label="0.333333;1pkt 1fpkt"];
179--16688[label="1;1pkt 1fpkt"];
179--16754[label="1;1pkt 1fpkt"];
179--16839[label="0.5;1pkt 1fpkt"];
179--16912[label="1;1pkt 1fpkt"];
179--17126[label="0.5;1pkt 1fpkt"];
179--17153[label="1;2pkt 2fpkt"];
179--17265[label="0.5;1pkt 1fpkt"];
179--17315[label="0.8;12pkt 12fpkt"];
179--17364[label="1;1pkt 1fpkt"];
179--17382[label="1;2pkt 2fpkt"];
179--17415[label="0.5;1pkt 1fpkt"];
179--17468[label="1;1pkt 1fpkt"];
179--17543[label="0.5;1pkt 1fpkt"];
179--17569[label="1;1pkt 1fpkt"];
179--17614[label="1;1pkt 1fpkt"];
179--17616[label="0.333333;1pkt 1fpkt"];
179--17629[label="0.5;1pkt 1fpkt"];
179--17660[label="1;1pkt 1fpkt"];
179--17707[label="1;1pkt 1fpkt"];
179--17715[label="0.333333;1pkt 1fpkt"];
179--17725[label="1;1pkt 1fpkt"];
179--17760[label="0.5;1pkt 1fpkt"];
179--17786[label="1;2pkt 2fpkt"];
179--17798[label="1;1pkt 1fpkt"];
179--17942[label="1;1pkt 1fpkt"];
179--17962[label="1;1pkt 1fpkt"];
179--17989[label="1;2pkt 2fpkt"];
179--18050[label="0.5;1pkt 1fpkt"];
179--18061[label="1;2pkt 2fpkt"];
179--18104[label="1;1pkt 1fpkt"];
179--18118[label="1;1pkt 1fpkt"];
179--18270[label="0.5;1pkt 1fpkt"];
179--18404[label="0.333333;1pkt 1fpkt"];
179--18752[label="1;1pkt 1fpkt"];
179--18768[label="1;1pkt 1fpkt"];
179--18876[label="0.25;1pkt 1fpkt"];
179--18977[label="1;1pkt 1fpkt"];
179--19058[label="1;1pkt 1fpkt"];
179--19106[label="1;16pkt 16fpkt"];
179--19146[label="0.5;1pkt 1fpkt"];
179--19156[label="1;1pkt 1fpkt"];
179--19183[label="1;1pkt 1fpkt"];
179--19208[label="0.5;1pkt 1fpkt"];
179--19299[label="0.5;1pkt 1fpkt"];
179--19313[label="0.5;1pkt 1fpkt"];
179--19379[label="1;1pkt 1fpkt"];
179--19471[label="0.5;1pkt 1fpkt"];
179--19590[label="0.5;1pkt 1fpkt"];
179--19656[label="0.5;1pkt 1fpkt"];
179--19696[label="1;1pkt 1fpkt"];
179--19697[label="0.111111;1pkt 1fpkt"];
179--19839[label="1;1pkt 1fpkt"];
179--20057[label="1;1pkt 1fpkt"];
179--20082[label="1;1pkt 1fpkt"];
179--20106[label="1;1pkt 1fpkt"];
179--20150[label="1;1pkt 1fpkt"];
179--20261[label="1;1pkt 1fpkt"];
179--20557[label="0.5;1pkt 1fpkt"];
179--20654[label="1;1pkt 1fpkt"];
179--20681[label="0.5;1pkt 1fpkt"];
179--20717[label="1;1pkt 1fpkt"];
179--20748[label="1;1pkt 1fpkt"];
179--20813[label="0.173913;12pkt 12fpkt"];
179--20997[label="0.5;1pkt 1fpkt"];
179--21102[label="1;1pkt 1fpkt"];
179--21159[label="1;1pkt 1fpkt"];
179--21174[label="1;1pkt 1fpkt"];
179--21345[label="1;17pkt 17fpkt"];
179--21471[label="0.333333;1pkt 1fpkt"];
179--21575[label="1;1pkt 1fpkt"];
179--21719[label="1;1pkt 1fpkt"];
179--21831[label="1;1pkt 1fpkt"];
179--21861[label="1;1pkt 1fpkt"];
179--21881[label="1;1pkt 1fpkt"];
179--21960[label="1;1pkt 1fpkt"];
179--21976[label="0.5;1pkt 1fpkt"];
179--22042[label="1;1pkt 1fpkt"];
179--22065[label="0.5;1pkt 1fpkt"];
179--22067[label="0.5;1pkt 1fpkt"];
179--22115[label="0.5;1pkt 1fpkt"];
179--22300[label="0.5;1pkt 1fpkt"];
179--22315[label="1;1pkt 1fpkt"];
179--22374[label="1;1pkt 1fpkt"];
179--22420[label="0.00176991;1pkt 1fpkt"];
179--22470[label="0.5;1pkt 1fpkt"];
179--22497[label="0.5;1pkt 1fpkt"];
179--22544[label="1;1pkt 1fpkt"];
179--22584[label="1;2pkt 2fpkt"];
179--22603[label="1;1pkt 1fpkt"];
179--22616[label="0.0714286;1pkt 1fpkt"];
179--22738[label="0.5;1pkt 1fpkt"];
179--22771[label="1;1pkt 1fpkt"];
179--22874[label="1;1pkt 1fpkt"];
179--23010[label="1;1pkt 1fpkt"];
179--23103[label="0.5;1pkt 1fpkt"];
179--23190[label="1;1pkt 1fpkt"];
179--23331[label="1;1pkt 1fpkt"];
179--23390[label="0.5;1pkt 1fpkt"];
179--23563[label="0.5;1pkt 1fpkt"];
179--23583[label="1;2pkt 2fpkt"];
179--23664[label="0.5;1pkt 1fpkt"];
179--23698[label="0.8;12pkt 12fpkt"];
179--23731[label="1;1pkt 1fpkt"];
179--23758[label="0.5;1pkt 1fpkt"];
179--23796[label="1;1pkt 1fpkt"];
179--23844[label="0.5;1pkt 1fpkt"];
179--23894[label="0.5;1pkt 1fpkt"];
179--23917[label="1;1pkt 1fpkt"];
179--23946[label="1;1pkt 1fpkt"];
179--23950[label="0.333333;1pkt 1fpkt"];
179--23959[label="1;1pkt 1fpkt"];
179--23982[label="0.5;1pkt 1fpkt"];
179--24004[label="1;2pkt 2fpkt"];
179--24014[label="1;1pkt 1fpkt"];
179--24132[label="1;2pkt 2fpkt"];
179--24175[label="0.5;1pkt 1fpkt"];
179--24218[label="1;1pkt 1fpkt"];
179--24662[label="1;1pkt 1fpkt"];
179--24674[label="1;1pkt 1fpkt"];
179--24857[label="1;1pkt 1fpkt"];
179--24915[label="0.5;1pkt 1fpkt"];
179--24951[label="0.5;1pkt 1fpkt"];
179--25009[label="0.5;1pkt 1fpkt"];
179--25018[label="0.5;1pkt 1fpkt"];
179--25059[label="1;1pkt 1fpkt"];
179--25120[label="0.5;1pkt 1fpkt"];
179--25202[label="0.5;1pkt 1fpkt"];
179--25280[label="1;1pkt 1fpkt"];
179--25281[label="0.111111;1pkt 1fpkt"];
179--25378[label="1;1pkt 1fpkt"];
179--25526[label="1;1pkt 1fpkt"];
179--25557[label="1;1pkt 1fpkt"];
179--25645[label="1;2pkt 2fpkt"];
179--25889[label="0.5;1pkt 1fpkt"];
179--25909[label="1;1pkt 1fpkt"];
179--25959[label="0.173913;12pkt 12fpkt"];
179--26052[label="0.5;1pkt 1fpkt"];
179--26228[label="1;17pkt 17fpkt"];
179--26293[label="0.333333;1pkt 1fpkt"];
179--26484[label="1;1pkt 1fpkt"];
179--26505[label="1;1pkt 1fpkt"];
179--26558[label="1;1pkt 1fpkt"];
179--26569[label="0.5;1pkt 1fpkt"];
179--26602[label="1;1pkt 1fpkt"];
179--26637[label="0.5;1pkt 1fpkt"];
179--26720[label="1;1pkt 1fpkt"];
179--26739[label="0.5;1pkt 1fpkt"];
179--26749[label="1;1pkt 1fpkt"];
179--26811[label="0.00176991;1pkt 1fpkt"];
179--26849[label="0.5;1pkt 1fpkt"];
179--26866[label="0.5;1pkt 1fpkt"];
179--26924[label="1;1pkt 1fpkt"];
179--26934[label="0.0714286;1pkt 1fpkt"];
179--27010[label="0.5;1pkt 1fpkt"];
179--27027[label="1;1pkt 1fpkt"];
179--27164[label="1;1pkt 1fpkt"];
179--27495[label="1;2pkt 2fpkt"];
179--27590[label="0.5;1pkt 1fpkt"];
179--27609[label="1;1pkt 1fpkt"];
179--27662[label="0.5;1pkt 1fpkt"];
179--27674[label="1;1pkt 1fpkt"];
179--27692[label="0.333333;1pkt 1fpkt"];
179--27697[label="1;1pkt 1fpkt"];
179--27719[label="1;2pkt 2fpkt"];
179--27795[label="1;2pkt 2fpkt"];
179--27840[label="1;1pkt 1fpkt"];
179--28209[label="1;1pkt 1fpkt"];
179--28296[label="0.5;1pkt 1fpkt"];
179--28328[label="1;1pkt 1fpkt"];
179--28417[label="0.5;1pkt 1fpkt"];
179--28464[label="0.111111;1pkt 1fpkt"];
179--28525[label="1;1pkt 1fpkt"];
179--28608[label="1;1pkt 1fpkt"];
179--28624[label="1;1pkt 1fpkt"];
6382--10904[label="1;2pkt 2fpkt"];
6382--17415[label="1;2pkt 2fpkt"];
6382--23758[label="1;2pkt 2fpkt"];
6382--27590[label="1;2pkt 2fpkt"];
9333--12919[label="1;69pkt 69fpkt"];
9333--20813[label="1;69pkt 69fpkt"];
9333--25959[label="1;69pkt 69fpkt"];
10904--17415[label="1;2pkt 2fpkt"];
10904--23758[label="1;2pkt 2fpkt"];
10904--27590[label="1;2pkt 2fpkt"];
12103--20261[label="1;1pkt 1fpkt"];
12103--25645[label="1;2pkt 2fpkt"];
12532--20557[label="1;2pkt 2fpkt"];
12682--20654[label="1;1pkt 1fpkt"];
12730--20681[label="1;2pkt 2fpkt"];
12730--25889[label="1;2pkt 2fpkt"];
12778--20717[label="1;1pkt 1fpkt"];
12778--25909[label="1;1pkt 1fpkt"];
12825--20748[label="1;1pkt 1fpkt"];
12919--20813[label="1;69pkt 69fpkt"];
12919--25959[label="1;69pkt 69fpkt"];
13201--20997[label="1;2pkt 2fpkt"];
13201--26052[label="1;2pkt 2fpkt"];
13350--21102[label="1;1pkt 1fpkt"];
13435--21159[label="1;1pkt 1fpkt"];
13461--21174[label="1;1pkt 1fpkt"];
13735--21345[label="1;17pkt 17fpkt"];
13735--26228[label="1;17pkt 17fpkt"];
14087--21575[label="1;1pkt 1fpkt"];
14281--21719[label="1;1pkt 1fpkt"];
14455--21831[label="1;1pkt 1fpkt"];
14455--26484[label="1;1pkt 1fpkt"];
14498--21861[label="1;1pkt 1fpkt"];
14498--26505[label="1;1pkt 1fpkt"];
14529--21881[label="1;1pkt 1fpkt"];
14655--21960[label="1;1pkt 1fpkt"];
14655--26558[label="1;1pkt 1fpkt"];
14677--21976[label="1;2pkt 2fpkt"];
14677--26569[label="1;2pkt 2fpkt"];
14787--22042[label="1;1pkt 1fpkt"];
14787--26602[label="1;1pkt 1fpkt"];
14821--22065[label="1;2pkt 2fpkt"];
14825--22067[label="1;2pkt 2fpkt"];
14895--22115[label="1;2pkt 2fpkt"];
14895--26637[label="1;2pkt 2fpkt"];
15161--22300[label="1;2pkt 2fpkt"];
15161--26739[label="1;2pkt 2fpkt"];
15177--22315[label="1;1pkt 1fpkt"];
15177--26749[label="1;1pkt 1fpkt"];
15272--22374[label="1;1pkt 1fpkt"];
15418--22470[label="1;2pkt 2fpkt"];
15418--26849[label="1;2pkt 2fpkt"];
15469--22497[label="1;2pkt 2fpkt"];
15469--26866[label="1;2pkt 2fpkt"];
15553--22544[label="1;1pkt 1fpkt"];
15612--22584[label="1;2pkt 2fpkt"];
15644--22603[label="1;1pkt 1fpkt"];
15644--26924[label="1;1pkt 1fpkt"];
15840--22738[label="1;2pkt 2fpkt"];
15840--27010[label="1;2pkt 2fpkt"];
15885--22771[label="1;1pkt 1fpkt"];
15885--27027[label="1;1pkt 1fpkt"];
16039--22874[label="1;1pkt 1fpkt"];
16274--23010[label="1;1pkt 1fpkt"];
16274--27164[label="1;1pkt 1fpkt"];
16413--23103[label="1;2pkt 2fpkt"];
16543--23190[label="1;1pkt 1fpkt"];
16754--23331[label="1;1pkt 1fpkt"];
16839--23390[label="1;2pkt 2fpkt"];
17126--23563[label="1;2pkt 2fpkt"];
17153--23583[label="1;2pkt 2fpkt"];
17153--27495[label="1;2pkt 2fpkt"];
17265--23664[label="1;2pkt 2fpkt"];
17315--23698[label="1;15pkt 15fpkt"];
17364--23731[label="1;1pkt 1fpkt"];
17415--23758[label="1;2pkt 2fpkt"];
17415--27590[label="1;2pkt 2fpkt"];
17468--23796[label="1;1pkt 1fpkt"];
17468--27609[label="1;1pkt 1fpkt"];
17543--23844[label="1;2pkt 2fpkt"];
17629--23894[label="1;2pkt 2fpkt"];
17629--27662[label="1;2pkt 2fpkt"];
17660--23917[label="1;1pkt 1fpkt"];
17660--27674[label="1;1pkt 1fpkt"];
17707--23946[label="1;1pkt 1fpkt"];
17725--23959[label="1;1pkt 1fpkt"];
17725--27697[label="1;1pkt 1fpkt"];
17760--23982[label="1;2pkt 2fpkt"];
17786--24004[label="1;2pkt 2fpkt"];
17786--27719[label="1;2pkt 2fpkt"];
17798--24014[label="1;1pkt 1fpkt"];
17989--24132[label="1;2pkt 2fpkt"];
17989--27795[label="1;2pkt 2fpkt"];
18050--24175[label="1;2pkt 2fpkt"];
18118--24218[label="1;1pkt 1fpkt"];
18118--27840[label="1;1pkt 1fpkt"];
18752--24662[label="1;1pkt 1fpkt"];
18768--24674[label="1;1pkt 1fpkt"];
19058--24857[label="1;1pkt 1fpkt"];
19058--28209[label="1;1pkt 1fpkt"];
19146--24915[label="1;2pkt 2fpkt"];
19208--24951[label="1;2pkt 2fpkt"];
19299--25009[label="1;2pkt 2fpkt"];
19299--28296[label="1;2pkt 2fpkt"];
19313--25018[label="1;2pkt 2fpkt"];
19379--25059[label="1;1pkt 1fpkt"];
19379--28328[label="1;1pkt 1fpkt"];
19471--25120[label="1;2pkt 2fpkt"];
19590--25202[label="1;2pkt 2fpkt"];
19590--28417[label="1;2pkt 2fpkt"];
19696--25280[label="1;1pkt 1fpkt"];
19697--25281[label="1;9pkt 9fpkt"];
19697--28464[label="1;9pkt 9fpkt"];
19839--25378[label="1;1pkt 1fpkt"];
19839--28525[label="1;1pkt 1fpkt"];
20057--25526[label="1;1pkt 1fpkt"];
20057--28608[label="1;1pkt 1fpkt"];
20106--25557[label="1;1pkt 1fpkt"];
20106--28624[label="1;1pkt 1fpkt"];
20261--25645[label="1;1pkt 1fpkt"];
20681--25889[label="1;2pkt 2fpkt"];
20717--25909[label="1;1pkt 1fpkt"];
20813--25959[label="1;69pkt 69fpkt"];
20997--26052[label="1;2pkt 2fpkt"];
21345--26228[label="1;17pkt 17fpkt"];
21831--26484[label="1;1pkt 1fpkt"];
21861--26505[label="1;1pkt 1fpkt"];
21960--26558[label="1;1pkt 1fpkt"];
21976--26569[label="1;2pkt 2fpkt"];
22042--26602[label="1;1pkt 1fpkt"];
22115--26637[label="1;2pkt 2fpkt"];
22300--26739[label="1;2pkt 2fpkt"];
22315--26749[label="1;1pkt 1fpkt"];
22470--26849[label="1;2pkt 2fpkt"];
22497--26866[label="1;2pkt 2fpkt"];
22603--26924[label="1;1pkt 1fpkt"];
22738--27010[label="1;2pkt 2fpkt"];
22771--27027[label="1;1pkt 1fpkt"];
23010--27164[label="1;1pkt 1fpkt"];
23583--27495[label="1;2pkt 2fpkt"];
23758--27590[label="1;2pkt 2fpkt"];
23796--27609[label="1;1pkt 1fpkt"];
23894--27662[label="1;2pkt 2fpkt"];
23917--27674[label="1;1pkt 1fpkt"];
23959--27697[label="1;1pkt 1fpkt"];
24004--27719[label="1;2pkt 2fpkt"];
24132--27795[label="1;2pkt 2fpkt"];
24218--27840[label="1;1pkt 1fpkt"];
24857--28209[label="1;1pkt 1fpkt"];
25009--28296[label="1;2pkt 2fpkt"];
25059--28328[label="1;1pkt 1fpkt"];
25202--28417[label="1;2pkt 2fpkt"];
25281--28464[label="1;9pkt 9fpkt"];
25378--28525[label="1;1pkt 1fpkt"];
25526--28608[label="1;1pkt 1fpkt"];
25557--28624[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.228.244.3"/>
    </slice>
    <from sec="1241499741" usec="0"/>
    <to sec="1241499803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.111.13.4"/>
    </slice>
    <from sec="1241500338" usec="0"/>
    <to sec="1241500418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.64.38.4"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2086{
style=filled;
color=gray75;
12113[label="4.3.54.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20267[label="4.3.54.4;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2086[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.3.54.4:43871, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43871: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12113--20267[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="4.3.54.4" src_port="43871"/>
    </slice>
    <from sec="1241499877" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.56.4"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.51.64.4"/>
    </slice>
    <from sec="1241499894" usec="0"/>
    <to sec="1241499910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.141.64.4"/>
    </slice>
    <from sec="1241500304" usec="0"/>
    <to sec="1241500336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.67.106.4"/>
    </slice>
    <from sec="1241500186" usec="0"/>
    <to sec="1241500214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.108.4"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2092{
style=filled;
color=gray75;
12133[label="170.15.187.4;84pkt 84fpkt", shape=pentagon, color=darkviolet];
20280[label="170.15.187.4;84pkt 84fpkt", shape=invtriangle, color=brown];
stat2092[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.187.4:*, 209.9.227.95:80}[70.2381%]&lt;BR/&gt;{170.15.187.4:32092, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 32092: (14.2857%)&lt;BR/&gt; 443: (1.19048%)&lt;BR/&gt; 52892: (0.595238%)&lt;BR/&gt; 50240: (0.595238%)&gt;];
}
12133--20280[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter src_ip="170.15.187.4" src_port="32092"/>
      <filter dst_ip="209.9.227.95" dst_port="80" src_ip="170.15.187.4"/>
    </slice>
    <from sec="1241499937" usec="0"/>
    <to sec="1241500388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.9.189.4"/>
    </slice>
    <from sec="1241499962" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.183.250.4"/>
    </slice>
    <from sec="1241500452" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.210.47.5"/>
    </slice>
    <from sec="1241499689" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.19.77.5"/>
    </slice>
    <from sec="1241499943" usec="0"/>
    <to sec="1241500009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.125.83.5"/>
    </slice>
    <from sec="1241499656" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.239.93.5"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2099{
style=filled;
color=gray75;
12169[label="128.156.94.5;4pkt 4fpkt", shape=pentagon, color=darkviolet];
20305[label="128.156.94.5;5pkt 5fpkt", shape=invtriangle, color=brown];
25671[label="128.156.94.5;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2099[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.94.5:1972, 162.2.169.96:80}[20%]&lt;BR/&gt;{128.156.94.5:18670, 62.72.60.141:37432}[20%]&lt;BR/&gt;{128.156.94.5:1968, 40.232.253.58:80}[20%]&lt;BR/&gt;{128.156.94.5:1970, 40.232.253.58:80}[20%]&lt;BR/&gt;{128.156.94.5:1976, 40.232.253.58:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1538%)&lt;BR/&gt; 1976: (11.5385%)&lt;BR/&gt; 1972: (11.5385%)&lt;BR/&gt; 1970: (11.5385%)&lt;BR/&gt; 1968: (11.5385%)&gt;];
}
12169--20305[label="1;4pkt 4fpkt"];
12169--25671[label="1;4pkt 4fpkt"];
20305--25671[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="40.232.253.58" dst_port="80" src_ip="128.156.94.5" src_port="1976"/>
      <filter dst_ip="40.232.253.58" dst_port="80" src_ip="128.156.94.5" src_port="1970"/>
      <filter dst_ip="40.232.253.58" dst_port="80" src_ip="128.156.94.5" src_port="1968"/>
      <filter dst_ip="62.72.60.141" dst_port="37432" src_ip="128.156.94.5" src_port="18670"/>
      <filter dst_ip="162.2.169.96" dst_port="80" src_ip="128.156.94.5" src_port="1972"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.86.168.5"/>
    </slice>
    <from sec="1241499980" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.65.179.5"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.15.216.5"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241499638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2103{
style=filled;
color=gray75;
12188[label="3.165.222.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20320[label="3.165.222.5;2pkt 2fpkt", shape=invtriangle, color=brown];
25680[label="3.165.222.5;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2103[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.165.222.5:17788, 215.66.219.235:62690}[50%]&lt;BR/&gt;{3.165.222.5:17788, 215.66.219.235:62968}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17788: (50%)&lt;BR/&gt; 62968: (25%)&lt;BR/&gt; 62690: (25%)&gt;];
}
12188--20320[label="1;2pkt 2fpkt"];
12188--25680[label="1;2pkt 2fpkt"];
20320--25680[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62968" src_ip="3.165.222.5" src_port="17788"/>
      <filter dst_ip="215.66.219.235" dst_port="62690" src_ip="3.165.222.5" src_port="17788"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.224.231.5"/>
    </slice>
    <from sec="1241500115" usec="0"/>
    <to sec="1241500121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.77.11.6"/>
    </slice>
    <from sec="1241499638" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2106{
style=filled;
color=gray75;
12195[label="12.9.13.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20326[label="12.9.13.6;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2106[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.9.13.6:3832, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3832: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12195--20326[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="12.9.13.6" src_port="3832"/>
    </slice>
    <from sec="1241499831" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.247.38.6"/>
    </slice>
    <from sec="1241499905" usec="0"/>
    <to sec="1241499975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.56.6"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.143.66.6"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.241.74.6"/>
    </slice>
    <from sec="1241500307" usec="0"/>
    <to sec="1241500345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2111{
style=filled;
color=gray75;
4288[label="206.128.41.99;d;25pkt 25fpkt", shape=diamond, color=yellow];
12216[label="128.156.127.6;22pkt 22fpkt", shape=pentagon, color=darkviolet];
20341[label="128.156.127.6;22pkt 22fpkt", shape=invtriangle, color=brown];
25689[label="128.156.127.6;22pkt 22fpkt", shape=invhouse, color=bisque];
stat2111[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.127.6:443, 206.128.41.99:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (46.1538%)&lt;BR/&gt; 80: (3.84615%)&lt;BR/&gt; 3325: (2.1978%)&lt;BR/&gt; 3324: (2.1978%)&lt;BR/&gt; 3323: (2.1978%)&gt;];
}
4288--12216[label="0.909091;20pkt 20fpkt"];
4288--14795[label="0.16;4pkt 4fpkt"];
4288--20341[label="0.909091;20pkt 20fpkt"];
4288--22047[label="0.16;4pkt 4fpkt"];
4288--25689[label="0.909091;20pkt 20fpkt"];
12216--20341[label="1;22pkt 22fpkt"];
12216--25689[label="1;22pkt 22fpkt"];
20341--25689[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="206.128.41.99" src_ip="128.156.127.6" src_port="443"/>
    </slice>
    <from sec="1241499638" usec="0"/>
    <to sec="1241500300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.191.136.6"/>
    </slice>
    <from sec="1241499722" usec="0"/>
    <to sec="1241499736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.161.143.6"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.8.21.7"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.24.7"/>
    </slice>
    <from sec="1241499959" usec="0"/>
    <to sec="1241499969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.27.53.7"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.176.58.7"/>
    </slice>
    <from sec="1241500097" usec="0"/>
    <to sec="1241500134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2118{
style=filled;
color=gray75;
12257[label="204.70.70.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20367[label="204.70.70.7;1pkt 1fpkt", shape=invtriangle, color=brown];
25701[label="204.70.70.7;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2118[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.70.70.7:3001, 215.66.219.235:62620}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62620: (50%)&lt;BR/&gt; 3001: (50%)&gt;];
}
12257--20367[label="1;1pkt 1fpkt"];
12257--25701[label="1;1pkt 1fpkt"];
20367--25701[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62620" src_ip="204.70.70.7" src_port="3001"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.72.78.7"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.86.7"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.68.95.7"/>
    </slice>
    <from sec="1241499664" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2122{
style=filled;
color=gray75;
12265[label="128.156.97.7;44pkt 44fpkt", shape=pentagon, color=darkviolet];
20373[label="128.156.97.7;44pkt 44fpkt", shape=invtriangle, color=brown];
stat2122[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.97.7:20362, *:*}[88.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20362: (44.3182%)&lt;BR/&gt; 80: (5.68182%)&lt;BR/&gt; 123: (2.27273%)&lt;BR/&gt; 64118: (1.13636%)&lt;BR/&gt; 62283: (1.13636%)&gt;];
}
12265--20373[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="128.156.97.7" src_port="20362"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.185.145.7"/>
    </slice>
    <from sec="1241499812" usec="0"/>
    <to sec="1241500010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.121.147.7"/>
    </slice>
    <from sec="1241499693" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.115.154.7"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241499935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.193.158.7"/>
    </slice>
    <from sec="1241500031" usec="0"/>
    <to sec="1241500239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.180.189.7"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.5.198.7"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.217.7"/>
    </slice>
    <from sec="1241499710" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.110.218.7"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.54.5.8"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.74.11.8"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.131.12.8"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.32.15.8"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2135{
style=filled;
color=gray75;
12302[label="9.109.30.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20398[label="9.109.30.8;1pkt 1fpkt", shape=invtriangle, color=brown];
25718[label="9.109.30.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2135[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.109.30.8:1459, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1459: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12302--20398[label="1;1pkt 1fpkt"];
12302--25718[label="1;1pkt 1fpkt"];
20398--25718[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="9.109.30.8" src_port="1459"/>
    </slice>
    <from sec="1241499809" usec="0"/>
    <to sec="1241500470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.107.58.8"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.129.60.8"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2138{
style=filled;
color=gray75;
12309[label="128.46.65.8;13pkt 13fpkt", shape=pentagon, color=darkviolet];
20402[label="128.46.65.8;13pkt 13fpkt", shape=invtriangle, color=brown];
25722[label="128.46.65.8;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2138[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.46.65.8:*, 40.218.128.202:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 50471: (3.84615%)&lt;BR/&gt; 50470: (3.84615%)&lt;BR/&gt; 50469: (3.84615%)&lt;BR/&gt; 50468: (3.84615%)&gt;];
}
12309--20402[label="1;13pkt 13fpkt"];
12309--25722[label="1;13pkt 13fpkt"];
20402--25722[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="40.218.128.202" dst_port="443" src_ip="128.46.65.8"/>
    </slice>
    <from sec="1241499645" usec="0"/>
    <to sec="1241500474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2139{
style=filled;
color=gray75;
12311[label="38.132.69.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20403[label="38.132.69.8;1pkt 1fpkt", shape=invtriangle, color=brown];
25723[label="38.132.69.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2139[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.132.69.8:80, 172.204.221.4:50575}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50575: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12311--20403[label="1;1pkt 1fpkt"];
12311--25723[label="1;1pkt 1fpkt"];
20403--25723[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.221.4" dst_port="50575" src_ip="38.132.69.8" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2140{
style=filled;
color=gray75;
12312[label="66.68.74.8;12pkt 12fpkt", shape=pentagon, color=darkviolet];
20404[label="66.68.74.8;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2140[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.68.74.8:*, 170.15.19.224:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62761: (4%)&lt;BR/&gt; 62727: (4%)&lt;BR/&gt; 62193: (4%)&lt;BR/&gt; 62019: (4%)&gt;];
}
12312--20404[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.224" dst_port="80" src_ip="66.68.74.8"/>
    </slice>
    <from sec="1241500196" usec="0"/>
    <to sec="1241500202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.88.8"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2142{
style=filled;
color=gray75;
12325[label="69.246.171.8;4pkt 4fpkt", shape=pentagon, color=darkviolet];
20412[label="69.246.171.8;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2142[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.246.171.8:49703, 215.66.214.16:80}[25%]&lt;BR/&gt;{69.246.171.8:52263, 215.66.214.16:80}[25%]&lt;BR/&gt;{69.246.171.8:52519, 215.66.214.16:80}[25%]&lt;BR/&gt;{69.246.171.8:52775, 215.66.214.16:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52775: (12.5%)&lt;BR/&gt; 52519: (12.5%)&lt;BR/&gt; 52263: (12.5%)&lt;BR/&gt; 49703: (12.5%)&gt;];
}
12325--20412[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="69.246.171.8" src_port="52775"/>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="69.246.171.8" src_port="52519"/>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="69.246.171.8" src_port="52263"/>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="69.246.171.8" src_port="49703"/>
    </slice>
    <from sec="1241500381" usec="0"/>
    <to sec="1241500406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.68.173.8"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.86.182.8"/>
    </slice>
    <from sec="1241500213" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.96.202.8"/>
    </slice>
    <from sec="1241500310" usec="0"/>
    <to sec="1241500315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.237.208.8"/>
    </slice>
    <from sec="1241499644" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.36.215.8"/>
    </slice>
    <from sec="1241499643" usec="0"/>
    <to sec="1241500456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2148{
style=filled;
color=gray75;
12335[label="34.153.236.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20420[label="34.153.236.8;1pkt 1fpkt", shape=invtriangle, color=brown];
25731[label="34.153.236.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2148[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.153.236.8:60785, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60785: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12335--20420[label="1;1pkt 1fpkt"];
12335--25731[label="1;1pkt 1fpkt"];
20420--25731[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="34.153.236.8" src_port="60785"/>
    </slice>
    <from sec="1241499875" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.192.42.9"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.109.114.9"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.156.128.9"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.164.128.9"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.145.154.9"/>
    </slice>
    <from sec="1241500400" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.219.154.9"/>
    </slice>
    <from sec="1241499677" usec="0"/>
    <to sec="1241499759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2155{
style=filled;
color=gray75;
12368[label="68.0.164.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20441[label="68.0.164.9;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2155[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.0.164.9:80, 170.15.187.165:52052}[50%]&lt;BR/&gt;{68.0.164.9:80, 170.15.187.165:52053}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52053: (33.3333%)&lt;BR/&gt; 52052: (16.6667%)&gt;];
}
12368--20441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.187.165" dst_port="52053" src_ip="68.0.164.9" src_port="80"/>
      <filter dst_ip="170.15.187.165" dst_port="52052" src_ip="68.0.164.9" src_port="80"/>
    </slice>
    <from sec="1241499799" usec="0"/>
    <to sec="1241499818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.76.195.9"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2157{
style=filled;
color=gray75;
12382[label="68.163.247.9;12pkt 12fpkt", shape=pentagon, color=darkviolet];
20451[label="68.163.247.9;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2157[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.163.247.9:*, 170.15.19.236:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 9143: (4%)&lt;BR/&gt; 9068: (4%)&lt;BR/&gt; 8412: (4%)&lt;BR/&gt; 8277: (4%)&gt;];
}
12382--20451[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.236" dst_port="80" src_ip="68.163.247.9"/>
    </slice>
    <from sec="1241499749" usec="0"/>
    <to sec="1241499761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.74.67.10"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241499947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.90.82.10"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.5.99.10"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2161{
style=filled;
color=gray75;
12404[label="41.213.116.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20468[label="41.213.116.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2161[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.213.116.10:33437, 215.66.211.80:52129}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52129: (50%)&lt;BR/&gt; 33437: (50%)&gt;];
}
12404--20468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.211.80" dst_port="52129" src_ip="41.213.116.10" src_port="33437"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.104.132.10"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.164.139.10"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.138.153.10"/>
    </slice>
    <from sec="1241500400" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.154.10"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.14.172.10"/>
    </slice>
    <from sec="1241499676" usec="0"/>
    <to sec="1241499817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.30.11"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.189.33.11"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.48.11"/>
    </slice>
    <from sec="1241499889" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.26.152.11"/>
    </slice>
    <from sec="1241500153" usec="0"/>
    <to sec="1241500199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.202.192.11"/>
    </slice>
    <from sec="1241500288" usec="0"/>
    <to sec="1241500298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.15.230.11"/>
    </slice>
    <from sec="1241500112" usec="0"/>
    <to sec="1241500139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.248.11"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2174{
style=filled;
color=gray75;
12464[label="46.226.248.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
20514[label="46.226.248.11;3pkt 3fpkt", shape=invtriangle, color=brown];
25784[label="46.226.248.11;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2174[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.226.248.11:46485, 172.204.171.93:25}[33.3333%]&lt;BR/&gt;{46.226.248.11:46497, 172.204.168.112:25}[33.3333%]&lt;BR/&gt;{46.226.248.11:27413, 172.204.230.206:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 46497: (16.6667%)&lt;BR/&gt; 46485: (16.6667%)&lt;BR/&gt; 27413: (16.6667%)&gt;];
}
12464--20514[label="1;3pkt 3fpkt"];
12464--25784[label="1;3pkt 3fpkt"];
20514--25784[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.230.206" dst_port="25" src_ip="46.226.248.11" src_port="27413"/>
      <filter dst_ip="172.204.168.112" dst_port="25" src_ip="46.226.248.11" src_port="46497"/>
      <filter dst_ip="172.204.171.93" dst_port="25" src_ip="46.226.248.11" src_port="46485"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.87.10.12"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.143.64.12"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2177{
style=filled;
color=gray75;
12484[label="205.49.110.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20528[label="205.49.110.12;1pkt 1fpkt", shape=invtriangle, color=brown];
25794[label="205.49.110.12;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2177[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.49.110.12:5269, 215.66.219.235:61791}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61791: (50%)&lt;BR/&gt; 5269: (50%)&gt;];
}
12484--20528[label="1;1pkt 1fpkt"];
12484--25794[label="1;1pkt 1fpkt"];
20528--25794[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="61791" src_ip="205.49.110.12" src_port="5269"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.10.153.12"/>
    </slice>
    <from sec="1241499973" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.53.156.12"/>
    </slice>
    <from sec="1241500115" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2180{
style=filled;
color=gray75;
12498[label="38.72.184.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20537[label="38.72.184.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2180[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.72.184.12:59088, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59088: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12498--20537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="38.72.184.12" src_port="59088"/>
    </slice>
    <from sec="1241500251" usec="0"/>
    <to sec="1241500279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.161.209.12"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.182.10.13"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.96.11.13"/>
    </slice>
    <from sec="1241500054" usec="0"/>
    <to sec="1241500314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.21.31.13"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.66.64.13"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2186{
style=filled;
color=gray75;
12522[label="43.20.84.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20551[label="43.20.84.13;1pkt 1fpkt", shape=invtriangle, color=brown];
25812[label="43.20.84.13;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2186[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.20.84.13:50923, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50923: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12522--20551[label="1;1pkt 1fpkt"];
12522--25812[label="1;1pkt 1fpkt"];
20551--25812[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="43.20.84.13" src_port="50923"/>
    </slice>
    <from sec="1241500358" usec="0"/>
    <to sec="1241500375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.130.193.13"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2188{
style=filled;
color=gray75;
12549[label="37.208.14.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20569[label="37.208.14.14;1pkt 1fpkt", shape=invtriangle, color=brown];
25822[label="37.208.14.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2188[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.208.14.14:2655, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2655: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12549--20569[label="1;1pkt 1fpkt"];
12549--25822[label="1;1pkt 1fpkt"];
20569--25822[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="37.208.14.14" src_port="2655"/>
    </slice>
    <from sec="1241500409" usec="0"/>
    <to sec="1241500443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.208.36.14"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2190{
style=filled;
color=gray75;
12556[label="128.133.48.14;26pkt 26fpkt", shape=pentagon, color=darkviolet];
20574[label="128.133.48.14;26pkt 26fpkt", shape=invtriangle, color=brown];
25825[label="128.133.48.14;26pkt 26fpkt", shape=invhouse, color=bisque];
stat2190[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.133.48.14:25, 67.64.216.176:*}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61789: (1.92308%)&lt;BR/&gt; 61245: (1.92308%)&lt;BR/&gt; 50031: (1.92308%)&lt;BR/&gt; 49566: (1.92308%)&gt;];
}
12556--20574[label="1;26pkt 26fpkt"];
12556--25825[label="1;26pkt 26fpkt"];
20574--25825[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="67.64.216.176" src_ip="128.133.48.14" src_port="25"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.68.14"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.195.130.14"/>
    </slice>
    <from sec="1241499813" usec="0"/>
    <to sec="1241500405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.66.145.14"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2194{
style=filled;
color=gray75;
12576[label="66.19.246.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20588[label="66.19.246.14;1pkt 1fpkt", shape=invtriangle, color=brown];
25834[label="66.19.246.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2194[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.19.246.14:3473, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3473: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12576--20588[label="1;1pkt 1fpkt"];
12576--25834[label="1;1pkt 1fpkt"];
20588--25834[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="66.19.246.14" src_port="3473"/>
    </slice>
    <from sec="1241500322" usec="0"/>
    <to sec="1241500350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2195{
style=filled;
color=gray75;
12578[label="54.132.3.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20589[label="54.132.3.15;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2195[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.132.3.15:52594, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52594: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12578--20589[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="54.132.3.15" src_port="52594"/>
    </slice>
    <from sec="1241499782" usec="0"/>
    <to sec="1241500437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.55.65.15"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.132.88.15"/>
    </slice>
    <from sec="1241500105" usec="0"/>
    <to sec="1241500141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.68.94.15"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.67.166.15"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.86.189.15"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2201{
style=filled;
color=gray75;
12608[label="151.71.211.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20601[label="151.71.211.15;1pkt 1fpkt", shape=invtriangle, color=brown];
25842[label="151.71.211.15;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2201[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.71.211.15:45318, 66.54.17.212:23213}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45318: (50%)&lt;BR/&gt; 23213: (50%)&gt;];
}
12608--20601[label="1;1pkt 1fpkt"];
12608--25842[label="1;1pkt 1fpkt"];
20601--25842[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="66.54.17.212" dst_port="23213" src_ip="151.71.211.15" src_port="45318"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.108.226.15"/>
    </slice>
    <from sec="1241500302" usec="0"/>
    <to sec="1241500337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.211.227.15"/>
    </slice>
    <from sec="1241500162" usec="0"/>
    <to sec="1241500169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.238.7.16"/>
    </slice>
    <from sec="1241500032" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.153.11.16"/>
    </slice>
    <from sec="1241500035" usec="0"/>
    <to sec="1241500070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.139.14.16"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2207{
style=filled;
color=gray75;
12626[label="2.160.52.16;6pkt 6fpkt", shape=pentagon, color=darkviolet];
20612[label="2.160.52.16;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2207[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.160.52.16:*, 170.15.19.148:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 9472: (8.33333%)&lt;BR/&gt; 9471: (8.33333%)&lt;BR/&gt; 9470: (8.33333%)&lt;BR/&gt; 9469: (8.33333%)&gt;];
}
12626--20612[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="2.160.52.16"/>
    </slice>
    <from sec="1241500472" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2208{
style=filled;
color=gray75;
12627[label="208.250.69.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
20613[label="208.250.69.16;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2208[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.250.69.16:50644, 170.15.19.148:80}[20%]&lt;BR/&gt;{208.250.69.16:52679, 170.15.19.148:80}[20%]&lt;BR/&gt;{208.250.69.16:57078, 170.15.19.148:80}[20%]&lt;BR/&gt;{208.250.69.16:60928, 170.15.19.148:80}[20%]&lt;BR/&gt;{208.250.69.16:63234, 170.15.19.148:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63234: (10%)&lt;BR/&gt; 60928: (10%)&lt;BR/&gt; 57078: (10%)&lt;BR/&gt; 52679: (10%)&gt;];
}
12627--20613[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="208.250.69.16" src_port="63234"/>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="208.250.69.16" src_port="60928"/>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="208.250.69.16" src_port="57078"/>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="208.250.69.16" src_port="52679"/>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="208.250.69.16" src_port="50644"/>
    </slice>
    <from sec="1241500475" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2209{
style=filled;
color=gray75;
12642[label="41.92.185.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20622[label="41.92.185.16;1pkt 1fpkt", shape=invtriangle, color=brown];
25855[label="41.92.185.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2209[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.92.185.16:3383, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3383: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12642--20622[label="1;1pkt 1fpkt"];
12642--25855[label="1;1pkt 1fpkt"];
20622--25855[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="41.92.185.16" src_port="3383"/>
    </slice>
    <from sec="1241500170" usec="0"/>
    <to sec="1241500207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2210{
style=filled;
color=gray75;
12649[label="215.66.216.16;256pkt 256fpkt", shape=pentagon, color=darkviolet];
20627[label="215.66.216.16;256pkt 256fpkt", shape=invtriangle, color=brown];
25859[label="215.66.216.16;256pkt 256fpkt", shape=invhouse, color=bisque];
stat2210[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.216.16:*, *:53}[51.5625%]&lt;BR/&gt;{215.66.216.16:53, *:*}[34.7656%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43.1641%)&lt;BR/&gt; 25: (3.51562%)&lt;BR/&gt; 123: (2.73438%)&lt;BR/&gt; 22: (0.390625%)&lt;BR/&gt; 0: (0.390625%)&gt;];
}
12649--20627[label="1;256pkt 256fpkt"];
12649--25859[label="1;256pkt 256fpkt"];
20627--25859[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter src_ip="215.66.216.16" src_port="53"/>
      <filter dst_port="53" src_ip="215.66.216.16"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2211{
style=filled;
color=gray75;
12652[label="70.61.228.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20630[label="70.61.228.16;1pkt 1fpkt", shape=invtriangle, color=brown];
25861[label="70.61.228.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2211[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.61.228.16:50306, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50306: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12652--20630[label="1;1pkt 1fpkt"];
12652--25861[label="1;1pkt 1fpkt"];
20630--25861[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="70.61.228.16" src_port="50306"/>
    </slice>
    <from sec="1241499785" usec="0"/>
    <to sec="1241500415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2212{
style=filled;
color=gray75;
12661[label="194.36.26.17;53pkt 53fpkt", shape=pentagon, color=darkviolet];
20637[label="194.36.26.17;53pkt 53fpkt", shape=invtriangle, color=brown];
25865[label="194.36.26.17;53pkt 53fpkt", shape=invhouse, color=bisque];
stat2212[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.36.26.17:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 64697: (0.943396%)&lt;BR/&gt; 64626: (0.943396%)&lt;BR/&gt; 64568: (0.943396%)&lt;BR/&gt; 64491: (0.943396%)&gt;];
}
12661--20637[label="1;53pkt 53fpkt"];
12661--25865[label="1;53pkt 53fpkt"];
20637--25865[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="194.36.26.17"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.59.37.17"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.5.99.17"/>
    </slice>
    <from sec="1241499788" usec="0"/>
    <to sec="1241500026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.174.99.17"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.171.17"/>
    </slice>
    <from sec="1241500199" usec="0"/>
    <to sec="1241500243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.82.244.17"/>
    </slice>
    <from sec="1241499901" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2218{
style=filled;
color=gray75;
12694[label="214.40.2.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20662[label="214.40.2.18;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2218[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.40.2.18:23333, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23333: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12694--20662[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="214.40.2.18" src_port="23333"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2219{
style=filled;
color=gray75;
12705[label="12.79.81.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20666[label="12.79.81.18;1pkt 1fpkt", shape=invtriangle, color=brown];
25880[label="12.79.81.18;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2219[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.79.81.18:52384, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52384: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12705--20666[label="1;1pkt 1fpkt"];
12705--25880[label="1;1pkt 1fpkt"];
20666--25880[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="12.79.81.18" src_port="52384"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.77.102.18"/>
    </slice>
    <from sec="1241499728" usec="0"/>
    <to sec="1241499803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.131.138.18"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.69.139.18"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2223{
style=filled;
color=gray75;
12724[label="128.46.171.18;28pkt 28fpkt", shape=pentagon, color=darkviolet];
20676[label="128.46.171.18;28pkt 28fpkt", shape=invtriangle, color=brown];
stat2223[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.46.171.18:*, 196.210.228.228:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2985: (1.78571%)&lt;BR/&gt; 2984: (1.78571%)&lt;BR/&gt; 2983: (1.78571%)&lt;BR/&gt; 2982: (1.78571%)&gt;];
}
12724--20676[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="196.210.228.228" dst_port="80" src_ip="128.46.171.18"/>
    </slice>
    <from sec="1241500231" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2224{
style=filled;
color=gray75;
12727[label="12.39.203.18;19pkt 19fpkt", shape=pentagon, color=darkviolet];
20678[label="12.39.203.18;19pkt 19fpkt", shape=invtriangle, color=brown];
stat2224[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.39.203.18:80, 215.66.219.235:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63482: (2.63158%)&lt;BR/&gt; 63466: (2.63158%)&lt;BR/&gt; 63465: (2.63158%)&lt;BR/&gt; 63459: (2.63158%)&gt;];
}
12727--20678[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" src_ip="12.39.203.18" src_port="80"/>
    </slice>
    <from sec="1241499945" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2225{
style=filled;
color=gray75;
12733[label="54.200.12.19;6pkt 6fpkt", shape=pentagon, color=darkviolet];
20684[label="54.200.12.19;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2225[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.200.12.19:*, *:3128}[66.6667%]&lt;BR/&gt;{54.200.12.19:*, *:3127}[33.3333%]&lt;BR/&gt;{54.200.12.19:*, 215.66.218.52:*}[33.3333%]&lt;BR/&gt;{54.200.12.19:*, 215.66.218.56:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (33.3333%)&lt;BR/&gt; 3127: (16.6667%)&lt;BR/&gt; 54374: (8.33333%)&lt;BR/&gt; 54373: (8.33333%)&lt;BR/&gt; 54372: (8.33333%)&gt;];
}
12733--20684[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.56" src_ip="54.200.12.19"/>
      <filter dst_ip="215.66.218.52" src_ip="54.200.12.19"/>
      <filter dst_port="3128" src_ip="54.200.12.19"/>
      <filter dst_port="3127" src_ip="54.200.12.19"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2226{
style=filled;
color=gray75;
12738[label="134.73.33.19;6pkt 6fpkt", shape=pentagon, color=darkviolet];
20688[label="134.73.33.19;6pkt 6fpkt", shape=invtriangle, color=brown];
25894[label="134.73.33.19;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2226[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.33.19:*, 215.173.86.33:80}[33.3333%]&lt;BR/&gt;{134.73.33.19:*, 0.50.67.104:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1184: (8.33333%)&lt;BR/&gt; 1129: (8.33333%)&lt;BR/&gt; 1127: (8.33333%)&lt;BR/&gt; 1124: (8.33333%)&gt;];
}
12738--20688[label="1;6pkt 6fpkt"];
12738--25894[label="1;6pkt 6fpkt"];
20688--25894[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="0.50.67.104" dst_port="80" src_ip="134.73.33.19"/>
      <filter dst_ip="215.173.86.33" dst_port="80" src_ip="134.73.33.19"/>
    </slice>
    <from sec="1241499994" usec="0"/>
    <to sec="1241500138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.70.72.19"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2228{
style=filled;
color=gray75;
12744[label="212.11.75.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20693[label="212.11.75.19;1pkt 1fpkt", shape=invtriangle, color=brown];
25898[label="212.11.75.19;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2228[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.11.75.19:2883, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2883: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12744--20693[label="1;1pkt 1fpkt"];
12744--25898[label="1;1pkt 1fpkt"];
20693--25898[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="212.11.75.19" src_port="2883"/>
    </slice>
    <from sec="1241500443" usec="0"/>
    <to sec="1241500452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2229{
style=filled;
color=gray75;
12746[label="42.48.78.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20695[label="42.48.78.19;1pkt 1fpkt", shape=invtriangle, color=brown];
25899[label="42.48.78.19;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2229[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.48.78.19:53780, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53780: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12746--20695[label="1;1pkt 1fpkt"];
12746--25899[label="1;1pkt 1fpkt"];
20695--25899[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="42.48.78.19" src_port="53780"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.182.128.19"/>
    </slice>
    <from sec="1241499760" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.137.19"/>
    </slice>
    <from sec="1241500071" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.222.221.19"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.43.13.20"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.210.18.20"/>
    </slice>
    <from sec="1241500230" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.29.70.20"/>
    </slice>
    <from sec="1241499717" usec="0"/>
    <to sec="1241499759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.250.95.20"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.140.172.20"/>
    </slice>
    <from sec="1241499800" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="181.99.185.20"/>
    </slice>
    <from sec="1241500324" usec="0"/>
    <to sec="1241500366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.160.6.21"/>
    </slice>
    <from sec="1241499886" usec="0"/>
    <to sec="1241500003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2240{
style=filled;
color=gray75;
12807[label="215.167.7.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20736[label="215.167.7.21;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2240[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.167.7.21:80, 215.66.219.235:63477}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63477: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12807--20736[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="63477" src_ip="215.167.7.21" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.68.17.21"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2242{
style=filled;
color=gray75;
12813[label="69.71.20.21;26pkt 26fpkt", shape=pentagon, color=darkviolet];
20741[label="69.71.20.21;26pkt 26fpkt", shape=invtriangle, color=brown];
25923[label="69.71.20.21;26pkt 26fpkt", shape=invhouse, color=bisque];
stat2242[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.71.20.21:*, 215.66.220.67:80}[53.8462%]&lt;BR/&gt;{69.71.20.21:*, 215.66.220.66:80}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10893: (1.92308%)&lt;BR/&gt; 10891: (1.92308%)&lt;BR/&gt; 10890: (1.92308%)&lt;BR/&gt; 10869: (1.92308%)&gt;];
}
12813--20741[label="1;26pkt 26fpkt"];
12813--25923[label="1;26pkt 26fpkt"];
20741--25923[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="69.71.20.21"/>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="69.71.20.21"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.62.104.21"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="157.136.159.21"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.171.172.21"/>
    </slice>
    <from sec="1241499783" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.74.173.21"/>
    </slice>
    <from sec="1241499839" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.140.223.21"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2249{
style=filled;
color=gray75;
12842[label="32.178.244.21;9pkt 9fpkt", shape=pentagon, color=darkviolet];
20760[label="32.178.244.21;9pkt 9fpkt", shape=invtriangle, color=brown];
stat2249[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.178.244.21:7920, 214.170.72.8:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7920: (50%)&lt;BR/&gt; 2877: (5.55556%)&lt;BR/&gt; 2859: (5.55556%)&lt;BR/&gt; 2849: (5.55556%)&lt;BR/&gt; 2742: (5.55556%)&gt;];
}
12842--20760[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="214.170.72.8" src_ip="32.178.244.21" src_port="7920"/>
    </slice>
    <from sec="1241499637" usec="0"/>
    <to sec="1241500364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2250{
style=filled;
color=gray75;
12844[label="204.106.251.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20761[label="204.106.251.21;1pkt 1fpkt", shape=invtriangle, color=brown];
25935[label="204.106.251.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2250[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.106.251.21:15131, 128.1.151.209:20848}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20848: (50%)&lt;BR/&gt; 15131: (50%)&gt;];
}
12844--20761[label="1;1pkt 1fpkt"];
12844--25935[label="1;1pkt 1fpkt"];
20761--25935[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.1.151.209" dst_port="20848" src_ip="204.106.251.21" src_port="15131"/>
    </slice>
    <from sec="1241499968" usec="0"/>
    <to sec="1241499990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.179.32.22"/>
    </slice>
    <from sec="1241499909" usec="0"/>
    <to sec="1241499928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.74.46.22"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.171.56.22"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241499714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.169.57.22"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.216.96.22"/>
    </slice>
    <from sec="1241500003" usec="0"/>
    <to sec="1241500014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.12.122.22"/>
    </slice>
    <from sec="1241499734" usec="0"/>
    <to sec="1241499903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.12.149.22"/>
    </slice>
    <from sec="1241500172" usec="0"/>
    <to sec="1241500264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2258{
style=filled;
color=gray75;
12874[label="52.193.159.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20784[label="52.193.159.22;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2258[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.193.159.22:80, 215.66.218.53:41532}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41532: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12874--20784[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.53" dst_port="41532" src_ip="52.193.159.22" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.81.23"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.68.168.23"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.2.176.23"/>
    </slice>
    <from sec="1241500128" usec="0"/>
    <to sec="1241500222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.161.240.23"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.221.25.24"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.79.48.24"/>
    </slice>
    <from sec="1241499976" usec="0"/>
    <to sec="1241500104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.116.69.24"/>
    </slice>
    <from sec="1241499968" usec="0"/>
    <to sec="1241499978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2266{
style=filled;
color=gray75;
12933[label="1.154.110.24;15pkt 15fpkt", shape=pentagon, color=darkviolet];
20823[label="1.154.110.24;15pkt 15fpkt", shape=invtriangle, color=brown];
25965[label="1.154.110.24;15pkt 15fpkt", shape=invhouse, color=bisque];
stat2266[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.154.110.24:*, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4571: (3.33333%)&lt;BR/&gt; 4545: (3.33333%)&lt;BR/&gt; 4541: (3.33333%)&lt;BR/&gt; 4537: (3.33333%)&gt;];
}
12933--20823[label="1;15pkt 15fpkt"];
12933--25965[label="1;15pkt 15fpkt"];
20823--25965[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="1.154.110.24"/>
    </slice>
    <from sec="1241500280" usec="0"/>
    <to sec="1241500392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.174.158.24"/>
    </slice>
    <from sec="1241499961" usec="0"/>
    <to sec="1241499999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.52.164.24"/>
    </slice>
    <from sec="1241499627" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.86.165.24"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.185.24"/>
    </slice>
    <from sec="1241500243" usec="0"/>
    <to sec="1241500454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.86.194.24"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.83.21.25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.143.49.25"/>
    </slice>
    <from sec="1241499664" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.60.72.25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2275{
style=filled;
color=gray75;
12985[label="170.15.186.25;17pkt 17fpkt", shape=pentagon, color=darkviolet];
20858[label="170.15.186.25;17pkt 17fpkt", shape=invtriangle, color=brown];
stat2275[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.25:*, 208.46.181.131:80}[47.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1847: (2.94118%)&lt;BR/&gt; 1846: (2.94118%)&lt;BR/&gt; 1844: (2.94118%)&lt;BR/&gt; 1842: (2.94118%)&gt;];
}
12985--20858[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="208.46.181.131" dst_port="80" src_ip="170.15.186.25"/>
    </slice>
    <from sec="1241499677" usec="0"/>
    <to sec="1241499794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.77.209.25"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.212.14.26"/>
    </slice>
    <from sec="1241500252" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.181.38.26"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.67.69.26"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.238.91.26"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.96.26"/>
    </slice>
    <from sec="1241500105" usec="0"/>
    <to sec="1241500192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.244.145.26"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.91.160.26"/>
    </slice>
    <from sec="1241500058" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2284{
style=filled;
color=gray75;
13030[label="3.162.170.26;13pkt 13fpkt", shape=pentagon, color=darkviolet];
20889[label="3.162.170.26;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2284[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.162.170.26:*, 214.163.55.2:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2080: (3.84615%)&lt;BR/&gt; 2079: (3.84615%)&lt;BR/&gt; 2078: (3.84615%)&lt;BR/&gt; 2077: (3.84615%)&gt;];
}
13030--20889[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.55.2" dst_port="443" src_ip="3.162.170.26"/>
    </slice>
    <from sec="1241499668" usec="0"/>
    <to sec="1241499716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2285{
style=filled;
color=gray75;
13039[label="170.15.219.26;3pkt 3fpkt", shape=pentagon, color=darkviolet];
20894[label="170.15.219.26;3pkt 3fpkt", shape=invtriangle, color=brown];
25998[label="170.15.219.26;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2285[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.219.26:52015, 215.173.86.10:80}[33.3333%]&lt;BR/&gt;{170.15.219.26:52038, 174.153.30.48:80}[33.3333%]&lt;BR/&gt;{170.15.219.26:52039, 174.153.30.48:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52039: (16.6667%)&lt;BR/&gt; 52038: (16.6667%)&lt;BR/&gt; 52015: (16.6667%)&gt;];
}
13039--20894[label="1;3pkt 3fpkt"];
13039--25998[label="1;3pkt 3fpkt"];
20894--25998[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="174.153.30.48" dst_port="80" src_ip="170.15.219.26" src_port="52039"/>
      <filter dst_ip="174.153.30.48" dst_port="80" src_ip="170.15.219.26" src_port="52038"/>
      <filter dst_ip="215.173.86.10" dst_port="80" src_ip="170.15.219.26" src_port="52015"/>
    </slice>
    <from sec="1241499668" usec="0"/>
    <to sec="1241499806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.10.234.26"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.221.21.27"/>
    </slice>
    <from sec="1241500240" usec="0"/>
    <to sec="1241500248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.46.27"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.165.82.27"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.6.151.27"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.5.175.27"/>
    </slice>
    <from sec="1241499677" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.75.177.27"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241499806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.208.27"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.2.224.27"/>
    </slice>
    <from sec="1241500173" usec="0"/>
    <to sec="1241500333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.164.16.28"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.101.156.28"/>
    </slice>
    <from sec="1241500103" usec="0"/>
    <to sec="1241500120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.27.170.28"/>
    </slice>
    <from sec="1241500233" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2298{
style=filled;
color=gray75;
13110[label="193.5.194.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20937[label="193.5.194.28;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2298[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.5.194.28:80, 170.15.186.25:1916}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1916: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13110--20937[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.186.25" dst_port="1916" src_ip="193.5.194.28" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.167.204.28"/>
    </slice>
    <from sec="1241500330" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.229.28"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.104.84.29"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2302{
style=filled;
color=gray75;
13127[label="215.171.84.29;8pkt 8fpkt", shape=pentagon, color=darkviolet];
20949[label="215.171.84.29;8pkt 8fpkt", shape=invtriangle, color=brown];
stat2302[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.171.84.29:*, 215.66.219.235:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62729: (6.25%)&lt;BR/&gt; 62694: (6.25%)&lt;BR/&gt; 62686: (6.25%)&lt;BR/&gt; 62670: (6.25%)&lt;BR/&gt; 62669: (6.25%)&gt;];
}
13127--20949[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" src_ip="215.171.84.29"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2303{
style=filled;
color=gray75;
13128[label="55.242.87.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20950[label="55.242.87.29;1pkt 1fpkt", shape=invtriangle, color=brown];
26026[label="55.242.87.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2303[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.242.87.29:1111, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1111: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13128--20950[label="1;1pkt 1fpkt"];
13128--26026[label="1;1pkt 1fpkt"];
20950--26026[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="55.242.87.29" src_port="1111"/>
    </slice>
    <from sec="1241500114" usec="0"/>
    <to sec="1241500144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.173.29"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.100.176.29"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.86.187.29"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2307{
style=filled;
color=gray75;
13149[label="53.117.199.29;16pkt 16fpkt", shape=pentagon, color=darkviolet];
20965[label="53.117.199.29;16pkt 16fpkt", shape=invtriangle, color=brown];
stat2307[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.117.199.29:*, 134.73.16.40:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50972: (3.125%)&lt;BR/&gt; 50403: (3.125%)&lt;BR/&gt; 50396: (3.125%)&lt;BR/&gt; 50394: (3.125%)&gt;];
}
13149--20965[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.16.40" dst_port="25" src_ip="53.117.199.29"/>
    </slice>
    <from sec="1241499973" usec="0"/>
    <to sec="1241500038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.1.238.29"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2309{
style=filled;
color=gray75;
13155[label="205.33.242.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20970[label="205.33.242.29;1pkt 1fpkt", shape=invtriangle, color=brown];
26037[label="205.33.242.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2309[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.33.242.29:7489, 215.66.219.234:63518}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63518: (50%)&lt;BR/&gt; 7489: (50%)&gt;];
}
13155--20970[label="1;1pkt 1fpkt"];
13155--26037[label="1;1pkt 1fpkt"];
20970--26037[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.234" dst_port="63518" src_ip="205.33.242.29" src_port="7489"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.104.34.30"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.52.103.30"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241499720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2312{
style=filled;
color=gray75;
13192[label="5.208.201.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20990[label="5.208.201.30;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2312[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.208.201.30:10251, 215.66.219.235:62416}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62416: (50%)&lt;BR/&gt; 10251: (50%)&gt;];
}
13192--20990[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62416" src_ip="5.208.201.30" src_port="10251"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.82.206.30"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.67.235.30"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.87.116.31"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241499811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.146.31"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.10.32"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2318{
style=filled;
color=gray75;
13234[label="214.38.71.32;40pkt 40fpkt", shape=pentagon, color=darkviolet];
21020[label="214.38.71.32;40pkt 40fpkt", shape=invtriangle, color=brown];
stat2318[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.38.71.32:5407, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5407: (50%)&lt;BR/&gt; 59805: (1.25%)&lt;BR/&gt; 57922: (1.25%)&lt;BR/&gt; 57900: (1.25%)&lt;BR/&gt; 56291: (1.25%)&gt;];
}
13234--21020[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="214.38.71.32" src_port="5407"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.19.161.32"/>
    </slice>
    <from sec="1241499996" usec="0"/>
    <to sec="1241500082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2320{
style=filled;
color=gray75;
13247[label="193.5.194.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21029[label="193.5.194.32;1pkt 1fpkt", shape=invtriangle, color=brown];
26067[label="193.5.194.32;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2320[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.5.194.32:80, 170.15.186.44:50467}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50467: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13247--21029[label="1;1pkt 1fpkt"];
13247--26067[label="1;1pkt 1fpkt"];
21029--26067[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.186.44" dst_port="50467" src_ip="193.5.194.32" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.135.202.32"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.8.7.33"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.138.29.33"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.120.105.33"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.111.132.33"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.86.189.33"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.69.33.34"/>
    </slice>
    <from sec="1241499781" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2328{
style=filled;
color=gray75;
13306[label="194.68.82.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21073[label="194.68.82.34;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2328[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.68.82.34:80, 215.66.219.235:61835}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61835: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13306--21073[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="61835" src_ip="194.68.82.34" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.27.162.34"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2330{
style=filled;
color=gray75;
480[label="170.15.19.148;d;1095pkt 1095fpkt", shape=diamond, color=yellow];
1756[label="68.3.212.252;s;4pkt 4fpkt", shape=diamond, color=yellow];
5466[label="194.214.158.97;s;17pkt 17fpkt", shape=diamond, color=yellow];
6233[label="8.6.222.164;s;224pkt 224fpkt", shape=diamond, color=yellow];
6997[label="2.161.104.18;s;9pkt 9fpkt", shape=diamond, color=yellow];
7124[label="67.136.88.206;s;25pkt 25fpkt", shape=diamond, color=yellow];
7458[label="134.73.27.67;d;16pkt 16fpkt", shape=diamond, color=yellow];
7533[label="170.15.88.134;d;21pkt 21fpkt", shape=diamond, color=yellow];
7580[label="170.15.136.205;d;7pkt 7fpkt", shape=diamond, color=yellow];
7901[label="2.160.60.161;s;25pkt 25fpkt", shape=diamond, color=yellow];
8373[label="41.213.126.12;s;2pkt 2fpkt", shape=diamond, color=yellow];
9282[label="172.204.214.221;d;3pkt 3fpkt", shape=diamond, color=yellow];
9368[label="172.204.237.34;d;6pkt 6fpkt", shape=diamond, color=yellow];
9398[label="204.87.177.175;s;13pkt 13fpkt", shape=diamond, color=yellow];
9459[label="12.116.184.19;s;20pkt 20fpkt", shape=diamond, color=yellow];
9491[label="172.204.236.235;d;6pkt 6fpkt", shape=diamond, color=yellow];
9492[label="41.150.227.0;s;18pkt 18fpkt", shape=diamond, color=yellow];
9768[label="68.3.212.252;s;4pkt 4fpkt", shape=hexagon, color=black];
10606[label="8.6.222.164;s;86pkt 86fpkt", shape=hexagon, color=black];
11666[label="12.116.184.19;s;20pkt 20fpkt", shape=hexagon, color=black];
11978[label="41.150.227.0;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12143[label="45.140.244.4;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12230[label="88.203.208.6;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12371[label="3.200.168.9;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12488[label="41.213.126.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12573[label="35.189.179.14;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12615[label="67.136.10.16;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12711[label="2.161.104.18;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12759[label="12.116.184.19;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12954[label="2.162.240.24;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13003[label="204.144.38.26;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13099[label="2.161.145.28;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13161[label="3.162.18.30;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13190[label="194.214.190.30;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13199[label="2.163.5.31;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13216[label="3.200.220.31;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13332[label="41.150.227.34;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13626[label="201.160.161.43;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14018[label="12.115.36.56;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14106[label="195.143.59.59;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14212[label="12.112.40.62;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14325[label="12.115.66.65;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14337[label="12.115.117.65;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14371[label="2.162.116.66;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14524[label="9.227.25.70;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14975[label="206.4.208.82;10pkt 10fpkt", shape=pentagon, color=darkviolet];
15090[label="47.150.228.85;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15475[label="67.137.45.97;14pkt 14fpkt", shape=pentagon, color=darkviolet];
15490[label="194.214.158.97;17pkt 17fpkt", shape=pentagon, color=darkviolet];
15944[label="194.220.228.109;6pkt 6fpkt", shape=pentagon, color=darkviolet];
16172[label="205.90.41.117;6pkt 6fpkt", shape=pentagon, color=darkviolet];
16219[label="88.203.224.118;6pkt 6fpkt", shape=pentagon, color=darkviolet];
16283[label="13.195.214.120;7pkt 7fpkt", shape=pentagon, color=darkviolet];
16312[label="9.225.203.121;6pkt 6fpkt", shape=pentagon, color=darkviolet];
16373[label="214.186.32.124;6pkt 6fpkt", shape=pentagon, color=darkviolet];
16495[label="68.0.130.128;7pkt 7fpkt", shape=pentagon, color=darkviolet];
17029[label="13.195.44.143;13pkt 13fpkt", shape=pentagon, color=darkviolet];
17162[label="9.224.170.146;7pkt 7fpkt", shape=pentagon, color=darkviolet];
17325[label="69.116.88.151;19pkt 19fpkt", shape=pentagon, color=darkviolet];
17418[label="41.213.113.154;9pkt 9fpkt", shape=pentagon, color=darkviolet];
17428[label="9.228.193.154;13pkt 13fpkt", shape=pentagon, color=darkviolet];
17871[label="204.144.13.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18127[label="9.227.6.177;10pkt 10fpkt", shape=pentagon, color=darkviolet];
18240[label="88.203.229.180;8pkt 8fpkt", shape=pentagon, color=darkviolet];
18448[label="12.114.235.187;6pkt 6fpkt", shape=pentagon, color=darkviolet];
18533[label="201.165.18.191;6pkt 6fpkt", shape=pentagon, color=darkviolet];
18542[label="204.109.130.191;21pkt 21fpkt", shape=pentagon, color=darkviolet];
18889[label="13.195.244.203;12pkt 12fpkt", shape=pentagon, color=darkviolet];
18948[label="67.136.88.206;25pkt 25fpkt", shape=pentagon, color=darkviolet];
19176[label="69.86.60.214;6pkt 6fpkt", shape=pentagon, color=darkviolet];
19252[label="9.228.44.217;6pkt 6fpkt", shape=pentagon, color=darkviolet];
19549[label="192.138.160.230;6pkt 6fpkt", shape=pentagon, color=darkviolet];
19649[label="88.203.2.235;8pkt 8fpkt", shape=pentagon, color=darkviolet];
20092[label="2.163.61.253;7pkt 7fpkt", shape=pentagon, color=darkviolet];
20180[label="41.150.227.0;9pkt 9fpkt", shape=invtriangle, color=brown];
20288[label="45.140.244.4;5pkt 5fpkt", shape=invtriangle, color=brown];
20350[label="88.203.208.6;11pkt 11fpkt", shape=invtriangle, color=brown];
20443[label="3.200.168.9;6pkt 6fpkt", shape=invtriangle, color=brown];
20607[label="67.136.10.16;7pkt 7fpkt", shape=invtriangle, color=brown];
20668[label="2.161.104.18;9pkt 9fpkt", shape=invtriangle, color=brown];
20704[label="12.116.184.19;20pkt 20fpkt", shape=invtriangle, color=brown];
20872[label="204.144.38.26;12pkt 12fpkt", shape=invtriangle, color=brown];
20996[label="2.163.5.31;9pkt 9fpkt", shape=invtriangle, color=brown];
21010[label="3.200.220.31;11pkt 11fpkt", shape=invtriangle, color=brown];
21091[label="41.150.227.34;3pkt 3fpkt", shape=invtriangle, color=brown];
21278[label="201.160.161.43;6pkt 6fpkt", shape=invtriangle, color=brown];
21591[label="195.143.59.59;8pkt 8fpkt", shape=invtriangle, color=brown];
21669[label="12.112.40.62;6pkt 6fpkt", shape=invtriangle, color=brown];
21748[label="12.115.66.65;9pkt 9fpkt", shape=invtriangle, color=brown];
21758[label="12.115.117.65;6pkt 6fpkt", shape=invtriangle, color=brown];
21782[label="2.162.116.66;9pkt 9fpkt", shape=invtriangle, color=brown];
21876[label="9.227.25.70;6pkt 6fpkt", shape=invtriangle, color=brown];
22172[label="206.4.208.82;10pkt 10fpkt", shape=invtriangle, color=brown];
22252[label="47.150.228.85;6pkt 6fpkt", shape=invtriangle, color=brown];
22500[label="67.137.45.97;14pkt 14fpkt", shape=invtriangle, color=brown];
22510[label="194.214.158.97;17pkt 17fpkt", shape=invtriangle, color=brown];
22808[label="194.220.228.109;6pkt 6fpkt", shape=invtriangle, color=brown];
22979[label="88.203.224.118;6pkt 6fpkt", shape=invtriangle, color=brown];
23018[label="13.195.214.120;7pkt 7fpkt", shape=invtriangle, color=brown];
23036[label="9.225.203.121;6pkt 6fpkt", shape=invtriangle, color=brown];
23078[label="214.186.32.124;6pkt 6fpkt", shape=invtriangle, color=brown];
23162[label="68.0.130.128;7pkt 7fpkt", shape=invtriangle, color=brown];
23504[label="13.195.44.143;13pkt 13fpkt", shape=invtriangle, color=brown];
23590[label="9.224.170.146;7pkt 7fpkt", shape=invtriangle, color=brown];
23707[label="69.116.88.151;19pkt 19fpkt", shape=invtriangle, color=brown];
23760[label="41.213.113.154;9pkt 9fpkt", shape=invtriangle, color=brown];
23766[label="9.228.193.154;13pkt 13fpkt", shape=invtriangle, color=brown];
24057[label="204.144.13.169;2pkt 2fpkt", shape=invtriangle, color=brown];
24224[label="9.227.6.177;10pkt 10fpkt", shape=invtriangle, color=brown];
24295[label="88.203.229.180;8pkt 8fpkt", shape=invtriangle, color=brown];
24440[label="12.114.235.187;6pkt 6fpkt", shape=invtriangle, color=brown];
24502[label="201.165.18.191;6pkt 6fpkt", shape=invtriangle, color=brown];
24507[label="204.109.130.191;21pkt 21fpkt", shape=invtriangle, color=brown];
24754[label="13.195.244.203;12pkt 12fpkt", shape=invtriangle, color=brown];
24787[label="67.136.88.206;25pkt 25fpkt", shape=invtriangle, color=brown];
25247[label="88.203.2.235;8pkt 8fpkt", shape=invtriangle, color=brown];
25661[label="45.140.244.4;5pkt 5fpkt", shape=invhouse, color=bisque];
25692[label="88.203.208.6;10pkt 10fpkt", shape=invhouse, color=bisque];
25846[label="67.136.10.16;7pkt 7fpkt", shape=invhouse, color=bisque];
25987[label="204.144.38.26;12pkt 12fpkt", shape=invhouse, color=bisque];
26057[label="3.200.220.31;11pkt 11fpkt", shape=invhouse, color=bisque];
26353[label="195.143.59.59;8pkt 8fpkt", shape=invhouse, color=bisque];
26439[label="12.115.66.65;9pkt 9fpkt", shape=invhouse, color=bisque];
26444[label="12.115.117.65;6pkt 6fpkt", shape=invhouse, color=bisque];
26513[label="9.227.25.70;6pkt 6fpkt", shape=invhouse, color=bisque];
26670[label="206.4.208.82;10pkt 10fpkt", shape=invhouse, color=bisque];
26872[label="194.214.158.97;17pkt 17fpkt", shape=invhouse, color=bisque];
27045[label="194.220.228.109;6pkt 6fpkt", shape=invhouse, color=bisque];
27141[label="88.203.224.118;6pkt 6fpkt", shape=invhouse, color=bisque];
27167[label="13.195.214.120;7pkt 7fpkt", shape=invhouse, color=bisque];
27176[label="9.225.203.121;6pkt 6fpkt", shape=invhouse, color=bisque];
27249[label="68.0.130.128;7pkt 7fpkt", shape=invhouse, color=bisque];
27499[label="9.224.170.146;7pkt 7fpkt", shape=invhouse, color=bisque];
27593[label="9.228.193.154;13pkt 13fpkt", shape=invhouse, color=bisque];
27747[label="204.144.13.169;2pkt 2fpkt", shape=invhouse, color=bisque];
27972[label="12.114.235.187;6pkt 6fpkt", shape=invhouse, color=bisque];
28009[label="201.165.18.191;6pkt 6fpkt", shape=invhouse, color=bisque];
28151[label="13.195.244.203;12pkt 12fpkt", shape=invhouse, color=bisque];
28444[label="88.203.2.235;8pkt 8fpkt", shape=invhouse, color=bisque];
stat2330[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.15.19.148:80}[78.047%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8193%)&lt;BR/&gt; 25: (1.01199%)&lt;BR/&gt; 1349: (0.187406%)&lt;BR/&gt; 1074: (0.187406%)&lt;BR/&gt; 1365: (0.168666%)&gt;];
}
480--1756[label="0.75;3pkt 3fpkt"];
480--5466[label="0.941176;16pkt 16fpkt"];
480--6233[label="0.00446429;1pkt 1fpkt"];
480--6997[label="0.888889;8pkt 8fpkt"];
480--7124[label="0.96;24pkt 24fpkt"];
480--7901[label="1;25pkt 25fpkt"];
480--9398[label="0.923077;12pkt 12fpkt"];
480--9459[label="0.95;19pkt 19fpkt"];
480--9768[label="0.75;3pkt 3fpkt"];
480--10606[label="0.0116279;1pkt 1fpkt"];
480--11666[label="0.95;19pkt 19fpkt"];
480--12143[label="1;5pkt 5fpkt"];
480--12230[label="0.9;9pkt 9fpkt"];
480--12371[label="1;5pkt 5fpkt"];
480--12573[label="1;6pkt 6fpkt"];
480--12615[label="1;7pkt 7fpkt"];
480--12711[label="0.888889;8pkt 8fpkt"];
480--12759[label="0.95;19pkt 19fpkt"];
480--12954[label="1;6pkt 6fpkt"];
480--13003[label="1;12pkt 12fpkt"];
480--13099[label="1;6pkt 6fpkt"];
480--13161[label="1;7pkt 7fpkt"];
480--13190[label="1;6pkt 6fpkt"];
480--13199[label="1;9pkt 9fpkt"];
480--13216[label="1;11pkt 11fpkt"];
480--13316[label="0.391304;9pkt 9fpkt"];
480--13626[label="1;6pkt 6fpkt"];
480--14018[label="1;7pkt 7fpkt"];
480--14106[label="1;8pkt 8fpkt"];
480--14212[label="1;6pkt 6fpkt"];
480--14325[label="1;9pkt 9fpkt"];
480--14337[label="1;6pkt 6fpkt"];
480--14371[label="1;9pkt 9fpkt"];
480--14524[label="1;6pkt 6fpkt"];
480--14975[label="1;10pkt 10fpkt"];
480--15090[label="1;6pkt 6fpkt"];
480--15475[label="1;14pkt 14fpkt"];
480--15490[label="0.941176;16pkt 16fpkt"];
480--15944[label="1;6pkt 6fpkt"];
480--16172[label="1;6pkt 6fpkt"];
480--16219[label="1;6pkt 6fpkt"];
480--16312[label="1;6pkt 6fpkt"];
480--16373[label="1;6pkt 6fpkt"];
480--16495[label="1;7pkt 7fpkt"];
480--17029[label="0.923077;12pkt 12fpkt"];
480--17162[label="1;7pkt 7fpkt"];
480--17325[label="0.947368;18pkt 18fpkt"];
480--17418[label="1;9pkt 9fpkt"];
480--17428[label="1;13pkt 13fpkt"];
480--17871[label="1;2pkt 2fpkt"];
480--18009[label="0.0025974;1pkt 1fpkt"];
480--18127[label="1;10pkt 10fpkt"];
480--18240[label="1;8pkt 8fpkt"];
480--18448[label="1;6pkt 6fpkt"];
480--18533[label="1;6pkt 6fpkt"];
480--18542[label="1;21pkt 21fpkt"];
480--18889[label="1;12pkt 12fpkt"];
480--18948[label="0.96;24pkt 24fpkt"];
480--19176[label="1;6pkt 6fpkt"];
480--19252[label="1;6pkt 6fpkt"];
480--19549[label="0.5;3pkt 3fpkt"];
480--19649[label="0.75;6pkt 6fpkt"];
480--20092[label="1;7pkt 7fpkt"];
480--20288[label="1;5pkt 5fpkt"];
480--20350[label="0.818182;9pkt 9fpkt"];
480--20443[label="1;6pkt 6fpkt"];
480--20607[label="1;7pkt 7fpkt"];
480--20668[label="0.888889;8pkt 8fpkt"];
480--20704[label="0.95;19pkt 19fpkt"];
480--20872[label="1;12pkt 12fpkt"];
480--20996[label="1;9pkt 9fpkt"];
480--21010[label="1;11pkt 11fpkt"];
480--21082[label="0.391304;9pkt 9fpkt"];
480--21278[label="1;6pkt 6fpkt"];
480--21591[label="1;8pkt 8fpkt"];
480--21669[label="1;6pkt 6fpkt"];
480--21748[label="1;9pkt 9fpkt"];
480--21758[label="1;6pkt 6fpkt"];
480--21782[label="1;9pkt 9fpkt"];
480--21876[label="1;6pkt 6fpkt"];
480--22172[label="1;10pkt 10fpkt"];
480--22252[label="1;6pkt 6fpkt"];
480--22500[label="1;14pkt 14fpkt"];
480--22510[label="0.941176;16pkt 16fpkt"];
480--22808[label="1;6pkt 6fpkt"];
480--22979[label="1;6pkt 6fpkt"];
480--23036[label="1;6pkt 6fpkt"];
480--23078[label="1;6pkt 6fpkt"];
480--23162[label="1;7pkt 7fpkt"];
480--23504[label="0.923077;12pkt 12fpkt"];
480--23590[label="1;7pkt 7fpkt"];
480--23707[label="0.947368;18pkt 18fpkt"];
480--23760[label="1;9pkt 9fpkt"];
480--23766[label="1;13pkt 13fpkt"];
480--24057[label="1;2pkt 2fpkt"];
480--24147[label="0.0025974;1pkt 1fpkt"];
480--24224[label="1;10pkt 10fpkt"];
480--24295[label="1;8pkt 8fpkt"];
480--24440[label="1;6pkt 6fpkt"];
480--24502[label="1;6pkt 6fpkt"];
480--24507[label="1;21pkt 21fpkt"];
480--24754[label="1;12pkt 12fpkt"];
480--24787[label="0.96;24pkt 24fpkt"];
480--25247[label="0.75;6pkt 6fpkt"];
480--25661[label="1;5pkt 5fpkt"];
480--25692[label="0.9;9pkt 9fpkt"];
480--25846[label="1;7pkt 7fpkt"];
480--25987[label="1;12pkt 12fpkt"];
480--26057[label="1;11pkt 11fpkt"];
480--26353[label="1;8pkt 8fpkt"];
480--26439[label="1;9pkt 9fpkt"];
480--26444[label="1;6pkt 6fpkt"];
480--26513[label="1;6pkt 6fpkt"];
480--26670[label="1;10pkt 10fpkt"];
480--26872[label="0.941176;16pkt 16fpkt"];
480--27045[label="1;6pkt 6fpkt"];
480--27141[label="1;6pkt 6fpkt"];
480--27176[label="1;6pkt 6fpkt"];
480--27249[label="1;7pkt 7fpkt"];
480--27499[label="1;7pkt 7fpkt"];
480--27593[label="1;13pkt 13fpkt"];
480--27747[label="1;2pkt 2fpkt"];
480--27804[label="0.0025974;1pkt 1fpkt"];
480--27972[label="1;6pkt 6fpkt"];
480--28009[label="1;6pkt 6fpkt"];
480--28151[label="1;12pkt 12fpkt"];
480--28444[label="0.75;6pkt 6fpkt"];
1756--9768[label="1;4pkt 4fpkt"];
5466--15490[label="1;17pkt 17fpkt"];
5466--22510[label="1;17pkt 17fpkt"];
5466--26872[label="1;17pkt 17fpkt"];
6233--7224[label="0.015873;1pkt 1fpkt"];
6233--7248[label="0.00446429;1pkt 1fpkt"];
6233--7281[label="0.0128205;1pkt 1fpkt"];
6233--7297[label="0.0151515;1pkt 1fpkt"];
6233--7428[label="0.00694444;1pkt 1fpkt"];
6233--7458[label="0.0625;1pkt 1fpkt"];
6233--7533[label="0.047619;1pkt 1fpkt"];
6233--7548[label="0.0196078;1pkt 1fpkt"];
6233--7580[label="0.142857;1pkt 1fpkt"];
6233--8422[label="0.02;1pkt 1fpkt"];
6233--8848[label="0.0192308;1pkt 1fpkt"];
6233--8999[label="0.0188679;1pkt 1fpkt"];
6233--9080[label="0.0357143;1pkt 1fpkt"];
6233--9491[label="0.166667;1pkt 1fpkt"];
6233--10606[label="1;86pkt 86fpkt"];
6997--12711[label="1;9pkt 9fpkt"];
6997--20668[label="1;9pkt 9fpkt"];
7124--18948[label="1;25pkt 25fpkt"];
7124--24787[label="1;25pkt 25fpkt"];
7458--10606[label="0.0625;1pkt 1fpkt"];
7458--16283[label="0.857143;6pkt 6fpkt"];
7458--23018[label="0.857143;6pkt 6fpkt"];
7458--27167[label="0.857143;6pkt 6fpkt"];
7533--7852[label="0.0588235;1pkt 1fpkt"];
7533--10606[label="0.047619;1pkt 1fpkt"];
7580--8373[label="1;2pkt 2fpkt"];
7580--12488[label="1;2pkt 2fpkt"];
7580--19549[label="0.333333;2pkt 2fpkt"];
8373--12488[label="1;2pkt 2fpkt"];
9282--9492[label="0.333333;1pkt 1fpkt"];
9282--20180[label="0.333333;1pkt 1fpkt"];
9368--9492[label="0.166667;1pkt 1fpkt"];
9459--11666[label="1;20pkt 20fpkt"];
9459--12759[label="1;20pkt 20fpkt"];
9459--20704[label="1;20pkt 20fpkt"];
9491--9492[label="0.333333;2pkt 2fpkt"];
9491--13332[label="0.333333;1pkt 1fpkt"];
9491--21091[label="0.333333;1pkt 1fpkt"];
9492--11978[label="1;8pkt 8fpkt"];
9492--20180[label="1;9pkt 9fpkt"];
11666--12759[label="1;20pkt 20fpkt"];
11666--20704[label="1;20pkt 20fpkt"];
11978--20180[label="1;8pkt 8fpkt"];
12143--20288[label="1;5pkt 5fpkt"];
12143--25661[label="1;5pkt 5fpkt"];
12230--20350[label="1;10pkt 10fpkt"];
12230--25692[label="1;10pkt 10fpkt"];
12371--20443[label="1;5pkt 5fpkt"];
12615--20607[label="1;7pkt 7fpkt"];
12615--25846[label="1;7pkt 7fpkt"];
12711--20668[label="1;9pkt 9fpkt"];
12759--20704[label="1;20pkt 20fpkt"];
13003--20872[label="1;12pkt 12fpkt"];
13003--25987[label="1;12pkt 12fpkt"];
13199--20996[label="1;9pkt 9fpkt"];
13216--21010[label="1;11pkt 11fpkt"];
13216--26057[label="1;11pkt 11fpkt"];
13332--21091[label="1;3pkt 3fpkt"];
13626--21278[label="1;6pkt 6fpkt"];
14106--21591[label="1;8pkt 8fpkt"];
14106--26353[label="1;8pkt 8fpkt"];
14212--21669[label="1;6pkt 6fpkt"];
14325--21748[label="1;9pkt 9fpkt"];
14325--26439[label="1;9pkt 9fpkt"];
14337--21758[label="1;6pkt 6fpkt"];
14337--26444[label="1;6pkt 6fpkt"];
14371--21782[label="1;9pkt 9fpkt"];
14524--21876[label="1;6pkt 6fpkt"];
14524--26513[label="1;6pkt 6fpkt"];
14975--22172[label="1;10pkt 10fpkt"];
14975--26670[label="1;10pkt 10fpkt"];
15090--22252[label="1;6pkt 6fpkt"];
15475--22500[label="1;14pkt 14fpkt"];
15490--22510[label="1;17pkt 17fpkt"];
15490--26872[label="1;17pkt 17fpkt"];
15944--22808[label="1;6pkt 6fpkt"];
15944--27045[label="1;6pkt 6fpkt"];
16219--22979[label="1;6pkt 6fpkt"];
16219--27141[label="1;6pkt 6fpkt"];
16283--23018[label="1;7pkt 7fpkt"];
16283--27167[label="1;7pkt 7fpkt"];
16312--23036[label="1;6pkt 6fpkt"];
16312--27176[label="1;6pkt 6fpkt"];
16373--23078[label="1;6pkt 6fpkt"];
16495--23162[label="1;7pkt 7fpkt"];
16495--27249[label="1;7pkt 7fpkt"];
17029--23504[label="1;13pkt 13fpkt"];
17162--23590[label="1;7pkt 7fpkt"];
17162--27499[label="1;7pkt 7fpkt"];
17325--23707[label="1;19pkt 19fpkt"];
17418--23760[label="1;9pkt 9fpkt"];
17428--23766[label="1;13pkt 13fpkt"];
17428--27593[label="1;13pkt 13fpkt"];
17871--24057[label="1;2pkt 2fpkt"];
17871--27747[label="1;2pkt 2fpkt"];
18127--24224[label="1;10pkt 10fpkt"];
18240--24295[label="1;8pkt 8fpkt"];
18448--24440[label="1;6pkt 6fpkt"];
18448--27972[label="1;6pkt 6fpkt"];
18533--24502[label="1;6pkt 6fpkt"];
18533--28009[label="1;6pkt 6fpkt"];
18542--24507[label="1;21pkt 21fpkt"];
18889--24754[label="1;12pkt 12fpkt"];
18889--28151[label="1;12pkt 12fpkt"];
18948--24787[label="1;25pkt 25fpkt"];
19649--25247[label="1;8pkt 8fpkt"];
19649--28444[label="1;8pkt 8fpkt"];
20288--25661[label="1;5pkt 5fpkt"];
20350--25692[label="1;10pkt 10fpkt"];
20607--25846[label="1;7pkt 7fpkt"];
20872--25987[label="1;12pkt 12fpkt"];
21010--26057[label="1;11pkt 11fpkt"];
21591--26353[label="1;8pkt 8fpkt"];
21748--26439[label="1;9pkt 9fpkt"];
21758--26444[label="1;6pkt 6fpkt"];
21876--26513[label="1;6pkt 6fpkt"];
22172--26670[label="1;10pkt 10fpkt"];
22510--26872[label="1;17pkt 17fpkt"];
22808--27045[label="1;6pkt 6fpkt"];
22979--27141[label="1;6pkt 6fpkt"];
23018--27167[label="1;7pkt 7fpkt"];
23036--27176[label="1;6pkt 6fpkt"];
23162--27249[label="1;7pkt 7fpkt"];
23590--27499[label="1;7pkt 7fpkt"];
23766--27593[label="1;13pkt 13fpkt"];
24057--27747[label="1;2pkt 2fpkt"];
24440--27972[label="1;6pkt 6fpkt"];
24502--28009[label="1;6pkt 6fpkt"];
24754--28151[label="1;12pkt 12fpkt"];
25247--28444[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.148" dst_port="80"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.36.17.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2332{
style=filled;
color=gray75;
13346[label="66.161.61.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21099[label="66.161.61.35;1pkt 1fpkt", shape=invtriangle, color=brown];
26109[label="66.161.61.35;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2332[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.161.61.35:3598, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3598: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13346--21099[label="1;1pkt 1fpkt"];
13346--26109[label="1;1pkt 1fpkt"];
21099--26109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="66.161.61.35" src_port="3598"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.109.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.141.109.35"/>
    </slice>
    <from sec="1241500280" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2335{
style=filled;
color=gray75;
13356[label="215.176.121.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21106[label="215.176.121.35;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2335[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.176.121.35:49668, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49668: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13356--21106[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="215.176.121.35" src_port="49668"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.135.202.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.220.35"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.234.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.6.36"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2340{
style=filled;
color=gray75;
13376[label="12.118.51.36;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21120[label="12.118.51.36;2pkt 2fpkt", shape=invtriangle, color=brown];
26119[label="12.118.51.36;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2340[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.118.51.36:80, 170.15.187.16:54554}[50%]&lt;BR/&gt;{12.118.51.36:80, 170.15.187.16:54555}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54555: (25%)&lt;BR/&gt; 54554: (25%)&gt;];
}
13376--21120[label="1;2pkt 2fpkt"];
13376--26119[label="1;2pkt 2fpkt"];
21120--26119[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.187.16" dst_port="54555" src_ip="12.118.51.36" src_port="80"/>
      <filter dst_ip="170.15.187.16" dst_port="54554" src_ip="12.118.51.36" src_port="80"/>
    </slice>
    <from sec="1241500483" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2341{
style=filled;
color=gray75;
13388[label="52.48.136.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21127[label="52.48.136.36;1pkt 1fpkt", shape=invtriangle, color=brown];
26124[label="52.48.136.36;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2341[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.48.136.36:1432, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1432: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13388--21127[label="1;1pkt 1fpkt"];
13388--26124[label="1;1pkt 1fpkt"];
21127--26124[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="52.48.136.36" src_port="1432"/>
    </slice>
    <from sec="1241500301" usec="0"/>
    <to sec="1241500330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.128.142.36"/>
    </slice>
    <from sec="1241500120" usec="0"/>
    <to sec="1241500323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2343{
style=filled;
color=gray75;
13396[label="170.15.188.36;53pkt 53fpkt", shape=pentagon, color=darkviolet];
21132[label="170.15.188.36;53pkt 53fpkt", shape=invtriangle, color=brown];
26126[label="170.15.188.36;53pkt 53fpkt", shape=invhouse, color=bisque];
stat2343[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.188.36:*, 87.225.188.128:80}[62.2642%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.3396%)&lt;BR/&gt; 3950: (2.83019%)&lt;BR/&gt; 58811: (0.943396%)&lt;BR/&gt; 58810: (0.943396%)&lt;BR/&gt; 58809: (0.943396%)&gt;];
}
13396--21132[label="1;53pkt 53fpkt"];
13396--26126[label="1;53pkt 53fpkt"];
21132--26126[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="87.225.188.128" dst_port="80" src_ip="170.15.188.36"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2344{
style=filled;
color=gray75;
13399[label="214.163.234.36;16pkt 16fpkt", shape=pentagon, color=darkviolet];
21134[label="214.163.234.36;16pkt 16fpkt", shape=invtriangle, color=brown];
26128[label="214.163.234.36;16pkt 16fpkt", shape=invhouse, color=bisque];
stat2344[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.163.234.36:40055, *:*}[50%]&lt;BR/&gt;{214.163.234.36:*, *:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40055: (25%)&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 6346: (9.375%)&lt;BR/&gt; 32004: (3.125%)&lt;BR/&gt; 31030: (3.125%)&gt;];
}
13399--21134[label="1;16pkt 16fpkt"];
13399--26128[label="1;16pkt 16fpkt"];
21134--26128[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="214.163.234.36" src_port="40055"/>
      <filter dst_port="80" src_ip="214.163.234.36"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2345{
style=filled;
color=gray75;
13406[label="70.237.6.37;5pkt 5fpkt", shape=pentagon, color=darkviolet];
21137[label="70.237.6.37;5pkt 5fpkt", shape=invtriangle, color=brown];
26130[label="70.237.6.37;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2345[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.237.6.37:80, 170.15.186.73:3499}[20%]&lt;BR/&gt;{70.237.6.37:80, 170.15.186.73:3512}[20%]&lt;BR/&gt;{70.237.6.37:80, 170.15.186.73:3522}[20%]&lt;BR/&gt;{70.237.6.37:80, 170.15.186.73:3523}[20%]&lt;BR/&gt;{70.237.6.37:80, 170.15.186.73:3525}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3525: (10%)&lt;BR/&gt; 3523: (10%)&lt;BR/&gt; 3522: (10%)&lt;BR/&gt; 3512: (10%)&gt;];
}
13406--21137[label="1;5pkt 5fpkt"];
13406--26130[label="1;5pkt 5fpkt"];
21137--26130[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.186.73" dst_port="3525" src_ip="70.237.6.37" src_port="80"/>
      <filter dst_ip="170.15.186.73" dst_port="3523" src_ip="70.237.6.37" src_port="80"/>
      <filter dst_ip="170.15.186.73" dst_port="3522" src_ip="70.237.6.37" src_port="80"/>
      <filter dst_ip="170.15.186.73" dst_port="3512" src_ip="70.237.6.37" src_port="80"/>
      <filter dst_ip="170.15.186.73" dst_port="3499" src_ip="70.237.6.37" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.116.140.37"/>
    </slice>
    <from sec="1241499754" usec="0"/>
    <to sec="1241499784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.59.174.37"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.39.235.37"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.8.239.37"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.70.254.37"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.214.21.38"/>
    </slice>
    <from sec="1241500321" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.182.91.38"/>
    </slice>
    <from sec="1241499747" usec="0"/>
    <to sec="1241499847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.46.238.38"/>
    </slice>
    <from sec="1241499996" usec="0"/>
    <to sec="1241500175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.149.31.39"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2355{
style=filled;
color=gray75;
13477[label="214.163.52.39;13pkt 13fpkt", shape=pentagon, color=darkviolet];
21186[label="214.163.52.39;13pkt 13fpkt", shape=invtriangle, color=brown];
26147[label="214.163.52.39;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2355[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.163.52.39:*, 202.50.41.163:80}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4615%)&lt;BR/&gt; 123: (7.69231%)&lt;BR/&gt; 60996: (3.84615%)&lt;BR/&gt; 60995: (3.84615%)&lt;BR/&gt; 33346: (3.84615%)&gt;];
}
13477--21186[label="1;13pkt 13fpkt"];
13477--26147[label="1;13pkt 13fpkt"];
21186--26147[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="202.50.41.163" dst_port="80" src_ip="214.163.52.39"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.66.68.39"/>
    </slice>
    <from sec="1241500361" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.32.72.39"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2358{
style=filled;
color=gray75;
13483[label="134.73.100.39;92pkt 92fpkt", shape=pentagon, color=darkviolet];
21190[label="134.73.100.39;92pkt 92fpkt", shape=invtriangle, color=brown];
stat2358[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.100.39:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
13483--21190[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter src_ip="134.73.100.39"/>
    </slice>
    <from sec="1241499634" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.103.182.39"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.42.207.39"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.1.245.39"/>
    </slice>
    <from sec="1241499806" usec="0"/>
    <to sec="1241499834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.51.5.40"/>
    </slice>
    <from sec="1241499736" usec="0"/>
    <to sec="1241500331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2363{
style=filled;
color=gray75;
13516[label="215.176.22.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21210[label="215.176.22.40;2pkt 2fpkt", shape=invtriangle, color=brown];
26161[label="215.176.22.40;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2363[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.176.22.40:80, 214.170.72.217:54823}[50%]&lt;BR/&gt;{215.176.22.40:80, 215.66.219.235:62642}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62642: (25%)&lt;BR/&gt; 54823: (25%)&gt;];
}
13516--21210[label="1;2pkt 2fpkt"];
13516--26161[label="1;2pkt 2fpkt"];
21210--26161[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62642" src_ip="215.176.22.40" src_port="80"/>
      <filter dst_ip="214.170.72.217" dst_port="54823" src_ip="215.176.22.40" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.82.55.40"/>
    </slice>
    <from sec="1241500434" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21537,4.48585,020,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_2365{
style=filled;
color=gray75;
6637[label="128.46.108.40;s;160pkt 160fpkt", shape=diamond, color=yellow];
21213[label="128.46.108.40;168pkt 168fpkt", shape=invtriangle, color=brown];
stat2365[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.46.108.40:0, *:0}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (84.1463%)&lt;BR/&gt; 53: (7.92683%)&lt;BR/&gt; 32768: (0.609756%)&lt;BR/&gt; 63982: (0.304878%)&lt;BR/&gt; 63961: (0.304878%)&gt;];
}
6637--7206[label="0.00625;1pkt 1fpkt"];
6637--7346[label="0.00625;1pkt 1fpkt"];
6637--8216[label="0.00625;1pkt 1fpkt"];
6637--8829[label="0.00625;1pkt 1fpkt"];
6637--8845[label="0.00625;1pkt 1fpkt"];
6637--11896[label="0.00625;1pkt 1fpkt"];
6637--11922[label="0.00625;1pkt 1fpkt"];
6637--21213[label="0.99375;159pkt 159fpkt"];
</description>
    <slice>
      <filter src_ip="128.46.108.40"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.60.121.40"/>
    </slice>
    <from sec="1241500284" usec="0"/>
    <to sec="1241500289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.30.131.40"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.174.40"/>
    </slice>
    <from sec="1241500430" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.233.40"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2370{
style=filled;
color=gray75;
13549[label="66.226.77.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21234[label="66.226.77.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2370[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.226.77.41:12160, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12160: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13549--21234[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="66.226.77.41" src_port="12160"/>
    </slice>
    <from sec="1241499670" usec="0"/>
    <to sec="1241500303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.12.105.41"/>
    </slice>
    <from sec="1241499657" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.93.130.41"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.67.79.42"/>
    </slice>
    <from sec="1241499682" usec="0"/>
    <to sec="1241499778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.64.99.42"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.82.132.42"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2376{
style=filled;
color=gray75;
13603[label="192.244.246.42;3pkt 3fpkt", shape=pentagon, color=darkviolet];
21265[label="192.244.246.42;3pkt 3fpkt", shape=invtriangle, color=brown];
26185[label="192.244.246.42;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2376[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.244.246.42:80, 214.170.72.217:46043}[33.3333%]&lt;BR/&gt;{192.244.246.42:80, 214.170.72.217:55386}[33.3333%]&lt;BR/&gt;{192.244.246.42:80, 214.170.72.217:57442}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57442: (16.6667%)&lt;BR/&gt; 55386: (16.6667%)&lt;BR/&gt; 46043: (16.6667%)&gt;];
}
13603--21265[label="1;3pkt 3fpkt"];
13603--26185[label="1;3pkt 3fpkt"];
21265--26185[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.170.72.217" dst_port="57442" src_ip="192.244.246.42" src_port="80"/>
      <filter dst_ip="214.170.72.217" dst_port="55386" src_ip="192.244.246.42" src_port="80"/>
      <filter dst_ip="214.170.72.217" dst_port="46043" src_ip="192.244.246.42" src_port="80"/>
    </slice>
    <from sec="1241500263" usec="0"/>
    <to sec="1241500269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.26.2.43"/>
    </slice>
    <from sec="1241500392" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.238.32.43"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.59.246.43"/>
    </slice>
    <from sec="1241500114" usec="0"/>
    <to sec="1241500131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.57.93.44"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.19.123.44"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.192.34.45"/>
    </slice>
    <from sec="1241499902" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2383{
style=filled;
color=gray75;
13676[label="2.90.73.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21310[label="2.90.73.45;1pkt 1fpkt", shape=invtriangle, color=brown];
26210[label="2.90.73.45;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2383[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.90.73.45:11758, 215.66.219.235:61834}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61834: (50%)&lt;BR/&gt; 11758: (50%)&gt;];
}
13676--21310[label="1;1pkt 1fpkt"];
13676--26210[label="1;1pkt 1fpkt"];
21310--26210[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="61834" src_ip="2.90.73.45" src_port="11758"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2384{
style=filled;
color=gray75;
13682[label="41.213.116.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21313[label="41.213.116.45;1pkt 1fpkt", shape=invtriangle, color=brown];
26213[label="41.213.116.45;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2384[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.213.116.45:47447, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47447: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13682--21313[label="1;1pkt 1fpkt"];
13682--26213[label="1;1pkt 1fpkt"];
21313--26213[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="41.213.116.45" src_port="47447"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2385{
style=filled;
color=gray75;
13683[label="204.75.128.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21314[label="204.75.128.45;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2385[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.75.128.45:10204, 215.66.219.235:62841}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62841: (50%)&lt;BR/&gt; 10204: (50%)&gt;];
}
13683--21314[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62841" src_ip="204.75.128.45" src_port="10204"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2386{
style=filled;
color=gray75;
13684[label="170.15.130.45;4pkt 4fpkt", shape=pentagon, color=darkviolet];
21315[label="170.15.130.45;4pkt 4fpkt", shape=invtriangle, color=brown];
26214[label="170.15.130.45;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2386[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.130.45:1148, 192.138.216.40:80}[25%]&lt;BR/&gt;{170.15.130.45:1192, 215.173.86.133:80}[25%]&lt;BR/&gt;{170.15.130.45:1134, 192.117.169.182:80}[25%]&lt;BR/&gt;{170.15.130.45:1156, 32.188.33.191:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1192: (12.5%)&lt;BR/&gt; 1156: (12.5%)&lt;BR/&gt; 1148: (12.5%)&lt;BR/&gt; 1134: (12.5%)&gt;];
}
13684--21315[label="1;4pkt 4fpkt"];
13684--26214[label="1;4pkt 4fpkt"];
21315--26214[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="32.188.33.191" dst_port="80" src_ip="170.15.130.45" src_port="1156"/>
      <filter dst_ip="192.117.169.182" dst_port="80" src_ip="170.15.130.45" src_port="1134"/>
      <filter dst_ip="215.173.86.133" dst_port="80" src_ip="170.15.130.45" src_port="1192"/>
      <filter dst_ip="192.138.216.40" dst_port="80" src_ip="170.15.130.45" src_port="1148"/>
    </slice>
    <from sec="1241499678" usec="0"/>
    <to sec="1241499802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.143.161.45"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.210.200.45"/>
    </slice>
    <from sec="1241499879" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.212.45"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.87.59.46"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.86.32.47"/>
    </slice>
    <from sec="1241499850" usec="0"/>
    <to sec="1241499875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2392{
style=filled;
color=gray75;
13753[label="214.163.228.47;25pkt 25fpkt", shape=pentagon, color=darkviolet];
21358[label="214.163.228.47;25pkt 25fpkt", shape=invtriangle, color=brown];
stat2392[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.163.228.47:*, 55.78.232.164:7052}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7052: (12%)&lt;BR/&gt; 30225: (8%)&lt;BR/&gt; 27972: (6%)&lt;BR/&gt; 3317: (6%)&lt;BR/&gt; 29141: (4%)&gt;];
}
13753--21358[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="55.78.232.164" dst_port="7052" src_ip="214.163.228.47"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.142.232.47"/>
    </slice>
    <from sec="1241499635" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.93.8.48"/>
    </slice>
    <from sec="1241499963" usec="0"/>
    <to sec="1241499988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.241.8.48"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.9.48"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.107.38.48"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241500181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.49.97.48"/>
    </slice>
    <from sec="1241500305" usec="0"/>
    <to sec="1241500438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.151.100.48"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2400{
style=filled;
color=gray75;
13771[label="37.3.110.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21371[label="37.3.110.48;1pkt 1fpkt", shape=invtriangle, color=brown];
26243[label="37.3.110.48;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2400[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.3.110.48:1592, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1592: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13771--21371[label="1;1pkt 1fpkt"];
13771--26243[label="1;1pkt 1fpkt"];
21371--26243[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="37.3.110.48" src_port="1592"/>
    </slice>
    <from sec="1241500463" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.46.146.48"/>
    </slice>
    <from sec="1241499718" usec="0"/>
    <to sec="1241500009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2402{
style=filled;
color=gray75;
13780[label="8.176.165.48;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21379[label="8.176.165.48;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2402[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.176.165.48:1793, 215.66.219.235:63560}[50%]&lt;BR/&gt;{8.176.165.48:1807, 215.66.219.235:62276}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63560: (25%)&lt;BR/&gt; 62276: (25%)&lt;BR/&gt; 1807: (25%)&lt;BR/&gt; 1793: (25%)&gt;];
}
13780--21379[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62276" src_ip="8.176.165.48" src_port="1807"/>
      <filter dst_ip="215.66.219.235" dst_port="63560" src_ip="8.176.165.48" src_port="1793"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.128.0.49"/>
    </slice>
    <from sec="1241499853" usec="0"/>
    <to sec="1241499983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.185.95.49"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2405{
style=filled;
color=gray75;
3552[label="148.176.121.49;s;295pkt 295fpkt", shape=diamond, color=yellow];
7337[label="172.204.210.163;d;34pkt 34fpkt", shape=diamond, color=yellow];
7500[label="172.204.250.98;d;204pkt 204fpkt", shape=diamond, color=yellow];
13806[label="148.176.121.49;6pkt 6fpkt", shape=pentagon, color=darkviolet];
21395[label="148.176.121.49;6pkt 6fpkt", shape=invtriangle, color=brown];
26256[label="148.176.121.49;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2405[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.176.121.49:6667, 172.204.250.98:*}[67.5497%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (39.5644%)&lt;BR/&gt; 80: (1.36116%)&lt;BR/&gt; 4480: (1.08893%)&lt;BR/&gt; 1080: (1.08893%)&lt;BR/&gt; 8080: (0.725953%)&gt;];
}
3552--7337[label="0.941176;32pkt 32fpkt"];
3552--7487[label="0.375;15pkt 15fpkt"];
3552--7500[label="1;204pkt 204fpkt"];
3552--13806[label="0.166667;1pkt 1fpkt"];
3552--21395[label="0.166667;1pkt 1fpkt"];
3552--26256[label="0.166667;1pkt 1fpkt"];
7337--13806[label="0.166667;1pkt 1fpkt"];
7337--15089[label="0.0714286;1pkt 1fpkt"];
7337--21395[label="0.166667;1pkt 1fpkt"];
7337--22251[label="0.0714286;1pkt 1fpkt"];
7337--26256[label="0.166667;1pkt 1fpkt"];
13806--21395[label="1;6pkt 6fpkt"];
13806--26256[label="1;6pkt 6fpkt"];
21395--26256[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.250.98" src_ip="148.176.121.49" src_port="6667"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.53.131.49"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.82.134.49"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241499823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.171.169.49"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.179.208.49"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2410{
style=filled;
color=gray75;
13827[label="8.214.7.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21410[label="8.214.7.50;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2410[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.214.7.50:3493, 215.66.219.235:11185}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11185: (50%)&lt;BR/&gt; 3493: (50%)&gt;];
}
13827--21410[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="11185" src_ip="8.214.7.50" src_port="3493"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2411{
style=filled;
color=gray75;
13838[label="160.92.98.50;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21415[label="160.92.98.50;2pkt 2fpkt", shape=invtriangle, color=brown];
26266[label="160.92.98.50;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2411[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.92.98.50:51810, 172.204.181.68:21}[50%]&lt;BR/&gt;{160.92.98.50:51861, 172.204.181.68:21}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 51861: (25%)&lt;BR/&gt; 51810: (25%)&gt;];
}
13838--21415[label="1;2pkt 2fpkt"];
13838--26266[label="1;2pkt 2fpkt"];
21415--26266[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.181.68" dst_port="21" src_ip="160.92.98.50" src_port="51861"/>
      <filter dst_ip="172.204.181.68" dst_port="21" src_ip="160.92.98.50" src_port="51810"/>
    </slice>
    <from sec="1241499642" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2412{
style=filled;
color=gray75;
13840[label="128.46.108.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21417[label="128.46.108.50;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2412[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.46.108.50:0, 34.161.128.177:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
13840--21417[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.161.128.177" src_ip="128.46.108.50"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2413{
style=filled;
color=gray75;
13844[label="32.176.143.50;11pkt 11fpkt", shape=pentagon, color=darkviolet];
21419[label="32.176.143.50;11pkt 11fpkt", shape=invtriangle, color=brown];
26267[label="32.176.143.50;11pkt 11fpkt", shape=invhouse, color=bisque];
stat2413[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.176.143.50:7920, 214.170.72.8:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7920: (50%)&lt;BR/&gt; 2848: (4.54545%)&lt;BR/&gt; 2839: (4.54545%)&lt;BR/&gt; 2822: (4.54545%)&lt;BR/&gt; 2802: (4.54545%)&gt;];
}
13844--21419[label="1;11pkt 11fpkt"];
13844--26267[label="1;11pkt 11fpkt"];
21419--26267[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="214.170.72.8" src_ip="32.176.143.50" src_port="7920"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.83.146.50"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.95.159.50"/>
    </slice>
    <from sec="1241499865" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.238.176.50"/>
    </slice>
    <from sec="1241499916" usec="0"/>
    <to sec="1241499927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.185.209.50"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.208.217.50"/>
    </slice>
    <from sec="1241500433" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.171.255.50"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.29.9.51"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.211.25.51"/>
    </slice>
    <from sec="1241499864" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.66.61.51"/>
    </slice>
    <from sec="1241500442" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.252.90.51"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.71.213.52"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2425{
style=filled;
color=gray75;
13927[label="182.186.247.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21477[label="182.186.247.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2425[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.186.247.52:1788, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1788: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13927--21477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="182.186.247.52" src_port="1788"/>
    </slice>
    <from sec="1241500195" usec="0"/>
    <to sec="1241500259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.164.33.53"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.63.75.53"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.187.202.53"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.162.27.54"/>
    </slice>
    <from sec="1241500036" usec="0"/>
    <to sec="1241500041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.74.103.54"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.56.113.54"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.40.13.55"/>
    </slice>
    <from sec="1241499998" usec="0"/>
    <to sec="1241500163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2433{
style=filled;
color=gray75;
14000[label="8.178.131.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21525[label="8.178.131.55;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2433[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.178.131.55:13855, 215.66.218.52:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13855: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
14000--21525[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.52" dst_port="3127" src_ip="8.178.131.55" src_port="13855"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.250.158.55"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2435{
style=filled;
color=gray75;
5455[label="107.197.132.132;s;97pkt 97fpkt", shape=diamond, color=yellow];
6051[label="215.66.209.96;d;133pkt 133fpkt", shape=diamond, color=yellow];
12219[label="107.197.132.6;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14008[label="162.2.213.55;39pkt 39fpkt", shape=pentagon, color=darkviolet];
20343[label="107.197.132.6;9pkt 9fpkt", shape=invtriangle, color=brown];
21529[label="162.2.213.55;39pkt 39fpkt", shape=invtriangle, color=brown];
stat2435[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.197.132.132:80, 215.66.209.96:*}[42.6036%]&lt;BR/&gt;{*:443, 215.66.209.96:*}[28.9941%]&lt;BR/&gt;{162.2.213.55:443, *:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.6933%)&lt;BR/&gt; 443: (21.7791%)&lt;BR/&gt; 5354: (2.91411%)&lt;BR/&gt; 55526: (0.460123%)&lt;BR/&gt; 55524: (0.460123%)&gt;];
}
5455--6051[label="0.793814;77pkt 77fpkt"];
6051--6350[label="0.0075188;1pkt 1fpkt"];
6051--6648[label="0.0217391;2pkt 2fpkt"];
6051--9504[label="0.0075188;1pkt 1fpkt"];
6051--10624[label="0.0075188;1pkt 1fpkt"];
6051--11672[label="0.0075188;1pkt 1fpkt"];
6051--11718[label="0.0075188;1pkt 1fpkt"];
6051--11792[label="0.0075188;1pkt 1fpkt"];
6051--11838[label="0.0075188;1pkt 1fpkt"];
6051--11868[label="0.0075188;1pkt 1fpkt"];
6051--11875[label="0.0075188;1pkt 1fpkt"];
6051--11884[label="0.0075188;1pkt 1fpkt"];
6051--11897[label="0.0075188;1pkt 1fpkt"];
6051--11903[label="0.0075188;1pkt 1fpkt"];
6051--11909[label="0.0075188;1pkt 1fpkt"];
6051--11917[label="0.0075188;1pkt 1fpkt"];
6051--11928[label="0.0075188;1pkt 1fpkt"];
6051--12219[label="0.111111;1pkt 1fpkt"];
6051--13958[label="0.0075188;1pkt 1fpkt"];
6051--14008[label="0.794872;31pkt 31fpkt"];
6051--15347[label="0.0075188;1pkt 1fpkt"];
6051--20343[label="0.111111;1pkt 1fpkt"];
6051--21494[label="0.0075188;1pkt 1fpkt"];
6051--21529[label="0.794872;31pkt 31fpkt"];
6051--22420[label="0.0075188;1pkt 1fpkt"];
6051--26305[label="0.0075188;1pkt 1fpkt"];
6051--26811[label="0.0075188;1pkt 1fpkt"];
12219--20343[label="1;9pkt 9fpkt"];
14008--21529[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="162.2.213.55" src_port="443"/>
      <filter dst_ip="215.66.209.96" src_port="443"/>
      <filter dst_ip="215.66.209.96" src_ip="107.197.132.132" src_port="80"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.69.17.56"/>
    </slice>
    <from sec="1241499668" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.148.49.56"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2438{
style=filled;
color=gray75;
1669[label="128.156.127.33;s;273pkt 273fpkt", shape=diamond, color=yellow];
1799[label="204.144.2.69;d;48pkt 48fpkt", shape=diamond, color=yellow];
4267[label="2.163.128.1;d;192pkt 192fpkt", shape=diamond, color=yellow];
10170[label="128.156.127.33;s;273pkt 273fpkt", shape=hexagon, color=black];
13269[label="128.156.127.33;275pkt 275fpkt", shape=pentagon, color=darkviolet];
14025[label="128.156.127.56;14pkt 14fpkt", shape=pentagon, color=darkviolet];
21047[label="128.156.127.33;275pkt 275fpkt", shape=invtriangle, color=brown];
21538[label="128.156.127.56;14pkt 14fpkt", shape=invtriangle, color=brown];
26078[label="128.156.127.33;275pkt 275fpkt", shape=invhouse, color=bisque];
26324[label="128.156.127.56;14pkt 14fpkt", shape=invhouse, color=bisque];
stat2438[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.127.33:443, 2.163.128.1:*}[60.0601%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.1531%)&lt;BR/&gt; 80: (0.846945%)&lt;BR/&gt; 49231: (0.332728%)&lt;BR/&gt; 49230: (0.332728%)&lt;BR/&gt; 49229: (0.332728%)&gt;];
}
1669--1799[label="0.458333;22pkt 22fpkt"];
1669--4267[label="0.859375;165pkt 165fpkt"];
1669--10170[label="1;273pkt 273fpkt"];
1669--13269[label="1;273pkt 273fpkt"];
1669--21047[label="1;273pkt 273fpkt"];
1669--26078[label="1;273pkt 273fpkt"];
1799--3868[label="0.145833;7pkt 7fpkt"];
1799--10170[label="0.458333;22pkt 22fpkt"];
1799--11884[label="0.0208333;1pkt 1fpkt"];
1799--11917[label="0.0208333;1pkt 1fpkt"];
1799--13269[label="0.458333;22pkt 22fpkt"];
1799--14795[label="0.145833;7pkt 7fpkt"];
1799--21047[label="0.458333;22pkt 22fpkt"];
1799--22047[label="0.145833;7pkt 7fpkt"];
1799--26078[label="0.458333;22pkt 22fpkt"];
4267--10170[label="0.859375;165pkt 165fpkt"];
4267--13269[label="0.859375;165pkt 165fpkt"];
4267--14025[label="0.642857;9pkt 9fpkt"];
4267--21047[label="0.859375;165pkt 165fpkt"];
4267--21538[label="0.642857;9pkt 9fpkt"];
4267--26078[label="0.859375;165pkt 165fpkt"];
4267--26324[label="0.642857;9pkt 9fpkt"];
10170--13269[label="1;273pkt 273fpkt"];
10170--21047[label="1;273pkt 273fpkt"];
10170--26078[label="1;273pkt 273fpkt"];
13269--21047[label="1;275pkt 275fpkt"];
13269--26078[label="1;275pkt 275fpkt"];
14025--21538[label="1;14pkt 14fpkt"];
14025--26324[label="1;14pkt 14fpkt"];
21047--26078[label="1;275pkt 275fpkt"];
21538--26324[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="2.163.128.1" src_ip="128.156.127.33" src_port="443"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2439{
style=filled;
color=gray75;
14032[label="213.251.152.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21540[label="213.251.152.56;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2439[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.251.152.56:50528, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50528: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14032--21540[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="213.251.152.56" src_port="50528"/>
    </slice>
    <from sec="1241500268" usec="0"/>
    <to sec="1241500293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2440{
style=filled;
color=gray75;
14036[label="192.138.224.56;3pkt 3fpkt", shape=pentagon, color=darkviolet];
21542[label="192.138.224.56;3pkt 3fpkt", shape=invtriangle, color=brown];
26327[label="192.138.224.56;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2440[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.138.224.56:53, 215.66.222.22:45120}[33.3333%]&lt;BR/&gt;{192.138.224.56:53, 215.66.222.22:62516}[33.3333%]&lt;BR/&gt;{192.138.224.56:53, 215.66.222.22:64137}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 64137: (16.6667%)&lt;BR/&gt; 62516: (16.6667%)&lt;BR/&gt; 45120: (16.6667%)&gt;];
}
14036--21542[label="1;3pkt 3fpkt"];
14036--26327[label="1;3pkt 3fpkt"];
21542--26327[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.222.22" dst_port="64137" src_ip="192.138.224.56" src_port="53"/>
      <filter dst_ip="215.66.222.22" dst_port="62516" src_ip="192.138.224.56" src_port="53"/>
      <filter dst_ip="215.66.222.22" dst_port="45120" src_ip="192.138.224.56" src_port="53"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.182.250.56"/>
    </slice>
    <from sec="1241499658" usec="0"/>
    <to sec="1241500343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.254.14.57"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.217.34.57"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.239.34.57"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241499884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2445{
style=filled;
color=gray75;
14057[label="41.213.126.57;4pkt 4fpkt", shape=pentagon, color=darkviolet];
21554[label="41.213.126.57;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2445[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.213.126.57:43192, 151.12.35.70:80}[25%]&lt;BR/&gt;{41.213.126.57:44729, 151.12.35.70:80}[25%]&lt;BR/&gt;{41.213.126.57:51741, 151.12.35.70:80}[25%]&lt;BR/&gt;{41.213.126.57:65494, 151.12.35.70:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65494: (12.5%)&lt;BR/&gt; 51741: (12.5%)&lt;BR/&gt; 44729: (12.5%)&lt;BR/&gt; 43192: (12.5%)&gt;];
}
14057--21554[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="151.12.35.70" dst_port="80" src_ip="41.213.126.57" src_port="65494"/>
      <filter dst_ip="151.12.35.70" dst_port="80" src_ip="41.213.126.57" src_port="51741"/>
      <filter dst_ip="151.12.35.70" dst_port="80" src_ip="41.213.126.57" src_port="44729"/>
      <filter dst_ip="151.12.35.70" dst_port="80" src_ip="41.213.126.57" src_port="43192"/>
    </slice>
    <from sec="1241499968" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.104.8.58"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2448{
style=filled;
color=gray75;
14080[label="201.136.90.58;7pkt 7fpkt", shape=pentagon, color=darkviolet];
21569[label="201.136.90.58;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2448[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.136.90.58:*, 170.15.19.248:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54685: (7.14286%)&lt;BR/&gt; 54684: (7.14286%)&lt;BR/&gt; 54681: (7.14286%)&lt;BR/&gt; 54679: (7.14286%)&gt;];
}
14080--21569[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.248" dst_port="80" src_ip="201.136.90.58"/>
    </slice>
    <from sec="1241500378" usec="0"/>
    <to sec="1241500450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.24.96.58"/>
    </slice>
    <from sec="1241499627" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2450{
style=filled;
color=gray75;
14083[label="2.163.106.58;13pkt 13fpkt", shape=pentagon, color=darkviolet];
21571[label="2.163.106.58;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2450[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.163.106.58:*, 214.170.110.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1223: (3.84615%)&lt;BR/&gt; 1215: (3.84615%)&lt;BR/&gt; 1214: (3.84615%)&lt;BR/&gt; 1213: (3.84615%)&gt;];
}
14083--21571[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="214.170.110.106" dst_port="80" src_ip="2.163.106.58"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2451{
style=filled;
color=gray75;
14085[label="217.78.114.58;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21573[label="217.78.114.58;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2451[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.78.114.58:63907, 172.204.173.36:25}[50%]&lt;BR/&gt;{217.78.114.58:64735, 172.204.171.93:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64735: (25%)&lt;BR/&gt; 63907: (25%)&gt;];
}
14085--21573[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.171.93" dst_port="25" src_ip="217.78.114.58" src_port="64735"/>
      <filter dst_ip="172.204.173.36" dst_port="25" src_ip="217.78.114.58" src_port="63907"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.36.163.58"/>
    </slice>
    <from sec="1241499876" usec="0"/>
    <to sec="1241500061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.184.180.58"/>
    </slice>
    <from sec="1241499928" usec="0"/>
    <to sec="1241500167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.96.60.59"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.231.70.59"/>
    </slice>
    <from sec="1241499966" usec="0"/>
    <to sec="1241500136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.69.73.59"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2457{
style=filled;
color=gray75;
14111[label="9.40.75.59;214pkt 214fpkt", shape=pentagon, color=darkviolet];
21596[label="9.40.75.59;214pkt 214fpkt", shape=invtriangle, color=brown];
26354[label="9.40.75.59;214pkt 214fpkt", shape=invhouse, color=bisque];
stat2457[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.40.75.59:60050, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60050: (50%)&lt;BR/&gt; 1433: (50%)&gt;];
}
14111--21596[label="1;214pkt 214fpkt"];
14111--26354[label="1;214pkt 214fpkt"];
21596--26354[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="9.40.75.59" src_port="60050"/>
    </slice>
    <from sec="1241500474" usec="0"/>
    <to sec="1241500475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.141.106.59"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.77.170.59"/>
    </slice>
    <from sec="1241499640" usec="0"/>
    <to sec="1241499660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.87.226.59"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.103.231.59"/>
    </slice>
    <from sec="1241499775" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.210.243.59"/>
    </slice>
    <from sec="1241499644" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.80.72.60"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.226.91.60"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2465{
style=filled;
color=gray75;
14152[label="206.232.116.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21626[label="206.232.116.60;1pkt 1fpkt", shape=invtriangle, color=brown];
26366[label="206.232.116.60;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2465[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.232.116.60:11844, 215.66.219.235:61751}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61751: (50%)&lt;BR/&gt; 11844: (50%)&gt;];
}
14152--21626[label="1;1pkt 1fpkt"];
14152--26366[label="1;1pkt 1fpkt"];
21626--26366[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="61751" src_ip="206.232.116.60" src_port="11844"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.16.219.60"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.8.237.60"/>
    </slice>
    <from sec="1241500183" usec="0"/>
    <to sec="1241500192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2468{
style=filled;
color=gray75;
14171[label="192.168.5.61;24pkt 24fpkt", shape=pentagon, color=darkviolet];
21641[label="192.168.5.61;24pkt 24fpkt", shape=invtriangle, color=brown];
26378[label="192.168.5.61;24pkt 24fpkt", shape=invhouse, color=bisque];
stat2468[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.168.5.61:*, 32.176.143.50:7920}[37.5%]&lt;BR/&gt;{192.168.5.61:*, 162.15.89.139:7920}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7920: (50%)&lt;BR/&gt; 2544: (2.08333%)&lt;BR/&gt; 2538: (2.08333%)&lt;BR/&gt; 2536: (2.08333%)&lt;BR/&gt; 2529: (2.08333%)&gt;];
}
14171--21641[label="1;24pkt 24fpkt"];
14171--26378[label="1;24pkt 24fpkt"];
21641--26378[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="162.15.89.139" dst_port="7920" src_ip="192.168.5.61"/>
      <filter dst_ip="32.176.143.50" dst_port="7920" src_ip="192.168.5.61"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2469{
style=filled;
color=gray75;
14174[label="56.164.19.61;18pkt 18fpkt", shape=pentagon, color=darkviolet];
21644[label="56.164.19.61;18pkt 18fpkt", shape=invtriangle, color=brown];
stat2469[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.164.19.61:*, 172.204.232.253:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4990: (2.77778%)&lt;BR/&gt; 4842: (2.77778%)&lt;BR/&gt; 4596: (2.77778%)&lt;BR/&gt; 4243: (2.77778%)&gt;];
}
14174--21644[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.232.253" dst_port="25" src_ip="56.164.19.61"/>
    </slice>
    <from sec="1241499874" usec="0"/>
    <to sec="1241500222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="177.93.38.61"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.6.77.61"/>
    </slice>
    <from sec="1241499976" usec="0"/>
    <to sec="1241500022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.81.101.61"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2473{
style=filled;
color=gray75;
14190[label="41.213.113.61;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21656[label="41.213.113.61;2pkt 2fpkt", shape=invtriangle, color=brown];
26388[label="41.213.113.61;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2473[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.213.113.61:35451, 128.46.108.66:80}[50%]&lt;BR/&gt;{41.213.113.61:55694, 128.46.108.66:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55694: (25%)&lt;BR/&gt; 35451: (25%)&gt;];
}
14190--21656[label="1;2pkt 2fpkt"];
14190--26388[label="1;2pkt 2fpkt"];
21656--26388[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.46.108.66" dst_port="80" src_ip="41.213.113.61" src_port="55694"/>
      <filter dst_ip="128.46.108.66" dst_port="80" src_ip="41.213.113.61" src_port="35451"/>
    </slice>
    <from sec="1241499637" usec="0"/>
    <to sec="1241499971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2474{
style=filled;
color=gray75;
14191[label="41.213.116.61;5pkt 5fpkt", shape=pentagon, color=darkviolet];
21657[label="41.213.116.61;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2474[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.213.116.61:50955, 170.15.201.170:80}[20%]&lt;BR/&gt;{41.213.116.61:51629, 170.15.201.170:80}[20%]&lt;BR/&gt;{41.213.116.61:58525, 170.15.201.170:80}[20%]&lt;BR/&gt;{41.213.116.61:61249, 170.15.201.170:80}[20%]&lt;BR/&gt;{41.213.116.61:64468, 170.15.201.170:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64468: (10%)&lt;BR/&gt; 61249: (10%)&lt;BR/&gt; 58525: (10%)&lt;BR/&gt; 51629: (10%)&gt;];
}
14191--21657[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.201.170" dst_port="80" src_ip="41.213.116.61" src_port="64468"/>
      <filter dst_ip="170.15.201.170" dst_port="80" src_ip="41.213.116.61" src_port="61249"/>
      <filter dst_ip="170.15.201.170" dst_port="80" src_ip="41.213.116.61" src_port="58525"/>
      <filter dst_ip="170.15.201.170" dst_port="80" src_ip="41.213.116.61" src_port="51629"/>
      <filter dst_ip="170.15.201.170" dst_port="80" src_ip="41.213.116.61" src_port="50955"/>
    </slice>
    <from sec="1241499684" usec="0"/>
    <to sec="1241500322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2475{
style=filled;
color=gray75;
14198[label="2.88.193.61;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21662[label="2.88.193.61;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2475[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.88.193.61:4986, 215.66.219.235:20090}[50%]&lt;BR/&gt;{2.88.193.61:4987, 215.66.219.235:26612}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26612: (25%)&lt;BR/&gt; 20090: (25%)&lt;BR/&gt; 4987: (25%)&lt;BR/&gt; 4986: (25%)&gt;];
}
14198--21662[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="26612" src_ip="2.88.193.61" src_port="4987"/>
      <filter dst_ip="215.66.219.235" dst_port="20090" src_ip="2.88.193.61" src_port="4986"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2476{
style=filled;
color=gray75;
14203[label="12.66.233.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21666[label="12.66.233.61;1pkt 1fpkt", shape=invtriangle, color=brown];
26393[label="12.66.233.61;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2476[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.66.233.61:4507, 215.66.219.235:47258}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47258: (50%)&lt;BR/&gt; 4507: (50%)&gt;];
}
14203--21666[label="1;1pkt 1fpkt"];
14203--26393[label="1;1pkt 1fpkt"];
21666--26393[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="47258" src_ip="12.66.233.61" src_port="4507"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2477{
style=filled;
color=gray75;
14209[label="168.46.21.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21667[label="168.46.21.62;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2477[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.46.21.62:4178, 46.28.88.160:21}[50%]&lt;BR/&gt;{168.46.21.62:4179, 46.28.88.160:50490}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50490: (25%)&lt;BR/&gt; 4179: (25%)&lt;BR/&gt; 4178: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
14209--21667[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="46.28.88.160" dst_port="50490" src_ip="168.46.21.62" src_port="4179"/>
      <filter dst_ip="46.28.88.160" dst_port="21" src_ip="168.46.21.62" src_port="4178"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2478{
style=filled;
color=gray75;
14213[label="206.219.40.62;54pkt 54fpkt", shape=pentagon, color=darkviolet];
21670[label="206.219.40.62;54pkt 54fpkt", shape=invtriangle, color=brown];
stat2478[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.219.40.62:*, 215.66.220.66:80}[59.2593%]&lt;BR/&gt;{206.219.40.62:*, 215.66.220.67:80}[40.7407%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52368: (0.925926%)&lt;BR/&gt; 52367: (0.925926%)&lt;BR/&gt; 52352: (0.925926%)&lt;BR/&gt; 52351: (0.925926%)&gt;];
}
14213--21670[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="206.219.40.62"/>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="206.219.40.62"/>
    </slice>
    <from sec="1241500228" usec="0"/>
    <to sec="1241500408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.140.62"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.88.160.62"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2481{
style=filled;
color=gray75;
14233[label="41.150.249.62;7pkt 7fpkt", shape=pentagon, color=darkviolet];
21683[label="41.150.249.62;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2481[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.62:5050, *:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (42.8571%)&lt;BR/&gt; 65477: (7.14286%)&lt;BR/&gt; 4323: (7.14286%)&lt;BR/&gt; 3573: (7.14286%)&lt;BR/&gt; 1485: (7.14286%)&gt;];
}
14233--21683[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.62" src_port="5050"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.250.62"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.131.0.63"/>
    </slice>
    <from sec="1241500218" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.172.119.63"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.66.135.63"/>
    </slice>
    <from sec="1241499710" usec="0"/>
    <to sec="1241500442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.5.242.63"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.79.6.64"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.41.64"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.97.107.64"/>
    </slice>
    <from sec="1241499667" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.53.108.64"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.134.164.64"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2492{
style=filled;
color=gray75;
14301[label="151.71.179.64;10pkt 10fpkt", shape=pentagon, color=darkviolet];
21730[label="151.71.179.64;10pkt 10fpkt", shape=invtriangle, color=brown];
26427[label="151.71.179.64;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2492[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.71.179.64:11288, 67.125.55.138:*}[60%]&lt;BR/&gt;{151.71.179.64:11288, 42.194.86.29:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11288: (50%)&lt;BR/&gt; 55408: (5%)&lt;BR/&gt; 47988: (5%)&lt;BR/&gt; 47713: (5%)&lt;BR/&gt; 45208: (5%)&gt;];
}
14301--21730[label="1;10pkt 10fpkt"];
14301--26427[label="1;10pkt 10fpkt"];
21730--26427[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="67.125.55.138" src_ip="151.71.179.64" src_port="11288"/>
      <filter dst_ip="42.194.86.29" src_ip="151.71.179.64" src_port="11288"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.192.64"/>
    </slice>
    <from sec="1241499707" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2494{
style=filled;
color=gray75;
14307[label="56.254.198.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21735[label="56.254.198.64;1pkt 1fpkt", shape=invtriangle, color=brown];
26430[label="56.254.198.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2494[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.254.198.64:21845, 215.66.219.235:63361}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63361: (50%)&lt;BR/&gt; 21845: (50%)&gt;];
}
14307--21735[label="1;1pkt 1fpkt"];
14307--26430[label="1;1pkt 1fpkt"];
21735--26430[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="63361" src_ip="56.254.198.64" src_port="21845"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.78.203.64"/>
    </slice>
    <from sec="1241500077" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.200.7.65"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.6.23.65"/>
    </slice>
    <from sec="1241500493" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.240.48.65"/>
    </slice>
    <from sec="1241499868" usec="0"/>
    <to sec="1241500279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.131.98.65"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.122.100.65"/>
    </slice>
    <from sec="1241499688" usec="0"/>
    <to sec="1241500442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.210.141.65"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.100.21.66"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.238.45.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.172.71.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.172.167.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2506{
style=filled;
color=gray75;
14390[label="134.73.199.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21791[label="134.73.199.66;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2506[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.199.66:25, 12.13.154.10:24819}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24819: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
14390--21791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.13.154.10" dst_port="24819" src_ip="134.73.199.66" src_port="25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2507{
style=filled;
color=gray75;
14393[label="200.87.216.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21793[label="200.87.216.66;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2507[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.87.216.66:9224, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9224: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14393--21793[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="200.87.216.66" src_port="9224"/>
    </slice>
    <from sec="1241500369" usec="0"/>
    <to sec="1241500384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.19.20.67"/>
    </slice>
    <from sec="1241499861" usec="0"/>
    <to sec="1241499925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.74.34.67"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.36.67"/>
    </slice>
    <from sec="1241500084" usec="0"/>
    <to sec="1241500168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.19.44.67"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.5.88.67"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2513{
style=filled;
color=gray75;
14413[label="47.133.96.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21807[label="47.133.96.67;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2513[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.133.96.67:52210, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52210: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14413--21807[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="47.133.96.67" src_port="52210"/>
    </slice>
    <from sec="1241499726" usec="0"/>
    <to sec="1241500342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2514{
style=filled;
color=gray75;
14415[label="1.180.99.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21809[label="1.180.99.67;1pkt 1fpkt", shape=invtriangle, color=brown];
26473[label="1.180.99.67;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2514[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.180.99.67:14373, 215.66.219.234:63266}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63266: (50%)&lt;BR/&gt; 14373: (50%)&gt;];
}
14415--21809[label="1;1pkt 1fpkt"];
14415--26473[label="1;1pkt 1fpkt"];
21809--26473[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.234" dst_port="63266" src_ip="1.180.99.67" src_port="14373"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.24.135.67"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.66.194.67"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2517{
style=filled;
color=gray75;
14434[label="134.73.199.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21818[label="134.73.199.67;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2517[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.199.67:54729, 216.161.77.165:25}[50%]&lt;BR/&gt;{134.73.199.67:14194, 208.70.158.227:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54729: (25%)&lt;BR/&gt; 14194: (25%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
14434--21818[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.70.158.227" dst_port="53" src_ip="134.73.199.67" src_port="14194"/>
      <filter dst_ip="216.161.77.165" dst_port="25" src_ip="134.73.199.67" src_port="54729"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2519{
style=filled;
color=gray75;
14436[label="12.154.216.67;391pkt 391fpkt", shape=pentagon, color=darkviolet];
21820[label="12.154.216.67;391pkt 391fpkt", shape=invtriangle, color=brown];
stat2519[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.154.216.67:80, *:1024}[51.4066%]&lt;BR/&gt;{12.154.216.67:80, *:3072}[48.5934%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1024: (25.7033%)&lt;BR/&gt; 3072: (24.2967%)&gt;];
}
14436--21820[label="1;391pkt 391fpkt"];
</description>
    <slice>
      <filter dst_port="1024" src_ip="12.154.216.67" src_port="80"/>
      <filter dst_port="3072" src_ip="12.154.216.67" src_port="80"/>
    </slice>
    <from sec="1241499642" usec="0"/>
    <to sec="1241500282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.110.218.67"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.37.4.68"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241499846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.54.81.68"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241499827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.67.99.68"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2524{
style=filled;
color=gray75;
14471[label="38.18.150.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21842[label="38.18.150.68;1pkt 1fpkt", shape=invtriangle, color=brown];
26492[label="38.18.150.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2524[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.18.150.68:54025, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54025: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14471--21842[label="1;1pkt 1fpkt"];
14471--26492[label="1;1pkt 1fpkt"];
21842--26492[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="38.18.150.68" src_port="54025"/>
    </slice>
    <from sec="1241499864" usec="0"/>
    <to sec="1241500482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.177.187.68"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.148.193.68"/>
    </slice>
    <from sec="1241499642" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.206.225.68"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.54.234.68"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2529{
style=filled;
color=gray75;
14488[label="194.214.252.68;7pkt 7fpkt", shape=pentagon, color=darkviolet];
21855[label="194.214.252.68;7pkt 7fpkt", shape=invtriangle, color=brown];
stat2529[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.214.252.68:*, 170.15.19.148:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63327: (7.14286%)&lt;BR/&gt; 62379: (7.14286%)&lt;BR/&gt; 62335: (7.14286%)&lt;BR/&gt; 62177: (7.14286%)&gt;];
}
14488--21855[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="194.214.252.68"/>
    </slice>
    <from sec="1241500491" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.62.37.69"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.148.116.69"/>
    </slice>
    <from sec="1241500220" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.159.69"/>
    </slice>
    <from sec="1241499743" usec="0"/>
    <to sec="1241499750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2533{
style=filled;
color=gray75;
14514[label="134.73.208.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21870[label="134.73.208.69;2pkt 2fpkt", shape=invtriangle, color=brown];
26511[label="134.73.208.69;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2533[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.208.69:0, 48.220.181.161:0}[50%]&lt;BR/&gt;{134.73.208.69:0, 2.128.107.172:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
14514--21870[label="1;2pkt 2fpkt"];
14514--26511[label="1;2pkt 2fpkt"];
21870--26511[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="2.128.107.172" src_ip="134.73.208.69"/>
      <filter dst_ip="48.220.181.161" src_ip="134.73.208.69"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.233.34.70"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.111.70"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2536{
style=filled;
color=gray75;
14537[label="63.242.114.70;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21888[label="63.242.114.70;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2536[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.242.114.70:46699, 218.218.8.160:53}[50%]&lt;BR/&gt;{63.242.114.70:47980, 218.218.8.160:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 47980: (25%)&lt;BR/&gt; 46699: (25%)&gt;];
}
14537--21888[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="218.218.8.160" dst_port="53" src_ip="63.242.114.70" src_port="47980"/>
      <filter dst_ip="218.218.8.160" dst_port="53" src_ip="63.242.114.70" src_port="46699"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.84.128.70"/>
    </slice>
    <from sec="1241500082" usec="0"/>
    <to sec="1241500106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.134.228.70"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.77.19.71"/>
    </slice>
    <from sec="1241500363" usec="0"/>
    <to sec="1241500373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.36.24.71"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.87.42.71"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.20.88.71"/>
    </slice>
    <from sec="1241500296" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17366,4.50526,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_2543{
style=filled;
color=gray75;
820[label="134.73.26.36;d;61pkt 61fpkt", shape=diamond, color=yellow];
823[label="52.192.236.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat2543[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.73.26.36:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (9.67742%)&lt;BR/&gt; 80: (6.45161%)&lt;BR/&gt; 58549: (3.22581%)&lt;BR/&gt; 41176: (3.22581%)&lt;BR/&gt; 6881: (3.22581%)&gt;];
}
820--823[label="1;1pkt 1fpkt"];
820--11838[label="0.0163934;1pkt 1fpkt"];
820--11868[label="0.0163934;1pkt 1fpkt"];
820--11875[label="0.0327869;2pkt 2fpkt"];
820--11884[label="0.0163934;1pkt 1fpkt"];
820--11897[label="0.0163934;1pkt 1fpkt"];
820--11903[label="0.0163934;1pkt 1fpkt"];
820--11909[label="0.0327869;2pkt 2fpkt"];
820--11917[label="0.0163934;1pkt 1fpkt"];
820--11928[label="0.0327869;2pkt 2fpkt"];
820--14574[label="0.027027;1pkt 1fpkt"];
820--16324[label="0.0491803;3pkt 3fpkt"];
820--21910[label="0.027027;1pkt 1fpkt"];
820--26530[label="0.027027;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.26.36"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.123.153.71"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2545{
style=filled;
color=gray75;
14586[label="12.148.2.72;21pkt 21fpkt", shape=pentagon, color=darkviolet];
21918[label="12.148.2.72;21pkt 21fpkt", shape=invtriangle, color=brown];
stat2545[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.148.2.72:*, 170.15.19.224:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4917: (2.38095%)&lt;BR/&gt; 4916: (2.38095%)&lt;BR/&gt; 4915: (2.38095%)&lt;BR/&gt; 4914: (2.38095%)&gt;];
}
14586--21918[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.224" dst_port="80" src_ip="12.148.2.72"/>
    </slice>
    <from sec="1241500371" usec="0"/>
    <to sec="1241500377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2546{
style=filled;
color=gray75;
14595[label="42.73.72.72;3pkt 3fpkt", shape=pentagon, color=darkviolet];
21922[label="42.73.72.72;3pkt 3fpkt", shape=invtriangle, color=brown];
26536[label="42.73.72.72;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2546[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.73.72.72:0, 172.204.181.66:0}[33.3333%]&lt;BR/&gt;{42.73.72.72:0, 172.204.139.186:0}[33.3333%]&lt;BR/&gt;{42.73.72.72:0, 172.204.162.219:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
14595--21922[label="1;3pkt 3fpkt"];
14595--26536[label="1;3pkt 3fpkt"];
21922--26536[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.162.219" src_ip="42.73.72.72"/>
      <filter dst_ip="172.204.139.186" src_ip="42.73.72.72"/>
      <filter dst_ip="172.204.181.66" src_ip="42.73.72.72"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.194.114.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.168.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.200.170.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2550{
style=filled;
color=gray75;
14620[label="32.182.209.72;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21938[label="32.182.209.72;2pkt 2fpkt", shape=invtriangle, color=brown];
26545[label="32.182.209.72;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2550[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.182.209.72:8577, 215.66.216.49:995}[50%]&lt;BR/&gt;{32.182.209.72:30077, 170.15.98.144:995}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 30077: (25%)&lt;BR/&gt; 8577: (25%)&gt;];
}
14620--21938[label="1;2pkt 2fpkt"];
14620--26545[label="1;2pkt 2fpkt"];
21938--26545[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.98.144" dst_port="995" src_ip="32.182.209.72" src_port="30077"/>
      <filter dst_ip="215.66.216.49" dst_port="995" src_ip="32.182.209.72" src_port="8577"/>
    </slice>
    <from sec="1241499922" usec="0"/>
    <to sec="1241500018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.54.76.73"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2552{
style=filled;
color=gray75;
14639[label="68.184.94.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21949[label="68.184.94.73;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2552[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.184.94.73:3636, 215.66.219.234:61960}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61960: (50%)&lt;BR/&gt; 3636: (50%)&gt;];
}
14639--21949[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.234" dst_port="61960" src_ip="68.184.94.73" src_port="3636"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.84.133.73"/>
    </slice>
    <from sec="1241500210" usec="0"/>
    <to sec="1241500232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.62.237.73"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.20.74"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.136.37.74"/>
    </slice>
    <from sec="1241500452" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.219.86.74"/>
    </slice>
    <from sec="1241499641" usec="0"/>
    <to sec="1241500148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.51.126.74"/>
    </slice>
    <from sec="1241500128" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.65.161.74"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.137.170.74"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2561{
style=filled;
color=gray75;
14694[label="63.90.210.74;21pkt 21fpkt", shape=pentagon, color=darkviolet];
21985[label="63.90.210.74;21pkt 21fpkt", shape=invtriangle, color=brown];
stat2561[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.90.210.74:*, 215.66.221.107:33437}[66.6667%]&lt;BR/&gt;{63.90.210.74:*, 215.66.219.176:33437}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33437: (50%)&lt;BR/&gt; 12499: (2.38095%)&lt;BR/&gt; 12477: (2.38095%)&lt;BR/&gt; 12449: (2.38095%)&lt;BR/&gt; 12357: (2.38095%)&gt;];
}
14694--21985[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.221.107" dst_port="33437" src_ip="63.90.210.74"/>
      <filter dst_ip="215.66.219.176" dst_port="33437" src_ip="63.90.210.74"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.9.247.74"/>
    </slice>
    <from sec="1241500141" usec="0"/>
    <to sec="1241500464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.160.36.75"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2564{
style=filled;
color=gray75;
14708[label="202.50.48.75;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21994[label="202.50.48.75;2pkt 2fpkt", shape=invtriangle, color=brown];
26578[label="202.50.48.75;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2564[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.50.48.75:80, 214.163.52.39:32971}[50%]&lt;BR/&gt;{202.50.48.75:80, 214.163.52.39:32972}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32972: (25%)&lt;BR/&gt; 32971: (25%)&gt;];
}
14708--21994[label="1;2pkt 2fpkt"];
14708--26578[label="1;2pkt 2fpkt"];
21994--26578[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.52.39" dst_port="32972" src_ip="202.50.48.75" src_port="80"/>
      <filter dst_ip="214.163.52.39" dst_port="32971" src_ip="202.50.48.75" src_port="80"/>
    </slice>
    <from sec="1241499993" usec="0"/>
    <to sec="1241499995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2565{
style=filled;
color=gray75;
14712[label="42.73.72.75;2pkt 2fpkt", shape=pentagon, color=darkviolet];
21998[label="42.73.72.75;2pkt 2fpkt", shape=invtriangle, color=brown];
26580[label="42.73.72.75;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2565[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.73.72.75:0, 172.204.139.186:0}[50%]&lt;BR/&gt;{42.73.72.75:0, 172.204.162.219:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
14712--21998[label="1;2pkt 2fpkt"];
14712--26580[label="1;2pkt 2fpkt"];
21998--26580[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.162.219" src_ip="42.73.72.75"/>
      <filter dst_ip="172.204.139.186" src_ip="42.73.72.75"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2566{
style=filled;
color=gray75;
14717[label="41.213.113.75;15pkt 15fpkt", shape=pentagon, color=darkviolet];
22001[label="41.213.113.75;15pkt 15fpkt", shape=invtriangle, color=brown];
stat2566[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.213.113.75:*, 170.15.78.84:80}[66.6667%]&lt;BR/&gt;{41.213.113.75:*, 168.46.23.69:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64015: (3.33333%)&lt;BR/&gt; 63496: (3.33333%)&lt;BR/&gt; 52436: (3.33333%)&lt;BR/&gt; 51495: (3.33333%)&gt;];
}
14717--22001[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.78.84" dst_port="80" src_ip="41.213.113.75"/>
      <filter dst_ip="168.46.23.69" dst_port="80" src_ip="41.213.113.75"/>
    </slice>
    <from sec="1241499693" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.134.116.75"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.57.141.75"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.51.244.75"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.69.16.76"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.17.95.76"/>
    </slice>
    <from sec="1241500147" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.64.100.76"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.160.100.76"/>
    </slice>
    <from sec="1241500092" usec="0"/>
    <to sec="1241500322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.80.129.76"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.39.160.76"/>
    </slice>
    <from sec="1241499790" usec="0"/>
    <to sec="1241499824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.81.210.76"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241499964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.87.208.77"/>
    </slice>
    <from sec="1241500098" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2578{
style=filled;
color=gray75;
14805[label="4.65.215.77;2pkt 2fpkt", shape=pentagon, color=darkviolet];
22055[label="4.65.215.77;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2578[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.65.215.77:57205, 215.66.219.235:63039}[50%]&lt;BR/&gt;{4.65.215.77:57206, 215.66.219.235:62107}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63039: (25%)&lt;BR/&gt; 62107: (25%)&lt;BR/&gt; 57206: (25%)&lt;BR/&gt; 57205: (25%)&gt;];
}
14805--22055[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62107" src_ip="4.65.215.77" src_port="57206"/>
      <filter dst_ip="215.66.219.235" dst_port="63039" src_ip="4.65.215.77" src_port="57205"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2579{
style=filled;
color=gray75;
14808[label="61.52.244.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22056[label="61.52.244.77;1pkt 1fpkt", shape=invtriangle, color=brown];
26609[label="61.52.244.77;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2579[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.52.244.77:10103, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10103: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14808--22056[label="1;1pkt 1fpkt"];
14808--26609[label="1;1pkt 1fpkt"];
22056--26609[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="61.52.244.77" src_port="10103"/>
    </slice>
    <from sec="1241500373" usec="0"/>
    <to sec="1241500403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2581{
style=filled;
color=gray75;
14810[label="192.168.5.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22058[label="192.168.5.78;1pkt 1fpkt", shape=invtriangle, color=brown];
26611[label="192.168.5.78;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2581[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.168.5.78:2904, 40.225.47.69:7920}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7920: (50%)&lt;BR/&gt; 2904: (50%)&gt;];
}
14810--22058[label="1;1pkt 1fpkt"];
14810--26611[label="1;1pkt 1fpkt"];
22058--26611[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="40.225.47.69" dst_port="7920" src_ip="192.168.5.78" src_port="2904"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.57.11.78"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2583{
style=filled;
color=gray75;
14814[label="0.75.23.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22061[label="0.75.23.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2583[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.75.23.78:50627, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50627: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14814--22061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="0.75.23.78" src_port="50627"/>
    </slice>
    <from sec="1241500397" usec="0"/>
    <to sec="1241500432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.31.158.78"/>
    </slice>
    <from sec="1241500272" usec="0"/>
    <to sec="1241500348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.208.167.78"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2586{
style=filled;
color=gray75;
14837[label="32.182.209.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22075[label="32.182.209.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2586[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.182.209.78:11352, 215.66.216.49:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11352: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
14837--22075[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.49" dst_port="995" src_ip="32.182.209.78" src_port="11352"/>
    </slice>
    <from sec="1241500013" usec="0"/>
    <to sec="1241500484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.141.223.78"/>
    </slice>
    <from sec="1241499892" usec="0"/>
    <to sec="1241500222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.138.230.78"/>
    </slice>
    <from sec="1241499762" usec="0"/>
    <to sec="1241500456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.149.17.79"/>
    </slice>
    <from sec="1241499933" usec="0"/>
    <to sec="1241499937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.72.75.79"/>
    </slice>
    <from sec="1241499755" usec="0"/>
    <to sec="1241499775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.205.156.79"/>
    </slice>
    <from sec="1241499767" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.60.242.79"/>
    </slice>
    <from sec="1241499869" usec="0"/>
    <to sec="1241499892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2594{
style=filled;
color=gray75;
14869[label="134.73.45.80;5pkt 5fpkt", shape=pentagon, color=darkviolet];
22098[label="134.73.45.80;5pkt 5fpkt", shape=invtriangle, color=brown];
26629[label="134.73.45.80;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2594[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.45.80:0, 210.234.13.135:0}[20%]&lt;BR/&gt;{134.73.45.80:80, 41.213.116.196:60062}[20%]&lt;BR/&gt;{134.73.45.80:80, 34.161.132.234:33234}[20%]&lt;BR/&gt;{134.73.45.80:80, 34.161.132.234:33314}[20%]&lt;BR/&gt;{134.73.45.80:80, 34.161.132.234:33457}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 60062: (10%)&lt;BR/&gt; 33457: (10%)&lt;BR/&gt; 33314: (10%)&gt;];
}
14869--22098[label="1;5pkt 5fpkt"];
14869--26629[label="1;5pkt 5fpkt"];
22098--26629[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="34.161.132.234" dst_port="33457" src_ip="134.73.45.80" src_port="80"/>
      <filter dst_ip="34.161.132.234" dst_port="33314" src_ip="134.73.45.80" src_port="80"/>
      <filter dst_ip="34.161.132.234" dst_port="33234" src_ip="134.73.45.80" src_port="80"/>
      <filter dst_ip="41.213.116.196" dst_port="60062" src_ip="134.73.45.80" src_port="80"/>
      <filter dst_ip="210.234.13.135" src_ip="134.73.45.80"/>
    </slice>
    <from sec="1241499867" usec="0"/>
    <to sec="1241500421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.141.111.80"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241499791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.209.129.80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.28.138.80"/>
    </slice>
    <from sec="1241499819" usec="0"/>
    <to sec="1241499858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2598{
style=filled;
color=gray75;
14879[label="128.156.140.80;17pkt 17fpkt", shape=pentagon, color=darkviolet];
22105[label="128.156.140.80;17pkt 17fpkt", shape=invtriangle, color=brown];
stat2598[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.140.80:*, *:443}[29.4118%]&lt;BR/&gt;{128.156.140.80:*, 222.74.114.32:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.2941%)&lt;BR/&gt; 443: (14.7059%)&lt;BR/&gt; 3470: (2.94118%)&lt;BR/&gt; 3463: (2.94118%)&lt;BR/&gt; 3461: (2.94118%)&gt;];
}
14879--22105[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="128.156.140.80"/>
      <filter dst_ip="222.74.114.32" dst_port="80" src_ip="128.156.140.80"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="181.176.144.80"/>
    </slice>
    <from sec="1241499934" usec="0"/>
    <to sec="1241499967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.186.150.80"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.194.80"/>
    </slice>
    <from sec="1241500198" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2602{
style=filled;
color=gray75;
14897[label="214.244.222.80;6pkt 6fpkt", shape=pentagon, color=darkviolet];
22116[label="214.244.222.80;6pkt 6fpkt", shape=invtriangle, color=brown];
26638[label="214.244.222.80;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2602[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.244.222.80:*, 218.218.8.160:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 61788: (8.33333%)&lt;BR/&gt; 49736: (8.33333%)&lt;BR/&gt; 41942: (8.33333%)&lt;BR/&gt; 32673: (8.33333%)&gt;];
}
14897--22116[label="1;6pkt 6fpkt"];
14897--26638[label="1;6pkt 6fpkt"];
22116--26638[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="218.218.8.160" dst_port="53" src_ip="214.244.222.80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.212.247.80"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2604{
style=filled;
color=gray75;
14899[label="134.73.1.81;28pkt 28fpkt", shape=pentagon, color=darkviolet];
22118[label="134.73.1.81;28pkt 28fpkt", shape=invtriangle, color=brown];
26639[label="134.73.1.81;28pkt 28fpkt", shape=invhouse, color=bisque];
stat2604[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.1.81:8888, 41.213.126.224:*}[75%]&lt;BR/&gt;{134.73.1.81:8888, 32.161.181.193:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (50%)&lt;BR/&gt; 58629: (1.78571%)&lt;BR/&gt; 58615: (1.78571%)&lt;BR/&gt; 58088: (1.78571%)&lt;BR/&gt; 56819: (1.78571%)&gt;];
}
14899--22118[label="1;28pkt 28fpkt"];
14899--26639[label="1;28pkt 28fpkt"];
22118--26639[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="41.213.126.224" src_ip="134.73.1.81" src_port="8888"/>
      <filter dst_ip="32.161.181.193" src_ip="134.73.1.81" src_port="8888"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.24.8.81"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241499827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2606{
style=filled;
color=gray75;
14911[label="43.104.80.81;4pkt 4fpkt", shape=pentagon, color=darkviolet];
22126[label="43.104.80.81;4pkt 4fpkt", shape=invtriangle, color=brown];
26642[label="43.104.80.81;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2606[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.104.80.81:57403, 215.66.210.52:50194}[25%]&lt;BR/&gt;{43.104.80.81:62519, 215.66.211.66:993}[25%]&lt;BR/&gt;{43.104.80.81:62588, 215.66.211.66:993}[25%]&lt;BR/&gt;{43.104.80.81:62810, 215.66.211.66:993}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (37.5%)&lt;BR/&gt; 62810: (12.5%)&lt;BR/&gt; 62588: (12.5%)&lt;BR/&gt; 62519: (12.5%)&lt;BR/&gt; 57403: (12.5%)&gt;];
}
14911--22126[label="1;4pkt 4fpkt"];
14911--26642[label="1;4pkt 4fpkt"];
22126--26642[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.211.66" dst_port="993" src_ip="43.104.80.81" src_port="62810"/>
      <filter dst_ip="215.66.211.66" dst_port="993" src_ip="43.104.80.81" src_port="62588"/>
      <filter dst_ip="215.66.211.66" dst_port="993" src_ip="43.104.80.81" src_port="62519"/>
      <filter dst_ip="215.66.210.52" dst_port="50194" src_ip="43.104.80.81" src_port="57403"/>
    </slice>
    <from sec="1241499741" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2607{
style=filled;
color=gray75;
7118[label="9.113.87.81;s;81pkt 81fpkt", shape=diamond, color=yellow];
11225[label="9.113.87.81;s;28pkt 28fpkt", shape=hexagon, color=black];
14912[label="9.113.87.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22127[label="9.113.87.81;1pkt 1fpkt", shape=invtriangle, color=brown];
26643[label="9.113.87.81;94pkt 94fpkt", shape=invhouse, color=bisque];
stat2607[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.113.87.81:*, 215.66.220.66:80}[65.9574%]&lt;BR/&gt;{9.113.87.81:*, 215.66.220.67:80}[34.0426%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 22832: (0.731707%)&lt;BR/&gt; 18437: (0.731707%)&lt;BR/&gt; 18431: (0.731707%)&lt;BR/&gt; 18428: (0.731707%)&gt;];
}
7118--11225[label="1;28pkt 28fpkt"];
7118--26643[label="1;81pkt 81fpkt"];
11225--26643[label="1;28pkt 28fpkt"];
14912--22127[label="1;1pkt 1fpkt"];
14912--26643[label="1;1pkt 1fpkt"];
22127--26643[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="9.113.87.81"/>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="9.113.87.81"/>
    </slice>
    <from sec="1241500053" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2608{
style=filled;
color=gray75;
14914[label="67.17.94.81;12pkt 12fpkt", shape=pentagon, color=darkviolet];
22129[label="67.17.94.81;12pkt 12fpkt", shape=invtriangle, color=brown];
26644[label="67.17.94.81;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2608[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.17.94.81:*, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 8405: (4.16667%)&lt;BR/&gt; 8401: (4.16667%)&lt;BR/&gt; 8400: (4.16667%)&lt;BR/&gt; 8398: (4.16667%)&gt;];
}
14914--22129[label="1;12pkt 12fpkt"];
14914--26644[label="1;12pkt 12fpkt"];
22129--26644[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="67.17.94.81"/>
    </slice>
    <from sec="1241500389" usec="0"/>
    <to sec="1241500482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.109.110.81"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.108.193.81"/>
    </slice>
    <from sec="1241499883" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.42.214.81"/>
    </slice>
    <from sec="1241499721" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.51.245.81"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.30.248.81"/>
    </slice>
    <from sec="1241499870" usec="0"/>
    <to sec="1241499984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.208.10.82"/>
    </slice>
    <from sec="1241499859" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2615{
style=filled;
color=gray75;
14940[label="21.205.15.82;4pkt 4fpkt", shape=pentagon, color=darkviolet];
22147[label="21.205.15.82;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2615[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.205.15.82:25996, 172.204.237.36:25}[25%]&lt;BR/&gt;{21.205.15.82:35756, 172.204.221.87:25}[25%]&lt;BR/&gt;{21.205.15.82:35768, 172.204.176.112:25}[25%]&lt;BR/&gt;{21.205.15.82:35845, 172.204.229.192:25}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 35845: (12.5%)&lt;BR/&gt; 35768: (12.5%)&lt;BR/&gt; 35756: (12.5%)&lt;BR/&gt; 25996: (12.5%)&gt;];
}
14940--22147[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.229.192" dst_port="25" src_ip="21.205.15.82" src_port="35845"/>
      <filter dst_ip="172.204.176.112" dst_port="25" src_ip="21.205.15.82" src_port="35768"/>
      <filter dst_ip="172.204.221.87" dst_port="25" src_ip="21.205.15.82" src_port="35756"/>
      <filter dst_ip="172.204.237.36" dst_port="25" src_ip="21.205.15.82" src_port="25996"/>
    </slice>
    <from sec="1241499730" usec="0"/>
    <to sec="1241500265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.19.22.82"/>
    </slice>
    <from sec="1241499869" usec="0"/>
    <to sec="1241499903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.127.49.82"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.68.64.82"/>
    </slice>
    <from sec="1241499851" usec="0"/>
    <to sec="1241499968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.71.169.82"/>
    </slice>
    <from sec="1241499667" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.54.171.82"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.137.9.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.12.56.83"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.94.111.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2624{
style=filled;
color=gray75;
14998[label="66.99.121.83;9pkt 9fpkt", shape=pentagon, color=darkviolet];
22188[label="66.99.121.83;9pkt 9fpkt", shape=invtriangle, color=brown];
26680[label="66.99.121.83;9pkt 9fpkt", shape=invhouse, color=bisque];
stat2624[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.99.121.83:*, 214.163.228.3:80}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 15000: (5.55556%)&lt;BR/&gt; 3466: (5.55556%)&lt;BR/&gt; 3038: (5.55556%)&lt;BR/&gt; 3023: (5.55556%)&gt;];
}
14998--22188[label="1;9pkt 9fpkt"];
14998--26680[label="1;9pkt 9fpkt"];
22188--26680[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.228.3" dst_port="80" src_ip="66.99.121.83"/>
    </slice>
    <from sec="1241500093" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2625{
style=filled;
color=gray75;
15007[label="196.30.168.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22195[label="196.30.168.83;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2625[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.30.168.83:43847, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43847: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15007--22195[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="196.30.168.83" src_port="43847"/>
    </slice>
    <from sec="1241500474" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.175.83"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.221.181.83"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.202.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.41.17.84"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241499654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2630{
style=filled;
color=gray75;
15027[label="69.116.44.84;19pkt 19fpkt", shape=pentagon, color=darkviolet];
22207[label="69.116.44.84;19pkt 19fpkt", shape=invtriangle, color=brown];
26688[label="69.116.44.84;19pkt 19fpkt", shape=invhouse, color=bisque];
stat2630[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.116.44.84:*, 134.73.42.105:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6586: (2.63158%)&lt;BR/&gt; 6585: (2.63158%)&lt;BR/&gt; 6584: (2.63158%)&lt;BR/&gt; 6583: (2.63158%)&gt;];
}
15027--22207[label="1;19pkt 19fpkt"];
15027--26688[label="1;19pkt 19fpkt"];
22207--26688[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.42.105" dst_port="80" src_ip="69.116.44.84"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.66.57.84"/>
    </slice>
    <from sec="1241499633" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.167.136.84"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.143.171.84"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.106.178.84"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.52.186.84"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.210.209.84"/>
    </slice>
    <from sec="1241499686" usec="0"/>
    <to sec="1241500077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.230.0.85"/>
    </slice>
    <from sec="1241499964" usec="0"/>
    <to sec="1241500000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.69.36.85"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.85.74.85"/>
    </slice>
    <from sec="1241499923" usec="0"/>
    <to sec="1241499927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.112.173.85"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.31.241.85"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.164.7.86"/>
    </slice>
    <from sec="1241499878" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2643{
style=filled;
color=gray75;
15103[label="54.150.56.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22261[label="54.150.56.86;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2643[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.150.56.86:60025, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60025: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15103--22261[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="54.150.56.86" src_port="60025"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2644{
style=filled;
color=gray75;
15108[label="0.162.98.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22264[label="0.162.98.86;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2644[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.162.98.86:1984, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1984: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15108--22264[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="0.162.98.86" src_port="1984"/>
    </slice>
    <from sec="1241499696" usec="0"/>
    <to sec="1241500394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.30.104.86"/>
    </slice>
    <from sec="1241500421" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2646{
style=filled;
color=gray75;
15116[label="206.226.178.86;12pkt 12fpkt", shape=pentagon, color=darkviolet];
22268[label="206.226.178.86;12pkt 12fpkt", shape=invtriangle, color=brown];
26722[label="206.226.178.86;12pkt 12fpkt", shape=invhouse, color=bisque];
stat2646[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.226.178.86:*, 170.15.19.224:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1957: (4.16667%)&lt;BR/&gt; 1956: (4.16667%)&lt;BR/&gt; 1955: (4.16667%)&lt;BR/&gt; 1954: (4.16667%)&gt;];
}
15116--22268[label="1;12pkt 12fpkt"];
15116--26722[label="1;12pkt 12fpkt"];
22268--26722[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.224" dst_port="80" src_ip="206.226.178.86"/>
    </slice>
    <from sec="1241500442" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2647{
style=filled;
color=gray75;
15123[label="13.48.215.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22272[label="13.48.215.86;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2647[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.48.215.86:60961, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60961: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15123--22272[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="13.48.215.86" src_port="60961"/>
    </slice>
    <from sec="1241499678" usec="0"/>
    <to sec="1241500302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.226.86"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2649{
style=filled;
color=gray75;
15133[label="66.128.32.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22280[label="66.128.32.87;1pkt 1fpkt", shape=invtriangle, color=brown];
26728[label="66.128.32.87;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2649[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.128.32.87:57167, 215.66.214.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57167: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15133--22280[label="1;1pkt 1fpkt"];
15133--26728[label="1;1pkt 1fpkt"];
22280--26728[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="66.128.32.87" src_port="57167"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.181.37.87"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2651{
style=filled;
color=gray75;
15141[label="12.193.51.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22288[label="12.193.51.87;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2651[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.193.51.87:31501, 215.66.172.153:43000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43000: (50%)&lt;BR/&gt; 31501: (50%)&gt;];
}
15141--22288[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.172.153" dst_port="43000" src_ip="12.193.51.87" src_port="31501"/>
    </slice>
    <from sec="1241499683" usec="0"/>
    <to sec="1241500175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.116.88.87"/>
    </slice>
    <from sec="1241499930" usec="0"/>
    <to sec="1241499934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.253.104.87"/>
    </slice>
    <from sec="1241499840" usec="0"/>
    <to sec="1241500174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.135.165.87"/>
    </slice>
    <from sec="1241500131" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.142.197.87"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.243.1.88"/>
    </slice>
    <from sec="1241499681" usec="0"/>
    <to sec="1241499689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.218.8.88"/>
    </slice>
    <from sec="1241500390" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.150.17.88"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2659{
style=filled;
color=gray75;
15194[label="66.173.244.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22328[label="66.173.244.88;1pkt 1fpkt", shape=invtriangle, color=brown];
26757[label="66.173.244.88;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2659[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.173.244.88:40448, 215.66.214.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40448: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15194--22328[label="1;1pkt 1fpkt"];
15194--26757[label="1;1pkt 1fpkt"];
22328--26757[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="66.173.244.88" src_port="40448"/>
    </slice>
    <from sec="1241500439" usec="0"/>
    <to sec="1241500446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2660{
style=filled;
color=gray75;
15195[label="4.68.247.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22329[label="4.68.247.88;1pkt 1fpkt", shape=invtriangle, color=brown];
26758[label="4.68.247.88;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2660[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.68.247.88:15392, 215.66.219.235:63270}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63270: (50%)&lt;BR/&gt; 15392: (50%)&gt;];
}
15195--22329[label="1;1pkt 1fpkt"];
15195--26758[label="1;1pkt 1fpkt"];
22329--26758[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="63270" src_ip="4.68.247.88" src_port="15392"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.32.15.89"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.101.24.89"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.0.34.89"/>
    </slice>
    <from sec="1241499982" usec="0"/>
    <to sec="1241500006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2664{
style=filled;
color=gray75;
15207[label="8.80.38.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22337[label="8.80.38.89;1pkt 1fpkt", shape=invtriangle, color=brown];
26765[label="8.80.38.89;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2664[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.80.38.89:1482, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1482: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15207--22337[label="1;1pkt 1fpkt"];
15207--26765[label="1;1pkt 1fpkt"];
22337--26765[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="8.80.38.89" src_port="1482"/>
    </slice>
    <from sec="1241499726" usec="0"/>
    <to sec="1241500398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.6.12.90"/>
    </slice>
    <from sec="1241499823" usec="0"/>
    <to sec="1241500383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2666{
style=filled;
color=gray75;
15232[label="196.34.36.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22348[label="196.34.36.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2666[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.34.36.90:4662, 215.66.219.235:62488}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62488: (50%)&lt;BR/&gt; 4662: (50%)&gt;];
}
15232--22348[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62488" src_ip="196.34.36.90" src_port="4662"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.232.37.90"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.216.51.90"/>
    </slice>
    <from sec="1241499766" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.139.87.90"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.61.110.90"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.120.90"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.191.158.90"/>
    </slice>
    <from sec="1241499764" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2673{
style=filled;
color=gray75;
15252[label="32.161.161.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22362[label="32.161.161.90;1pkt 1fpkt", shape=invtriangle, color=brown];
26777[label="32.161.161.90;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2673[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.161.161.90:55303, 215.66.210.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55303: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15252--22362[label="1;1pkt 1fpkt"];
15252--26777[label="1;1pkt 1fpkt"];
22362--26777[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.210.161" dst_port="80" src_ip="32.161.161.90" src_port="55303"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.142.177.90"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.5.198.90"/>
    </slice>
    <from sec="1241500154" usec="0"/>
    <to sec="1241500187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.206.247.90"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.171.11.91"/>
    </slice>
    <from sec="1241500460" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2678{
style=filled;
color=gray75;
15274[label="61.12.29.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22375[label="61.12.29.91;1pkt 1fpkt", shape=invtriangle, color=brown];
26783[label="61.12.29.91;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2678[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.12.29.91:4636, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4636: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15274--22375[label="1;1pkt 1fpkt"];
15274--26783[label="1;1pkt 1fpkt"];
22375--26783[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="61.12.29.91" src_port="4636"/>
    </slice>
    <from sec="1241499999" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2679{
style=filled;
color=gray75;
15282[label="8.81.77.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22379[label="8.81.77.91;1pkt 1fpkt", shape=invtriangle, color=brown];
26785[label="8.81.77.91;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2679[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.81.77.91:6920, 215.66.219.235:62159}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62159: (50%)&lt;BR/&gt; 6920: (50%)&gt;];
}
15282--22379[label="1;1pkt 1fpkt"];
15282--26785[label="1;1pkt 1fpkt"];
22379--26785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62159" src_ip="8.81.77.91" src_port="6920"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2680{
style=filled;
color=gray75;
15287[label="205.5.131.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22383[label="205.5.131.91;1pkt 1fpkt", shape=invtriangle, color=brown];
26787[label="205.5.131.91;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2680[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.5.131.91:6613, 170.15.187.156:11481}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11481: (50%)&lt;BR/&gt; 6613: (50%)&gt;];
}
15287--22383[label="1;1pkt 1fpkt"];
15287--26787[label="1;1pkt 1fpkt"];
22383--26787[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.187.156" dst_port="11481" src_ip="205.5.131.91" src_port="6613"/>
    </slice>
    <from sec="1241500454" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.84.135.91"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.5.174.91"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.50.43.92"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.236.91.92"/>
    </slice>
    <from sec="1241500377" usec="0"/>
    <to sec="1241500389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.140.129.92"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2686{
style=filled;
color=gray75;
8885[label="151.12.61.168;d;104pkt 104fpkt", shape=diamond, color=yellow];
14330[label="69.195.97.65;93pkt 93fpkt", shape=pentagon, color=darkviolet];
15321[label="12.159.170.92;4pkt 4fpkt", shape=pentagon, color=darkviolet];
17836[label="69.227.172.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21754[label="69.195.97.65;93pkt 93fpkt", shape=invtriangle, color=brown];
22403[label="12.159.170.92;4pkt 4fpkt", shape=invtriangle, color=brown];
26800[label="12.159.170.92;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2686[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.195.97.65:*, 151.12.61.168:22438}[44.6429%]&lt;BR/&gt;{69.195.97.65:*, 151.12.61.168:18444}[39.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22438: (27.7228%)&lt;BR/&gt; 18444: (21.1221%)&lt;BR/&gt; 17847: (0.990099%)&lt;BR/&gt; 42960: (0.660066%)&lt;BR/&gt; 38126: (0.660066%)&gt;];
}
8885--14330[label="0.935484;87pkt 87fpkt"];
8885--15321[label="0.5;2pkt 2fpkt"];
8885--17527[label="0.166667;1pkt 1fpkt"];
8885--17836[label="1;1pkt 1fpkt"];
8885--21754[label="0.935484;87pkt 87fpkt"];
8885--22403[label="0.5;2pkt 2fpkt"];
8885--23831[label="0.166667;1pkt 1fpkt"];
8885--26800[label="0.5;2pkt 2fpkt"];
8885--27628[label="0.166667;1pkt 1fpkt"];
14330--21754[label="1;93pkt 93fpkt"];
15321--22403[label="1;4pkt 4fpkt"];
15321--26800[label="1;4pkt 4fpkt"];
22403--26800[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="151.12.61.168" dst_port="22438" src_ip="69.195.97.65"/>
      <filter dst_ip="151.12.61.168" dst_port="18444" src_ip="69.195.97.65"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.66.225.92"/>
    </slice>
    <from sec="1241499961" usec="0"/>
    <to sec="1241499968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.168.245.92"/>
    </slice>
    <from sec="1241500052" usec="0"/>
    <to sec="1241500295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.142.32.93"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.40.93"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.160.37.94"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2693{
style=filled;
color=gray75;
15365[label="182.143.66.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22432[label="182.143.66.94;1pkt 1fpkt", shape=invtriangle, color=brown];
26821[label="182.143.66.94;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2693[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.143.66.94:1474, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1474: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15365--22432[label="1;1pkt 1fpkt"];
15365--26821[label="1;1pkt 1fpkt"];
22432--26821[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="182.143.66.94" src_port="1474"/>
    </slice>
    <from sec="1241500480" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.141.94"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.171.210.94"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.70.1.95"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2697{
style=filled;
color=gray75;
15385[label="13.24.8.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22447[label="13.24.8.95;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2697[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.24.8.95:10939, 215.66.219.235:62088}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62088: (50%)&lt;BR/&gt; 10939: (50%)&gt;];
}
15385--22447[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62088" src_ip="13.24.8.95" src_port="10939"/>
    </slice>
    <from sec="1241499698" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.194.80.95"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2699{
style=filled;
color=gray75;
15398[label="46.71.89.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22457[label="46.71.89.95;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2699[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.71.89.95:2532, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2532: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15398--22457[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="46.71.89.95" src_port="2532"/>
    </slice>
    <from sec="1241499694" usec="0"/>
    <to sec="1241500326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.63.160.95"/>
    </slice>
    <from sec="1241500199" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.202.170.95"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.179.20.96"/>
    </slice>
    <from sec="1241499743" usec="0"/>
    <to sec="1241499798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.231.162.96"/>
    </slice>
    <from sec="1241499676" usec="0"/>
    <to sec="1241499741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2704{
style=filled;
color=gray75;
15447[label="53.171.165.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22482[label="53.171.165.96;1pkt 1fpkt", shape=invtriangle, color=brown];
26856[label="53.171.165.96;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2704[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.171.165.96:50177, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50177: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15447--22482[label="1;1pkt 1fpkt"];
15447--26856[label="1;1pkt 1fpkt"];
22482--26856[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="53.171.165.96" src_port="50177"/>
    </slice>
    <from sec="1241500455" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.171.96"/>
    </slice>
    <from sec="1241499641" usec="0"/>
    <to sec="1241500361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2706{
style=filled;
color=gray75;
15454[label="206.146.224.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22485[label="206.146.224.96;1pkt 1fpkt", shape=invtriangle, color=brown];
26858[label="206.146.224.96;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2706[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.146.224.96:60042, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60042: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15454--22485[label="1;1pkt 1fpkt"];
15454--26858[label="1;1pkt 1fpkt"];
22485--26858[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="206.146.224.96" src_port="60042"/>
    </slice>
    <from sec="1241500197" usec="0"/>
    <to sec="1241500228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.195.240.96"/>
    </slice>
    <from sec="1241500448" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2708{
style=filled;
color=gray75;
15459[label="134.73.5.97;13pkt 13fpkt", shape=pentagon, color=darkviolet];
22489[label="134.73.5.97;13pkt 13fpkt", shape=invtriangle, color=brown];
stat2708[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.5.97:143, 201.163.169.107:*}[53.8462%]&lt;BR/&gt;{134.73.5.97:993, 1.241.210.180:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (26.9231%)&lt;BR/&gt; 993: (11.5385%)&lt;BR/&gt; 25: (7.69231%)&lt;BR/&gt; 0: (7.69231%)&lt;BR/&gt; 46325: (3.84615%)&gt;];
}
15459--22489[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="201.163.169.107" src_ip="134.73.5.97" src_port="143"/>
      <filter dst_ip="1.241.210.180" src_ip="134.73.5.97" src_port="993"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.8.97"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2710{
style=filled;
color=gray75;
15466[label="55.253.21.97;117pkt 117fpkt", shape=pentagon, color=darkviolet];
22494[label="55.253.21.97;117pkt 117fpkt", shape=invtriangle, color=brown];
stat2710[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.253.21.97:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
15466--22494[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="55.253.21.97" src_port="1028"/>
    </slice>
    <from sec="1241499730" usec="0"/>
    <to sec="1241499767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2711{
style=filled;
color=gray75;
15468[label="216.45.25.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22496[label="216.45.25.97;1pkt 1fpkt", shape=invtriangle, color=brown];
26865[label="216.45.25.97;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2711[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.45.25.97:1235, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1235: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15468--22496[label="1;1pkt 1fpkt"];
15468--26865[label="1;1pkt 1fpkt"];
22496--26865[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="216.45.25.97" src_port="1235"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.157.33.97"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.38.56.97"/>
    </slice>
    <from sec="1241500296" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.134.81.97"/>
    </slice>
    <from sec="1241499892" usec="0"/>
    <to sec="1241499953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2715{
style=filled;
color=gray75;
15482[label="197.78.82.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22505[label="197.78.82.97;1pkt 1fpkt", shape=invtriangle, color=brown];
26869[label="197.78.82.97;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2715[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.78.82.97:2403, 215.66.218.57:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 2403: (50%)&gt;];
}
15482--22505[label="1;1pkt 1fpkt"];
15482--26869[label="1;1pkt 1fpkt"];
22505--26869[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.57" dst_port="3124" src_ip="197.78.82.97" src_port="2403"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.75.163.97"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.189.97"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2718{
style=filled;
color=gray75;
15505[label="2.89.238.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22515[label="2.89.238.97;1pkt 1fpkt", shape=invtriangle, color=brown];
26876[label="2.89.238.97;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2718[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.89.238.97:19101, 215.66.219.234:62992}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62992: (50%)&lt;BR/&gt; 19101: (50%)&gt;];
}
15505--22515[label="1;1pkt 1fpkt"];
15505--26876[label="1;1pkt 1fpkt"];
22515--26876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.234" dst_port="62992" src_ip="2.89.238.97" src_port="19101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.56.10.98"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2720{
style=filled;
color=gray75;
15515[label="151.12.35.98;2pkt 2fpkt", shape=pentagon, color=darkviolet];
22524[label="151.12.35.98;2pkt 2fpkt", shape=invtriangle, color=brown];
26882[label="151.12.35.98;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2720[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.12.35.98:25, 42.210.226.191:1484}[50%]&lt;BR/&gt;{151.12.35.98:25, 42.210.226.191:1496}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1496: (25%)&lt;BR/&gt; 1484: (25%)&gt;];
}
15515--22524[label="1;2pkt 2fpkt"];
15515--26882[label="1;2pkt 2fpkt"];
22524--26882[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.210.226.191" dst_port="1496" src_ip="151.12.35.98" src_port="25"/>
      <filter dst_ip="42.210.226.191" dst_port="1484" src_ip="151.12.35.98" src_port="25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2721{
style=filled;
color=gray75;
15536[label="213.197.191.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22536[label="213.197.191.98;1pkt 1fpkt", shape=invtriangle, color=brown];
26890[label="213.197.191.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2721[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.197.191.98:54646, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54646: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15536--22536[label="1;1pkt 1fpkt"];
15536--26890[label="1;1pkt 1fpkt"];
22536--26890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="213.197.191.98" src_port="54646"/>
    </slice>
    <from sec="1241500246" usec="0"/>
    <to sec="1241500291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.173.49.99"/>
    </slice>
    <from sec="1241499701" usec="0"/>
    <to sec="1241499731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.148.82.99"/>
    </slice>
    <from sec="1241500067" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.172.118.99"/>
    </slice>
    <from sec="1241500137" usec="0"/>
    <to sec="1241500225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.14.178.99"/>
    </slice>
    <from sec="1241499854" usec="0"/>
    <to sec="1241499883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.186.251.99"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.8.100"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.161.22.100"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2729{
style=filled;
color=gray75;
15588[label="61.139.109.100;5pkt 5fpkt", shape=pentagon, color=darkviolet];
22568[label="61.139.109.100;5pkt 5fpkt", shape=invtriangle, color=brown];
stat2729[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.139.109.100:1114, 215.66.218.56:3127}[20%]&lt;BR/&gt;{61.139.109.100:1115, 215.66.218.56:3127}[20%]&lt;BR/&gt;{61.139.109.100:1116, 215.66.218.56:3127}[20%]&lt;BR/&gt;{61.139.109.100:1117, 215.66.218.56:3127}[20%]&lt;BR/&gt;{61.139.109.100:1118, 215.66.218.56:3127}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1118: (10%)&lt;BR/&gt; 1117: (10%)&lt;BR/&gt; 1116: (10%)&lt;BR/&gt; 1115: (10%)&gt;];
}
15588--22568[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.56" dst_port="3127" src_ip="61.139.109.100" src_port="1118"/>
      <filter dst_ip="215.66.218.56" dst_port="3127" src_ip="61.139.109.100" src_port="1117"/>
      <filter dst_ip="215.66.218.56" dst_port="3127" src_ip="61.139.109.100" src_port="1116"/>
      <filter dst_ip="215.66.218.56" dst_port="3127" src_ip="61.139.109.100" src_port="1115"/>
      <filter dst_ip="215.66.218.56" dst_port="3127" src_ip="61.139.109.100" src_port="1114"/>
    </slice>
    <from sec="1241500183" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2730{
style=filled;
color=gray75;
15591[label="41.213.126.100;12pkt 12fpkt", shape=pentagon, color=darkviolet];
22570[label="41.213.126.100;12pkt 12fpkt", shape=invtriangle, color=brown];
stat2730[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.213.126.100:*, 214.163.243.34:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63256: (4.16667%)&lt;BR/&gt; 60686: (4.16667%)&lt;BR/&gt; 59666: (4.16667%)&lt;BR/&gt; 57772: (4.16667%)&gt;];
}
15591--22570[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.243.34" dst_port="80" src_ip="41.213.126.100"/>
    </slice>
    <from sec="1241499649" usec="0"/>
    <to sec="1241500468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.154.161.100"/>
    </slice>
    <from sec="1241500171" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.177.187.100"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.206.218.100"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.132.219.100"/>
    </slice>
    <from sec="1241499807" usec="0"/>
    <to sec="1241499818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2736{
style=filled;
color=gray75;
15623[label="134.73.5.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22590[label="134.73.5.101;1pkt 1fpkt", shape=invtriangle, color=brown];
26914[label="134.73.5.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2736[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.5.101:25, 67.119.180.16:63498}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63498: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
15623--22590[label="1;1pkt 1fpkt"];
15623--26914[label="1;1pkt 1fpkt"];
22590--26914[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="67.119.180.16" dst_port="63498" src_ip="134.73.5.101" src_port="25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.179.49.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.73.79.101"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.59.129.101"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.48.150.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.214.211.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.42.19.102"/>
    </slice>
    <from sec="1241499966" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2743{
style=filled;
color=gray75;
15659[label="134.73.27.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22612[label="134.73.27.102;1pkt 1fpkt", shape=invtriangle, color=brown];
26932[label="134.73.27.102;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2743[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.27.102:25, 59.142.60.28:62524}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62524: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
15659--22612[label="1;1pkt 1fpkt"];
15659--26932[label="1;1pkt 1fpkt"];
22612--26932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="59.142.60.28" dst_port="62524" src_ip="134.73.27.102" src_port="25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.129.89.102"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2745{
style=filled;
color=gray75;
15672[label="35.17.91.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
22621[label="35.17.91.102;2pkt 2fpkt", shape=invtriangle, color=brown];
26938[label="35.17.91.102;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2745[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.17.91.102:57920, 215.66.218.53:3128}[50%]&lt;BR/&gt;{35.17.91.102:36486, 215.66.210.160:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 57920: (25%)&lt;BR/&gt; 36486: (25%)&gt;];
}
15672--22621[label="1;2pkt 2fpkt"];
15672--26938[label="1;2pkt 2fpkt"];
22621--26938[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.210.160" dst_port="3128" src_ip="35.17.91.102" src_port="36486"/>
      <filter dst_ip="215.66.218.53" dst_port="3128" src_ip="35.17.91.102" src_port="57920"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2746{
style=filled;
color=gray75;
15680[label="170.15.141.102;44pkt 44fpkt", shape=pentagon, color=darkviolet];
22624[label="170.15.141.102;44pkt 44fpkt", shape=invtriangle, color=brown];
stat2746[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.141.102:16977, *:*}[54.5455%]&lt;BR/&gt;{170.15.141.102:*, 41.197.28.235:80}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16977: (27.2727%)&lt;BR/&gt; 80: (15.9091%)&lt;BR/&gt; 443: (5.68182%)&lt;BR/&gt; 16512: (2.27273%)&lt;BR/&gt; 123: (2.27273%)&gt;];
}
15680--22624[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="170.15.141.102" src_port="16977"/>
      <filter dst_ip="41.197.28.235" dst_port="80" src_ip="170.15.141.102"/>
    </slice>
    <from sec="1241499647" usec="0"/>
    <to sec="1241500373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.128.20.103"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.187.21.103"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.50.103"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.166.67.103"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241500414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.112.68.103"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.163.88.103"/>
    </slice>
    <from sec="1241499805" usec="0"/>
    <to sec="1241499824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.212.109.103"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2754{
style=filled;
color=gray75;
15710[label="54.164.166.103;3pkt 3fpkt", shape=pentagon, color=darkviolet];
22641[label="54.164.166.103;3pkt 3fpkt", shape=invtriangle, color=brown];
26950[label="54.164.166.103;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2754[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.164.166.103:80, 128.1.212.109:3072}[33.3333%]&lt;BR/&gt;{54.164.166.103:80, 172.204.12.188:1024}[33.3333%]&lt;BR/&gt;{54.164.166.103:80, 168.46.57.196:3072}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3072: (33.3333%)&lt;BR/&gt; 1024: (16.6667%)&gt;];
}
15710--22641[label="1;3pkt 3fpkt"];
15710--26950[label="1;3pkt 3fpkt"];
22641--26950[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="168.46.57.196" dst_port="3072" src_ip="54.164.166.103" src_port="80"/>
      <filter dst_ip="172.204.12.188" dst_port="1024" src_ip="54.164.166.103" src_port="80"/>
      <filter dst_ip="128.1.212.109" dst_port="3072" src_ip="54.164.166.103" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.225.210.103"/>
    </slice>
    <from sec="1241500090" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.70.215.103"/>
    </slice>
    <from sec="1241500269" usec="0"/>
    <to sec="1241500275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.193.43.104"/>
    </slice>
    <from sec="1241499801" usec="0"/>
    <to sec="1241499830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2758{
style=filled;
color=gray75;
15729[label="205.42.59.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22655[label="205.42.59.104;1pkt 1fpkt", shape=invtriangle, color=brown];
26961[label="205.42.59.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2758[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.42.59.104:3077, 214.163.228.3:1931}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3077: (50%)&lt;BR/&gt; 1931: (50%)&gt;];
}
15729--22655[label="1;1pkt 1fpkt"];
15729--26961[label="1;1pkt 1fpkt"];
22655--26961[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.228.3" dst_port="1931" src_ip="205.42.59.104" src_port="3077"/>
    </slice>
    <from sec="1241500210" usec="0"/>
    <to sec="1241500321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.65.92.104"/>
    </slice>
    <from sec="1241500299" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.67.100.104"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2761{
style=filled;
color=gray75;
15738[label="9.36.109.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22660[label="9.36.109.104;1pkt 1fpkt", shape=invtriangle, color=brown];
26966[label="9.36.109.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2761[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.36.109.104:1852, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1852: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15738--22660[label="1;1pkt 1fpkt"];
15738--26966[label="1;1pkt 1fpkt"];
22660--26966[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="9.36.109.104" src_port="1852"/>
    </slice>
    <from sec="1241499763" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.190.117.104"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.209.128.104"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2764{
style=filled;
color=gray75;
15742[label="8.141.141.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22663[label="8.141.141.104;1pkt 1fpkt", shape=invtriangle, color=brown];
26967[label="8.141.141.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2764[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.141.141.104:61931, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61931: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15742--22663[label="1;1pkt 1fpkt"];
15742--26967[label="1;1pkt 1fpkt"];
22663--26967[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="8.141.141.104" src_port="61931"/>
    </slice>
    <from sec="1241500478" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.75.148.104"/>
    </slice>
    <from sec="1241500046" usec="0"/>
    <to sec="1241500057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.226.152.104"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2767{
style=filled;
color=gray75;
15752[label="183.99.196.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22671[label="183.99.196.104;1pkt 1fpkt", shape=invtriangle, color=brown];
26972[label="183.99.196.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2767[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.99.196.104:1060, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1060: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15752--22671[label="1;1pkt 1fpkt"];
15752--26972[label="1;1pkt 1fpkt"];
22671--26972[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="183.99.196.104" src_port="1060"/>
    </slice>
    <from sec="1241500446" usec="0"/>
    <to sec="1241500453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.87.244.104"/>
    </slice>
    <from sec="1241500069" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.142.248.104"/>
    </slice>
    <from sec="1241499936" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.204.28.105"/>
    </slice>
    <from sec="1241500144" usec="0"/>
    <to sec="1241500149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.28.66.105"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.146.162.105"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241499891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.211.196.105"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.66.198.105"/>
    </slice>
    <from sec="1241500172" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.254.244.105"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.67.0.106"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.61.23.106"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.232.38.106"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241500104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.54.43.106"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241499828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2780{
style=filled;
color=gray75;
15819[label="62.18.66.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22723[label="62.18.66.106;1pkt 1fpkt", shape=invtriangle, color=brown];
27002[label="62.18.66.106;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2780[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.18.66.106:49187, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49187: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15819--22723[label="1;1pkt 1fpkt"];
15819--27002[label="1;1pkt 1fpkt"];
22723--27002[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="62.18.66.106" src_port="49187"/>
    </slice>
    <from sec="1241500183" usec="0"/>
    <to sec="1241500213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2781{
style=filled;
color=gray75;
15820[label="38.132.68.106;10pkt 10fpkt", shape=pentagon, color=darkviolet];
22724[label="38.132.68.106;10pkt 10fpkt", shape=invtriangle, color=brown];
stat2781[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.132.68.106:5050, *:*}[80%]&lt;BR/&gt;{38.132.68.106:20, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (40%)&lt;BR/&gt; 20: (10%)&lt;BR/&gt; 49702: (5%)&lt;BR/&gt; 49310: (5%)&lt;BR/&gt; 4976: (5%)&gt;];
}
15820--22724[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="38.132.68.106" src_port="5050"/>
      <filter src_ip="38.132.68.106" src_port="20"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.61.78.106"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.248.133.106"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2784{
style=filled;
color=gray75;
15844[label="54.11.18.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22740[label="54.11.18.107;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2784[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.11.18.107:63633, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63633: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15844--22740[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="54.11.18.107" src_port="63633"/>
    </slice>
    <from sec="1241500380" usec="0"/>
    <to sec="1241500414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2785{
style=filled;
color=gray75;
15847[label="210.195.43.107;30pkt 30fpkt", shape=pentagon, color=darkviolet];
22743[label="210.195.43.107;30pkt 30fpkt", shape=invtriangle, color=brown];
27013[label="210.195.43.107;30pkt 30fpkt", shape=invhouse, color=bisque];
stat2785[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.195.43.107:21, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 52093: (1.66667%)&lt;BR/&gt; 52081: (1.66667%)&lt;BR/&gt; 52075: (1.66667%)&lt;BR/&gt; 52035: (1.66667%)&gt;];
}
15847--22743[label="1;30pkt 30fpkt"];
15847--27013[label="1;30pkt 30fpkt"];
22743--27013[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="210.195.43.107" src_port="21"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2786{
style=filled;
color=gray75;
15848[label="202.50.48.107;2pkt 2fpkt", shape=pentagon, color=darkviolet];
22744[label="202.50.48.107;2pkt 2fpkt", shape=invtriangle, color=brown];
27014[label="202.50.48.107;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2786[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.50.48.107:80, 214.163.52.39:33344}[50%]&lt;BR/&gt;{202.50.48.107:80, 214.163.52.39:33346}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33346: (25%)&lt;BR/&gt; 33344: (25%)&gt;];
}
15848--22744[label="1;2pkt 2fpkt"];
15848--27014[label="1;2pkt 2fpkt"];
22744--27014[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.52.39" dst_port="33346" src_ip="202.50.48.107" src_port="80"/>
      <filter dst_ip="214.163.52.39" dst_port="33344" src_ip="202.50.48.107" src_port="80"/>
    </slice>
    <from sec="1241500473" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.42.155.107"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.75.166.107"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.210.193.107"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.172.20.108"/>
    </slice>
    <from sec="1241499874" usec="0"/>
    <to sec="1241500017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.177.36.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.41.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2793{
style=filled;
color=gray75;
15880[label="46.47.46.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22766[label="46.47.46.108;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2793[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.47.46.108:80, 214.170.73.155:59309}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59309: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15880--22766[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.170.73.155" dst_port="59309" src_ip="46.47.46.108" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.162.72.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2795{
style=filled;
color=gray75;
15888[label="206.14.93.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22773[label="206.14.93.108;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2795[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.14.93.108:50932, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50932: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15888--22773[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="206.14.93.108" src_port="50932"/>
    </slice>
    <from sec="1241500486" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.181.120.108"/>
    </slice>
    <from sec="1241500084" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.56.153.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.157.170.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.128.199.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.167.0.109"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.214.25.109"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2802{
style=filled;
color=gray75;
15921[label="4.64.39.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22793[label="4.64.39.109;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2802[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.64.39.109:45816, 215.66.219.235:63124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63124: (50%)&lt;BR/&gt; 45816: (50%)&gt;];
}
15921--22793[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="63124" src_ip="4.64.39.109" src_port="45816"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.10.154.109"/>
    </slice>
    <from sec="1241500029" usec="0"/>
    <to sec="1241500102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.69.226.109"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.37.4.110"/>
    </slice>
    <from sec="1241499654" usec="0"/>
    <to sec="1241499669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.202.117.110"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.225.139.110"/>
    </slice>
    <from sec="1241499764" usec="0"/>
    <to sec="1241499899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.78.215.110"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.68.8.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.111.15.111"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.147.33.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.129.63.111"/>
    </slice>
    <from sec="1241500285" usec="0"/>
    <to sec="1241500355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.36.135.111"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2814{
style=filled;
color=gray75;
16004[label="38.204.168.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22852[label="38.204.168.111;1pkt 1fpkt", shape=invtriangle, color=brown];
27067[label="38.204.168.111;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2814[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.204.168.111:2345, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2345: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16004--22852[label="1;1pkt 1fpkt"];
16004--27067[label="1;1pkt 1fpkt"];
22852--27067[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="38.204.168.111" src_port="2345"/>
    </slice>
    <from sec="1241499874" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.86.173.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2816{
style=filled;
color=gray75;
16009[label="39.96.210.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22856[label="39.96.210.111;1pkt 1fpkt", shape=invtriangle, color=brown];
27069[label="39.96.210.111;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2816[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.96.210.111:62619, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62619: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16009--22856[label="1;1pkt 1fpkt"];
16009--27069[label="1;1pkt 1fpkt"];
22856--27069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="39.96.210.111" src_port="62619"/>
    </slice>
    <from sec="1241499648" usec="0"/>
    <to sec="1241500292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.198.255.111"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2818{
style=filled;
color=gray75;
16024[label="214.35.63.112;3pkt 3fpkt", shape=pentagon, color=darkviolet];
22864[label="214.35.63.112;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2818[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.35.63.112:1231, 214.170.109.95:1434}[33.3333%]&lt;BR/&gt;{214.35.63.112:1231, 170.15.242.210:1434}[33.3333%]&lt;BR/&gt;{214.35.63.112:1231, 134.73.126.249:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1231: (50%)&gt;];
}
16024--22864[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.126.249" dst_port="1434" src_ip="214.35.63.112" src_port="1231"/>
      <filter dst_ip="170.15.242.210" dst_port="1434" src_ip="214.35.63.112" src_port="1231"/>
      <filter dst_ip="214.170.109.95" dst_port="1434" src_ip="214.35.63.112" src_port="1231"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.193.102.112"/>
    </slice>
    <from sec="1241500293" usec="0"/>
    <to sec="1241500325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.13.184.112"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.56.12.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2822{
style=filled;
color=gray75;
16061[label="128.156.151.113;6pkt 6fpkt", shape=pentagon, color=darkviolet];
22888[label="128.156.151.113;6pkt 6fpkt", shape=invtriangle, color=brown];
stat2822[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.151.113:*, 45.87.28.102:443}[33.3333%]&lt;BR/&gt;{128.156.151.113:*, 9.130.116.109:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (41.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 58621: (8.33333%)&lt;BR/&gt; 47048: (8.33333%)&lt;BR/&gt; 44565: (8.33333%)&gt;];
}
16061--22888[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="9.130.116.109" dst_port="443" src_ip="128.156.151.113"/>
      <filter dst_ip="45.87.28.102" dst_port="443" src_ip="128.156.151.113"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241500443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.85.156.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2824{
style=filled;
color=gray75;
16065[label="134.73.166.113;34pkt 34fpkt", shape=pentagon, color=darkviolet];
22892[label="134.73.166.113;34pkt 34fpkt", shape=invtriangle, color=brown];
27088[label="134.73.166.113;34pkt 34fpkt", shape=invhouse, color=bisque];
stat2824[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.166.113:*, 40.234.15.230:80}[38.2353%]&lt;BR/&gt;{134.73.166.113:*, 38.132.132.241:80}[26.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 443: (2.94118%)&lt;BR/&gt; 4575: (1.47059%)&lt;BR/&gt; 4573: (1.47059%)&lt;BR/&gt; 4569: (1.47059%)&gt;];
}
16065--22892[label="1;34pkt 34fpkt"];
16065--27088[label="1;34pkt 34fpkt"];
22892--27088[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="40.234.15.230" dst_port="80" src_ip="134.73.166.113"/>
      <filter dst_ip="38.132.132.241" dst_port="80" src_ip="134.73.166.113"/>
    </slice>
    <from sec="1241500268" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.15.186.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.86.190.113"/>
    </slice>
    <from sec="1241499713" usec="0"/>
    <to sec="1241500107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2827{
style=filled;
color=gray75;
16072[label="151.71.235.113;2pkt 2fpkt", shape=pentagon, color=darkviolet];
22897[label="151.71.235.113;2pkt 2fpkt", shape=invtriangle, color=brown];
27091[label="151.71.235.113;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2827[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.71.235.113:80, 7.53.27.175:1070}[50%]&lt;BR/&gt;{151.71.235.113:80, 7.53.27.175:1071}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1071: (25%)&lt;BR/&gt; 1070: (25%)&gt;];
}
16072--22897[label="1;2pkt 2fpkt"];
16072--27091[label="1;2pkt 2fpkt"];
22897--27091[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="7.53.27.175" dst_port="1071" src_ip="151.71.235.113" src_port="80"/>
      <filter dst_ip="7.53.27.175" dst_port="1070" src_ip="151.71.235.113" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2828{
style=filled;
color=gray75;
16073[label="9.153.6.114;431pkt 431fpkt", shape=pentagon, color=darkviolet];
22898[label="9.153.6.114;431pkt 431fpkt", shape=invtriangle, color=brown];
stat2828[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.153.6.114:7000, *:*}[52.2042%]&lt;BR/&gt;{9.153.6.114:7100, *:*}[47.7958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (26.1021%)&lt;BR/&gt; 7100: (23.8979%)&lt;BR/&gt; 64831: (0.232019%)&lt;BR/&gt; 64531: (0.232019%)&lt;BR/&gt; 64119: (0.232019%)&gt;];
}
16073--22898[label="1;431pkt 431fpkt"];
</description>
    <slice>
      <filter src_ip="9.153.6.114" src_port="7000"/>
      <filter src_ip="9.153.6.114" src_port="7100"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2829{
style=filled;
color=gray75;
16077[label="9.242.42.114;20pkt 20fpkt", shape=pentagon, color=darkviolet];
22902[label="9.242.42.114;20pkt 20fpkt", shape=invtriangle, color=brown];
stat2829[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.242.42.114:*, 134.73.27.124:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3815: (2.5%)&lt;BR/&gt; 3814: (2.5%)&lt;BR/&gt; 3811: (2.5%)&lt;BR/&gt; 3809: (2.5%)&gt;];
}
16077--22902[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.27.124" dst_port="80" src_ip="9.242.42.114"/>
    </slice>
    <from sec="1241499646" usec="0"/>
    <to sec="1241499714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2830{
style=filled;
color=gray75;
759[label="170.15.184.26;d;25pkt 25fpkt", shape=diamond, color=yellow];
762[label="222.64.102.34;s;2pkt 2fpkt", shape=diamond, color=yellow];
5095[label="222.64.100.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
11109[label="222.64.100.41;s;1pkt 1fpkt", shape=hexagon, color=black];
13551[label="222.64.100.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15818[label="209.141.61.106;27pkt 27fpkt", shape=pentagon, color=darkviolet];
21235[label="222.64.100.41;1pkt 1fpkt", shape=invtriangle, color=brown];
22722[label="209.141.61.106;27pkt 27fpkt", shape=invtriangle, color=brown];
26173[label="222.64.100.41;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2830[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.141.61.106:80, 170.15.184.26:*}[65.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7674%)&lt;BR/&gt; 5900: (3.48837%)&lt;BR/&gt; 4405: (3.48837%)&lt;BR/&gt; 4525: (1.74419%)&lt;BR/&gt; 4518: (1.74419%)&gt;];
}
759--762[label="0.5;1pkt 1fpkt"];
759--5095[label="1;1pkt 1fpkt"];
759--11109[label="1;1pkt 1fpkt"];
759--11838[label="0.08;2pkt 2fpkt"];
759--11868[label="0.08;2pkt 2fpkt"];
759--11875[label="0.04;1pkt 1fpkt"];
759--11884[label="0.08;2pkt 2fpkt"];
759--11897[label="0.08;2pkt 2fpkt"];
759--11903[label="0.08;2pkt 2fpkt"];
759--11909[label="0.04;1pkt 1fpkt"];
759--11917[label="0.08;2pkt 2fpkt"];
759--11928[label="0.04;1pkt 1fpkt"];
759--13385[label="0.04;1pkt 1fpkt"];
759--13551[label="1;1pkt 1fpkt"];
759--15818[label="0.72;18pkt 18fpkt"];
759--21235[label="1;1pkt 1fpkt"];
759--22722[label="0.72;18pkt 18fpkt"];
759--26173[label="1;1pkt 1fpkt"];
762--9530[label="0.5;1pkt 1fpkt"];
762--11675[label="0.5;1pkt 1fpkt"];
762--11802[label="0.5;1pkt 1fpkt"];
762--11882[label="0.5;1pkt 1fpkt"];
762--11914[label="0.5;1pkt 1fpkt"];
5095--11109[label="1;1pkt 1fpkt"];
5095--13551[label="1;1pkt 1fpkt"];
5095--21235[label="1;1pkt 1fpkt"];
5095--26173[label="1;1pkt 1fpkt"];
11109--13551[label="1;1pkt 1fpkt"];
11109--21235[label="1;1pkt 1fpkt"];
11109--26173[label="1;1pkt 1fpkt"];
13551--21235[label="1;1pkt 1fpkt"];
13551--26173[label="1;1pkt 1fpkt"];
15818--22722[label="1;27pkt 27fpkt"];
21235--26173[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.184.26" src_ip="209.141.61.106" src_port="80"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2831{
style=filled;
color=gray75;
16099[label="223.99.236.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22914[label="223.99.236.114;1pkt 1fpkt", shape=invtriangle, color=brown];
27100[label="223.99.236.114;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2831[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.99.236.114:0, 215.135.160.88:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
16099--22914[label="1;1pkt 1fpkt"];
16099--27100[label="1;1pkt 1fpkt"];
22914--27100[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.135.160.88" src_ip="223.99.236.114"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2832{
style=filled;
color=gray75;
16111[label="57.82.82.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22920[label="57.82.82.115;1pkt 1fpkt", shape=invtriangle, color=brown];
27104[label="57.82.82.115;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2832[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.82.82.115:15232, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15232: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16111--22920[label="1;1pkt 1fpkt"];
16111--27104[label="1;1pkt 1fpkt"];
22920--27104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="57.82.82.115" src_port="15232"/>
    </slice>
    <from sec="1241500260" usec="0"/>
    <to sec="1241500289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2833{
style=filled;
color=gray75;
16126[label="203.244.188.115;4pkt 4fpkt", shape=pentagon, color=darkviolet];
22924[label="203.244.188.115;4pkt 4fpkt", shape=invtriangle, color=brown];
27107[label="203.244.188.115;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2833[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.244.188.115:62692, 215.66.218.52:3128}[25%]&lt;BR/&gt;{203.244.188.115:62708, 215.66.218.53:3127}[25%]&lt;BR/&gt;{203.244.188.115:62715, 215.66.218.57:3127}[25%]&lt;BR/&gt;{203.244.188.115:62717, 215.66.218.57:3124}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (25%)&lt;BR/&gt; 62717: (12.5%)&lt;BR/&gt; 62715: (12.5%)&lt;BR/&gt; 62708: (12.5%)&lt;BR/&gt; 62692: (12.5%)&gt;];
}
16126--22924[label="1;4pkt 4fpkt"];
16126--27107[label="1;4pkt 4fpkt"];
22924--27107[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.57" dst_port="3124" src_ip="203.244.188.115" src_port="62717"/>
      <filter dst_ip="215.66.218.57" dst_port="3127" src_ip="203.244.188.115" src_port="62715"/>
      <filter dst_ip="215.66.218.53" dst_port="3127" src_ip="203.244.188.115" src_port="62708"/>
      <filter dst_ip="215.66.218.52" dst_port="3128" src_ip="203.244.188.115" src_port="62692"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2834{
style=filled;
color=gray75;
16131[label="170.15.229.115;40pkt 40fpkt", shape=pentagon, color=darkviolet];
22927[label="170.15.229.115;40pkt 40fpkt", shape=invtriangle, color=brown];
27110[label="170.15.229.115;40pkt 40fpkt", shape=invhouse, color=bisque];
stat2834[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.229.115:*, 193.60.255.36:80}[57.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63432: (1.25%)&lt;BR/&gt; 63429: (1.25%)&lt;BR/&gt; 63420: (1.25%)&lt;BR/&gt; 63419: (1.25%)&gt;];
}
16131--22927[label="1;40pkt 40fpkt"];
16131--27110[label="1;40pkt 40fpkt"];
22927--27110[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="193.60.255.36" dst_port="80" src_ip="170.15.229.115"/>
    </slice>
    <from sec="1241499953" usec="0"/>
    <to sec="1241500264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.41.236.115"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.24.116"/>
    </slice>
    <from sec="1241499638" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.2.72.116"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.187.73.116"/>
    </slice>
    <from sec="1241499820" usec="0"/>
    <to sec="1241499827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.48.178.116"/>
    </slice>
    <from sec="1241500109" usec="0"/>
    <to sec="1241500129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.186.23.117"/>
    </slice>
    <from sec="1241499881" usec="0"/>
    <to sec="1241499982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.215.29.117"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.69.77.117"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2843{
style=filled;
color=gray75;
16182[label="205.2.170.117;13pkt 13fpkt", shape=pentagon, color=darkviolet];
22955[label="205.2.170.117;13pkt 13fpkt", shape=invtriangle, color=brown];
27126[label="205.2.170.117;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2843[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.2.170.117:*, 170.15.19.236:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2666: (3.84615%)&lt;BR/&gt; 2664: (3.84615%)&lt;BR/&gt; 2662: (3.84615%)&lt;BR/&gt; 2660: (3.84615%)&gt;];
}
16182--22955[label="1;13pkt 13fpkt"];
16182--27126[label="1;13pkt 13fpkt"];
22955--27126[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.236" dst_port="80" src_ip="205.2.170.117"/>
    </slice>
    <from sec="1241500231" usec="0"/>
    <to sec="1241500235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.54.71.118"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.144.88.118"/>
    </slice>
    <from sec="1241499982" usec="0"/>
    <to sec="1241500177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2846{
style=filled;
color=gray75;
16207[label="162.229.129.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
22970[label="162.229.129.118;2pkt 2fpkt", shape=invtriangle, color=brown];
27136[label="162.229.129.118;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2846[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.229.129.118:80, 128.156.179.52:37943}[50%]&lt;BR/&gt;{162.229.129.118:80, 151.12.193.162:17200}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37943: (25%)&lt;BR/&gt; 17200: (25%)&gt;];
}
16207--22970[label="1;2pkt 2fpkt"];
16207--27136[label="1;2pkt 2fpkt"];
22970--27136[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.12.193.162" dst_port="17200" src_ip="162.229.129.118" src_port="80"/>
      <filter dst_ip="128.156.179.52" dst_port="37943" src_ip="162.229.129.118" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.75.148.118"/>
    </slice>
    <from sec="1241500457" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.15.165.118"/>
    </slice>
    <from sec="1241499854" usec="0"/>
    <to sec="1241499903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.213.118"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.110.9.119"/>
    </slice>
    <from sec="1241499777" usec="0"/>
    <to sec="1241500459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.66.65.119"/>
    </slice>
    <from sec="1241500065" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2852{
style=filled;
color=gray75;
16243[label="134.73.214.119;4pkt 4fpkt", shape=pentagon, color=darkviolet];
22991[label="134.73.214.119;4pkt 4fpkt", shape=invtriangle, color=brown];
stat2852[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.214.119:25, 0.35.17.21:2803}[25%]&lt;BR/&gt;{134.73.214.119:25, 0.35.17.21:2857}[25%]&lt;BR/&gt;{134.73.214.119:25, 36.139.226.118:8877}[25%]&lt;BR/&gt;{134.73.214.119:25, 36.139.226.118:8880}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 8880: (12.5%)&lt;BR/&gt; 8877: (12.5%)&lt;BR/&gt; 2857: (12.5%)&lt;BR/&gt; 2803: (12.5%)&gt;];
}
16243--22991[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="36.139.226.118" dst_port="8880" src_ip="134.73.214.119" src_port="25"/>
      <filter dst_ip="36.139.226.118" dst_port="8877" src_ip="134.73.214.119" src_port="25"/>
      <filter dst_ip="0.35.17.21" dst_port="2857" src_ip="134.73.214.119" src_port="25"/>
      <filter dst_ip="0.35.17.21" dst_port="2803" src_ip="134.73.214.119" src_port="25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.231.42.120"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2854{
style=filled;
color=gray75;
16257[label="70.118.50.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23000[label="70.118.50.120;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2854[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.118.50.120:12962, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12962: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16257--23000[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="70.118.50.120" src_port="12962"/>
    </slice>
    <from sec="1241500308" usec="0"/>
    <to sec="1241500333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.132.61.120"/>
    </slice>
    <from sec="1241499727" usec="0"/>
    <to sec="1241499960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.81.65.120"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2857{
style=filled;
color=gray75;
16269[label="214.39.122.120;2pkt 2fpkt", shape=pentagon, color=darkviolet];
23007[label="214.39.122.120;2pkt 2fpkt", shape=invtriangle, color=brown];
27161[label="214.39.122.120;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2857[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.39.122.120:1482, 170.15.204.58:1434}[50%]&lt;BR/&gt;{214.39.122.120:1482, 128.1.20.192:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1482: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
16269--23007[label="1;2pkt 2fpkt"];
16269--27161[label="1;2pkt 2fpkt"];
23007--27161[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.1.20.192" dst_port="1434" src_ip="214.39.122.120" src_port="1482"/>
      <filter dst_ip="170.15.204.58" dst_port="1434" src_ip="214.39.122.120" src_port="1482"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2858{
style=filled;
color=gray75;
16270[label="12.12.126.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23008[label="12.12.126.120;1pkt 1fpkt", shape=invtriangle, color=brown];
27162[label="12.12.126.120;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2858[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.12.126.120:63630, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63630: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16270--23008[label="1;1pkt 1fpkt"];
16270--27162[label="1;1pkt 1fpkt"];
23008--27162[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="12.12.126.120" src_port="63630"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.119.19.121"/>
    </slice>
    <from sec="1241500405" usec="0"/>
    <to sec="1241500423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.177.29.121"/>
    </slice>
    <from sec="1241500395" usec="0"/>
    <to sec="1241500415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.237.190.121"/>
    </slice>
    <from sec="1241500386" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.79.20.122"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.65.99.122"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.142.158.122"/>
    </slice>
    <from sec="1241500418" usec="0"/>
    <to sec="1241500439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.72.67.123"/>
    </slice>
    <from sec="1241500143" usec="0"/>
    <to sec="1241500175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2866{
style=filled;
color=gray75;
16351[label="38.132.68.123;3pkt 3fpkt", shape=pentagon, color=darkviolet];
23062[label="38.132.68.123;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2866[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.132.68.123:5050, 172.204.239.23:3176}[33.3333%]&lt;BR/&gt;{38.132.68.123:5050, 172.204.182.117:1046}[33.3333%]&lt;BR/&gt;{38.132.68.123:5050, 172.204.210.185:1285}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 3176: (16.6667%)&lt;BR/&gt; 1285: (16.6667%)&lt;BR/&gt; 1046: (16.6667%)&gt;];
}
16351--23062[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.210.185" dst_port="1285" src_ip="38.132.68.123" src_port="5050"/>
      <filter dst_ip="172.204.182.117" dst_port="1046" src_ip="38.132.68.123" src_port="5050"/>
      <filter dst_ip="172.204.239.23" dst_port="3176" src_ip="38.132.68.123" src_port="5050"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2867{
style=filled;
color=gray75;
16372[label="4.42.29.124;2pkt 2fpkt", shape=pentagon, color=darkviolet];
23077[label="4.42.29.124;2pkt 2fpkt", shape=invtriangle, color=brown];
27198[label="4.42.29.124;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2867[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.42.29.124:80, 215.66.219.235:62362}[50%]&lt;BR/&gt;{4.42.29.124:80, 215.66.219.235:63071}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63071: (25%)&lt;BR/&gt; 62362: (25%)&gt;];
}
16372--23077[label="1;2pkt 2fpkt"];
16372--27198[label="1;2pkt 2fpkt"];
23077--27198[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="63071" src_ip="4.42.29.124" src_port="80"/>
      <filter dst_ip="215.66.219.235" dst_port="62362" src_ip="4.42.29.124" src_port="80"/>
    </slice>
    <from sec="1241499937" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.222.65.124"/>
    </slice>
    <from sec="1241499794" usec="0"/>
    <to sec="1241499942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.52.8.125"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.93.31.125"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.60.85.125"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2872{
style=filled;
color=gray75;
7495[label="128.1.213.172;d;669pkt 669fpkt", shape=diamond, color=yellow];
16157[label="66.74.196.116;156pkt 156fpkt", shape=pentagon, color=darkviolet];
16420[label="66.74.156.125;102pkt 102fpkt", shape=pentagon, color=darkviolet];
22943[label="66.74.196.116;156pkt 156fpkt", shape=invtriangle, color=brown];
23110[label="66.74.156.125;102pkt 102fpkt", shape=invtriangle, color=brown];
27118[label="66.74.196.116;156pkt 156fpkt", shape=invhouse, color=bisque];
stat2872[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.74.196.116:*, 128.1.213.172:42806}[21.0243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42806: (21.6629%)&lt;BR/&gt; 10801: (10.3281%)&lt;BR/&gt; 57917: (4.77256%)&lt;BR/&gt; 55347: (4.25056%)&lt;BR/&gt; 39219: (2.42356%)&gt;];
}
7495--16157[label="0.724359;113pkt 113fpkt"];
7495--16420[label="0.705882;72pkt 72fpkt"];
7495--22943[label="0.724359;113pkt 113fpkt"];
7495--23110[label="0.705882;72pkt 72fpkt"];
7495--27118[label="0.724359;113pkt 113fpkt"];
16157--22943[label="1;156pkt 156fpkt"];
16157--27118[label="1;156pkt 156fpkt"];
16420--23110[label="1;102pkt 102fpkt"];
22943--27118[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_ip="128.1.213.172" dst_port="42806" src_ip="66.74.196.116"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.104.24.126"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2874{
style=filled;
color=gray75;
16431[label="7.87.58.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23117[label="7.87.58.126;1pkt 1fpkt", shape=invtriangle, color=brown];
27215[label="7.87.58.126;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2874[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.87.58.126:29452, 215.66.219.235:61751}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61751: (50%)&lt;BR/&gt; 29452: (50%)&gt;];
}
16431--23117[label="1;1pkt 1fpkt"];
16431--27215[label="1;1pkt 1fpkt"];
23117--27215[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="61751" src_ip="7.87.58.126" src_port="29452"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2875{
style=filled;
color=gray75;
16434[label="156.224.69.126;10pkt 10fpkt", shape=pentagon, color=darkviolet];
23120[label="156.224.69.126;10pkt 10fpkt", shape=invtriangle, color=brown];
27217[label="156.224.69.126;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2875[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.224.69.126:25, 0.165.130.40:*}[20%]&lt;BR/&gt;{156.224.69.126:80, 41.213.126.198:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 63526: (5%)&lt;BR/&gt; 54771: (5%)&lt;BR/&gt; 49298: (5%)&gt;];
}
16434--23120[label="1;10pkt 10fpkt"];
16434--27217[label="1;10pkt 10fpkt"];
23120--27217[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="41.213.126.198" src_ip="156.224.69.126" src_port="80"/>
      <filter dst_ip="0.165.130.40" src_ip="156.224.69.126" src_port="25"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.74.126"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2877{
style=filled;
color=gray75;
16448[label="170.15.194.126;30pkt 30fpkt", shape=pentagon, color=darkviolet];
23128[label="170.15.194.126;30pkt 30fpkt", shape=invtriangle, color=brown];
stat2877[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.194.126:*, 68.3.188.22:80}[36.6667%]&lt;BR/&gt;{170.15.194.126:*, 194.198.224.8:80}[20%]&lt;BR/&gt;{170.15.194.126:*, 68.2.155.216:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2500: (1.66667%)&lt;BR/&gt; 2498: (1.66667%)&lt;BR/&gt; 2497: (1.66667%)&lt;BR/&gt; 2496: (1.66667%)&gt;];
}
16448--23128[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="68.3.188.22" dst_port="80" src_ip="170.15.194.126"/>
      <filter dst_ip="68.2.155.216" dst_port="80" src_ip="170.15.194.126"/>
      <filter dst_ip="194.198.224.8" dst_port="80" src_ip="170.15.194.126"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.228.96.127"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.85.203.127"/>
    </slice>
    <from sec="1241499744" usec="0"/>
    <to sec="1241500411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.220.2.128"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.149.48.128"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.218.50.128"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2883{
style=filled;
color=gray75;
16487[label="1.162.67.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23156[label="1.162.67.128;1pkt 1fpkt", shape=invtriangle, color=brown];
27243[label="1.162.67.128;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2883[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.162.67.128:2709, 215.66.218.53:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 2709: (50%)&gt;];
}
16487--23156[label="1;1pkt 1fpkt"];
16487--27243[label="1;1pkt 1fpkt"];
23156--27243[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.53" dst_port="3127" src_ip="1.162.67.128" src_port="2709"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.95.128"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2885{
style=filled;
color=gray75;
16494[label="51.66.110.128;168pkt 168fpkt", shape=pentagon, color=darkviolet];
23161[label="51.66.110.128;168pkt 168fpkt", shape=invtriangle, color=brown];
27248[label="51.66.110.128;167pkt 167fpkt", shape=invhouse, color=bisque];
stat2885[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.66.110.128:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65512: (0.298211%)&lt;BR/&gt; 64975: (0.298211%)&lt;BR/&gt; 64889: (0.298211%)&lt;BR/&gt; 63176: (0.298211%)&gt;];
}
16494--23161[label="1;168pkt 168fpkt"];
16494--27248[label="1;167pkt 167fpkt"];
23161--27248[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="51.66.110.128"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.154.128"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2887{
style=filled;
color=gray75;
16512[label="215.66.210.128;3pkt 3fpkt", shape=pentagon, color=darkviolet];
23177[label="215.66.210.128;3pkt 3fpkt", shape=invtriangle, color=brown];
27257[label="215.66.210.128;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2887[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.210.128:53, 70.187.1.86:14217}[33.3333%]&lt;BR/&gt;{215.66.210.128:4089, 70.187.1.86:62023}[33.3333%]&lt;BR/&gt;{215.66.210.128:20827, 70.187.1.86:55828}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62023: (16.6667%)&lt;BR/&gt; 55828: (16.6667%)&lt;BR/&gt; 20827: (16.6667%)&lt;BR/&gt; 14217: (16.6667%)&lt;BR/&gt; 4089: (16.6667%)&gt;];
}
16512--23177[label="1;3pkt 3fpkt"];
16512--27257[label="1;3pkt 3fpkt"];
23177--27257[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="70.187.1.86" dst_port="55828" src_ip="215.66.210.128" src_port="20827"/>
      <filter dst_ip="70.187.1.86" dst_port="62023" src_ip="215.66.210.128" src_port="4089"/>
      <filter dst_ip="70.187.1.86" dst_port="14217" src_ip="215.66.210.128" src_port="53"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.3.12.129"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.145.41.129"/>
    </slice>
    <from sec="1241500156" usec="0"/>
    <to sec="1241500208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2890{
style=filled;
color=gray75;
16534[label="51.66.110.129;152pkt 152fpkt", shape=pentagon, color=darkviolet];
23185[label="51.66.110.129;152pkt 152fpkt", shape=invtriangle, color=brown];
stat2890[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.66.110.129:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65047: (0.328947%)&lt;BR/&gt; 64939: (0.328947%)&lt;BR/&gt; 64885: (0.328947%)&lt;BR/&gt; 64875: (0.328947%)&gt;];
}
16534--23185[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="51.66.110.129"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.176.222.129"/>
    </slice>
    <from sec="1241500413" usec="0"/>
    <to sec="1241500431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.205.21.130"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.27.130"/>
    </slice>
    <from sec="1241499761" usec="0"/>
    <to sec="1241500407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.213.214.130"/>
    </slice>
    <from sec="1241499696" usec="0"/>
    <to sec="1241500363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.175.244.130"/>
    </slice>
    <from sec="1241499961" usec="0"/>
    <to sec="1241499999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.136.37.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.95.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.52.196.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.200.131"/>
    </slice>
    <from sec="1241500188" usec="0"/>
    <to sec="1241500248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.16.224.131"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2901{
style=filled;
color=gray75;
16646[label="8.120.41.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
23260[label="8.120.41.132;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2901[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.120.41.132:61245, 215.66.153.156:19391}[50%]&lt;BR/&gt;{8.120.41.132:62479, 215.66.134.244:12798}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62479: (25%)&lt;BR/&gt; 61245: (25%)&lt;BR/&gt; 19391: (25%)&lt;BR/&gt; 12798: (25%)&gt;];
}
16646--23260[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.134.244" dst_port="12798" src_ip="8.120.41.132" src_port="62479"/>
      <filter dst_ip="215.66.153.156" dst_port="19391" src_ip="8.120.41.132" src_port="61245"/>
    </slice>
    <from sec="1241499831" usec="0"/>
    <to sec="1241500329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.212.87.132"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2903{
style=filled;
color=gray75;
16658[label="195.102.141.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23267[label="195.102.141.132;1pkt 1fpkt", shape=invtriangle, color=brown];
27307[label="195.102.141.132;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2903[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.102.141.132:80, 215.66.219.235:62404}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62404: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16658--23267[label="1;1pkt 1fpkt"];
16658--27307[label="1;1pkt 1fpkt"];
23267--27307[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62404" src_ip="195.102.141.132" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.44.204.132"/>
    </slice>
    <from sec="1241500266" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.66.214.132"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.215.132"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2907{
style=filled;
color=gray75;
16674[label="134.73.230.132;15pkt 15fpkt", shape=pentagon, color=darkviolet];
23279[label="134.73.230.132;15pkt 15fpkt", shape=invtriangle, color=brown];
stat2907[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.230.132:*, 216.212.197.113:80}[40%]&lt;BR/&gt;{134.73.230.132:*, 68.1.194.149:443}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.6667%)&lt;BR/&gt; 443: (23.3333%)&lt;BR/&gt; 4470: (3.33333%)&lt;BR/&gt; 4414: (3.33333%)&lt;BR/&gt; 4356: (3.33333%)&gt;];
}
16674--23279[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="68.1.194.149" dst_port="443" src_ip="134.73.230.132"/>
      <filter dst_ip="216.212.197.113" dst_port="80" src_ip="134.73.230.132"/>
    </slice>
    <from sec="1241499843" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.232.132"/>
    </slice>
    <from sec="1241500232" usec="0"/>
    <to sec="1241500282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.60.9.133"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.21.21.133"/>
    </slice>
    <from sec="1241500322" usec="0"/>
    <to sec="1241500329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.95.133"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2912{
style=filled;
color=gray75;
16695[label="69.212.103.133;459pkt 459fpkt", shape=pentagon, color=darkviolet];
23292[label="69.212.103.133;459pkt 459fpkt", shape=invtriangle, color=brown];
stat2912[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.212.103.133:18033, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18033: (50%)&lt;BR/&gt; 65392: (0.108932%)&lt;BR/&gt; 65332: (0.108932%)&lt;BR/&gt; 65137: (0.108932%)&lt;BR/&gt; 65129: (0.108932%)&gt;];
}
16695--23292[label="1;459pkt 459fpkt"];
</description>
    <slice>
      <filter src_ip="69.212.103.133" src_port="18033"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.100.150.133"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241499789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2914{
style=filled;
color=gray75;
16712[label="2.91.171.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23303[label="2.91.171.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2914[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.91.171.133:37379, 215.66.219.235:62026}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62026: (50%)&lt;BR/&gt; 37379: (50%)&gt;];
}
16712--23303[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62026" src_ip="2.91.171.133" src_port="37379"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.54.201.133"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.84.20.134"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.60.61.134"/>
    </slice>
    <from sec="1241500123" usec="0"/>
    <to sec="1241500145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2918{
style=filled;
color=gray75;
16739[label="69.62.144.134;26pkt 26fpkt", shape=pentagon, color=darkviolet];
23319[label="69.62.144.134;26pkt 26fpkt", shape=invtriangle, color=brown];
27334[label="69.62.144.134;26pkt 26fpkt", shape=invhouse, color=bisque];
stat2918[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.62.144.134:*, 134.73.177.36:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60149: (1.92308%)&lt;BR/&gt; 60148: (1.92308%)&lt;BR/&gt; 60147: (1.92308%)&lt;BR/&gt; 60146: (1.92308%)&gt;];
}
16739--23319[label="1;26pkt 26fpkt"];
16739--27334[label="1;26pkt 26fpkt"];
23319--27334[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.177.36" dst_port="80" src_ip="69.62.144.134"/>
    </slice>
    <from sec="1241500447" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.54.149.134"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.65.158.134"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2921{
style=filled;
color=gray75;
16747[label="181.13.180.134;11pkt 11fpkt", shape=pentagon, color=darkviolet];
23326[label="181.13.180.134;11pkt 11fpkt", shape=invtriangle, color=brown];
27340[label="181.13.180.134;11pkt 11fpkt", shape=invhouse, color=bisque];
stat2921[shape=component, label=&lt;Rules:&lt;BR/&gt;{181.13.180.134:*, 134.73.153.97:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2279: (4.54545%)&lt;BR/&gt; 2271: (4.54545%)&lt;BR/&gt; 2256: (4.54545%)&lt;BR/&gt; 2238: (4.54545%)&gt;];
}
16747--23326[label="1;11pkt 11fpkt"];
16747--27340[label="1;11pkt 11fpkt"];
23326--27340[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.153.97" dst_port="25" src_ip="181.13.180.134"/>
    </slice>
    <from sec="1241500202" usec="0"/>
    <to sec="1241500286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.71.193.134"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2923{
style=filled;
color=gray75;
16751[label="67.137.204.134;3pkt 3fpkt", shape=pentagon, color=darkviolet];
23329[label="67.137.204.134;3pkt 3fpkt", shape=invtriangle, color=brown];
27343[label="67.137.204.134;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2923[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.137.204.134:2197, 134.73.231.58:110}[33.3333%]&lt;BR/&gt;{67.137.204.134:2199, 134.73.231.58:110}[33.3333%]&lt;BR/&gt;{67.137.204.134:2201, 134.73.231.58:110}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 2201: (16.6667%)&lt;BR/&gt; 2199: (16.6667%)&lt;BR/&gt; 2197: (16.6667%)&gt;];
}
16751--23329[label="1;3pkt 3fpkt"];
16751--27343[label="1;3pkt 3fpkt"];
23329--27343[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.231.58" dst_port="110" src_ip="67.137.204.134" src_port="2201"/>
      <filter dst_ip="134.73.231.58" dst_port="110" src_ip="67.137.204.134" src_port="2199"/>
      <filter dst_ip="134.73.231.58" dst_port="110" src_ip="67.137.204.134" src_port="2197"/>
    </slice>
    <from sec="1241500096" usec="0"/>
    <to sec="1241500133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2924{
style=filled;
color=gray75;
16757[label="12.109.228.134;3pkt 3fpkt", shape=pentagon, color=darkviolet];
23333[label="12.109.228.134;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2924[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.109.228.134:5748, 215.66.218.53:80}[33.3333%]&lt;BR/&gt;{12.109.228.134:5755, 215.66.218.53:80}[33.3333%]&lt;BR/&gt;{12.109.228.134:5757, 215.66.218.53:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5757: (16.6667%)&lt;BR/&gt; 5755: (16.6667%)&lt;BR/&gt; 5748: (16.6667%)&gt;];
}
16757--23333[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.53" dst_port="80" src_ip="12.109.228.134" src_port="5757"/>
      <filter dst_ip="215.66.218.53" dst_port="80" src_ip="12.109.228.134" src_port="5755"/>
      <filter dst_ip="215.66.218.53" dst_port="80" src_ip="12.109.228.134" src_port="5748"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.112.238.134"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2926{
style=filled;
color=gray75;
16769[label="200.215.53.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23342[label="200.215.53.135;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2926[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.215.53.135:18130, 215.66.219.235:62235}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62235: (50%)&lt;BR/&gt; 18130: (50%)&gt;];
}
16769--23342[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62235" src_ip="200.215.53.135" src_port="18130"/>
    </slice>
    <from sec="1241500439" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.212.87.135"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2928{
style=filled;
color=gray75;
16774[label="8.128.95.135;178pkt 178fpkt", shape=pentagon, color=darkviolet];
23347[label="8.128.95.135;178pkt 178fpkt", shape=invtriangle, color=brown];
27353[label="8.128.95.135;178pkt 178fpkt", shape=invhouse, color=bisque];
stat2928[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.128.95.135:*, 215.66.157.61:20466}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20466: (50%)&lt;BR/&gt; 2354: (0.280899%)&lt;BR/&gt; 2348: (0.280899%)&lt;BR/&gt; 2345: (0.280899%)&lt;BR/&gt; 2339: (0.280899%)&gt;];
}
16774--23347[label="1;178pkt 178fpkt"];
16774--27353[label="1;178pkt 178fpkt"];
23347--27353[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.157.61" dst_port="20466" src_ip="8.128.95.135"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.67.124.135"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2930{
style=filled;
color=gray75;
16780[label="12.15.142.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23351[label="12.15.142.135;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2930[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.15.142.135:2471, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2471: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16780--23351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="12.15.142.135" src_port="2471"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.186.168.135"/>
    </slice>
    <from sec="1241500146" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.188.0.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.98.34.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.27.53.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2935{
style=filled;
color=gray75;
16830[label="170.15.186.136;30pkt 30fpkt", shape=pentagon, color=darkviolet];
23381[label="170.15.186.136;30pkt 30fpkt", shape=invtriangle, color=brown];
stat2935[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.186.136:*, 41.148.173.209:80}[26.6667%]&lt;BR/&gt;{170.15.186.136:*, 201.177.254.101:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4767: (1.66667%)&lt;BR/&gt; 4763: (1.66667%)&lt;BR/&gt; 4748: (1.66667%)&lt;BR/&gt; 4726: (1.66667%)&gt;];
}
16830--23381[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="41.148.173.209" dst_port="80" src_ip="170.15.186.136"/>
      <filter dst_ip="201.177.254.101" dst_port="80" src_ip="170.15.186.136"/>
    </slice>
    <from sec="1241499779" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.214.196.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2937{
style=filled;
color=gray75;
16834[label="8.80.228.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23385[label="8.80.228.136;1pkt 1fpkt", shape=invtriangle, color=brown];
27375[label="8.80.228.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2937[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.80.228.136:61774, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61774: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16834--23385[label="1;1pkt 1fpkt"];
16834--27375[label="1;1pkt 1fpkt"];
23385--27375[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="8.80.228.136" src_port="61774"/>
    </slice>
    <from sec="1241500419" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.61.230.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.32.232.136"/>
    </slice>
    <from sec="1241499674" usec="0"/>
    <to sec="1241499685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2940{
style=filled;
color=gray75;
16841[label="205.40.10.137;12pkt 12fpkt", shape=pentagon, color=darkviolet];
23392[label="205.40.10.137;12pkt 12fpkt", shape=invtriangle, color=brown];
stat2940[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.40.10.137:*, 134.73.170.10:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4506: (4.16667%)&lt;BR/&gt; 4238: (4.16667%)&lt;BR/&gt; 4009: (4.16667%)&lt;BR/&gt; 3924: (4.16667%)&gt;];
}
16841--23392[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.170.10" dst_port="80" src_ip="205.40.10.137"/>
    </slice>
    <from sec="1241499664" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.203.51.137"/>
    </slice>
    <from sec="1241499943" usec="0"/>
    <to sec="1241499976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.66.136.137"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2943{
style=filled;
color=gray75;
16873[label="57.173.2.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23408[label="57.173.2.138;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2943[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.173.2.138:52736, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52736: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16873--23408[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="57.173.2.138" src_port="52736"/>
    </slice>
    <from sec="1241499840" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.12.41.138"/>
    </slice>
    <from sec="1241499988" usec="0"/>
    <to sec="1241500184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.27.61.138"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.6.97.138"/>
    </slice>
    <from sec="1241499832" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.12.225.138"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2948{
style=filled;
color=gray75;
152[label="170.15.19.144;d;1435pkt 1435fpkt", shape=diamond, color=yellow];
155[label="56.158.168.89;s;504pkt 504fpkt", shape=diamond, color=yellow];
1000[label="87.229.227.138;s;930pkt 930fpkt", shape=diamond, color=yellow];
16902[label="87.229.227.138;1001pkt 1001fpkt", shape=pentagon, color=darkviolet];
23428[label="87.229.227.138;1001pkt 1001fpkt", shape=invtriangle, color=brown];
27403[label="87.229.227.138;1001pkt 1001fpkt", shape=invhouse, color=bisque];
stat2948[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.229.227.138:*, 170.15.19.144:*}[66.4675%]&lt;BR/&gt;{56.158.168.89:*, 170.15.19.144:*}[33.4661%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (1.26873%)&lt;BR/&gt; 4261: (0.10218%)&lt;BR/&gt; 39381: (0.0851499%)&lt;BR/&gt; 37880: (0.0851499%)&lt;BR/&gt; 32959: (0.0851499%)&gt;];
}
152--155[label="1;504pkt 504fpkt"];
152--1000[label="1;930pkt 930fpkt"];
152--16902[label="0.929071;930pkt 930fpkt"];
152--23428[label="0.929071;930pkt 930fpkt"];
152--27403[label="0.929071;930pkt 930fpkt"];
1000--16902[label="1;930pkt 930fpkt"];
1000--23428[label="1;930pkt 930fpkt"];
1000--27403[label="1;930pkt 930fpkt"];
16902--23428[label="1;1001pkt 1001fpkt"];
16902--27403[label="1;1001pkt 1001fpkt"];
23428--27403[label="1;1001pkt 1001fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.144" src_ip="87.229.227.138"/>
      <filter dst_ip="170.15.19.144" src_ip="56.158.168.89"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.10.22.139"/>
    </slice>
    <from sec="1241499748" usec="0"/>
    <to sec="1241499860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.72.139"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.107.139"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.60.177.139"/>
    </slice>
    <from sec="1241500042" usec="0"/>
    <to sec="1241500176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.131.140"/>
    </slice>
    <from sec="1241500272" usec="0"/>
    <to sec="1241500333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2954{
style=filled;
color=gray75;
16953[label="200.160.152.140;2pkt 2fpkt", shape=pentagon, color=darkviolet];
23460[label="200.160.152.140;2pkt 2fpkt", shape=invtriangle, color=brown];
27423[label="200.160.152.140;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2954[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.160.152.140:51057, 214.163.228.3:80}[50%]&lt;BR/&gt;{200.160.152.140:55046, 214.163.228.3:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55046: (25%)&lt;BR/&gt; 51057: (25%)&gt;];
}
16953--23460[label="1;2pkt 2fpkt"];
16953--27423[label="1;2pkt 2fpkt"];
23460--27423[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.228.3" dst_port="80" src_ip="200.160.152.140" src_port="55046"/>
      <filter dst_ip="214.163.228.3" dst_port="80" src_ip="200.160.152.140" src_port="51057"/>
    </slice>
    <from sec="1241500225" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.5.227.140"/>
    </slice>
    <from sec="1241500300" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.49.14.141"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241499976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2957{
style=filled;
color=gray75;
16973[label="66.39.50.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23468[label="66.39.50.141;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2957[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.39.50.141:33002, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33002: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16973--23468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="66.39.50.141" src_port="33002"/>
    </slice>
    <from sec="1241500257" usec="0"/>
    <to sec="1241500281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2958{
style=filled;
color=gray75;
16977[label="200.109.118.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23471[label="200.109.118.141;1pkt 1fpkt", shape=invtriangle, color=brown];
27429[label="200.109.118.141;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2958[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.109.118.141:3941, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3941: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16977--23471[label="1;1pkt 1fpkt"];
16977--27429[label="1;1pkt 1fpkt"];
23471--27429[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="200.109.118.141" src_port="3941"/>
    </slice>
    <from sec="1241500375" usec="0"/>
    <to sec="1241500405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.76.122.141"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2960{
style=filled;
color=gray75;
16979[label="51.181.123.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23473[label="51.181.123.141;1pkt 1fpkt", shape=invtriangle, color=brown];
27431[label="51.181.123.141;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2960[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.181.123.141:3350, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3350: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16979--23473[label="1;1pkt 1fpkt"];
16979--27431[label="1;1pkt 1fpkt"];
23473--27431[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="51.181.123.141" src_port="3350"/>
    </slice>
    <from sec="1241500474" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2961{
style=filled;
color=gray75;
16984[label="39.19.169.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23476[label="39.19.169.141;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2961[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.19.169.141:52594, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52594: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16984--23476[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="39.19.169.141" src_port="52594"/>
    </slice>
    <from sec="1241500361" usec="0"/>
    <to sec="1241500375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2962{
style=filled;
color=gray75;
16985[label="170.15.187.141;11pkt 11fpkt", shape=pentagon, color=darkviolet];
23477[label="170.15.187.141;11pkt 11fpkt", shape=invtriangle, color=brown];
stat2962[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.187.141:62867, *:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62867: (45.4545%)&lt;BR/&gt; 61568: (4.54545%)&lt;BR/&gt; 60061: (4.54545%)&lt;BR/&gt; 56158: (4.54545%)&lt;BR/&gt; 52298: (4.54545%)&gt;];
}
16985--23477[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="170.15.187.141" src_port="62867"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2963{
style=filled;
color=gray75;
16987[label="203.152.191.141;3pkt 3fpkt", shape=pentagon, color=darkviolet];
23478[label="203.152.191.141;3pkt 3fpkt", shape=invtriangle, color=brown];
27434[label="203.152.191.141;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2963[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.152.191.141:30326, 218.218.8.160:53}[33.3333%]&lt;BR/&gt;{203.152.191.141:37593, 218.218.8.160:53}[33.3333%]&lt;BR/&gt;{203.152.191.141:60668, 218.218.8.160:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 60668: (16.6667%)&lt;BR/&gt; 37593: (16.6667%)&lt;BR/&gt; 30326: (16.6667%)&gt;];
}
16987--23478[label="1;3pkt 3fpkt"];
16987--27434[label="1;3pkt 3fpkt"];
23478--27434[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="218.218.8.160" dst_port="53" src_ip="203.152.191.141" src_port="60668"/>
      <filter dst_ip="218.218.8.160" dst_port="53" src_ip="203.152.191.141" src_port="37593"/>
      <filter dst_ip="218.218.8.160" dst_port="53" src_ip="203.152.191.141" src_port="30326"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.181.20.142"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.153.88.142"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2966{
style=filled;
color=gray75;
17006[label="156.224.97.142;44pkt 44fpkt", shape=pentagon, color=darkviolet];
23491[label="156.224.97.142;44pkt 44fpkt", shape=invtriangle, color=brown];
stat2966[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.224.97.142:39552, *:*}[56.8182%]&lt;BR/&gt;{156.224.97.142:0, *:0}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39552: (28.4091%)&lt;BR/&gt; 0: (27.2727%)&lt;BR/&gt; 48753: (2.27273%)&lt;BR/&gt; 65534: (1.13636%)&lt;BR/&gt; 58184: (1.13636%)&gt;];
}
17006--23491[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="156.224.97.142" src_port="39552"/>
      <filter src_ip="156.224.97.142"/>
    </slice>
    <from sec="1241499653" usec="0"/>
    <to sec="1241500438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.77.168.142"/>
    </slice>
    <from sec="1241500186" usec="0"/>
    <to sec="1241500210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.237.233.142"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.132.71.143"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.172.142.143"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2971{
style=filled;
color=gray75;
17041[label="49.226.150.143;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23510[label="49.226.150.143;1pkt 1fpkt", shape=invtriangle, color=brown];
27451[label="49.226.150.143;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2971[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.226.150.143:1192, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1192: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17041--23510[label="1;1pkt 1fpkt"];
17041--27451[label="1;1pkt 1fpkt"];
23510--27451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="49.226.150.143" src_port="1192"/>
    </slice>
    <from sec="1241500289" usec="0"/>
    <to sec="1241500324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.168.143"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.30.213.143"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2974{
style=filled;
color=gray75;
17055[label="214.198.224.143;10pkt 10fpkt", shape=pentagon, color=darkviolet];
23519[label="214.198.224.143;10pkt 10fpkt", shape=invtriangle, color=brown];
27457[label="214.198.224.143;10pkt 10fpkt", shape=invhouse, color=bisque];
stat2974[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.198.224.143:*, 172.204.128.115:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60128: (5%)&lt;BR/&gt; 58482: (5%)&lt;BR/&gt; 58006: (5%)&lt;BR/&gt; 57953: (5%)&gt;];
}
17055--23519[label="1;10pkt 10fpkt"];
17055--27457[label="1;10pkt 10fpkt"];
23519--27457[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.128.115" dst_port="80" src_ip="214.198.224.143"/>
    </slice>
    <from sec="1241500432" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.92.20.144"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.22.144"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.64.144"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.5.98.144"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241500003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.214.130.144"/>
    </slice>
    <from sec="1241499840" usec="0"/>
    <to sec="1241499939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2980{
style=filled;
color=gray75;
17086[label="68.163.149.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23539[label="68.163.149.144;1pkt 1fpkt", shape=invtriangle, color=brown];
27471[label="68.163.149.144;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2980[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.163.149.144:3478, 215.66.219.235:63076}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63076: (50%)&lt;BR/&gt; 3478: (50%)&gt;];
}
17086--23539[label="1;1pkt 1fpkt"];
17086--27471[label="1;1pkt 1fpkt"];
23539--27471[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="63076" src_ip="68.163.149.144" src_port="3478"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.218.173.144"/>
    </slice>
    <from sec="1241499722" usec="0"/>
    <to sec="1241499814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.59.217.144"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.123.24.145"/>
    </slice>
    <from sec="1241500005" usec="0"/>
    <to sec="1241500457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.35.32.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.140.78.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2986{
style=filled;
color=gray75;
17121[label="40.110.141.145;3pkt 3fpkt", shape=pentagon, color=darkviolet];
23559[label="40.110.141.145;3pkt 3fpkt", shape=invtriangle, color=brown];
27482[label="40.110.141.145;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2986[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.110.141.145:80, 172.204.189.97:51155}[33.3333%]&lt;BR/&gt;{40.110.141.145:80, 172.204.189.97:51168}[33.3333%]&lt;BR/&gt;{40.110.141.145:80, 172.204.189.97:51283}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51283: (16.6667%)&lt;BR/&gt; 51168: (16.6667%)&lt;BR/&gt; 51155: (16.6667%)&gt;];
}
17121--23559[label="1;3pkt 3fpkt"];
17121--27482[label="1;3pkt 3fpkt"];
23559--27482[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.189.97" dst_port="51283" src_ip="40.110.141.145" src_port="80"/>
      <filter dst_ip="172.204.189.97" dst_port="51168" src_ip="40.110.141.145" src_port="80"/>
      <filter dst_ip="172.204.189.97" dst_port="51155" src_ip="40.110.141.145" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2987{
style=filled;
color=gray75;
17123[label="128.156.150.145;5pkt 5fpkt", shape=pentagon, color=darkviolet];
23561[label="128.156.150.145;5pkt 5fpkt", shape=invtriangle, color=brown];
27483[label="128.156.150.145;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2987[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.150.145:80, 68.21.160.69:38611}[20%]&lt;BR/&gt;{128.156.150.145:80, 34.161.146.111:49157}[20%]&lt;BR/&gt;{128.156.150.145:80, 41.213.126.131:52139}[20%]&lt;BR/&gt;{128.156.150.145:80, 43.37.128.139:52040}[20%]&lt;BR/&gt;{128.156.150.145:80, 49.140.200.139:16394}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52139: (10%)&lt;BR/&gt; 52040: (10%)&lt;BR/&gt; 49157: (10%)&lt;BR/&gt; 38611: (10%)&gt;];
}
17123--23561[label="1;5pkt 5fpkt"];
17123--27483[label="1;5pkt 5fpkt"];
23561--27483[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="49.140.200.139" dst_port="16394" src_ip="128.156.150.145" src_port="80"/>
      <filter dst_ip="43.37.128.139" dst_port="52040" src_ip="128.156.150.145" src_port="80"/>
      <filter dst_ip="41.213.126.131" dst_port="52139" src_ip="128.156.150.145" src_port="80"/>
      <filter dst_ip="34.161.146.111" dst_port="49157" src_ip="128.156.150.145" src_port="80"/>
      <filter dst_ip="68.21.160.69" dst_port="38611" src_ip="128.156.150.145" src_port="80"/>
    </slice>
    <from sec="1241499720" usec="0"/>
    <to sec="1241500150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.66.152.145"/>
    </slice>
    <from sec="1241499783" usec="0"/>
    <to sec="1241499953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.89.193.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.130.220.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.238.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.8.3.146"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2993{
style=filled;
color=gray75;
17151[label="134.73.108.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23581[label="134.73.108.146;1pkt 1fpkt", shape=invtriangle, color=brown];
27493[label="134.73.108.146;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2993[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.108.146:37102, 133.168.173.197:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37102: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17151--23581[label="1;1pkt 1fpkt"];
17151--27493[label="1;1pkt 1fpkt"];
23581--27493[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.173.197" dst_port="80" src_ip="134.73.108.146" src_port="37102"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.29.130.146"/>
    </slice>
    <from sec="1241500210" usec="0"/>
    <to sec="1241500229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.193.144.146"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.199.146"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.0.147"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2998{
style=filled;
color=gray75;
17186[label="214.170.73.147;2pkt 2fpkt", shape=pentagon, color=darkviolet];
23605[label="214.170.73.147;2pkt 2fpkt", shape=invtriangle, color=brown];
27510[label="214.170.73.147;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2998[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.170.73.147:0, 182.230.196.182:0}[50%]&lt;BR/&gt;{214.170.73.147:0, 7.52.37.227:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
17186--23605[label="1;2pkt 2fpkt"];
17186--27510[label="1;2pkt 2fpkt"];
23605--27510[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="7.52.37.227" src_ip="214.170.73.147"/>
      <filter dst_ip="182.230.196.182" src_ip="214.170.73.147"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.82.85.147"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.131.129.147"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.31.168.147"/>
    </slice>
    <from sec="1241500217" usec="0"/>
    <to sec="1241500331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3002{
style=filled;
color=gray75;
17210[label="9.140.9.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
23623[label="9.140.9.148;2pkt 2fpkt", shape=invtriangle, color=brown];
27518[label="9.140.9.148;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3002[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.140.9.148:1745, 215.66.140.47:14953}[50%]&lt;BR/&gt;{9.140.9.148:1747, 215.66.140.47:14953}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14953: (50%)&lt;BR/&gt; 1747: (25%)&lt;BR/&gt; 1745: (25%)&gt;];
}
17210--23623[label="1;2pkt 2fpkt"];
17210--27518[label="1;2pkt 2fpkt"];
23623--27518[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.140.47" dst_port="14953" src_ip="9.140.9.148" src_port="1747"/>
      <filter dst_ip="215.66.140.47" dst_port="14953" src_ip="9.140.9.148" src_port="1745"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.52.27.148"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3004{
style=filled;
color=gray75;
17214[label="37.233.38.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23626[label="37.233.38.148;1pkt 1fpkt", shape=invtriangle, color=brown];
27519[label="37.233.38.148;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3004[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.233.38.148:50473, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50473: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17214--23626[label="1;1pkt 1fpkt"];
17214--27519[label="1;1pkt 1fpkt"];
23626--27519[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="37.233.38.148" src_port="50473"/>
    </slice>
    <from sec="1241499785" usec="0"/>
    <to sec="1241500402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.53.41.148"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3006{
style=filled;
color=gray75;
17232[label="205.5.202.148;32pkt 32fpkt", shape=pentagon, color=darkviolet];
23637[label="205.5.202.148;32pkt 32fpkt", shape=invtriangle, color=brown];
27529[label="205.5.202.148;32pkt 32fpkt", shape=invhouse, color=bisque];
stat3006[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.5.202.148:*, 215.66.218.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2084: (1.5625%)&lt;BR/&gt; 2083: (1.5625%)&lt;BR/&gt; 2082: (1.5625%)&lt;BR/&gt; 2081: (1.5625%)&gt;];
}
17232--23637[label="1;32pkt 32fpkt"];
17232--27529[label="1;32pkt 32fpkt"];
23637--27529[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.56" dst_port="80" src_ip="205.5.202.148"/>
    </slice>
    <from sec="1241500478" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.52.0.149"/>
    </slice>
    <from sec="1241500265" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.185.4.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3009{
style=filled;
color=gray75;
17244[label="128.156.28.149;18pkt 18fpkt", shape=pentagon, color=darkviolet];
23647[label="128.156.28.149;18pkt 18fpkt", shape=invtriangle, color=brown];
stat3009[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.28.149:*, 41.148.173.184:80}[33.3333%]&lt;BR/&gt;{128.156.28.149:*, 193.60.255.75:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 0: (5.55556%)&lt;BR/&gt; 50055: (2.77778%)&lt;BR/&gt; 50046: (2.77778%)&lt;BR/&gt; 49999: (2.77778%)&gt;];
}
17244--23647[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="41.148.173.184" dst_port="80" src_ip="128.156.28.149"/>
      <filter dst_ip="193.60.255.75" dst_port="80" src_ip="128.156.28.149"/>
    </slice>
    <from sec="1241499806" usec="0"/>
    <to sec="1241500080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.77.33.149"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.6.76.149"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.24.107.149"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.172.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.111.206.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3015{
style=filled;
color=gray75;
17275[label="46.199.208.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23672[label="46.199.208.149;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3015[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.199.208.149:36149, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36149: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17275--23672[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="46.199.208.149" src_port="36149"/>
    </slice>
    <from sec="1241500476" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.29.228.149"/>
    </slice>
    <from sec="1241500216" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.81.34.150"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3018{
style=filled;
color=gray75;
17303[label="216.98.121.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23689[label="216.98.121.150;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3018[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.98.121.150:44870, 215.66.218.56:5126}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44870: (50%)&lt;BR/&gt; 5126: (50%)&gt;];
}
17303--23689[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.56" dst_port="5126" src_ip="216.98.121.150" src_port="44870"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.66.146.150"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3020{
style=filled;
color=gray75;
17321[label="206.49.58.151;3pkt 3fpkt", shape=pentagon, color=darkviolet];
23703[label="206.49.58.151;3pkt 3fpkt", shape=invtriangle, color=brown];
stat3020[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.49.58.151:80, 214.170.72.217:37856}[33.3333%]&lt;BR/&gt;{206.49.58.151:53, 214.170.73.136:47247}[33.3333%]&lt;BR/&gt;{206.49.58.151:53, 214.170.73.136:62469}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.3333%)&lt;BR/&gt; 62469: (16.6667%)&lt;BR/&gt; 47247: (16.6667%)&lt;BR/&gt; 37856: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
17321--23703[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.170.73.136" dst_port="62469" src_ip="206.49.58.151" src_port="53"/>
      <filter dst_ip="214.170.73.136" dst_port="47247" src_ip="206.49.58.151" src_port="53"/>
      <filter dst_ip="214.170.72.217" dst_port="37856" src_ip="206.49.58.151" src_port="80"/>
    </slice>
    <from sec="1241500469" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.20.67.151"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.105.151"/>
    </slice>
    <from sec="1241499641" usec="0"/>
    <to sec="1241499660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.82.185.151"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3024{
style=filled;
color=gray75;
17337[label="12.114.206.151;6pkt 6fpkt", shape=pentagon, color=darkviolet];
23716[label="12.114.206.151;6pkt 6fpkt", shape=invtriangle, color=brown];
stat3024[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.114.206.151:*, 170.15.19.148:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1095: (8.33333%)&lt;BR/&gt; 1094: (8.33333%)&lt;BR/&gt; 1089: (8.33333%)&lt;BR/&gt; 1088: (8.33333%)&gt;];
}
17337--23716[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="12.114.206.151"/>
    </slice>
    <from sec="1241500467" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3025{
style=filled;
color=gray75;
17339[label="67.28.248.151;3pkt 3fpkt", shape=pentagon, color=darkviolet];
23718[label="67.28.248.151;3pkt 3fpkt", shape=invtriangle, color=brown];
stat3025[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.28.248.151:13480, 215.66.214.16:80}[33.3333%]&lt;BR/&gt;{67.28.248.151:13550, 215.66.214.16:80}[33.3333%]&lt;BR/&gt;{67.28.248.151:13557, 215.66.214.16:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13557: (16.6667%)&lt;BR/&gt; 13550: (16.6667%)&lt;BR/&gt; 13480: (16.6667%)&gt;];
}
17339--23718[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="67.28.248.151" src_port="13557"/>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="67.28.248.151" src_port="13550"/>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="67.28.248.151" src_port="13480"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.66.1.152"/>
    </slice>
    <from sec="1241500159" usec="0"/>
    <to sec="1241500273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.161.102.152"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.172.106.152"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.55.24.153"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.72.74.153"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.12.85.153"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.95.153"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.177.153"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.105.224.153"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.100.241.153"/>
    </slice>
    <from sec="1241500001" usec="0"/>
    <to sec="1241500050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.149.23.154"/>
    </slice>
    <from sec="1241500255" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3037{
style=filled;
color=gray75;
17412[label="204.125.80.154;13pkt 13fpkt", shape=pentagon, color=darkviolet];
23756[label="204.125.80.154;13pkt 13fpkt", shape=invtriangle, color=brown];
27588[label="204.125.80.154;13pkt 13fpkt", shape=invhouse, color=bisque];
stat3037[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.125.80.154:*, 215.66.218.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58255: (3.84615%)&lt;BR/&gt; 58253: (3.84615%)&lt;BR/&gt; 58251: (3.84615%)&lt;BR/&gt; 58243: (3.84615%)&gt;];
}
17412--23756[label="1;13pkt 13fpkt"];
17412--27588[label="1;13pkt 13fpkt"];
23756--27588[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.56" dst_port="80" src_ip="204.125.80.154"/>
    </slice>
    <from sec="1241500285" usec="0"/>
    <to sec="1241500289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3038{
style=filled;
color=gray75;
916[label="172.204.181.68;d;200pkt 200fpkt", shape=diamond, color=yellow];
3633[label="41.150.249.249;s;34pkt 34fpkt", shape=diamond, color=yellow];
6547[label="23.96.66.138;s;3pkt 3fpkt", shape=diamond, color=yellow];
6859[label="213.36.215.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
7368[label="70.215.1.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
8450[label="182.55.201.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
9086[label="160.56.57.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
11295[label="41.150.249.249;s;34pkt 34fpkt", shape=hexagon, color=black];
13048[label="202.97.17.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14378[label="20.153.159.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15645[label="13.39.155.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17421[label="34.56.147.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18519[label="59.32.137.190;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18984[label="218.88.151.207;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19169[label="58.85.233.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19609[label="183.156.41.233;5pkt 5fpkt", shape=pentagon, color=darkviolet];
19760[label="20.210.145.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20900[label="202.97.17.27;1pkt 1fpkt", shape=invtriangle, color=brown];
22604[label="13.39.155.101;2pkt 2fpkt", shape=invtriangle, color=brown];
23761[label="34.56.147.154;2pkt 2fpkt", shape=invtriangle, color=brown];
24491[label="59.32.137.190;2pkt 2fpkt", shape=invtriangle, color=brown];
25323[label="20.210.145.239;1pkt 1fpkt", shape=invtriangle, color=brown];
27591[label="34.56.147.154;2pkt 2fpkt", shape=invhouse, color=bisque];
28004[label="59.32.137.190;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3038[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.204.181.68:21}[69.7872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (32.459%)&lt;BR/&gt; 5050: (9.67213%)&lt;BR/&gt; 20: (6.06557%)&lt;BR/&gt; 0: (1.63934%)&lt;BR/&gt; 64698: (0.655738%)&gt;];
}
916--3099[label="0.01;2pkt 2fpkt"];
916--3633[label="0.0294118;1pkt 1fpkt"];
916--4771[label="0.005;1pkt 1fpkt"];
916--5021[label="0.005;1pkt 1fpkt"];
916--6547[label="1;3pkt 3fpkt"];
916--6859[label="1;1pkt 1fpkt"];
916--7368[label="1;1pkt 1fpkt"];
916--8450[label="1;1pkt 1fpkt"];
916--9086[label="1;1pkt 1fpkt"];
916--11295[label="0.0294118;1pkt 1fpkt"];
916--13048[label="1;1pkt 1fpkt"];
916--14378[label="1;1pkt 1fpkt"];
916--14994[label="0.005;1pkt 1fpkt"];
916--15400[label="0.005;1pkt 1fpkt"];
916--15645[label="0.5;1pkt 1fpkt"];
916--17421[label="1;2pkt 2fpkt"];
916--18519[label="1;2pkt 2fpkt"];
916--18984[label="1;2pkt 2fpkt"];
916--19169[label="1;2pkt 2fpkt"];
916--19609[label="0.8;4pkt 4fpkt"];
916--19760[label="1;1pkt 1fpkt"];
916--20900[label="1;1pkt 1fpkt"];
916--22604[label="0.5;1pkt 1fpkt"];
916--23761[label="1;2pkt 2fpkt"];
916--24491[label="1;2pkt 2fpkt"];
916--25323[label="1;1pkt 1fpkt"];
916--27591[label="1;2pkt 2fpkt"];
916--28004[label="1;2pkt 2fpkt"];
3633--9584[label="0.0294118;1pkt 1fpkt"];
3633--11295[label="1;34pkt 34fpkt"];
13048--20900[label="1;1pkt 1fpkt"];
15645--22604[label="1;2pkt 2fpkt"];
17421--23761[label="1;2pkt 2fpkt"];
17421--27591[label="1;2pkt 2fpkt"];
18519--24491[label="1;2pkt 2fpkt"];
18519--28004[label="1;2pkt 2fpkt"];
19760--25323[label="1;1pkt 1fpkt"];
23761--27591[label="1;2pkt 2fpkt"];
24491--28004[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.181.68" dst_port="21"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.91.173.154"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241499804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.128.199.154"/>
    </slice>
    <from sec="1241500065" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.224.154"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3042{
style=filled;
color=gray75;
17435[label="12.193.48.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23772[label="12.193.48.155;1pkt 1fpkt", shape=invtriangle, color=brown];
27598[label="12.193.48.155;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3042[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.193.48.155:32769, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32769: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17435--23772[label="1;1pkt 1fpkt"];
17435--27598[label="1;1pkt 1fpkt"];
23772--27598[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="12.193.48.155" src_port="32769"/>
    </slice>
    <from sec="1241500447" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.142.89.155"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.218.16.156"/>
    </slice>
    <from sec="1241499760" usec="0"/>
    <to sec="1241499886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.35.156"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.250.77.156"/>
    </slice>
    <from sec="1241500456" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.179.112.156"/>
    </slice>
    <from sec="1241500109" usec="0"/>
    <to sec="1241500216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.65.14.157"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.163.19.157"/>
    </slice>
    <from sec="1241500223" usec="0"/>
    <to sec="1241500404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.207.52.157"/>
    </slice>
    <from sec="1241500166" usec="0"/>
    <to sec="1241500202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.138.81.157"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.134.172.157"/>
    </slice>
    <from sec="1241500213" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.64.36.158"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241499934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.138.157.158"/>
    </slice>
    <from sec="1241499945" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.140.158.158"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.15.161.158"/>
    </slice>
    <from sec="1241500157" usec="0"/>
    <to sec="1241500210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.111.178.158"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.160.254.158"/>
    </slice>
    <from sec="1241499918" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.17.16.159"/>
    </slice>
    <from sec="1241499713" usec="0"/>
    <to sec="1241499803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.8.35.159"/>
    </slice>
    <from sec="1241499979" usec="0"/>
    <to sec="1241500022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.226.37.160"/>
    </slice>
    <from sec="1241499642" usec="0"/>
    <to sec="1241499682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.54.54.160"/>
    </slice>
    <from sec="1241500263" usec="0"/>
    <to sec="1241500348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3064{
style=filled;
color=gray75;
17581[label="202.32.66.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23865[label="202.32.66.160;1pkt 1fpkt", shape=invtriangle, color=brown];
27644[label="202.32.66.160;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3064[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.32.66.160:443, 172.204.189.96:64384}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64384: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
17581--23865[label="1;1pkt 1fpkt"];
17581--27644[label="1;1pkt 1fpkt"];
23865--27644[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.189.96" dst_port="64384" src_ip="202.32.66.160" src_port="443"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.56.74.160"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.33.84.160"/>
    </slice>
    <from sec="1241500315" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3067{
style=filled;
color=gray75;
17587[label="46.28.88.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
23869[label="46.28.88.160;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3067[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.28.88.160:21, 168.46.21.62:4178}[50%]&lt;BR/&gt;{46.28.88.160:50490, 168.46.21.62:4179}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50490: (25%)&lt;BR/&gt; 4179: (25%)&lt;BR/&gt; 4178: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
17587--23869[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.46.21.62" dst_port="4179" src_ip="46.28.88.160" src_port="50490"/>
      <filter dst_ip="168.46.21.62" dst_port="4178" src_ip="46.28.88.160" src_port="21"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.17.106.160"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.70.216.160"/>
    </slice>
    <from sec="1241499875" usec="0"/>
    <to sec="1241499896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.120.41.161"/>
    </slice>
    <from sec="1241499900" usec="0"/>
    <to sec="1241499915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.146.68.161"/>
    </slice>
    <from sec="1241500347" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3072{
style=filled;
color=gray75;
17622[label="63.150.76.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23888[label="63.150.76.161;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3072[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.150.76.161:1313, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1313: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17622--23888[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="63.150.76.161" src_port="1313"/>
    </slice>
    <from sec="1241500330" usec="0"/>
    <to sec="1241500336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.95.161"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.82.96.161"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.156.98.161"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.214.102.161"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.41.204.161"/>
    </slice>
    <from sec="1241499640" usec="0"/>
    <to sec="1241499905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.172.21.162"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.27.162"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241499854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.123.34.162"/>
    </slice>
    <from sec="1241499698" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.138.43.162"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.164.68.162"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.161.83.162"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.66.139.162"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.2.153.162"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3086{
style=filled;
color=gray75;
17690[label="170.15.187.162;23pkt 23fpkt", shape=pentagon, color=darkviolet];
23936[label="170.15.187.162;23pkt 23fpkt", shape=invtriangle, color=brown];
27685[label="170.15.187.162;23pkt 23fpkt", shape=invhouse, color=bisque];
stat3086[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.187.162:*, 193.60.254.4:80}[21.7391%]&lt;BR/&gt;{170.15.187.162:*, 41.197.24.44:80}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50559: (2.17391%)&lt;BR/&gt; 50534: (2.17391%)&lt;BR/&gt; 50512: (2.17391%)&lt;BR/&gt; 50496: (2.17391%)&gt;];
}
17690--23936[label="1;23pkt 23fpkt"];
17690--27685[label="1;23pkt 23fpkt"];
23936--27685[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="41.197.24.44" dst_port="80" src_ip="170.15.187.162"/>
      <filter dst_ip="193.60.254.4" dst_port="80" src_ip="170.15.187.162"/>
    </slice>
    <from sec="1241499791" usec="0"/>
    <to sec="1241500389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.199.250.162"/>
    </slice>
    <from sec="1241500141" usec="0"/>
    <to sec="1241500237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.168.26.163"/>
    </slice>
    <from sec="1241500284" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.116.172.163"/>
    </slice>
    <from sec="1241499999" usec="0"/>
    <to sec="1241500331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.189.232.163"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.142.237.163"/>
    </slice>
    <from sec="1241500372" usec="0"/>
    <to sec="1241500466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.211.27.164"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.142.64.164"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3094{
style=filled;
color=gray75;
17741[label="8.129.97.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
23969[label="8.129.97.164;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3094[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.129.97.164:9494, 215.66.219.235:9433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9494: (50%)&lt;BR/&gt; 9433: (50%)&gt;];
}
17741--23969[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="9433" src_ip="8.129.97.164" src_port="9494"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3095{
style=filled;
color=gray75;
17743[label="128.156.101.164;62pkt 62fpkt", shape=pentagon, color=darkviolet];
23971[label="128.156.101.164;62pkt 62fpkt", shape=invtriangle, color=brown];
stat3095[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.101.164:*, 32.91.70.10:80}[90.3226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58130: (0.806452%)&lt;BR/&gt; 58129: (0.806452%)&lt;BR/&gt; 58128: (0.806452%)&lt;BR/&gt; 58127: (0.806452%)&gt;];
}
17743--23971[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="32.91.70.10" dst_port="80" src_ip="128.156.101.164"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.129.115.164"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.8.162.164"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241499934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.99.22.165"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3099{
style=filled;
color=gray75;
17772[label="107.148.174.165;171pkt 171fpkt", shape=pentagon, color=darkviolet];
23991[label="107.148.174.165;171pkt 171fpkt", shape=invtriangle, color=brown];
27712[label="107.148.174.165;171pkt 171fpkt", shape=invhouse, color=bisque];
stat3099[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.148.174.165:123, 172.204.222.249:*}[33.3333%]&lt;BR/&gt;{107.148.174.165:123, 172.204.239.76:*}[32.7485%]&lt;BR/&gt;{107.148.174.165:123, 172.204.237.218:*}[32.7485%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (50.2924%)&lt;BR/&gt; 65341: (0.292398%)&lt;BR/&gt; 64837: (0.292398%)&lt;BR/&gt; 64395: (0.292398%)&lt;BR/&gt; 64227: (0.292398%)&gt;];
}
17772--23991[label="1;171pkt 171fpkt"];
17772--27712[label="1;171pkt 171fpkt"];
23991--27712[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.222.249" src_ip="107.148.174.165" src_port="123"/>
      <filter dst_ip="172.204.237.218" src_ip="107.148.174.165" src_port="123"/>
      <filter dst_ip="172.204.239.76" src_ip="107.148.174.165" src_port="123"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.55.186.165"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.18.197.165"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21537,4.48585,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_3102{
style=filled;
color=gray75;
9476[label="0.167.211.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
24000[label="0.167.211.165;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3102[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.167.211.165:38698, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38698: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9476--24000[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="0.167.211.165" src_port="38698"/>
    </slice>
    <from sec="1241500368" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3103{
style=filled;
color=gray75;
9045[label="172.204.250.72;d;34pkt 34fpkt", shape=diamond, color=yellow];
15289[label="43.152.134.91;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15796[label="8.73.209.105;2pkt 2fpkt", shape=pentagon, color=darkviolet];
22704[label="8.73.209.105;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3103[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.161.128.61:*, 172.204.250.72:80}[44.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5%)&lt;BR/&gt; 56608: (3.75%)&lt;BR/&gt; 50499: (3.75%)&lt;BR/&gt; 46766: (2.5%)&lt;BR/&gt; 45491: (2.5%)&gt;];
}
9045--15289[label="1;2pkt 2fpkt"];
9045--15796[label="1;2pkt 2fpkt"];
9045--19171[label="0.0294118;1pkt 1fpkt"];
9045--22704[label="1;2pkt 2fpkt"];
9045--24931[label="0.0294118;1pkt 1fpkt"];
15796--22704[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.250.72" dst_port="80" src_ip="34.161.128.61"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.172.119.166"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.70.191.166"/>
    </slice>
    <from sec="1241500020" usec="0"/>
    <to sec="1241500428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.77.216.166"/>
    </slice>
    <from sec="1241499639" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.62.167"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.27.81.167"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241499811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.218.85.167"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.66.131.167"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3111{
style=filled;
color=gray75;
17835[label="181.140.170.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24034[label="181.140.170.167;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3111[shape=component, label=&lt;Rules:&lt;BR/&gt;{181.140.170.167:1273, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1273: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17835--24034[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="181.140.170.167" src_port="1273"/>
    </slice>
    <from sec="1241500276" usec="0"/>
    <to sec="1241500305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.165.110.168"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.65.192.168"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.54.238.168"/>
    </slice>
    <from sec="1241500247" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.238.168"/>
    </slice>
    <from sec="1241500304" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.137.243.168"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3117{
style=filled;
color=gray75;
4696[label="172.204.210.121;d;74pkt 74fpkt", shape=diamond, color=yellow];
5589[label="172.204.216.248;d;134pkt 134fpkt", shape=diamond, color=yellow];
5738[label="172.204.138.218;d;148pkt 148fpkt", shape=diamond, color=yellow];
6538[label="172.204.128.123;d;74pkt 74fpkt", shape=diamond, color=yellow];
6775[label="172.204.165.26;d;67pkt 67fpkt", shape=diamond, color=yellow];
6855[label="172.204.222.170;d;38pkt 38fpkt", shape=diamond, color=yellow];
7402[label="172.204.218.113;d;145pkt 145fpkt", shape=diamond, color=yellow];
7665[label="172.204.144.48;d;72pkt 72fpkt", shape=diamond, color=yellow];
7949[label="87.244.10.215;s;112pkt 112fpkt", shape=diamond, color=yellow];
8467[label="37.245.242.248;s;63pkt 63fpkt", shape=diamond, color=yellow];
11449[label="172.204.216.248;d;134pkt 134fpkt", shape=hexagon, color=black];
12051[label="41.150.227.2;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12071[label="61.31.71.3;31pkt 31fpkt", shape=pentagon, color=darkviolet];
12546[label="55.141.6.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13284[label="41.150.227.33;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13365[label="41.150.227.35;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13768[label="42.137.80.48;17pkt 17fpkt", shape=pentagon, color=darkviolet];
13990[label="41.150.227.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14797[label="7.97.143.77;30pkt 30fpkt", shape=pentagon, color=darkviolet];
14924[label="51.128.161.81;16pkt 16fpkt", shape=pentagon, color=darkviolet];
15057[label="21.205.15.85;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15130[label="21.205.15.87;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15175[label="21.205.15.88;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15578[label="21.205.15.100;8pkt 8fpkt", shape=pentagon, color=darkviolet];
15686[label="21.205.15.103;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15985[label="61.14.36.111;14pkt 14fpkt", shape=pentagon, color=darkviolet];
16981[label="51.234.158.141;30pkt 30fpkt", shape=pentagon, color=darkviolet];
17815[label="214.198.230.166;12pkt 12fpkt", shape=pentagon, color=darkviolet];
19451[label="20.235.103.226;55pkt 55fpkt", shape=pentagon, color=darkviolet];
19989[label="37.245.242.248;79pkt 79fpkt", shape=pentagon, color=darkviolet];
20232[label="41.150.227.2;3pkt 3fpkt", shape=invtriangle, color=brown];
20248[label="61.31.71.3;32pkt 32fpkt", shape=invtriangle, color=brown];
20566[label="55.141.6.14;5pkt 5fpkt", shape=invtriangle, color=brown];
21057[label="41.150.227.33;7pkt 7fpkt", shape=invtriangle, color=brown];
21112[label="41.150.227.35;7pkt 7fpkt", shape=invtriangle, color=brown];
21368[label="42.137.80.48;17pkt 17fpkt", shape=invtriangle, color=brown];
22048[label="7.97.143.77;30pkt 30fpkt", shape=invtriangle, color=brown];
22225[label="21.205.15.85;6pkt 6fpkt", shape=invtriangle, color=brown];
22277[label="21.205.15.87;5pkt 5fpkt", shape=invtriangle, color=brown];
22313[label="21.205.15.88;2pkt 2fpkt", shape=invtriangle, color=brown];
22561[label="21.205.15.100;8pkt 8fpkt", shape=invtriangle, color=brown];
22838[label="61.14.36.111;14pkt 14fpkt", shape=invtriangle, color=brown];
23475[label="51.234.158.141;30pkt 30fpkt", shape=invtriangle, color=brown];
25475[label="37.245.242.248;79pkt 79fpkt", shape=invtriangle, color=brown];
25626[label="41.150.227.2;2pkt 2fpkt", shape=invhouse, color=bisque];
26086[label="41.150.227.33;7pkt 7fpkt", shape=invhouse, color=bisque];
26114[label="41.150.227.35;7pkt 7fpkt", shape=invhouse, color=bisque];
26604[label="7.97.143.77;30pkt 30fpkt", shape=invhouse, color=bisque];
26699[label="21.205.15.85;6pkt 6fpkt", shape=invhouse, color=bisque];
26727[label="21.205.15.87;5pkt 5fpkt", shape=invhouse, color=bisque];
27433[label="51.234.158.141;30pkt 30fpkt", shape=invhouse, color=bisque];
stat3117[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[67.3981%]&lt;BR/&gt;{*:*, *:80}[20.5852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.8644%)&lt;BR/&gt; 20: (8.16918%)&lt;BR/&gt; 80: (6.40209%)&lt;BR/&gt; 53: (1.15875%)&lt;BR/&gt; 39771: (0.23175%)&gt;];
}
4696--7949[label="0.0135135;1pkt 1fpkt"];
4696--17815[label="0.833333;10pkt 10fpkt"];
5589--11449[label="1;134pkt 134fpkt"];
5589--12071[label="0.258065;8pkt 8fpkt"];
5589--12301[label="0.05;2pkt 2fpkt"];
5589--13990[label="0.5;1pkt 1fpkt"];
5589--14797[label="0.9;27pkt 27fpkt"];
5589--14924[label="0.8125;13pkt 13fpkt"];
5589--15057[label="0.333333;2pkt 2fpkt"];
5589--15130[label="0.4;2pkt 2fpkt"];
5589--15271[label="0.0555556;1pkt 1fpkt"];
5589--15947[label="0.0526316;1pkt 1fpkt"];
5589--16981[label="0.766667;23pkt 23fpkt"];
5589--19451[label="0.0545455;3pkt 3fpkt"];
5589--20248[label="0.28125;9pkt 9fpkt"];
5589--22048[label="0.9;27pkt 27fpkt"];
5589--22225[label="0.333333;2pkt 2fpkt"];
5589--22277[label="0.4;2pkt 2fpkt"];
5589--22811[label="0.0526316;1pkt 1fpkt"];
5589--23475[label="0.766667;23pkt 23fpkt"];
5589--26604[label="0.9;27pkt 27fpkt"];
5589--26699[label="0.333333;2pkt 2fpkt"];
5589--26727[label="0.4;2pkt 2fpkt"];
5589--27433[label="0.766667;23pkt 23fpkt"];
5738--7119[label="0.0666667;1pkt 1fpkt"];
5738--10914[label="0.0666667;1pkt 1fpkt"];
5738--12301[label="0.125;5pkt 5fpkt"];
5738--13284[label="0.142857;1pkt 1fpkt"];
5738--13365[label="0.714286;5pkt 5fpkt"];
5738--15947[label="0.0526316;1pkt 1fpkt"];
5738--15985[label="0.0714286;1pkt 1fpkt"];
5738--18002[label="0.1;1pkt 1fpkt"];
5738--19451[label="0.436364;24pkt 24fpkt"];
5738--20130[label="0.157895;3pkt 3fpkt"];
5738--21057[label="0.142857;1pkt 1fpkt"];
5738--21112[label="0.714286;5pkt 5fpkt"];
5738--22811[label="0.0526316;1pkt 1fpkt"];
5738--22838[label="0.0714286;1pkt 1fpkt"];
5738--26086[label="0.142857;1pkt 1fpkt"];
5738--26114[label="0.714286;5pkt 5fpkt"];
6538--13990[label="0.5;1pkt 1fpkt"];
6538--15175[label="0.5;1pkt 1fpkt"];
6538--15271[label="0.0555556;1pkt 1fpkt"];
6538--15387[label="0.0666667;1pkt 1fpkt"];
6538--22313[label="0.5;1pkt 1fpkt"];
6538--22449[label="0.0666667;1pkt 1fpkt"];
6538--26832[label="0.0666667;1pkt 1fpkt"];
6775--12051[label="0.333333;1pkt 1fpkt"];
6775--12301[label="0.275;11pkt 11fpkt"];
6775--15686[label="0.25;1pkt 1fpkt"];
6775--16242[label="0.0357143;1pkt 1fpkt"];
6775--18002[label="0.1;1pkt 1fpkt"];
6775--19451[label="0.163636;9pkt 9fpkt"];
6775--20130[label="0.157895;3pkt 3fpkt"];
6775--20232[label="0.333333;1pkt 1fpkt"];
6775--25626[label="0.5;1pkt 1fpkt"];
6775--27149[label="0.0357143;1pkt 1fpkt"];
6855--7949[label="0.0526316;2pkt 2fpkt"];
6855--12546[label="1;5pkt 5fpkt"];
6855--13284[label="0.285714;2pkt 2fpkt"];
6855--15331[label="0.2;1pkt 1fpkt"];
6855--18002[label="0.2;2pkt 2fpkt"];
6855--20566[label="1;5pkt 5fpkt"];
6855--21057[label="0.285714;2pkt 2fpkt"];
6855--26086[label="0.285714;2pkt 2fpkt"];
7402--12051[label="0.333333;1pkt 1fpkt"];
7402--12071[label="0.0967742;3pkt 3fpkt"];
7402--13596[label="0.25;1pkt 1fpkt"];
7402--13768[label="1;17pkt 17fpkt"];
7402--15578[label="0.125;1pkt 1fpkt"];
7402--15985[label="0.714286;10pkt 10fpkt"];
7402--19451[label="0.0363636;2pkt 2fpkt"];
7402--20232[label="0.333333;1pkt 1fpkt"];
7402--20248[label="0.09375;3pkt 3fpkt"];
7402--21368[label="1;17pkt 17fpkt"];
7402--22561[label="0.125;1pkt 1fpkt"];
7402--22838[label="0.714286;10pkt 10fpkt"];
7402--25626[label="0.5;1pkt 1fpkt"];
7665--7930[label="0.0138889;1pkt 1fpkt"];
7665--7949[label="0.0138889;1pkt 1fpkt"];
7665--8467[label="1;63pkt 63fpkt"];
7665--19171[label="0.0138889;1pkt 1fpkt"];
7665--19989[label="0.861111;62pkt 62fpkt"];
7665--24931[label="0.0138889;1pkt 1fpkt"];
7665--25475[label="0.861111;62pkt 62fpkt"];
8467--19989[label="0.984127;62pkt 62fpkt"];
8467--25475[label="0.984127;62pkt 62fpkt"];
11449--12071[label="0.258065;8pkt 8fpkt"];
11449--12301[label="0.05;2pkt 2fpkt"];
11449--13990[label="0.5;1pkt 1fpkt"];
11449--14797[label="0.9;27pkt 27fpkt"];
11449--14924[label="0.8125;13pkt 13fpkt"];
11449--15057[label="0.333333;2pkt 2fpkt"];
11449--15130[label="0.4;2pkt 2fpkt"];
11449--15271[label="0.0555556;1pkt 1fpkt"];
11449--15947[label="0.0526316;1pkt 1fpkt"];
11449--16981[label="0.766667;23pkt 23fpkt"];
11449--19451[label="0.0545455;3pkt 3fpkt"];
11449--20248[label="0.28125;9pkt 9fpkt"];
11449--22048[label="0.9;27pkt 27fpkt"];
11449--22225[label="0.333333;2pkt 2fpkt"];
11449--22277[label="0.4;2pkt 2fpkt"];
11449--22811[label="0.0526316;1pkt 1fpkt"];
11449--23475[label="0.766667;23pkt 23fpkt"];
11449--26604[label="0.9;27pkt 27fpkt"];
11449--26699[label="0.333333;2pkt 2fpkt"];
11449--26727[label="0.4;2pkt 2fpkt"];
11449--27433[label="0.766667;23pkt 23fpkt"];
12051--20232[label="1;3pkt 3fpkt"];
12051--25626[label="1;2pkt 2fpkt"];
12071--20248[label="1;31pkt 31fpkt"];
12546--20566[label="1;5pkt 5fpkt"];
13284--21057[label="1;7pkt 7fpkt"];
13284--26086[label="1;7pkt 7fpkt"];
13365--21112[label="1;7pkt 7fpkt"];
13365--26114[label="1;7pkt 7fpkt"];
13768--21368[label="1;17pkt 17fpkt"];
14797--22048[label="1;30pkt 30fpkt"];
14797--26604[label="1;30pkt 30fpkt"];
15057--22225[label="1;6pkt 6fpkt"];
15057--26699[label="1;6pkt 6fpkt"];
15130--22277[label="1;5pkt 5fpkt"];
15130--26727[label="1;5pkt 5fpkt"];
15175--22313[label="1;2pkt 2fpkt"];
15578--22561[label="1;8pkt 8fpkt"];
15985--22838[label="1;14pkt 14fpkt"];
16981--23475[label="1;30pkt 30fpkt"];
16981--27433[label="1;30pkt 30fpkt"];
19989--25475[label="1;79pkt 79fpkt"];
20232--25626[label="1;2pkt 2fpkt"];
21057--26086[label="1;7pkt 7fpkt"];
21112--26114[label="1;7pkt 7fpkt"];
22048--26604[label="1;30pkt 30fpkt"];
22225--26699[label="1;6pkt 6fpkt"];
22277--26727[label="1;5pkt 5fpkt"];
23475--27433[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="25"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3118{
style=filled;
color=gray75;
17875[label="193.85.54.169;20pkt 20fpkt", shape=pentagon, color=darkviolet];
24060[label="193.85.54.169;20pkt 20fpkt", shape=invtriangle, color=brown];
stat3118[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.85.54.169:21, 172.204.226.90:*}[30%]&lt;BR/&gt;{193.85.54.169:21, 172.204.216.13:*}[20%]&lt;BR/&gt;{193.85.54.169:21, 172.204.135.73:*}[20%]&lt;BR/&gt;{193.85.54.169:21, 172.204.214.80:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 49885: (2.5%)&lt;BR/&gt; 49880: (2.5%)&lt;BR/&gt; 49878: (2.5%)&lt;BR/&gt; 49871: (2.5%)&gt;];
}
17875--24060[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.226.90" src_ip="193.85.54.169" src_port="21"/>
      <filter dst_ip="172.204.214.80" src_ip="193.85.54.169" src_port="21"/>
      <filter dst_ip="172.204.135.73" src_ip="193.85.54.169" src_port="21"/>
      <filter dst_ip="172.204.216.13" src_ip="193.85.54.169" src_port="21"/>
    </slice>
    <from sec="1241499661" usec="0"/>
    <to sec="1241500298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3119{
style=filled;
color=gray75;
17879[label="170.15.101.169;35pkt 35fpkt", shape=pentagon, color=darkviolet];
24063[label="170.15.101.169;35pkt 35fpkt", shape=invtriangle, color=brown];
stat3119[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.101.169:1187, *:*}[68.5714%]&lt;BR/&gt;{170.15.101.169:*, 219.44.143.2:80}[25.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1187: (34.2857%)&lt;BR/&gt; 80: (15.7143%)&lt;BR/&gt; 64590: (1.42857%)&lt;BR/&gt; 62567: (1.42857%)&lt;BR/&gt; 57457: (1.42857%)&gt;];
}
17879--24063[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="170.15.101.169" src_port="1187"/>
      <filter dst_ip="219.44.143.2" dst_port="80" src_ip="170.15.101.169"/>
    </slice>
    <from sec="1241499842" usec="0"/>
    <to sec="1241500426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.124.169"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.71.235.169"/>
    </slice>
    <from sec="1241500041" usec="0"/>
    <to sec="1241500068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.67.236.169"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.89.2.170"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3124{
style=filled;
color=gray75;
2111[label="134.73.170.1;d;118pkt 118fpkt", shape=diamond, color=yellow];
4443[label="3.38.112.145;s;18pkt 18fpkt", shape=diamond, color=yellow];
10213[label="3.38.112.145;s;18pkt 18fpkt", shape=hexagon, color=black];
17117[label="3.38.112.145;18pkt 18fpkt", shape=pentagon, color=darkviolet];
17901[label="37.138.4.170;35pkt 35fpkt", shape=pentagon, color=darkviolet];
18498[label="53.119.182.189;10pkt 10fpkt", shape=pentagon, color=darkviolet];
23558[label="3.38.112.145;18pkt 18fpkt", shape=invtriangle, color=brown];
24076[label="37.138.4.170;35pkt 35fpkt", shape=invtriangle, color=brown];
24475[label="53.119.182.189;10pkt 10fpkt", shape=invtriangle, color=brown];
27481[label="3.38.112.145;18pkt 18fpkt", shape=invhouse, color=bisque];
27761[label="37.138.4.170;35pkt 35fpkt", shape=invhouse, color=bisque];
27995[label="53.119.182.189;10pkt 10fpkt", shape=invhouse, color=bisque];
stat3124[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.138.4.170:*, 134.73.170.1:25}[29.661%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3015: (1.45773%)&lt;BR/&gt; 3137: (0.874636%)&lt;BR/&gt; 3107: (0.874636%)&lt;BR/&gt; 3080: (0.874636%)&gt;];
}
2111--4443[label="1;18pkt 18fpkt"];
2111--10213[label="1;18pkt 18fpkt"];
2111--17117[label="1;18pkt 18fpkt"];
2111--17901[label="1;35pkt 35fpkt"];
2111--18498[label="1;10pkt 10fpkt"];
2111--23558[label="1;18pkt 18fpkt"];
2111--24076[label="1;35pkt 35fpkt"];
2111--24475[label="1;10pkt 10fpkt"];
2111--27481[label="1;18pkt 18fpkt"];
2111--27761[label="1;35pkt 35fpkt"];
2111--27995[label="1;10pkt 10fpkt"];
4443--10213[label="1;18pkt 18fpkt"];
4443--17117[label="1;18pkt 18fpkt"];
4443--23558[label="1;18pkt 18fpkt"];
4443--27481[label="1;18pkt 18fpkt"];
10213--17117[label="1;18pkt 18fpkt"];
10213--23558[label="1;18pkt 18fpkt"];
10213--27481[label="1;18pkt 18fpkt"];
17117--23558[label="1;18pkt 18fpkt"];
17117--27481[label="1;18pkt 18fpkt"];
17901--24076[label="1;35pkt 35fpkt"];
17901--27761[label="1;35pkt 35fpkt"];
18498--24475[label="1;10pkt 10fpkt"];
18498--27995[label="1;10pkt 10fpkt"];
23558--27481[label="1;18pkt 18fpkt"];
24076--27761[label="1;35pkt 35fpkt"];
24475--27995[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.170.1" dst_port="25" src_ip="37.138.4.170"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3125{
style=filled;
color=gray75;
17906[label="13.99.28.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24080[label="13.99.28.170;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3125[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.99.28.170:1345, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1345: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17906--24080[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="13.99.28.170" src_port="1345"/>
    </slice>
    <from sec="1241500346" usec="0"/>
    <to sec="1241500409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.187.33.170"/>
    </slice>
    <from sec="1241500295" usec="0"/>
    <to sec="1241500309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.197.44.170"/>
    </slice>
    <from sec="1241500168" usec="0"/>
    <to sec="1241500209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.188.60.170"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.95.170"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.185.136.170"/>
    </slice>
    <from sec="1241500244" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.59.23.171"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.196.23.171"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.240.34.171"/>
    </slice>
    <from sec="1241500217" usec="0"/>
    <to sec="1241500246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.56.57.171"/>
    </slice>
    <from sec="1241499688" usec="0"/>
    <to sec="1241500445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.234.148.171"/>
    </slice>
    <from sec="1241500153" usec="0"/>
    <to sec="1241500162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3136{
style=filled;
color=gray75;
17958[label="215.66.212.171;2pkt 2fpkt", shape=pentagon, color=darkviolet];
24116[label="215.66.212.171;2pkt 2fpkt", shape=invtriangle, color=brown];
27781[label="215.66.212.171;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3136[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.212.171:139, 69.144.24.6:3075}[50%]&lt;BR/&gt;{215.66.212.171:445, 69.144.24.6:3078}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3078: (25%)&lt;BR/&gt; 3075: (25%)&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&gt;];
}
17958--24116[label="1;2pkt 2fpkt"];
17958--27781[label="1;2pkt 2fpkt"];
24116--27781[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="69.144.24.6" dst_port="3078" src_ip="215.66.212.171" src_port="445"/>
      <filter dst_ip="69.144.24.6" dst_port="3075" src_ip="215.66.212.171" src_port="139"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.146.220.171"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.83.0.172"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.143.42.172"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.177.54.172"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.143.81.172"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.117.172"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241499812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.20.160.172"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241499971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.110.188.172"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.37.6.173"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3146{
style=filled;
color=gray75;
18010[label="20.213.40.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24148[label="20.213.40.173;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3146[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.213.40.173:1171, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1171: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18010--24148[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="20.213.40.173" src_port="1171"/>
    </slice>
    <from sec="1241500445" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3147{
style=filled;
color=gray75;
18019[label="219.36.129.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24154[label="219.36.129.173;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3147[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.36.129.173:63966, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63966: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18019--24154[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="219.36.129.173" src_port="63966"/>
    </slice>
    <from sec="1241500447" usec="0"/>
    <to sec="1241500455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.134.173"/>
    </slice>
    <from sec="1241500242" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.171.173.173"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.231.173"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.245.4.174"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.42.16.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.54.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.204.93.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3155{
style=filled;
color=gray75;
18046[label="46.229.107.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24172[label="46.229.107.174;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3155[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.229.107.174:2797, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2797: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18046--24172[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="46.229.107.174" src_port="2797"/>
    </slice>
    <from sec="1241500460" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.26.112.174"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241499990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.56.120.174"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.41.152.174"/>
    </slice>
    <from sec="1241500093" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.105.169.174"/>
    </slice>
    <from sec="1241499780" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.187.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3161{
style=filled;
color=gray75;
18065[label="66.54.207.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24185[label="66.54.207.174;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3161[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.54.207.174:1534, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1534: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18065--24185[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="66.54.207.174" src_port="1534"/>
    </slice>
    <from sec="1241500293" usec="0"/>
    <to sec="1241500320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.82.247.174"/>
    </slice>
    <from sec="1241499709" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.01928,4.3836,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_3163{
style=filled;
color=gray75;
2414[label="41.150.249.238;s;45pkt 45fpkt", shape=diamond, color=yellow];
11511[label="41.150.249.238;s;45pkt 45fpkt", shape=hexagon, color=black];
19750[label="41.150.249.238;45pkt 45fpkt", shape=pentagon, color=darkviolet];
stat3163[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.238:5050, *:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.4444%)&lt;BR/&gt; 20: (3.33333%)&lt;BR/&gt; 1048: (2.22222%)&lt;BR/&gt; 1034: (2.22222%)&lt;BR/&gt; 1026: (2.22222%)&gt;];
}
2414--4622[label="0.0222222;1pkt 1fpkt"];
2414--11511[label="1;45pkt 45fpkt"];
2414--19750[label="1;45pkt 45fpkt"];
11511--19750[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.238" src_port="5050"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.107.81.175"/>
    </slice>
    <from sec="1241499946" usec="0"/>
    <to sec="1241499953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.186.155.175"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.2.158.175"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.99.211.175"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3168{
style=filled;
color=gray75;
18098[label="63.251.16.176;10pkt 10fpkt", shape=pentagon, color=darkviolet];
24209[label="63.251.16.176;10pkt 10fpkt", shape=invtriangle, color=brown];
stat3168[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.251.16.176:443, 172.204.189.96:*}[70%]&lt;BR/&gt;{63.251.16.176:443, 172.204.189.97:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 63855: (5%)&lt;BR/&gt; 63570: (5%)&lt;BR/&gt; 63569: (5%)&lt;BR/&gt; 63565: (5%)&gt;];
}
18098--24209[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.189.96" src_ip="63.251.16.176" src_port="443"/>
      <filter dst_ip="172.204.189.97" src_ip="63.251.16.176" src_port="443"/>
    </slice>
    <from sec="1241500429" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3169{
style=filled;
color=gray75;
18103[label="200.62.34.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24211[label="200.62.34.176;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3169[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.62.34.176:4285, 215.66.214.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4285: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18103--24211[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" dst_port="80" src_ip="200.62.34.176" src_port="4285"/>
    </slice>
    <from sec="1241500367" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.5.99.176"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.1.114.176"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.61.150.176"/>
    </slice>
    <from sec="1241499941" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.81.222.176"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.236.18.177"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3175{
style=filled;
color=gray75;
5186[label="172.204.212.152;d;45pkt 45fpkt", shape=diamond, color=yellow];
13050[label="48.12.34.27;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15472[label="48.12.34.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15845[label="48.12.34.107;3pkt 3fpkt", shape=pentagon, color=darkviolet];
18130[label="48.12.34.177;4pkt 4fpkt", shape=pentagon, color=darkviolet];
18911[label="48.12.34.205;4pkt 4fpkt", shape=pentagon, color=darkviolet];
22499[label="48.12.34.97;2pkt 2fpkt", shape=invtriangle, color=brown];
22741[label="48.12.34.107;3pkt 3fpkt", shape=invtriangle, color=brown];
24227[label="48.12.34.177;4pkt 4fpkt", shape=invtriangle, color=brown];
27012[label="48.12.34.107;3pkt 3fpkt", shape=invhouse, color=bisque];
27845[label="48.12.34.177;4pkt 4fpkt", shape=invhouse, color=bisque];
stat3175[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.204.212.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56728: (2.5974%)&lt;BR/&gt; 52221: (2.5974%)&lt;BR/&gt; 52220: (2.5974%)&lt;BR/&gt; 51779: (2.5974%)&gt;];
}
5186--7930[label="0.0222222;1pkt 1fpkt"];
5186--7949[label="0.0222222;1pkt 1fpkt"];
5186--13050[label="1;3pkt 3fpkt"];
5186--15472[label="1;2pkt 2fpkt"];
5186--15845[label="1;3pkt 3fpkt"];
5186--18130[label="1;4pkt 4fpkt"];
5186--18911[label="1;4pkt 4fpkt"];
5186--19171[label="0.0222222;1pkt 1fpkt"];
5186--20004[label="0.1;2pkt 2fpkt"];
5186--20063[label="0.2;4pkt 4fpkt"];
5186--22499[label="1;2pkt 2fpkt"];
5186--22741[label="1;3pkt 3fpkt"];
5186--24227[label="1;4pkt 4fpkt"];
5186--24931[label="0.0222222;1pkt 1fpkt"];
5186--25488[label="0.1;2pkt 2fpkt"];
5186--25530[label="0.2;4pkt 4fpkt"];
5186--27012[label="1;3pkt 3fpkt"];
5186--27845[label="1;4pkt 4fpkt"];
15472--22499[label="1;2pkt 2fpkt"];
15845--22741[label="1;3pkt 3fpkt"];
15845--27012[label="1;3pkt 3fpkt"];
18130--24227[label="1;4pkt 4fpkt"];
18130--27845[label="1;4pkt 4fpkt"];
22741--27012[label="1;3pkt 3fpkt"];
24227--27845[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.212.152" dst_port="80"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.172.71.177"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.73.144.177"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.58.195.177"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3179{
style=filled;
color=gray75;
18167[label="208.165.140.178;231pkt 231fpkt", shape=pentagon, color=darkviolet];
24247[label="208.165.140.178;231pkt 231fpkt", shape=invtriangle, color=brown];
27855[label="208.165.140.178;231pkt 231fpkt", shape=invhouse, color=bisque];
stat3179[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.165.140.178:*, *:8081}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8081: (50%)&lt;BR/&gt; 65380: (0.21645%)&lt;BR/&gt; 65127: (0.21645%)&lt;BR/&gt; 64972: (0.21645%)&lt;BR/&gt; 64921: (0.21645%)&gt;];
}
18167--24247[label="1;231pkt 231fpkt"];
18167--27855[label="1;231pkt 231fpkt"];
24247--27855[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="8081" src_ip="208.165.140.178"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.101.149.178"/>
    </slice>
    <from sec="1241500109" usec="0"/>
    <to sec="1241500142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3181{
style=filled;
color=gray75;
18173[label="7.80.163.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
24251[label="7.80.163.178;2pkt 2fpkt", shape=invtriangle, color=brown];
27857[label="7.80.163.178;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3181[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.80.163.178:3680, 128.1.2.95:19504}[50%]&lt;BR/&gt;{7.80.163.178:3681, 128.1.2.95:19504}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19504: (50%)&lt;BR/&gt; 3681: (25%)&lt;BR/&gt; 3680: (25%)&gt;];
}
18173--24251[label="1;2pkt 2fpkt"];
18173--27857[label="1;2pkt 2fpkt"];
24251--27857[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.1.2.95" dst_port="19504" src_ip="7.80.163.178" src_port="3681"/>
      <filter dst_ip="128.1.2.95" dst_port="19504" src_ip="7.80.163.178" src_port="3680"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.68.164.178"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.78.237.178"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.37.6.179"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.77.25.179"/>
    </slice>
    <from sec="1241499660" usec="0"/>
    <to sec="1241499775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.210.33.179"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.31.149.179"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.215.6.180"/>
    </slice>
    <from sec="1241500093" usec="0"/>
    <to sec="1241500126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3189{
style=filled;
color=gray75;
3359[label="172.204.178.84;d;18pkt 18fpkt", shape=diamond, color=yellow];
3967[label="172.204.166.20;d;140pkt 140fpkt", shape=diamond, color=yellow];
6123[label="32.161.175.236;s;31pkt 31fpkt", shape=diamond, color=yellow];
6723[label="42.73.21.219;s;10pkt 10fpkt", shape=diamond, color=yellow];
6793[label="32.161.160.22;s;61pkt 61fpkt", shape=diamond, color=yellow];
8493[label="42.73.21.218;s;4pkt 4fpkt", shape=diamond, color=yellow];
11603[label="42.73.21.218;s;4pkt 4fpkt", shape=hexagon, color=black];
12876[label="32.161.160.22;61pkt 61fpkt", shape=pentagon, color=darkviolet];
16719[label="203.125.4.134;22pkt 22fpkt", shape=pentagon, color=darkviolet];
18219[label="42.73.21.180;4pkt 4fpkt", shape=pentagon, color=darkviolet];
18247[label="42.73.21.181;9pkt 9fpkt", shape=pentagon, color=darkviolet];
19249[label="42.73.21.217;8pkt 8fpkt", shape=pentagon, color=darkviolet];
19286[label="42.73.21.218;4pkt 4fpkt", shape=pentagon, color=darkviolet];
20785[label="32.161.160.22;61pkt 61fpkt", shape=invtriangle, color=brown];
23306[label="203.125.4.134;22pkt 22fpkt", shape=invtriangle, color=brown];
24282[label="42.73.21.180;4pkt 4fpkt", shape=invtriangle, color=brown];
24301[label="42.73.21.181;9pkt 9fpkt", shape=invtriangle, color=brown];
24975[label="42.73.21.217;8pkt 8fpkt", shape=invtriangle, color=brown];
25000[label="42.73.21.218;4pkt 4fpkt", shape=invtriangle, color=brown];
27325[label="203.125.4.134;22pkt 22fpkt", shape=invhouse, color=bisque];
27880[label="42.73.21.180;4pkt 4fpkt", shape=invhouse, color=bisque];
27892[label="42.73.21.181;9pkt 9fpkt", shape=invhouse, color=bisque];
28291[label="42.73.21.218;4pkt 4fpkt", shape=invhouse, color=bisque];
stat3189[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.161.160.22:*, 172.204.166.20:80}[20.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0727%)&lt;BR/&gt; 53: (5.83174%)&lt;BR/&gt; 65324: (0.573614%)&lt;BR/&gt; 63101: (0.573614%)&lt;BR/&gt; 61644: (0.573614%)&gt;];
}
3359--6723[label="0.2;2pkt 2fpkt"];
3359--8493[label="0.5;2pkt 2fpkt"];
3359--11603[label="0.5;2pkt 2fpkt"];
3359--18219[label="0.25;1pkt 1fpkt"];
3359--18247[label="0.222222;2pkt 2fpkt"];
3359--19286[label="0.5;2pkt 2fpkt"];
3359--24282[label="0.25;1pkt 1fpkt"];
3359--24301[label="0.222222;2pkt 2fpkt"];
3359--25000[label="0.5;2pkt 2fpkt"];
3359--27880[label="0.25;1pkt 1fpkt"];
3359--27892[label="0.222222;2pkt 2fpkt"];
3359--28291[label="0.5;2pkt 2fpkt"];
3967--6123[label="0.612903;19pkt 19fpkt"];
3967--6723[label="0.8;8pkt 8fpkt"];
3967--6793[label="0.721311;44pkt 44fpkt"];
3967--7930[label="0.0285714;3pkt 3fpkt"];
3967--8493[label="0.5;2pkt 2fpkt"];
3967--11603[label="0.5;2pkt 2fpkt"];
3967--12876[label="0.721311;44pkt 44fpkt"];
3967--13772[label="0.411765;7pkt 7fpkt"];
3967--16719[label="0.136364;3pkt 3fpkt"];
3967--18219[label="0.75;3pkt 3fpkt"];
3967--18247[label="0.333333;3pkt 3fpkt"];
3967--19171[label="0.0283019;3pkt 3fpkt"];
3967--19249[label="0.25;2pkt 2fpkt"];
3967--19286[label="0.5;2pkt 2fpkt"];
3967--20785[label="0.721311;44pkt 44fpkt"];
3967--23306[label="0.136364;3pkt 3fpkt"];
3967--24282[label="0.75;3pkt 3fpkt"];
3967--24301[label="0.333333;3pkt 3fpkt"];
3967--24931[label="0.0283019;3pkt 3fpkt"];
3967--24975[label="0.25;2pkt 2fpkt"];
3967--25000[label="0.5;2pkt 2fpkt"];
3967--27325[label="0.136364;3pkt 3fpkt"];
3967--27880[label="0.75;3pkt 3fpkt"];
3967--27892[label="0.333333;3pkt 3fpkt"];
3967--28291[label="0.5;2pkt 2fpkt"];
6123--6855[label="0.0645161;2pkt 2fpkt"];
6123--11815[label="0.0322581;1pkt 1fpkt"];
6123--11824[label="0.0322581;1pkt 1fpkt"];
6123--11863[label="0.0645161;2pkt 2fpkt"];
6123--11886[label="0.0322581;1pkt 1fpkt"];
6123--11900[label="0.0645161;2pkt 2fpkt"];
6793--11032[label="0.0163934;1pkt 1fpkt"];
6793--11833[label="0.0163934;1pkt 1fpkt"];
6793--11839[label="0.0163934;1pkt 1fpkt"];
6793--11891[label="0.0163934;1pkt 1fpkt"];
6793--11898[label="0.0163934;1pkt 1fpkt"];
6793--12876[label="1;61pkt 61fpkt"];
6793--20785[label="1;61pkt 61fpkt"];
8493--11603[label="1;4pkt 4fpkt"];
8493--19286[label="1;4pkt 4fpkt"];
8493--25000[label="1;4pkt 4fpkt"];
8493--28291[label="1;4pkt 4fpkt"];
11603--19286[label="1;4pkt 4fpkt"];
11603--25000[label="1;4pkt 4fpkt"];
11603--28291[label="1;4pkt 4fpkt"];
12876--20785[label="1;61pkt 61fpkt"];
16719--23306[label="1;22pkt 22fpkt"];
16719--27325[label="1;22pkt 22fpkt"];
18219--24282[label="1;4pkt 4fpkt"];
18219--27880[label="1;4pkt 4fpkt"];
18247--24301[label="1;9pkt 9fpkt"];
18247--27892[label="1;9pkt 9fpkt"];
19249--24975[label="1;8pkt 8fpkt"];
19286--25000[label="1;4pkt 4fpkt"];
19286--28291[label="1;4pkt 4fpkt"];
23306--27325[label="1;22pkt 22fpkt"];
24282--27880[label="1;4pkt 4fpkt"];
24301--27892[label="1;9pkt 9fpkt"];
25000--28291[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.166.20" dst_port="80" src_ip="32.161.160.22"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.21.180"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.176.135.180"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241499960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3192{
style=filled;
color=gray75;
18234[label="38.117.147.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24290[label="38.117.147.180;1pkt 1fpkt", shape=invtriangle, color=brown];
27886[label="38.117.147.180;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3192[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.117.147.180:50230, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50230: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18234--24290[label="1;1pkt 1fpkt"];
18234--27886[label="1;1pkt 1fpkt"];
24290--27886[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="38.117.147.180" src_port="50230"/>
    </slice>
    <from sec="1241500343" usec="0"/>
    <to sec="1241500389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3193{
style=filled;
color=gray75;
18244[label="134.73.251.180;3pkt 3fpkt", shape=pentagon, color=darkviolet];
24298[label="134.73.251.180;3pkt 3fpkt", shape=invtriangle, color=brown];
27889[label="134.73.251.180;3pkt 3fpkt", shape=invhouse, color=bisque];
stat3193[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.251.180:3948, 34.89.33.61:443}[33.3333%]&lt;BR/&gt;{134.73.251.180:80, 32.161.161.91:39005}[33.3333%]&lt;BR/&gt;{134.73.251.180:80, 193.40.180.112:52513}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 52513: (16.6667%)&lt;BR/&gt; 39005: (16.6667%)&lt;BR/&gt; 3948: (16.6667%)&lt;BR/&gt; 443: (16.6667%)&gt;];
}
18244--24298[label="1;3pkt 3fpkt"];
18244--27889[label="1;3pkt 3fpkt"];
24298--27889[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.40.180.112" dst_port="52513" src_ip="134.73.251.180" src_port="80"/>
      <filter dst_ip="32.161.161.91" dst_port="39005" src_ip="134.73.251.180" src_port="80"/>
      <filter dst_ip="34.89.33.61" dst_port="443" src_ip="134.73.251.180" src_port="3948"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.149.43.181"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.79.58.181"/>
    </slice>
    <from sec="1241499742" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3196{
style=filled;
color=gray75;
18261[label="200.34.142.181;3pkt 3fpkt", shape=pentagon, color=darkviolet];
24312[label="200.34.142.181;3pkt 3fpkt", shape=invtriangle, color=brown];
stat3196[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.34.142.181:51140, 215.66.220.67:80}[33.3333%]&lt;BR/&gt;{200.34.142.181:51254, 215.66.220.67:80}[33.3333%]&lt;BR/&gt;{200.34.142.181:51255, 215.66.220.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51255: (16.6667%)&lt;BR/&gt; 51254: (16.6667%)&lt;BR/&gt; 51140: (16.6667%)&gt;];
}
18261--24312[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="200.34.142.181" src_port="51255"/>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="200.34.142.181" src_port="51254"/>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="200.34.142.181" src_port="51140"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.54.161.181"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.60.177.181"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3199{
style=filled;
color=gray75;
18274[label="195.99.208.181;18pkt 18fpkt", shape=pentagon, color=darkviolet];
24321[label="195.99.208.181;18pkt 18fpkt", shape=invtriangle, color=brown];
27902[label="195.99.208.181;18pkt 18fpkt", shape=invhouse, color=bisque];
stat3199[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.99.208.181:*, 170.15.19.224:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1271: (2.77778%)&lt;BR/&gt; 1270: (2.77778%)&lt;BR/&gt; 1269: (2.77778%)&lt;BR/&gt; 1268: (2.77778%)&gt;];
}
18274--24321[label="1;18pkt 18fpkt"];
18274--27902[label="1;18pkt 18fpkt"];
24321--27902[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.224" dst_port="80" src_ip="195.99.208.181"/>
    </slice>
    <from sec="1241500352" usec="0"/>
    <to sec="1241500411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.230.208.181"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3201{
style=filled;
color=gray75;
18276[label="3.38.229.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24323[label="3.38.229.181;1pkt 1fpkt", shape=invtriangle, color=brown];
27904[label="3.38.229.181;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3201[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.38.229.181:0, 215.66.214.16:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
18276--24323[label="1;1pkt 1fpkt"];
18276--27904[label="1;1pkt 1fpkt"];
24323--27904[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.214.16" src_ip="3.38.229.181"/>
    </slice>
    <from sec="1241499998" usec="0"/>
    <to sec="1241500421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.31.252.181"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.82.50.182"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.77.88.182"/>
    </slice>
    <from sec="1241499755" usec="0"/>
    <to sec="1241500080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.149.182"/>
    </slice>
    <from sec="1241500102" usec="0"/>
    <to sec="1241500243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.85.12.183"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.41.74.183"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.132.96.183"/>
    </slice>
    <from sec="1241499958" usec="0"/>
    <to sec="1241499998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3209{
style=filled;
color=gray75;
18318[label="54.74.97.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24352[label="54.74.97.183;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3209[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.74.97.183:1090, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1090: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18318--24352[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="54.74.97.183" src_port="1090"/>
    </slice>
    <from sec="1241500394" usec="0"/>
    <to sec="1241500423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3211{
style=filled;
color=gray75;
18331[label="70.215.1.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24361[label="70.215.1.184;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3211[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.215.1.184:63497, 172.204.181.68:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63497: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
18331--24361[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.181.68" dst_port="21" src_ip="70.215.1.184" src_port="63497"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3212{
style=filled;
color=gray75;
18339[label="192.220.54.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24368[label="192.220.54.184;1pkt 1fpkt", shape=invtriangle, color=brown];
27931[label="192.220.54.184;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3212[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.220.54.184:80, 215.66.210.120:52084}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52084: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18339--24368[label="1;1pkt 1fpkt"];
18339--27931[label="1;1pkt 1fpkt"];
24368--27931[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.210.120" dst_port="52084" src_ip="192.220.54.184" src_port="80"/>
    </slice>
    <from sec="1241499868" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.115.62.184"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3214{
style=filled;
color=gray75;
1190[label="170.15.88.156;d;560pkt 560fpkt", shape=diamond, color=yellow];
2831[label="192.138.146.226;s;19pkt 19fpkt", shape=diamond, color=yellow];
5528[label="34.74.188.208;s;83pkt 83fpkt", shape=diamond, color=yellow];
5548[label="162.229.154.9;s;29pkt 29fpkt", shape=diamond, color=yellow];
5558[label="32.48.36.164;s;38pkt 38fpkt", shape=diamond, color=yellow];
5631[label="215.66.219.240;d;307pkt 307fpkt", shape=diamond, color=yellow];
8252[label="192.138.146.224;s;13pkt 13fpkt", shape=diamond, color=yellow];
8817[label="128.46.0.50;d;12pkt 12fpkt", shape=diamond, color=yellow];
9908[label="192.138.146.226;s;10pkt 10fpkt", shape=hexagon, color=black];
12324[label="70.197.166.8;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12365[label="162.229.154.9;28pkt 28fpkt", shape=pentagon, color=darkviolet];
12369[label="70.197.166.9;53pkt 53fpkt", shape=pentagon, color=darkviolet];
14291[label="217.49.133.64;48pkt 48fpkt", shape=pentagon, color=darkviolet];
16320[label="46.125.39.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16717[label="208.46.189.133;16pkt 16fpkt", shape=pentagon, color=darkviolet];
16781[label="204.64.146.135;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17259[label="69.138.121.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17732[label="32.48.36.164;38pkt 38fpkt", shape=pentagon, color=darkviolet];
18208[label="67.102.158.179;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18342[label="13.24.81.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18427[label="44.228.39.187;15pkt 15fpkt", shape=pentagon, color=darkviolet];
19413[label="192.138.146.224;15pkt 15fpkt", shape=pentagon, color=darkviolet];
19453[label="192.138.146.226;19pkt 19fpkt", shape=pentagon, color=darkviolet];
19860[label="12.160.217.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20411[label="70.197.166.8;7pkt 7fpkt", shape=invtriangle, color=brown];
20438[label="162.229.154.9;29pkt 29fpkt", shape=invtriangle, color=brown];
20442[label="70.197.166.9;53pkt 53fpkt", shape=invtriangle, color=brown];
21726[label="217.49.133.64;48pkt 48fpkt", shape=invtriangle, color=brown];
23043[label="46.125.39.122;2pkt 2fpkt", shape=invtriangle, color=brown];
23352[label="204.64.146.135;2pkt 2fpkt", shape=invtriangle, color=brown];
23660[label="69.138.121.149;1pkt 1fpkt", shape=invtriangle, color=brown];
23964[label="32.48.36.164;38pkt 38fpkt", shape=invtriangle, color=brown];
24275[label="67.102.158.179;2pkt 2fpkt", shape=invtriangle, color=brown];
24370[label="13.24.81.184;1pkt 1fpkt", shape=invtriangle, color=brown];
24430[label="44.228.39.187;15pkt 15fpkt", shape=invtriangle, color=brown];
25085[label="192.138.146.224;15pkt 15fpkt", shape=invtriangle, color=brown];
25108[label="192.138.146.226;19pkt 19fpkt", shape=invtriangle, color=brown];
25727[label="70.197.166.8;7pkt 7fpkt", shape=invhouse, color=bisque];
25740[label="162.229.154.9;28pkt 28fpkt", shape=invhouse, color=bisque];
26424[label="217.49.133.64;48pkt 48fpkt", shape=invhouse, color=bisque];
27700[label="32.48.36.164;38pkt 38fpkt", shape=invhouse, color=bisque];
27874[label="67.102.158.179;2pkt 2fpkt", shape=invhouse, color=bisque];
27933[label="13.24.81.184;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3214[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 170.15.88.156:*}[58.9404%]&lt;BR/&gt;{*:*, 215.66.219.240:*}[33.8852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.4328%)&lt;BR/&gt; 993: (3.34328%)&lt;BR/&gt; 53: (1.40299%)&lt;BR/&gt; 443: (0.656716%)&lt;BR/&gt; 62859: (0.41791%)&gt;];
}
1190--1226[label="1;4pkt 4fpkt"];
1190--2831[label="0.210526;4pkt 4fpkt"];
1190--3663[label="0.142857;1pkt 1fpkt"];
1190--4254[label="0.0434783;3pkt 3fpkt"];
1190--5237[label="0.0289855;2pkt 2fpkt"];
1190--5528[label="1;83pkt 83fpkt"];
1190--5548[label="1;29pkt 29fpkt"];
1190--5558[label="1;38pkt 38fpkt"];
1190--5893[label="0.0314961;4pkt 4fpkt"];
1190--6281[label="0.0952381;2pkt 2fpkt"];
1190--8225[label="0.0625;1pkt 1fpkt"];
1190--9908[label="0.4;4pkt 4fpkt"];
1190--10174[label="0.130435;3pkt 3fpkt"];
1190--11266[label="0.0625;1pkt 1fpkt"];
1190--11838[label="0.0107143;6pkt 6fpkt"];
1190--11884[label="0.0339286;19pkt 19fpkt"];
1190--11897[label="0.0107143;6pkt 6fpkt"];
1190--11917[label="0.0339286;19pkt 19fpkt"];
1190--12324[label="1;7pkt 7fpkt"];
1190--12365[label="1;28pkt 28fpkt"];
1190--12369[label="1;53pkt 53fpkt"];
1190--12773[label="0.0512821;2pkt 2fpkt"];
1190--13464[label="0.0357143;1pkt 1fpkt"];
1190--14169[label="0.0322581;1pkt 1fpkt"];
1190--14291[label="1;48pkt 48fpkt"];
1190--14463[label="0.0909091;5pkt 5fpkt"];
1190--15120[label="0.0434783;3pkt 3fpkt"];
1190--16510[label="0.0869565;2pkt 2fpkt"];
1190--16717[label="1;16pkt 16fpkt"];
1190--17732[label="1;38pkt 38fpkt"];
1190--18427[label="1;15pkt 15fpkt"];
1190--18434[label="0.133333;2pkt 2fpkt"];
1190--19453[label="0.210526;4pkt 4fpkt"];
1190--20079[label="0.0625;1pkt 1fpkt"];
1190--20411[label="1;7pkt 7fpkt"];
1190--20438[label="1;29pkt 29fpkt"];
1190--20442[label="1;53pkt 53fpkt"];
1190--20714[label="0.0512821;2pkt 2fpkt"];
1190--21177[label="0.0357143;1pkt 1fpkt"];
1190--21639[label="0.0322581;1pkt 1fpkt"];
1190--21726[label="1;48pkt 48fpkt"];
1190--21837[label="0.0909091;5pkt 5fpkt"];
1190--22271[label="0.0434783;3pkt 3fpkt"];
1190--23175[label="0.0869565;2pkt 2fpkt"];
1190--23964[label="1;38pkt 38fpkt"];
1190--24430[label="1;15pkt 15fpkt"];
1190--24434[label="0.133333;2pkt 2fpkt"];
1190--25108[label="0.210526;4pkt 4fpkt"];
1190--25539[label="0.0625;1pkt 1fpkt"];
1190--25727[label="1;7pkt 7fpkt"];
1190--25740[label="1;28pkt 28fpkt"];
1190--26376[label="0.0333333;1pkt 1fpkt"];
1190--26424[label="1;48pkt 48fpkt"];
1190--26489[label="0.0909091;5pkt 5fpkt"];
1190--27700[label="1;38pkt 38fpkt"];
1190--28616[label="0.0625;1pkt 1fpkt"];
2831--5007[label="0.157895;3pkt 3fpkt"];
2831--5631[label="0.0526316;1pkt 1fpkt"];
2831--8807[label="0.157895;3pkt 3fpkt"];
2831--8817[label="0.166667;2pkt 2fpkt"];
2831--9908[label="1;10pkt 10fpkt"];
2831--19453[label="1;19pkt 19fpkt"];
2831--25108[label="1;19pkt 19fpkt"];
5548--11838[label="0.0344828;1pkt 1fpkt"];
5548--11897[label="0.0344828;1pkt 1fpkt"];
5548--12365[label="1;28pkt 28fpkt"];
5548--20438[label="1;29pkt 29fpkt"];
5548--25740[label="1;28pkt 28fpkt"];
5558--17732[label="1;38pkt 38fpkt"];
5558--23964[label="1;38pkt 38fpkt"];
5558--27700[label="1;38pkt 38fpkt"];
5631--6350[label="0.00325733;1pkt 1fpkt"];
5631--8252[label="0.0769231;1pkt 1fpkt"];
5631--8262[label="0.00651466;2pkt 2fpkt"];
5631--9504[label="0.00325733;1pkt 1fpkt"];
5631--9908[label="0.1;1pkt 1fpkt"];
5631--10624[label="0.00325733;1pkt 1fpkt"];
5631--11672[label="0.00325733;1pkt 1fpkt"];
5631--11718[label="0.00325733;1pkt 1fpkt"];
5631--11792[label="0.00325733;1pkt 1fpkt"];
5631--11838[label="0.00325733;1pkt 1fpkt"];
5631--11868[label="0.00325733;1pkt 1fpkt"];
5631--11875[label="0.00325733;1pkt 1fpkt"];
5631--11884[label="0.029316;9pkt 9fpkt"];
5631--11896[label="0.029316;9pkt 9fpkt"];
5631--11897[label="0.00325733;1pkt 1fpkt"];
5631--11903[label="0.00325733;1pkt 1fpkt"];
5631--11909[label="0.00325733;1pkt 1fpkt"];
5631--11917[label="0.029316;9pkt 9fpkt"];
5631--11922[label="0.029316;9pkt 9fpkt"];
5631--11928[label="0.00325733;1pkt 1fpkt"];
5631--12575[label="0.00387597;1pkt 1fpkt"];
5631--12911[label="0.00325733;1pkt 1fpkt"];
5631--13823[label="0.00552486;1pkt 1fpkt"];
5631--13958[label="0.00325733;1pkt 1fpkt"];
5631--15347[label="0.00325733;1pkt 1fpkt"];
5631--16781[label="0.5;1pkt 1fpkt"];
5631--16801[label="0.0106383;1pkt 1fpkt"];
5631--17259[label="1;1pkt 1fpkt"];
5631--18208[label="0.5;1pkt 1fpkt"];
5631--18342[label="1;1pkt 1fpkt"];
5631--19150[label="0.00651466;2pkt 2fpkt"];
5631--19413[label="0.0666667;1pkt 1fpkt"];
5631--19453[label="0.0526316;1pkt 1fpkt"];
5631--19860[label="1;1pkt 1fpkt"];
5631--20806[label="0.00325733;1pkt 1fpkt"];
5631--21406[label="0.00552486;1pkt 1fpkt"];
5631--21494[label="0.00325733;1pkt 1fpkt"];
5631--22420[label="0.00325733;1pkt 1fpkt"];
5631--23352[label="0.5;1pkt 1fpkt"];
5631--23364[label="0.0106383;1pkt 1fpkt"];
5631--23660[label="1;1pkt 1fpkt"];
5631--24275[label="0.5;1pkt 1fpkt"];
5631--24370[label="1;1pkt 1fpkt"];
5631--24917[label="0.00651466;2pkt 2fpkt"];
5631--25085[label="0.0666667;1pkt 1fpkt"];
5631--25108[label="0.0526316;1pkt 1fpkt"];
5631--25955[label="0.00325733;1pkt 1fpkt"];
5631--26262[label="0.00552486;1pkt 1fpkt"];
5631--26305[label="0.00325733;1pkt 1fpkt"];
5631--26811[label="0.00325733;1pkt 1fpkt"];
5631--27874[label="0.5;1pkt 1fpkt"];
5631--27933[label="1;1pkt 1fpkt"];
8252--8817[label="0.0833333;1pkt 1fpkt"];
8252--19413[label="1;13pkt 13fpkt"];
8252--25085[label="1;13pkt 13fpkt"];
8817--9908[label="0.2;2pkt 2fpkt"];
8817--16320[label="1;2pkt 2fpkt"];
8817--19413[label="0.0833333;1pkt 1fpkt"];
8817--19453[label="0.166667;2pkt 2fpkt"];
8817--23043[label="1;2pkt 2fpkt"];
8817--25085[label="0.0833333;1pkt 1fpkt"];
8817--25108[label="0.166667;2pkt 2fpkt"];
9908--19453[label="1;10pkt 10fpkt"];
9908--25108[label="1;10pkt 10fpkt"];
12324--20411[label="1;7pkt 7fpkt"];
12324--25727[label="1;7pkt 7fpkt"];
12365--20438[label="1;28pkt 28fpkt"];
12365--25740[label="1;28pkt 28fpkt"];
12369--20442[label="1;53pkt 53fpkt"];
14291--21726[label="1;48pkt 48fpkt"];
14291--26424[label="1;48pkt 48fpkt"];
16320--23043[label="1;2pkt 2fpkt"];
16781--23352[label="1;2pkt 2fpkt"];
17259--23660[label="1;1pkt 1fpkt"];
17732--23964[label="1;38pkt 38fpkt"];
17732--27700[label="1;38pkt 38fpkt"];
18208--24275[label="1;2pkt 2fpkt"];
18208--27874[label="1;2pkt 2fpkt"];
18342--24370[label="1;1pkt 1fpkt"];
18342--27933[label="1;1pkt 1fpkt"];
18427--24430[label="1;15pkt 15fpkt"];
19413--25085[label="1;15pkt 15fpkt"];
19453--25108[label="1;19pkt 19fpkt"];
20411--25727[label="1;7pkt 7fpkt"];
20438--25740[label="1;28pkt 28fpkt"];
21726--26424[label="1;48pkt 48fpkt"];
23964--27700[label="1;38pkt 38fpkt"];
24275--27874[label="1;2pkt 2fpkt"];
24370--27933[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.240"/>
      <filter dst_ip="170.15.88.156" src_port="80"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.215.83.184"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.240.151.184"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.177.1.185"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.36.26.185"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.161.49.185"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.138.125.185"/>
    </slice>
    <from sec="1241499935" usec="0"/>
    <to sec="1241499951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.16.209.185"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3222{
style=filled;
color=gray75;
18390[label="134.73.233.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
24405[label="134.73.233.185;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3222[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.233.185:80, 196.164.60.29:41916}[50%]&lt;BR/&gt;{134.73.233.185:80, 70.72.213.186:3929}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41916: (25%)&lt;BR/&gt; 3929: (25%)&gt;];
}
18390--24405[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="70.72.213.186" dst_port="3929" src_ip="134.73.233.185" src_port="80"/>
      <filter dst_ip="196.164.60.29" dst_port="41916" src_ip="134.73.233.185" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.29.44.186"/>
    </slice>
    <from sec="1241499864" usec="0"/>
    <to sec="1241499924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.66.79.186"/>
    </slice>
    <from sec="1241499648" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3225{
style=filled;
color=gray75;
18406[label="68.81.94.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24417[label="68.81.94.186;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3225[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.81.94.186:4552, 215.66.219.235:61726}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61726: (50%)&lt;BR/&gt; 4552: (50%)&gt;];
}
18406--24417[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="61726" src_ip="68.81.94.186" src_port="4552"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.236.173.186"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="181.129.65.187"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.33.135.187"/>
    </slice>
    <from sec="1241499639" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3229{
style=filled;
color=gray75;
18444[label="213.185.197.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24438[label="213.185.197.187;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3229[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.185.197.187:1193, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1193: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18444--24438[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="213.185.197.187" src_port="1193"/>
    </slice>
    <from sec="1241500397" usec="0"/>
    <to sec="1241500426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.195.238.187"/>
    </slice>
    <from sec="1241500281" usec="0"/>
    <to sec="1241500311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.14.19.188"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.118.31.188"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.150.58.188"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.53.88.188"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3235{
style=filled;
color=gray75;
18469[label="134.73.98.188;122pkt 122fpkt", shape=pentagon, color=darkviolet];
24454[label="134.73.98.188;122pkt 122fpkt", shape=invtriangle, color=brown];
stat3235[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.98.188:*, *:20480}[33.6066%]&lt;BR/&gt;{134.73.98.188:*, 8.177.70.60:80}[23.7705%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.3279%)&lt;BR/&gt; 20480: (16.8033%)&lt;BR/&gt; 443: (2.86885%)&lt;BR/&gt; 8356: (1.63934%)&lt;BR/&gt; 9574: (1.22951%)&gt;];
}
18469--24454[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="20480" src_ip="134.73.98.188"/>
      <filter dst_ip="8.177.70.60" dst_port="80" src_ip="134.73.98.188"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="181.130.108.188"/>
    </slice>
    <from sec="1241499957" usec="0"/>
    <to sec="1241499967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.188.150.188"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.32.227.188"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3239{
style=filled;
color=gray75;
18508[label="181.176.34.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24483[label="181.176.34.190;1pkt 1fpkt", shape=invtriangle, color=brown];
28000[label="181.176.34.190;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3239[shape=component, label=&lt;Rules:&lt;BR/&gt;{181.176.34.190:27878, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27878: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18508--24483[label="1;1pkt 1fpkt"];
18508--28000[label="1;1pkt 1fpkt"];
24483--28000[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="181.176.34.190" src_port="27878"/>
    </slice>
    <from sec="1241500403" usec="0"/>
    <to sec="1241500432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3240{
style=filled;
color=gray75;
18509[label="67.136.49.190;2pkt 2fpkt", shape=pentagon, color=darkviolet];
24484[label="67.136.49.190;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3240[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.136.49.190:0, 134.73.144.3:0}[50%]&lt;BR/&gt;{67.136.49.190:1391, 134.73.144.3:1723}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1723: (25%)&lt;BR/&gt; 1391: (25%)&gt;];
}
18509--24484[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.144.3" dst_port="1723" src_ip="67.136.49.190" src_port="1391"/>
      <filter dst_ip="134.73.144.3" src_ip="67.136.49.190"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.162.92.190"/>
    </slice>
    <from sec="1241499643" usec="0"/>
    <to sec="1241499684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.205.78.191"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.82.163.191"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3244{
style=filled;
color=gray75;
18552[label="182.159.205.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24515[label="182.159.205.191;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3244[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.159.205.191:50196, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50196: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18552--24515[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="182.159.205.191" src_port="50196"/>
    </slice>
    <from sec="1241500424" usec="0"/>
    <to sec="1241500471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3245{
style=filled;
color=gray75;
18566[label="204.119.51.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24525[label="204.119.51.192;1pkt 1fpkt", shape=invtriangle, color=brown];
28019[label="204.119.51.192;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3245[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.119.51.192:20273, 215.66.219.234:63414}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63414: (50%)&lt;BR/&gt; 20273: (50%)&gt;];
}
18566--24525[label="1;1pkt 1fpkt"];
18566--28019[label="1;1pkt 1fpkt"];
24525--28019[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.234" dst_port="63414" src_ip="204.119.51.192" src_port="20273"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.85.192"/>
    </slice>
    <from sec="1241499714" usec="0"/>
    <to sec="1241499988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.17.94.192"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3248{
style=filled;
color=gray75;
18573[label="68.70.96.192;3pkt 3fpkt", shape=pentagon, color=darkviolet];
24531[label="68.70.96.192;3pkt 3fpkt", shape=invtriangle, color=brown];
28023[label="68.70.96.192;3pkt 3fpkt", shape=invhouse, color=bisque];
stat3248[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.70.96.192:1359, 170.15.186.81:1434}[33.3333%]&lt;BR/&gt;{68.70.96.192:1359, 214.163.250.230:1434}[33.3333%]&lt;BR/&gt;{68.70.96.192:1359, 151.12.253.232:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1359: (50%)&gt;];
}
18573--24531[label="1;3pkt 3fpkt"];
18573--28023[label="1;3pkt 3fpkt"];
24531--28023[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="151.12.253.232" dst_port="1434" src_ip="68.70.96.192" src_port="1359"/>
      <filter dst_ip="214.163.250.230" dst_port="1434" src_ip="68.70.96.192" src_port="1359"/>
      <filter dst_ip="170.15.186.81" dst_port="1434" src_ip="68.70.96.192" src_port="1359"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.144.124.192"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.107.136.192"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.86.60.193"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3252{
style=filled;
color=gray75;
18600[label="9.62.68.193;2pkt 2fpkt", shape=pentagon, color=darkviolet];
24553[label="9.62.68.193;2pkt 2fpkt", shape=invtriangle, color=brown];
28038[label="9.62.68.193;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3252[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.62.68.193:17218, 215.66.219.235:62645}[50%]&lt;BR/&gt;{9.62.68.193:17218, 215.66.219.235:63409}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17218: (50%)&lt;BR/&gt; 63409: (25%)&lt;BR/&gt; 62645: (25%)&gt;];
}
18600--24553[label="1;2pkt 2fpkt"];
18600--28038[label="1;2pkt 2fpkt"];
24553--28038[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="63409" src_ip="9.62.68.193" src_port="17218"/>
      <filter dst_ip="215.66.219.235" dst_port="62645" src_ip="9.62.68.193" src_port="17218"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3253{
style=filled;
color=gray75;
18601[label="170.15.88.193;23pkt 23fpkt", shape=pentagon, color=darkviolet];
24554[label="170.15.88.193;23pkt 23fpkt", shape=invtriangle, color=brown];
28039[label="170.15.88.193;23pkt 23fpkt", shape=invhouse, color=bisque];
stat3253[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.15.88.193:*, 42.61.225.197:80}[82.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4783%)&lt;BR/&gt; 123: (4.34783%)&lt;BR/&gt; 56821: (2.17391%)&lt;BR/&gt; 53526: (2.17391%)&lt;BR/&gt; 53518: (2.17391%)&gt;];
}
18601--24554[label="1;23pkt 23fpkt"];
18601--28039[label="1;23pkt 23fpkt"];
24554--28039[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="42.61.225.197" dst_port="80" src_ip="170.15.88.193"/>
    </slice>
    <from sec="1241499746" usec="0"/>
    <to sec="1241499929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.80.88.193"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="181.221.227.193"/>
    </slice>
    <from sec="1241499646" usec="0"/>
    <to sec="1241499947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.49.55.194"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.242.140.194"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3258{
style=filled;
color=gray75;
18631[label="38.81.187.194;6pkt 6fpkt", shape=pentagon, color=darkviolet];
24574[label="38.81.187.194;6pkt 6fpkt", shape=invtriangle, color=brown];
stat3258[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.81.187.194:*, 170.15.19.148:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49203: (8.33333%)&lt;BR/&gt; 49202: (8.33333%)&lt;BR/&gt; 49201: (8.33333%)&lt;BR/&gt; 49200: (8.33333%)&gt;];
}
18631--24574[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.148" dst_port="80" src_ip="38.81.187.194"/>
    </slice>
    <from sec="1241500446" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3259{
style=filled;
color=gray75;
18636[label="37.250.210.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24576[label="37.250.210.194;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3259[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.250.210.194:1038, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1038: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18636--24576[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="37.250.210.194" src_port="1038"/>
    </slice>
    <from sec="1241500282" usec="0"/>
    <to sec="1241500311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.24.242.194"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3261{
style=filled;
color=gray75;
18642[label="206.156.18.195;18pkt 18fpkt", shape=pentagon, color=darkviolet];
24582[label="206.156.18.195;18pkt 18fpkt", shape=invtriangle, color=brown];
stat3261[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.156.18.195:*, 215.66.220.66:80}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4586: (2.77778%)&lt;BR/&gt; 4585: (2.77778%)&lt;BR/&gt; 4419: (2.77778%)&lt;BR/&gt; 4418: (2.77778%)&gt;];
}
18642--24582[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="206.156.18.195"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.87.30.195"/>
    </slice>
    <from sec="1241499891" usec="0"/>
    <to sec="1241499985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3263{
style=filled;
color=gray75;
18644[label="8.180.44.195;13pkt 13fpkt", shape=pentagon, color=darkviolet];
24584[label="8.180.44.195;13pkt 13fpkt", shape=invtriangle, color=brown];
stat3263[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.180.44.195:*, 172.204.250.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50299: (3.84615%)&lt;BR/&gt; 50298: (3.84615%)&lt;BR/&gt; 50297: (3.84615%)&lt;BR/&gt; 50295: (3.84615%)&gt;];
}
18644--24584[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.250.106" dst_port="80" src_ip="8.180.44.195"/>
    </slice>
    <from sec="1241499863" usec="0"/>
    <to sec="1241500198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.146.80.195"/>
    </slice>
    <from sec="1241499936" usec="0"/>
    <to sec="1241500182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3265{
style=filled;
color=gray75;
18653[label="128.156.127.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24593[label="128.156.127.195;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3265[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.127.195:80, 32.161.0.209:44270}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44270: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18653--24593[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.161.0.209" dst_port="44270" src_ip="128.156.127.195" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.214.145.195"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.44.188.195"/>
    </slice>
    <from sec="1241500259" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.208.195"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.253.84.196"/>
    </slice>
    <from sec="1241499627" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.75.157.196"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.162.196"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.229.2.197"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.77.6.197"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.24.67.197"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.71.108.197"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3276{
style=filled;
color=gray75;
18718[label="156.224.145.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24638[label="156.224.145.197;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3276[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.224.145.197:80, 41.213.117.146:34319}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34319: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18718--24638[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.213.117.146" dst_port="34319" src_ip="156.224.145.197" src_port="80"/>
    </slice>
    <from sec="1241500212" usec="0"/>
    <to sec="1241500223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3277{
style=filled;
color=gray75;
18719[label="134.73.150.197;81pkt 81fpkt", shape=pentagon, color=darkviolet];
24639[label="134.73.150.197;81pkt 81fpkt", shape=invtriangle, color=brown];
28080[label="134.73.150.197;81pkt 81fpkt", shape=invhouse, color=bisque];
stat3277[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.150.197:44637, *:*}[48.1481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44637: (24.0741%)&lt;BR/&gt; 80: (8.64198%)&lt;BR/&gt; 443: (6.17284%)&lt;BR/&gt; 48698: (1.23457%)&lt;BR/&gt; 45988: (1.23457%)&gt;];
}
18719--24639[label="1;81pkt 81fpkt"];
18719--28080[label="1;81pkt 81fpkt"];
24639--28080[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter src_ip="134.73.150.197" src_port="44637"/>
    </slice>
    <from sec="1241499778" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3278{
style=filled;
color=gray75;
18722[label="12.195.168.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24642[label="12.195.168.197;1pkt 1fpkt", shape=invtriangle, color=brown];
28082[label="12.195.168.197;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3278[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.195.168.197:1482, 215.66.216.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1482: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18722--24642[label="1;1pkt 1fpkt"];
18722--28082[label="1;1pkt 1fpkt"];
24642--28082[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.216.81" dst_port="80" src_ip="12.195.168.197" src_port="1482"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.107.44.198"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.73.98.198"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3281{
style=filled;
color=gray75;
18742[label="206.188.162.198;264pkt 264fpkt", shape=pentagon, color=darkviolet];
24653[label="206.188.162.198;264pkt 264fpkt", shape=invtriangle, color=brown];
28091[label="206.188.162.198;264pkt 264fpkt", shape=invhouse, color=bisque];
stat3281[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.188.162.198:*, 151.12.136.3:1796}[66.6667%]&lt;BR/&gt;{206.188.162.198:*, 151.12.136.3:47876}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1796: (33.3333%)&lt;BR/&gt; 47876: (16.6667%)&lt;BR/&gt; 3775: (0.189394%)&lt;BR/&gt; 3773: (0.189394%)&lt;BR/&gt; 3772: (0.189394%)&gt;];
}
18742--24653[label="1;264pkt 264fpkt"];
18742--28091[label="1;264pkt 264fpkt"];
24653--28091[label="1;264pkt 264fpkt"];
</description>
    <slice>
      <filter dst_ip="151.12.136.3" dst_port="1796" src_ip="206.188.162.198"/>
      <filter dst_ip="151.12.136.3" dst_port="47876" src_ip="206.188.162.198"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.2.165.198"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3283{
style=filled;
color=gray75;
18746[label="40.218.170.198;4pkt 4fpkt", shape=pentagon, color=darkviolet];
24656[label="40.218.170.198;4pkt 4fpkt", shape=invtriangle, color=brown];
28094[label="40.218.170.198;4pkt 4fpkt", shape=invhouse, color=bisque];
stat3283[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.218.170.198:80, 170.15.187.162:50480}[25%]&lt;BR/&gt;{40.218.170.198:80, 170.15.187.16:54430}[25%]&lt;BR/&gt;{40.218.170.198:80, 170.15.187.16:54431}[25%]&lt;BR/&gt;{40.218.170.198:80, 170.15.187.16:54446}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54446: (12.5%)&lt;BR/&gt; 54431: (12.5%)&lt;BR/&gt; 54430: (12.5%)&lt;BR/&gt; 50480: (12.5%)&gt;];
}
18746--24656[label="1;4pkt 4fpkt"];
18746--28094[label="1;4pkt 4fpkt"];
24656--28094[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.187.16" dst_port="54446" src_ip="40.218.170.198" src_port="80"/>
      <filter dst_ip="170.15.187.16" dst_port="54431" src_ip="40.218.170.198" src_port="80"/>
      <filter dst_ip="170.15.187.16" dst_port="54430" src_ip="40.218.170.198" src_port="80"/>
      <filter dst_ip="170.15.187.162" dst_port="50480" src_ip="40.218.170.198" src_port="80"/>
    </slice>
    <from sec="1241499998" usec="0"/>
    <to sec="1241500244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.71.193.198"/>
    </slice>
    <from sec="1241499977" usec="0"/>
    <to sec="1241500249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.0.199"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3286{
style=filled;
color=gray75;
1879[label="215.66.210.216;d;223pkt 223fpkt", shape=diamond, color=yellow];
1880[label="209.168.2.199;s;215pkt 215fpkt", shape=diamond, color=yellow];
18754[label="209.168.2.199;227pkt 227fpkt", shape=pentagon, color=darkviolet];
24664[label="209.168.2.199;227pkt 227fpkt", shape=invtriangle, color=brown];
28096[label="209.168.2.199;227pkt 227fpkt", shape=invhouse, color=bisque];
stat3286[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.168.2.199:3177, 215.66.210.216:*}[95.7627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3177: (49.4191%)&lt;BR/&gt; 12345: (0.312779%)&lt;BR/&gt; 60996: (0.223414%)&lt;BR/&gt; 60964: (0.223414%)&lt;BR/&gt; 60951: (0.223414%)&gt;];
}
1879--1880[label="0.995349;214pkt 214fpkt"];
1879--6350[label="0.0044843;1pkt 1fpkt"];
1879--9504[label="0.0044843;1pkt 1fpkt"];
1879--10624[label="0.0044843;1pkt 1fpkt"];
1879--11672[label="0.0044843;1pkt 1fpkt"];
1879--11718[label="0.0044843;1pkt 1fpkt"];
1879--11792[label="0.0044843;1pkt 1fpkt"];
1879--13958[label="0.0044843;1pkt 1fpkt"];
1879--15347[label="0.0044843;1pkt 1fpkt"];
1879--18754[label="0.959641;214pkt 214fpkt"];
1879--21494[label="0.0044843;1pkt 1fpkt"];
1879--22420[label="0.0044843;1pkt 1fpkt"];
1879--24664[label="0.959641;214pkt 214fpkt"];
1879--26305[label="0.0044843;1pkt 1fpkt"];
1879--26811[label="0.0044843;1pkt 1fpkt"];
1879--28096[label="0.959641;214pkt 214fpkt"];
1880--18754[label="1;215pkt 215fpkt"];
1880--24664[label="1;215pkt 215fpkt"];
1880--28096[label="1;215pkt 215fpkt"];
18754--24664[label="1;227pkt 227fpkt"];
18754--28096[label="1;227pkt 227fpkt"];
24664--28096[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.210.216" src_ip="209.168.2.199" src_port="3177"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.171.75.199"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.117.199"/>
    </slice>
    <from sec="1241499772" usec="0"/>
    <to sec="1241500072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.193.175.199"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.59.183.199"/>
    </slice>
    <from sec="1241500074" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.5.210.199"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3292{
style=filled;
color=gray75;
18774[label="206.167.249.199;13pkt 13fpkt", shape=pentagon, color=darkviolet];
24678[label="206.167.249.199;13pkt 13fpkt", shape=invtriangle, color=brown];
stat3292[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.167.249.199:*, 215.66.218.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3059: (3.84615%)&lt;BR/&gt; 3057: (3.84615%)&lt;BR/&gt; 3055: (3.84615%)&lt;BR/&gt; 3051: (3.84615%)&gt;];
}
18774--24678[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.56" dst_port="80" src_ip="206.167.249.199"/>
    </slice>
    <from sec="1241500423" usec="0"/>
    <to sec="1241500426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3293{
style=filled;
color=gray75;
18776[label="194.169.6.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24680[label="194.169.6.200;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3293[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.169.6.200:1815, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1815: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18776--24680[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="194.169.6.200" src_port="1815"/>
    </slice>
    <from sec="1241500399" usec="0"/>
    <to sec="1241500437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3294{
style=filled;
color=gray75;
18778[label="134.73.16.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24682[label="134.73.16.200;1pkt 1fpkt", shape=invtriangle, color=brown];
28110[label="134.73.16.200;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3294[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.16.200:80, 206.8.183.81:12052}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12052: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18778--24682[label="1;1pkt 1fpkt"];
18778--28110[label="1;1pkt 1fpkt"];
24682--28110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.8.183.81" dst_port="12052" src_ip="134.73.16.200" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.0.76.200"/>
    </slice>
    <from sec="1241500044" usec="0"/>
    <to sec="1241500090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3296{
style=filled;
color=gray75;
18798[label="8.216.187.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
24695[label="8.216.187.200;2pkt 2fpkt", shape=invtriangle, color=brown];
28118[label="8.216.187.200;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3296[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.216.187.200:15213, 215.66.220.67:80}[50%]&lt;BR/&gt;{8.216.187.200:15214, 215.66.220.67:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 15214: (25%)&lt;BR/&gt; 15213: (25%)&gt;];
}
18798--24695[label="1;2pkt 2fpkt"];
18798--28118[label="1;2pkt 2fpkt"];
24695--28118[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="8.216.187.200" src_port="15214"/>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="8.216.187.200" src_port="15213"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.21.246.200"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.225.15.201"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3299{
style=filled;
color=gray75;
18812[label="134.73.49.201;20pkt 20fpkt", shape=pentagon, color=darkviolet];
24705[label="134.73.49.201;20pkt 20fpkt", shape=invtriangle, color=brown];
stat3299[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.49.201:44084, *:*}[45%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44084: (22.5%)&lt;BR/&gt; 22556: (7.5%)&lt;BR/&gt; 58347: (5%)&lt;BR/&gt; 3296: (5%)&lt;BR/&gt; 65410: (2.5%)&gt;];
}
18812--24705[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="134.73.49.201" src_port="44084"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.12.148.201"/>
    </slice>
    <from sec="1241499718" usec="0"/>
    <to sec="1241500405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.41.217.201"/>
    </slice>
    <from sec="1241499688" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.87.236.201"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.107.60.202"/>
    </slice>
    <from sec="1241500135" usec="0"/>
    <to sec="1241500144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.64.118.202"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.39.192.202"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.78.192.202"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3307{
style=filled;
color=gray75;
18857[label="216.212.197.202;9pkt 9fpkt", shape=pentagon, color=darkviolet];
24737[label="216.212.197.202;9pkt 9fpkt", shape=invtriangle, color=brown];
stat3307[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.212.197.202:*, 172.204.237.32:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36007: (5.55556%)&lt;BR/&gt; 36006: (5.55556%)&lt;BR/&gt; 36005: (5.55556%)&lt;BR/&gt; 36004: (5.55556%)&gt;];
}
18857--24737[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.237.32" dst_port="80" src_ip="216.212.197.202"/>
    </slice>
    <from sec="1241499933" usec="0"/>
    <to sec="1241499954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.105.199.202"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.219.36.203"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.235.185.203"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.70.194.203"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.207.88.204"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.35.62.205"/>
    </slice>
    <from sec="1241500453" usec="0"/>
    <to sec="1241500472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.82.141.205"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.65.196.205"/>
    </slice>
    <from sec="1241500255" usec="0"/>
    <to sec="1241500436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.117.12.206"/>
    </slice>
    <from sec="1241499730" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.202.21.206"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.55.113.206"/>
    </slice>
    <from sec="1241499640" usec="0"/>
    <to sec="1241499761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.161.166.206"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3321{
style=filled;
color=gray75;
18968[label="58.204.232.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24802[label="58.204.232.206;1pkt 1fpkt", shape=invtriangle, color=brown];
28180[label="58.204.232.206;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3321[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.204.232.206:50211, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50211: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
18968--24802[label="1;1pkt 1fpkt"];
18968--28180[label="1;1pkt 1fpkt"];
24802--28180[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="58.204.232.206" src_port="50211"/>
    </slice>
    <from sec="1241499846" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.58.27.207"/>
    </slice>
    <from sec="1241500134" usec="0"/>
    <to sec="1241500142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.15.130.207"/>
    </slice>
    <from sec="1241500317" usec="0"/>
    <to sec="1241500354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.62.168.207"/>
    </slice>
    <from sec="1241500182" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.144.5.208"/>
    </slice>
    <from sec="1241500062" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.216.9.208"/>
    </slice>
    <from sec="1241499960" usec="0"/>
    <to sec="1241499965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.181.20.208"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.196.121.208"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.226.138.208"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.105.169.208"/>
    </slice>
    <from sec="1241500010" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.41.203.208"/>
    </slice>
    <from sec="1241500439" usec="0"/>
    <to sec="1241500476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3332{
style=filled;
color=gray75;
19016[label="7.200.208.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
24833[label="7.200.208.208;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3332[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.200.208.208:12649, 215.66.219.235:62629}[50%]&lt;BR/&gt;{7.200.208.208:12649, 215.66.219.235:62795}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12649: (50%)&lt;BR/&gt; 62795: (25%)&lt;BR/&gt; 62629: (25%)&gt;];
}
19016--24833[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62795" src_ip="7.200.208.208" src_port="12649"/>
      <filter dst_ip="215.66.219.235" dst_port="62629" src_ip="7.200.208.208" src_port="12649"/>
    </slice>
    <from sec="1241499718" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3333{
style=filled;
color=gray75;
19036[label="210.204.156.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24843[label="210.204.156.209;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3333[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.204.156.209:42177, 215.66.218.53:12700}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42177: (50%)&lt;BR/&gt; 12700: (50%)&gt;];
}
19036--24843[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.53" dst_port="12700" src_ip="210.204.156.209" src_port="42177"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3334{
style=filled;
color=gray75;
19043[label="12.183.243.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24847[label="12.183.243.209;1pkt 1fpkt", shape=invtriangle, color=brown];
28203[label="12.183.243.209;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3334[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.183.243.209:3935, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3935: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19043--24847[label="1;1pkt 1fpkt"];
19043--28203[label="1;1pkt 1fpkt"];
24847--28203[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="12.183.243.209" src_port="3935"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.110.1.210"/>
    </slice>
    <from sec="1241499994" usec="0"/>
    <to sec="1241500019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.150.1.210"/>
    </slice>
    <from sec="1241499867" usec="0"/>
    <to sec="1241500066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.6.19.210"/>
    </slice>
    <from sec="1241499729" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.55.210"/>
    </slice>
    <from sec="1241499640" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.125.144.210"/>
    </slice>
    <from sec="1241499743" usec="0"/>
    <to sec="1241499748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.26.205.210"/>
    </slice>
    <from sec="1241499692" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.81.220.210"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3342{
style=filled;
color=gray75;
19082[label="12.211.1.211;4pkt 4fpkt", shape=pentagon, color=darkviolet];
24874[label="12.211.1.211;4pkt 4fpkt", shape=invtriangle, color=brown];
28219[label="12.211.1.211;4pkt 4fpkt", shape=invhouse, color=bisque];
stat3342[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.211.1.211:30340, 215.66.218.53:3124}[25%]&lt;BR/&gt;{12.211.1.211:30341, 215.66.218.53:3127}[25%]&lt;BR/&gt;{12.211.1.211:30342, 215.66.218.53:3124}[25%]&lt;BR/&gt;{12.211.1.211:30343, 215.66.218.53:3128}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (25%)&lt;BR/&gt; 30343: (12.5%)&lt;BR/&gt; 30342: (12.5%)&lt;BR/&gt; 30341: (12.5%)&lt;BR/&gt; 30340: (12.5%)&gt;];
}
19082--24874[label="1;4pkt 4fpkt"];
19082--28219[label="1;4pkt 4fpkt"];
24874--28219[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.53" dst_port="3128" src_ip="12.211.1.211" src_port="30343"/>
      <filter dst_ip="215.66.218.53" dst_port="3124" src_ip="12.211.1.211" src_port="30342"/>
      <filter dst_ip="215.66.218.53" dst_port="3127" src_ip="12.211.1.211" src_port="30341"/>
      <filter dst_ip="215.66.218.53" dst_port="3124" src_ip="12.211.1.211" src_port="30340"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3343{
style=filled;
color=gray75;
19085[label="182.109.36.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24877[label="182.109.36.211;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3343[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.109.36.211:53152, 134.73.144.161:20827}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53152: (50%)&lt;BR/&gt; 20827: (50%)&gt;];
}
19085--24877[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.144.161" dst_port="20827" src_ip="182.109.36.211" src_port="53152"/>
    </slice>
    <from sec="1241499624" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.74.49.211"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.125.95.211"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.84.132.211"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3347{
style=filled;
color=gray75;
19100[label="204.68.166.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24888[label="204.68.166.211;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3347[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.68.166.211:11843, 215.66.219.235:62433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62433: (50%)&lt;BR/&gt; 11843: (50%)&gt;];
}
19100--24888[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62433" src_ip="204.68.166.211" src_port="11843"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.114.193.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.25.206.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.34.217.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.242.46.212"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.91.100.212"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.159.125.212"/>
    </slice>
    <from sec="1241500441" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.157.212"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.235.236.212"/>
    </slice>
    <from sec="1241500043" usec="0"/>
    <to sec="1241500057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3356{
style=filled;
color=gray75;
19152[label="162.229.66.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24919[label="162.229.66.213;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3356[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.229.66.213:80, 134.73.37.3:41031}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41031: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19152--24919[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.37.3" dst_port="41031" src_ip="162.229.66.213" src_port="80"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.69.157.213"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.82.200.213"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.97.214"/>
    </slice>
    <from sec="1241499902" usec="0"/>
    <to sec="1241500472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.149.130.214"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.70.1.215"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.211.159.215"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.197.27.216"/>
    </slice>
    <from sec="1241499925" usec="0"/>
    <to sec="1241500241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3364{
style=filled;
color=gray75;
19220[label="41.136.97.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24956[label="41.136.97.216;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3364[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.136.97.216:54415, 215.66.218.53:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54415: (50%)&lt;BR/&gt; 3128: (50%)&gt;];
}
19220--24956[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.218.53" dst_port="3128" src_ip="41.136.97.216" src_port="54415"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.233.136.216"/>
    </slice>
    <from sec="1241499704" usec="0"/>
    <to sec="1241499851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.25.140.216"/>
    </slice>
    <from sec="1241499870" usec="0"/>
    <to sec="1241500408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3367{
style=filled;
color=gray75;
19235[label="55.141.184.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24965[label="55.141.184.216;1pkt 1fpkt", shape=invtriangle, color=brown];
28263[label="55.141.184.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3367[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.141.184.216:1812, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1812: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19235--24965[label="1;1pkt 1fpkt"];
19235--28263[label="1;1pkt 1fpkt"];
24965--28263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="55.141.184.216" src_port="1812"/>
    </slice>
    <from sec="1241500291" usec="0"/>
    <to sec="1241500316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3368{
style=filled;
color=gray75;
19237[label="156.224.200.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24967[label="156.224.200.216;1pkt 1fpkt", shape=invtriangle, color=brown];
28265[label="156.224.200.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3368[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.224.200.216:11242, 214.224.151.1:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11242: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
19237--24967[label="1;1pkt 1fpkt"];
19237--28265[label="1;1pkt 1fpkt"];
24967--28265[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.224.151.1" dst_port="8000" src_ip="156.224.200.216" src_port="11242"/>
    </slice>
    <from sec="1241500331" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.111.0.217"/>
    </slice>
    <from sec="1241499880" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.142.41.217"/>
    </slice>
    <from sec="1241500018" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.65.73.217"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.211.102.217"/>
    </slice>
    <from sec="1241499776" usec="0"/>
    <to sec="1241499811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3373{
style=filled;
color=gray75;
1905[label="134.73.78.19;d;164pkt 164fpkt", shape=diamond, color=yellow];
3125[label="12.69.75.251;s;1pkt 1fpkt", shape=diamond, color=yellow];
19266[label="63.5.119.217;6pkt 6fpkt", shape=pentagon, color=darkviolet];
20050[label="12.69.75.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24986[label="63.5.119.217;6pkt 6fpkt", shape=invtriangle, color=brown];
25520[label="12.69.75.251;1pkt 1fpkt", shape=invtriangle, color=brown];
28277[label="63.5.119.217;6pkt 6fpkt", shape=invhouse, color=bisque];
28605[label="12.69.75.251;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3373[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.73.78.19:42991}[64.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42991: (31.4516%)&lt;BR/&gt; 0: (6.98925%)&lt;BR/&gt; 37910: (3.49462%)&lt;BR/&gt; 35998: (1.88172%)&lt;BR/&gt; 12332: (1.88172%)&gt;];
}
1905--3125[label="1;1pkt 1fpkt"];
1905--19266[label="0.333333;2pkt 2fpkt"];
1905--20050[label="1;1pkt 1fpkt"];
1905--24986[label="0.333333;2pkt 2fpkt"];
1905--25520[label="1;1pkt 1fpkt"];
1905--28277[label="0.333333;2pkt 2fpkt"];
1905--28605[label="1;1pkt 1fpkt"];
3125--20050[label="1;1pkt 1fpkt"];
3125--25520[label="1;1pkt 1fpkt"];
3125--28605[label="1;1pkt 1fpkt"];
19266--24986[label="1;6pkt 6fpkt"];
19266--28277[label="1;6pkt 6fpkt"];
20050--25520[label="1;1pkt 1fpkt"];
20050--28605[label="1;1pkt 1fpkt"];
24986--28277[label="1;6pkt 6fpkt"];
25520--28605[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.78.19" dst_port="42991"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3374{
style=filled;
color=gray75;
19270[label="182.171.134.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24989[label="182.171.134.217;1pkt 1fpkt", shape=invtriangle, color=brown];
28280[label="182.171.134.217;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3374[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.171.134.217:28517, 172.204.181.68:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28517: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
19270--24989[label="1;1pkt 1fpkt"];
19270--28280[label="1;1pkt 1fpkt"];
24989--28280[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.181.68" dst_port="20" src_ip="182.171.134.217" src_port="28517"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.86.246.217"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3376{
style=filled;
color=gray75;
5116[label="44.144.25.218;s;93pkt 93fpkt", shape=diamond, color=yellow];
6740[label="172.204.214.136;d;72pkt 72fpkt", shape=diamond, color=yellow];
19287[label="44.144.25.218;2pkt 2fpkt", shape=pentagon, color=darkviolet];
25001[label="44.144.25.218;2pkt 2fpkt", shape=invtriangle, color=brown];
28292[label="44.144.25.218;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3376[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.144.25.218:20, 172.204.214.136:*}[95.7447%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (46.7836%)&lt;BR/&gt; 21: (2.63158%)&lt;BR/&gt; 3396: (1.46199%)&lt;BR/&gt; 1841: (0.877193%)&lt;BR/&gt; 35999: (0.584795%)&gt;];
}
5116--6740[label="1;72pkt 72fpkt"];
5116--19287[label="0.5;1pkt 1fpkt"];
5116--25001[label="0.5;1pkt 1fpkt"];
5116--28292[label="0.5;1pkt 1fpkt"];
6740--19287[label="0.5;1pkt 1fpkt"];
6740--25001[label="0.5;1pkt 1fpkt"];
6740--28292[label="0.5;1pkt 1fpkt"];
19287--25001[label="1;2pkt 2fpkt"];
19287--28292[label="1;2pkt 2fpkt"];
25001--28292[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.214.136" src_ip="44.144.25.218" src_port="20"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3377{
style=filled;
color=gray75;
19292[label="134.73.78.218;34pkt 34fpkt", shape=pentagon, color=darkviolet];
25005[label="134.73.78.218;34pkt 34fpkt", shape=invtriangle, color=brown];
28294[label="134.73.78.218;34pkt 34fpkt", shape=invhouse, color=bisque];
stat3377[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.78.218:32108, *:*}[85.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32108: (42.6471%)&lt;BR/&gt; 80: (5.88235%)&lt;BR/&gt; 63175: (1.47059%)&lt;BR/&gt; 62072: (1.47059%)&lt;BR/&gt; 61867: (1.47059%)&gt;];
}
19292--25005[label="1;34pkt 34fpkt"];
19292--28294[label="1;34pkt 34fpkt"];
25005--28294[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="134.73.78.218" src_port="32108"/>
    </slice>
    <from sec="1241500445" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.95.218"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.70.21.219"/>
    </slice>
    <from sec="1241499802" usec="0"/>
    <to sec="1241500113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.62.120.219"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.62.210.219"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.211.210.219"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.166.211.219"/>
    </slice>
    <from sec="1241500170" usec="0"/>
    <to sec="1241500177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.20.220"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3385{
style=filled;
color=gray75;
19334[label="68.85.45.220;267pkt 267fpkt", shape=pentagon, color=darkviolet];
25033[label="68.85.45.220;267pkt 267fpkt", shape=invtriangle, color=brown];
28316[label="68.85.45.220;267pkt 267fpkt", shape=invhouse, color=bisque];
stat3385[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.85.45.220:*, 170.15.151.74:7519}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7519: (50%)&lt;BR/&gt; 3320: (0.187266%)&lt;BR/&gt; 3319: (0.187266%)&lt;BR/&gt; 3316: (0.187266%)&lt;BR/&gt; 3313: (0.187266%)&gt;];
}
19334--25033[label="1;267pkt 267fpkt"];
19334--28316[label="1;267pkt 267fpkt"];
25033--28316[label="1;267pkt 267fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.151.74" dst_port="7519" src_ip="68.85.45.220"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.140.223.220"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.218.8.221"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.10.77.221"/>
    </slice>
    <from sec="1241499850" usec="0"/>
    <to sec="1241499884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.122.121.221"/>
    </slice>
    <from sec="1241500113" usec="0"/>
    <to sec="1241500323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.217.80.222"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.64.81.222"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.226.200.222"/>
    </slice>
    <from sec="1241499802" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3393{
style=filled;
color=gray75;
3303[label="128.156.127.194;d;54pkt 54fpkt", shape=diamond, color=yellow];
3403[label="134.73.40.161;d;90pkt 90fpkt", shape=diamond, color=yellow];
3486[label="134.73.27.116;d;119pkt 119fpkt", shape=diamond, color=yellow];
3614[label="215.66.211.22;d;100pkt 100fpkt", shape=diamond, color=yellow];
3863[label="128.156.127.195;d;285pkt 285fpkt", shape=diamond, color=yellow];
5977[label="128.128.25.201;d;23pkt 23fpkt", shape=diamond, color=yellow];
6068[label="34.137.28.32;s;54pkt 54fpkt", shape=diamond, color=yellow];
6200[label="9.242.42.168;s;8pkt 8fpkt", shape=diamond, color=yellow];
6261[label="48.27.78.233;s;140pkt 140fpkt", shape=diamond, color=yellow];
6325[label="128.128.25.49;d;81pkt 81fpkt", shape=diamond, color=yellow];
6365[label="194.214.198.235;s;34pkt 34fpkt", shape=diamond, color=yellow];
6389[label="128.128.202.7;d;2pkt 2fpkt", shape=diamond, color=yellow];
6390[label="204.87.212.177;s;18pkt 18fpkt", shape=diamond, color=yellow];
7203[label="13.195.138.57;s;73pkt 73fpkt", shape=diamond, color=yellow];
7297[label="134.73.27.117;d;66pkt 66fpkt", shape=diamond, color=yellow];
7548[label="134.73.5.100;d;51pkt 51fpkt", shape=diamond, color=yellow];
8014[label="170.42.237.43;s;23pkt 23fpkt", shape=diamond, color=yellow];
8665[label="69.86.37.7;s;27pkt 27fpkt", shape=diamond, color=yellow];
8678[label="13.195.197.240;s;15pkt 15fpkt", shape=diamond, color=yellow];
8716[label="69.34.244.158;s;15pkt 15fpkt", shape=diamond, color=yellow];
8778[label="41.213.97.14;s;5pkt 5fpkt", shape=diamond, color=yellow];
8999[label="134.73.27.113;d;53pkt 53fpkt", shape=diamond, color=yellow];
9223[label="48.27.78.237;s;141pkt 141fpkt", shape=diamond, color=yellow];
9457[label="13.195.101.235;s;35pkt 35fpkt", shape=diamond, color=yellow];
10627[label="194.214.198.235;s;34pkt 34fpkt", shape=hexagon, color=black];
11428[label="13.195.138.57;s;73pkt 73fpkt", shape=hexagon, color=black];
11435[label="13.195.197.240;s;15pkt 15fpkt", shape=hexagon, color=black];
11664[label="41.213.97.14;s;5pkt 5fpkt", shape=hexagon, color=black];
12248[label="69.86.37.7;45pkt 45fpkt", shape=pentagon, color=darkviolet];
12485[label="63.183.116.12;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12796[label="34.171.180.20;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13153[label="41.198.237.29;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13622[label="47.206.121.43;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14058[label="13.195.138.57;73pkt 73fpkt", shape=pentagon, color=darkviolet];
14449[label="3.162.17.68;31pkt 31fpkt", shape=pentagon, color=darkviolet];
14648[label="88.203.153.73;13pkt 13fpkt", shape=pentagon, color=darkviolet];
16333[label="39.246.171.122;6pkt 6fpkt", shape=pentagon, color=darkviolet];
17235[label="67.137.231.148;14pkt 14fpkt", shape=pentagon, color=darkviolet];
17547[label="69.34.244.158;21pkt 21fpkt", shape=pentagon, color=darkviolet];
17812[label="61.152.208.166;12pkt 12fpkt", shape=pentagon, color=darkviolet];
17848[label="9.242.42.168;8pkt 8fpkt", shape=pentagon, color=darkviolet];
18111[label="23.111.126.176;40pkt 40fpkt", shape=pentagon, color=darkviolet];
18148[label="204.87.212.177;18pkt 18fpkt", shape=pentagon, color=darkviolet];
19001[label="195.205.83.208;92pkt 92fpkt", shape=pentagon, color=darkviolet];
19278[label="34.168.188.217;7pkt 7fpkt", shape=pentagon, color=darkviolet];
19351[label="8.91.49.221;25pkt 25fpkt", shape=pentagon, color=darkviolet];
19597[label="54.192.202.232;6pkt 6fpkt", shape=pentagon, color=darkviolet];
19612[label="48.27.78.233;155pkt 155fpkt", shape=pentagon, color=darkviolet];
19663[label="13.195.101.235;58pkt 58fpkt", shape=pentagon, color=darkviolet];
19669[label="194.214.198.235;34pkt 34fpkt", shape=pentagon, color=darkviolet];
20359[label="69.86.37.7;45pkt 45fpkt", shape=invtriangle, color=brown];
20968[label="41.198.237.29;8pkt 8fpkt", shape=invtriangle, color=brown];
21275[label="47.206.121.43;6pkt 6fpkt", shape=invtriangle, color=brown];
21827[label="3.162.17.68;31pkt 31fpkt", shape=invtriangle, color=brown];
21955[label="88.203.153.73;13pkt 13fpkt", shape=invtriangle, color=brown];
23051[label="39.246.171.122;6pkt 6fpkt", shape=invtriangle, color=brown];
23639[label="67.137.231.148;14pkt 14fpkt", shape=invtriangle, color=brown];
23846[label="69.34.244.158;21pkt 21fpkt", shape=invtriangle, color=brown];
24041[label="9.242.42.168;8pkt 8fpkt", shape=invtriangle, color=brown];
24214[label="23.111.126.176;40pkt 40fpkt", shape=invtriangle, color=brown];
24824[label="195.205.83.208;92pkt 92fpkt", shape=invtriangle, color=brown];
24994[label="34.168.188.217;7pkt 7fpkt", shape=invtriangle, color=brown];
25044[label="8.91.49.221;25pkt 25fpkt", shape=invtriangle, color=brown];
25256[label="13.195.101.235;58pkt 58fpkt", shape=invtriangle, color=brown];
25262[label="194.214.198.235;34pkt 34fpkt", shape=invtriangle, color=brown];
26190[label="47.206.121.43;6pkt 6fpkt", shape=invhouse, color=bisque];
26556[label="88.203.153.73;13pkt 13fpkt", shape=invhouse, color=bisque];
27737[label="9.242.42.168;8pkt 8fpkt", shape=invhouse, color=bisque];
27837[label="23.111.126.176;40pkt 40fpkt", shape=invhouse, color=bisque];
28193[label="195.205.83.208;92pkt 92fpkt", shape=invhouse, color=bisque];
28285[label="34.168.188.217;7pkt 7fpkt", shape=invhouse, color=bisque];
28320[label="8.91.49.221;25pkt 25fpkt", shape=invhouse, color=bisque];
28453[label="194.214.198.235;34pkt 34fpkt", shape=invhouse, color=bisque];
stat3393[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.156.127.195:80}[23.7302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1539%)&lt;BR/&gt; 443: (2.23981%)&lt;BR/&gt; 53: (0.505221%)&lt;BR/&gt; 0: (0.134725%)&lt;BR/&gt; 49586: (0.117885%)&gt;];
}
3303--6068[label="0.555556;30pkt 30fpkt"];
3303--6233[label="0.0185185;1pkt 1fpkt"];
3303--6261[label="0.037037;2pkt 2fpkt"];
3303--9223[label="0.0555556;3pkt 3fpkt"];
3303--13153[label="0.25;2pkt 2fpkt"];
3303--18111[label="0.075;3pkt 3fpkt"];
3303--19612[label="0.0740741;4pkt 4fpkt"];
3303--20968[label="0.25;2pkt 2fpkt"];
3303--24214[label="0.075;3pkt 3fpkt"];
3303--27837[label="0.075;3pkt 3fpkt"];
3403--6068[label="0.0185185;1pkt 1fpkt"];
3403--6233[label="0.0111111;1pkt 1fpkt"];
3403--6261[label="0.0555556;5pkt 5fpkt"];
3403--8678[label="0.133333;2pkt 2fpkt"];
3403--9223[label="0.0555556;5pkt 5fpkt"];
3403--10606[label="0.0116279;1pkt 1fpkt"];
3403--11435[label="0.133333;2pkt 2fpkt"];
3403--12485[label="1;12pkt 12fpkt"];
3403--12796[label="1;13pkt 13fpkt"];
3403--16333[label="1;6pkt 6fpkt"];
3403--17812[label="1;12pkt 12fpkt"];
3403--18111[label="0.075;3pkt 3fpkt"];
3403--19278[label="1;7pkt 7fpkt"];
3403--19597[label="1;6pkt 6fpkt"];
3403--19612[label="0.0555556;5pkt 5fpkt"];
3403--23051[label="1;6pkt 6fpkt"];
3403--24214[label="0.075;3pkt 3fpkt"];
3403--24994[label="1;7pkt 7fpkt"];
3403--27837[label="0.075;3pkt 3fpkt"];
3403--28285[label="1;7pkt 7fpkt"];
3486--6200[label="1;8pkt 8fpkt"];
3486--6233[label="0.00840336;1pkt 1fpkt"];
3486--7203[label="0.246575;18pkt 18fpkt"];
3486--8678[label="0.466667;7pkt 7fpkt"];
3486--8716[label="1;15pkt 15fpkt"];
3486--9457[label="0.485714;17pkt 17fpkt"];
3486--11428[label="0.246575;18pkt 18fpkt"];
3486--11435[label="0.466667;7pkt 7fpkt"];
3486--13601[label="0.129032;4pkt 4fpkt"];
3486--13622[label="1;6pkt 6fpkt"];
3486--14058[label="0.246575;18pkt 18fpkt"];
3486--17547[label="0.714286;15pkt 15fpkt"];
3486--17848[label="1;8pkt 8fpkt"];
3486--19351[label="1;25pkt 25fpkt"];
3486--19663[label="0.293103;17pkt 17fpkt"];
3486--21263[label="0.129032;4pkt 4fpkt"];
3486--21275[label="1;6pkt 6fpkt"];
3486--23846[label="0.714286;15pkt 15fpkt"];
3486--24041[label="1;8pkt 8fpkt"];
3486--25044[label="1;25pkt 25fpkt"];
3486--25256[label="0.293103;17pkt 17fpkt"];
3486--26184[label="0.129032;4pkt 4fpkt"];
3486--26190[label="1;6pkt 6fpkt"];
3486--27737[label="1;8pkt 8fpkt"];
3486--28320[label="1;25pkt 25fpkt"];
3614--6233[label="0.01;1pkt 1fpkt"];
3614--6350[label="0.01;1pkt 1fpkt"];
3614--8778[label="1;5pkt 5fpkt"];
3614--9504[label="0.01;1pkt 1fpkt"];
3614--10624[label="0.01;1pkt 1fpkt"];
3614--11664[label="1;5pkt 5fpkt"];
3614--11672[label="0.01;1pkt 1fpkt"];
3614--11718[label="0.01;1pkt 1fpkt"];
3614--11792[label="0.01;1pkt 1fpkt"];
3614--13958[label="0.01;1pkt 1fpkt"];
3614--15347[label="0.01;1pkt 1fpkt"];
3614--15957[label="0.0434783;1pkt 1fpkt"];
3614--18111[label="0.1;4pkt 4fpkt"];
3614--21494[label="0.01;1pkt 1fpkt"];
3614--22420[label="0.01;1pkt 1fpkt"];
3614--22817[label="0.0434783;1pkt 1fpkt"];
3614--24214[label="0.1;4pkt 4fpkt"];
3614--26305[label="0.01;1pkt 1fpkt"];
3614--26811[label="0.01;1pkt 1fpkt"];
3614--27837[label="0.1;4pkt 4fpkt"];
3863--6068[label="0.111111;6pkt 6fpkt"];
3863--6233[label="0.00446429;1pkt 1fpkt"];
3863--6261[label="0.771429;108pkt 108fpkt"];
3863--9223[label="0.765957;108pkt 108fpkt"];
3863--11119[label="0.0714286;6pkt 6fpkt"];
3863--13153[label="0.75;6pkt 6fpkt"];
3863--13601[label="0.0645161;2pkt 2fpkt"];
3863--19612[label="0.696774;108pkt 108fpkt"];
3863--20968[label="0.75;6pkt 6fpkt"];
3863--21263[label="0.0645161;2pkt 2fpkt"];
3863--26184[label="0.0645161;2pkt 2fpkt"];
5977--6365[label="0.782609;18pkt 18fpkt"];
5977--10627[label="0.782609;18pkt 18fpkt"];
5977--19669[label="0.782609;18pkt 18fpkt"];
5977--25262[label="0.782609;18pkt 18fpkt"];
5977--28453[label="0.782609;18pkt 18fpkt"];
6068--6543[label="0.0185185;1pkt 1fpkt"];
6068--11032[label="0.0185185;1pkt 1fpkt"];
6200--17848[label="1;8pkt 8fpkt"];
6200--24041[label="1;8pkt 8fpkt"];
6200--27737[label="1;8pkt 8fpkt"];
6261--7224[label="0.015873;1pkt 1fpkt"];
6261--19612[label="1;140pkt 140fpkt"];
6325--6365[label="0.470588;16pkt 16fpkt"];
6325--6390[label="0.888889;16pkt 16fpkt"];
6325--8665[label="0.555556;15pkt 15fpkt"];
6325--10627[label="0.470588;16pkt 16fpkt"];
6325--12248[label="0.311111;14pkt 14fpkt"];
6325--14449[label="0.354839;11pkt 11fpkt"];
6325--18148[label="0.888889;16pkt 16fpkt"];
6325--19663[label="0.396552;23pkt 23fpkt"];
6325--19669[label="0.470588;16pkt 16fpkt"];
6325--20359[label="0.311111;14pkt 14fpkt"];
6325--21827[label="0.354839;11pkt 11fpkt"];
6325--25256[label="0.396552;23pkt 23fpkt"];
6325--25262[label="0.470588;16pkt 16fpkt"];
6325--28453[label="0.470588;16pkt 16fpkt"];
6365--10627[label="1;34pkt 34fpkt"];
6365--19669[label="1;34pkt 34fpkt"];
6365--25262[label="1;34pkt 34fpkt"];
6365--28453[label="1;34pkt 34fpkt"];
6389--6390[label="1;2pkt 2fpkt"];
6389--18148[label="1;2pkt 2fpkt"];
6390--18148[label="1;18pkt 18fpkt"];
7203--7548[label="0.176471;9pkt 9fpkt"];
7203--8999[label="0.113208;6pkt 6fpkt"];
7203--11428[label="1;73pkt 73fpkt"];
7203--14058[label="1;73pkt 73fpkt"];
7297--8014[label="0.521739;12pkt 12fpkt"];
7297--8678[label="0.266667;4pkt 4fpkt"];
7297--11435[label="0.266667;4pkt 4fpkt"];
7297--14648[label="1;13pkt 13fpkt"];
7297--19001[label="0.439394;29pkt 29fpkt"];
7297--21955[label="1;13pkt 13fpkt"];
7297--24824[label="0.439394;29pkt 29fpkt"];
7297--26556[label="1;13pkt 13fpkt"];
7297--28193[label="0.439394;29pkt 29fpkt"];
7548--11119[label="0.0588235;3pkt 3fpkt"];
7548--11428[label="0.176471;9pkt 9fpkt"];
7548--11896[label="0.0392157;2pkt 2fpkt"];
7548--11922[label="0.0392157;2pkt 2fpkt"];
7548--12911[label="0.0196078;1pkt 1fpkt"];
7548--13065[label="0.0196078;1pkt 1fpkt"];
7548--14058[label="0.176471;9pkt 9fpkt"];
7548--18111[label="0.025;1pkt 1fpkt"];
7548--19651[label="0.0196078;1pkt 1fpkt"];
7548--20806[label="0.0196078;1pkt 1fpkt"];
7548--20912[label="0.0196078;1pkt 1fpkt"];
7548--24214[label="0.025;1pkt 1fpkt"];
7548--25249[label="0.0196078;1pkt 1fpkt"];
7548--25955[label="0.0196078;1pkt 1fpkt"];
7548--27837[label="0.025;1pkt 1fpkt"];
8014--8999[label="0.478261;11pkt 11fpkt"];
8665--12248[label="0.962963;26pkt 26fpkt"];
8665--20359[label="0.962963;26pkt 26fpkt"];
8678--8999[label="0.133333;2pkt 2fpkt"];
8678--11435[label="1;15pkt 15fpkt"];
8716--17547[label="1;15pkt 15fpkt"];
8716--23846[label="1;15pkt 15fpkt"];
8778--11664[label="1;5pkt 5fpkt"];
8999--9457[label="0.514286;18pkt 18fpkt"];
8999--10606[label="0.0188679;1pkt 1fpkt"];
8999--11428[label="0.113208;6pkt 6fpkt"];
8999--11435[label="0.133333;2pkt 2fpkt"];
8999--14058[label="0.113208;6pkt 6fpkt"];
8999--17235[label="0.428571;6pkt 6fpkt"];
8999--19663[label="0.339623;18pkt 18fpkt"];
8999--23639[label="0.428571;6pkt 6fpkt"];
8999--25256[label="0.339623;18pkt 18fpkt"];
9457--19663[label="1;35pkt 35fpkt"];
9457--25256[label="1;35pkt 35fpkt"];
10627--19669[label="1;34pkt 34fpkt"];
10627--25262[label="1;34pkt 34fpkt"];
10627--28453[label="1;34pkt 34fpkt"];
11428--14058[label="1;73pkt 73fpkt"];
12248--20359[label="1;45pkt 45fpkt"];
13153--20968[label="1;8pkt 8fpkt"];
13622--21275[label="1;6pkt 6fpkt"];
13622--26190[label="1;6pkt 6fpkt"];
14449--21827[label="1;31pkt 31fpkt"];
14648--21955[label="1;13pkt 13fpkt"];
14648--26556[label="1;13pkt 13fpkt"];
16333--23051[label="1;6pkt 6fpkt"];
17235--23639[label="1;14pkt 14fpkt"];
17547--23846[label="1;21pkt 21fpkt"];
17848--24041[label="1;8pkt 8fpkt"];
17848--27737[label="1;8pkt 8fpkt"];
18111--24214[label="1;40pkt 40fpkt"];
18111--27837[label="1;40pkt 40fpkt"];
19001--24824[label="1;92pkt 92fpkt"];
19001--28193[label="1;92pkt 92fpkt"];
19278--24994[label="1;7pkt 7fpkt"];
19278--28285[label="1;7pkt 7fpkt"];
19351--25044[label="1;25pkt 25fpkt"];
19351--28320[label="1;25pkt 25fpkt"];
19663--25256[label="1;58pkt 58fpkt"];
19669--25262[label="1;34pkt 34fpkt"];
19669--28453[label="1;34pkt 34fpkt"];
21275--26190[label="1;6pkt 6fpkt"];
21955--26556[label="1;13pkt 13fpkt"];
24041--27737[label="1;8pkt 8fpkt"];
24214--27837[label="1;40pkt 40fpkt"];
24824--28193[label="1;92pkt 92fpkt"];
24994--28285[label="1;7pkt 7fpkt"];
25044--28320[label="1;25pkt 25fpkt"];
25262--28453[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="128.156.127.195" dst_port="80"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3394{
style=filled;
color=gray75;
19376[label="38.88.240.222;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25058[label="38.88.240.222;1pkt 1fpkt", shape=invtriangle, color=brown];
28327[label="38.88.240.222;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3394[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.88.240.222:51087, 170.15.19.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51087: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19376--25058[label="1;1pkt 1fpkt"];
19376--28327[label="1;1pkt 1fpkt"];
25058--28327[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.15.19.152" dst_port="80" src_ip="38.88.240.222" src_port="51087"/>
    </slice>
    <from sec="1241499860" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.188.85.223"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.209.145.223"/>
    </slice>
    <from sec="1241500047" usec="0"/>
    <to sec="1241500067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.156.153.223"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.180.181.223"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241499973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.111.207.223"/>
    </slice>
    <from sec="1241499895" usec="0"/>
    <to sec="1241500288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.205.118.224"/>
    </slice>
    <from sec="1241500482" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.220.196.224"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.106.67.225"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.108.68.225"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.60.80.225"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.143.188.225"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.78.243.225"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3407{
style=filled;
color=gray75;
19443[label="204.5.45.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
25104[label="204.5.45.226;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3407[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.5.45.226:11760, 215.66.219.235:61773}[50%]&lt;BR/&gt;{204.5.45.226:11760, 215.66.219.235:62139}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11760: (50%)&lt;BR/&gt; 62139: (25%)&lt;BR/&gt; 61773: (25%)&gt;];
}
19443--25104[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62139" src_ip="204.5.45.226" src_port="11760"/>
      <filter dst_ip="215.66.219.235" dst_port="61773" src_ip="204.5.45.226" src_port="11760"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.0.59.226"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.64.226"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.54.224.226"/>
    </slice>
    <from sec="1241500079" usec="0"/>
    <to sec="1241500086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.84.51.227"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.121.112.227"/>
    </slice>
    <from sec="1241500136" usec="0"/>
    <to sec="1241500160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.224.203.227"/>
    </slice>
    <from sec="1241499880" usec="0"/>
    <to sec="1241500474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.189.240.227"/>
    </slice>
    <from sec="1241499729" usec="0"/>
    <to sec="1241499736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.143.38.228"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3416{
style=filled;
color=gray75;
19497[label="210.195.80.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25138[label="210.195.80.228;1pkt 1fpkt", shape=invtriangle, color=brown];
28375[label="210.195.80.228;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3416[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.195.80.228:443, 172.204.189.97:51121}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51121: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
19497--25138[label="1;1pkt 1fpkt"];
19497--28375[label="1;1pkt 1fpkt"];
25138--28375[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.189.97" dst_port="51121" src_ip="210.195.80.228" src_port="443"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.96.81.228"/>
    </slice>
    <from sec="1241499779" usec="0"/>
    <to sec="1241499955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3418{
style=filled;
color=gray75;
19502[label="0.17.137.228;2pkt 2fpkt", shape=pentagon, color=darkviolet];
25141[label="0.17.137.228;2pkt 2fpkt", shape=invtriangle, color=brown];
28378[label="0.17.137.228;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3418[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.17.137.228:3421, 215.66.219.235:7844}[50%]&lt;BR/&gt;{0.17.137.228:3422, 215.66.219.235:22567}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22567: (25%)&lt;BR/&gt; 7844: (25%)&lt;BR/&gt; 3422: (25%)&lt;BR/&gt; 3421: (25%)&gt;];
}
19502--25141[label="1;2pkt 2fpkt"];
19502--28378[label="1;2pkt 2fpkt"];
25141--28378[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="22567" src_ip="0.17.137.228" src_port="3422"/>
      <filter dst_ip="215.66.219.235" dst_port="7844" src_ip="0.17.137.228" src_port="3421"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.70.218.229"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.133.111.230"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.59.142.230"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3422{
style=filled;
color=gray75;
19554[label="62.115.204.230;2pkt 2fpkt", shape=pentagon, color=darkviolet];
25175[label="62.115.204.230;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3422[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.115.204.230:9342, 215.66.219.234:61942}[50%]&lt;BR/&gt;{62.115.204.230:9342, 215.66.219.234:63244}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9342: (50%)&lt;BR/&gt; 63244: (25%)&lt;BR/&gt; 61942: (25%)&gt;];
}
19554--25175[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.234" dst_port="63244" src_ip="62.115.204.230" src_port="9342"/>
      <filter dst_ip="215.66.219.234" dst_port="61942" src_ip="62.115.204.230" src_port="9342"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.16.100.231"/>
    </slice>
    <from sec="1241500057" usec="0"/>
    <to sec="1241500063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.4.136.231"/>
    </slice>
    <from sec="1241499898" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.162.147.231"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.160.204.231"/>
    </slice>
    <from sec="1241499919" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.69.6.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.18.166.232"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.200.181.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.10.188.232"/>
    </slice>
    <from sec="1241499924" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="24.110.210.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.150.0.233"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.5.4.233"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.134.58.233"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.234.95.233"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.189.239.233"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.74.25.234"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.75.25.234"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3440{
style=filled;
color=gray75;
3906[label="134.73.199.66;d;188pkt 188fpkt", shape=diamond, color=yellow];
19632[label="67.136.98.234;166pkt 166fpkt", shape=pentagon, color=darkviolet];
25235[label="67.136.98.234;166pkt 166fpkt", shape=invtriangle, color=brown];
28437[label="67.136.98.234;166pkt 166fpkt", shape=invhouse, color=bisque];
stat3440[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.136.98.234:*, 134.73.199.66:80}[44.1489%]&lt;BR/&gt;{67.136.98.234:*, 134.73.199.66:20480}[44.1489%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20480: (24.1983%)&lt;BR/&gt; 80: (24.1983%)&lt;BR/&gt; 53: (1.09329%)&lt;BR/&gt; 8552: (0.58309%)&lt;BR/&gt; 8520: (0.58309%)&gt;];
}
3906--11839[label="0.0106383;2pkt 2fpkt"];
3906--11898[label="0.0106383;2pkt 2fpkt"];
3906--14181[label="0.0588235;1pkt 1fpkt"];
3906--19632[label="1;166pkt 166fpkt"];
3906--25235[label="1;166pkt 166fpkt"];
3906--28437[label="1;166pkt 166fpkt"];
19632--25235[label="1;166pkt 166fpkt"];
19632--28437[label="1;166pkt 166fpkt"];
25235--28437[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter dst_ip="134.73.199.66" dst_port="20480" src_ip="67.136.98.234"/>
      <filter dst_ip="134.73.199.66" dst_port="80" src_ip="67.136.98.234"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3441{
style=filled;
color=gray75;
2626[label="214.170.73.53;d;536pkt 536fpkt", shape=diamond, color=yellow];
3923[label="2.49.41.251;s;238pkt 238fpkt", shape=diamond, color=yellow];
10781[label="2.49.41.251;s;179pkt 179fpkt", shape=hexagon, color=black];
19637[label="43.55.134.234;74pkt 74fpkt", shape=pentagon, color=darkviolet];
25239[label="43.55.134.234;74pkt 74fpkt", shape=invtriangle, color=brown];
28439[label="43.55.134.234;74pkt 74fpkt", shape=invhouse, color=bisque];
stat3441[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:443, 214.170.73.53:*}[50.9225%]&lt;BR/&gt;{2.49.41.251:*, 214.170.73.53:3128}[48.7085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (28.9787%)&lt;BR/&gt; 443: (20.9362%)&lt;BR/&gt; 46285: (0.212766%)&lt;BR/&gt; 60939: (0.170213%)&lt;BR/&gt; 60319: (0.170213%)&gt;];
}
2626--3923[label="1;238pkt 238fpkt"];
2626--8752[label="0.00186567;1pkt 1fpkt"];
2626--10781[label="1;179pkt 179fpkt"];
2626--11443[label="0.00186567;1pkt 1fpkt"];
2626--11784[label="0.00186567;1pkt 1fpkt"];
2626--11810[label="0.0354478;19pkt 19fpkt"];
2626--18338[label="0.00186567;1pkt 1fpkt"];
2626--19637[label="0.918919;68pkt 68fpkt"];
2626--24367[label="0.00186567;1pkt 1fpkt"];
2626--25239[label="0.918919;68pkt 68fpkt"];
2626--27930[label="0.00186567;1pkt 1fpkt"];
2626--28439[label="0.918919;68pkt 68fpkt"];
3923--10781[label="1;179pkt 179fpkt"];
3923--11810[label="0.0798319;19pkt 19fpkt"];
10781--11810[label="0.106145;19pkt 19fpkt"];
19637--25239[label="1;74pkt 74fpkt"];
19637--28439[label="1;74pkt 74fpkt"];
25239--28439[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="214.170.73.53" src_port="443"/>
      <filter dst_ip="214.170.73.53" dst_port="3128" src_ip="2.49.41.251"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.64.17.235"/>
    </slice>
    <from sec="1241500306" usec="0"/>
    <to sec="1241500308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.30.32.235"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.154.32.235"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.176.137.235"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.145.151.235"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.178.205.235"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3448{
style=filled;
color=gray75;
19674[label="128.156.219.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25266[label="128.156.219.235;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3448[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.156.219.235:61479, 192.138.155.128:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61479: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
19674--25266[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.138.155.128" dst_port="995" src_ip="128.156.219.235" src_port="61479"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.62.234.235"/>
    </slice>
    <from sec="1241499670" usec="0"/>
    <to sec="1241500404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.217.36.236"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3452{
style=filled;
color=gray75;
19698[label="32.161.175.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25282[label="32.161.175.236;1pkt 1fpkt", shape=invtriangle, color=brown];
28465[label="32.161.175.236;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3452[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.161.175.236:60616, 172.204.166.20:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60616: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19698--25282[label="1;1pkt 1fpkt"];
19698--28465[label="1;1pkt 1fpkt"];
25282--28465[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.166.20" dst_port="80" src_ip="32.161.175.236" src_port="60616"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.153.197.236"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.43.226.236"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3455{
style=filled;
color=gray75;
753[label="172.204.221.210;d;43pkt 43fpkt", shape=diamond, color=yellow];
2278[label="218.99.224.193;s;895pkt 895fpkt", shape=diamond, color=yellow];
11289[label="218.99.224.193;s;844pkt 844fpkt", shape=hexagon, color=black];
18615[label="218.99.224.193;14pkt 14fpkt", shape=pentagon, color=darkviolet];
19172[label="80.145.15.214;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19710[label="61.16.253.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
24932[label="80.145.15.214;1pkt 1fpkt", shape=invtriangle, color=brown];
25290[label="61.16.253.236;1pkt 1fpkt", shape=invtriangle, color=brown];
28246[label="80.145.15.214;1pkt 1fpkt", shape=invhouse, color=bisque];
28470[label="61.16.253.236;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3455[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.99.224.193:0, *:0}[95.5649%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.889%)&lt;BR/&gt; 43188: (0.0277469%)&lt;BR/&gt; 33504: (0.0277469%)&lt;BR/&gt; 3666: (0.0277469%)&lt;BR/&gt; 23: (0.0277469%)&gt;];
}
753--2278[label="0.0232558;1pkt 1fpkt"];
753--11289[label="0.0232558;1pkt 1fpkt"];
753--19172[label="1;1pkt 1fpkt"];
753--19710[label="1;1pkt 1fpkt"];
753--24932[label="1;1pkt 1fpkt"];
753--25290[label="1;1pkt 1fpkt"];
753--28246[label="1;1pkt 1fpkt"];
753--28470[label="1;1pkt 1fpkt"];
2278--11289[label="1;844pkt 844fpkt"];
2278--18615[label="0.285714;4pkt 4fpkt"];
11289--18615[label="0.214286;3pkt 3fpkt"];
19172--24932[label="1;1pkt 1fpkt"];
19172--28246[label="1;1pkt 1fpkt"];
19710--25290[label="1;1pkt 1fpkt"];
19710--28470[label="1;1pkt 1fpkt"];
24932--28246[label="1;1pkt 1fpkt"];
25290--28470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="218.99.224.193"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.80.0.237"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.65.97.237"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3458{
style=filled;
color=gray75;
19722[label="9.94.212.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25301[label="9.94.212.237;1pkt 1fpkt", shape=invtriangle, color=brown];
28477[label="9.94.212.237;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3458[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.94.212.237:17657, 214.163.228.3:3466}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17657: (50%)&lt;BR/&gt; 3466: (50%)&gt;];
}
19722--25301[label="1;1pkt 1fpkt"];
19722--28477[label="1;1pkt 1fpkt"];
25301--28477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.228.3" dst_port="3466" src_ip="9.94.212.237" src_port="17657"/>
    </slice>
    <from sec="1241500216" usec="0"/>
    <to sec="1241500402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.6.41.238"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.189.89.238"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.209.196.238"/>
    </slice>
    <from sec="1241499905" usec="0"/>
    <to sec="1241499975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.211.240.239"/>
    </slice>
    <from sec="1241499924" usec="0"/>
    <to sec="1241500118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.184.42.240"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241499965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.152.54.240"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241499729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3466{
style=filled;
color=gray75;
19787[label="194.70.94.240;18pkt 18fpkt", shape=pentagon, color=darkviolet];
25344[label="194.70.94.240;18pkt 18fpkt", shape=invtriangle, color=brown];
28501[label="194.70.94.240;18pkt 18fpkt", shape=invhouse, color=bisque];
stat3466[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.70.94.240:*, 172.204.236.234:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49364: (2.77778%)&lt;BR/&gt; 49281: (2.77778%)&lt;BR/&gt; 49280: (2.77778%)&lt;BR/&gt; 49279: (2.77778%)&gt;];
}
19787--25344[label="1;18pkt 18fpkt"];
19787--28501[label="1;18pkt 18fpkt"];
25344--28501[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.236.234" dst_port="80" src_ip="194.70.94.240"/>
    </slice>
    <from sec="1241500279" usec="0"/>
    <to sec="1241500404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3467{
style=filled;
color=gray75;
19788[label="134.73.96.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25345[label="134.73.96.240;1pkt 1fpkt", shape=invtriangle, color=brown];
28502[label="134.73.96.240;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3467[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.73.96.240:34766, 63.154.219.204:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34766: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
19788--25345[label="1;1pkt 1fpkt"];
19788--28502[label="1;1pkt 1fpkt"];
25345--28502[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="63.154.219.204" dst_port="21" src_ip="134.73.96.240" src_port="34766"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.227.178.240"/>
    </slice>
    <from sec="1241499967" usec="0"/>
    <to sec="1241500414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.162.204.240"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3470{
style=filled;
color=gray75;
19802[label="41.150.249.240;4pkt 4fpkt", shape=pentagon, color=darkviolet];
25356[label="41.150.249.240;4pkt 4fpkt", shape=invtriangle, color=brown];
28509[label="41.150.249.240;4pkt 4fpkt", shape=invhouse, color=bisque];
stat3470[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.240:5050, 172.204.164.1:1094}[25%]&lt;BR/&gt;{41.150.249.240:5050, 172.204.130.64:2715}[25%]&lt;BR/&gt;{41.150.249.240:23, 172.204.222.71:3941}[25%]&lt;BR/&gt;{41.150.249.240:5050, 172.204.191.85:1662}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (37.5%)&lt;BR/&gt; 3941: (12.5%)&lt;BR/&gt; 2715: (12.5%)&lt;BR/&gt; 1662: (12.5%)&lt;BR/&gt; 1094: (12.5%)&gt;];
}
19802--25356[label="1;4pkt 4fpkt"];
19802--28509[label="1;4pkt 4fpkt"];
25356--28509[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.191.85" dst_port="1662" src_ip="41.150.249.240" src_port="5050"/>
      <filter dst_ip="172.204.222.71" dst_port="3941" src_ip="41.150.249.240" src_port="23"/>
      <filter dst_ip="172.204.130.64" dst_port="2715" src_ip="41.150.249.240" src_port="5050"/>
      <filter dst_ip="172.204.164.1" dst_port="1094" src_ip="41.150.249.240" src_port="5050"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.186.8.241"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.8.13.241"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.185.92.241"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.14.150.241"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.22.97.242"/>
    </slice>
    <from sec="1241499913" usec="0"/>
    <to sec="1241499918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3476{
style=filled;
color=gray75;
19843[label="57.80.100.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25382[label="57.80.100.242;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3476[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.80.100.242:1336, 215.66.220.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1336: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19843--25382[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.67" dst_port="80" src_ip="57.80.100.242" src_port="1336"/>
    </slice>
    <from sec="1241500251" usec="0"/>
    <to sec="1241500273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3477{
style=filled;
color=gray75;
19845[label="215.123.109.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25383[label="215.123.109.242;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3477[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.123.109.242:500, 215.66.210.166:500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 500: (100%)&gt;];
}
19845--25383[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.210.166" dst_port="500" src_ip="215.123.109.242" src_port="500"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.119.147.242"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.80.18.243"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241499638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3480{
style=filled;
color=gray75;
19877[label="151.71.178.243;183pkt 183fpkt", shape=pentagon, color=darkviolet];
25404[label="151.71.178.243;183pkt 183fpkt", shape=invtriangle, color=brown];
stat3480[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.71.178.243:18353, *:*}[97.8142%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18353: (48.9071%)&lt;BR/&gt; 4670: (1.0929%)&lt;BR/&gt; 16001: (0.546448%)&lt;BR/&gt; 65001: (0.273224%)&lt;BR/&gt; 64626: (0.273224%)&gt;];
}
19877--25404[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter src_ip="151.71.178.243" src_port="18353"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.171.210.243"/>
    </slice>
    <from sec="1241500463" usec="0"/>
    <to sec="1241500478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3482{
style=filled;
color=gray75;
19885[label="41.150.249.243;9pkt 9fpkt", shape=pentagon, color=darkviolet];
25410[label="41.150.249.243;9pkt 9fpkt", shape=invtriangle, color=brown];
stat3482[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.243:5050, *:*}[55.5556%]&lt;BR/&gt;{41.150.249.243:23, *:1817}[22.2222%]&lt;BR/&gt;{41.150.249.243:20, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (27.7778%)&lt;BR/&gt; 1817: (11.1111%)&lt;BR/&gt; 23: (11.1111%)&lt;BR/&gt; 20: (11.1111%)&lt;BR/&gt; 1136: (5.55556%)&gt;];
}
19885--25410[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="41.150.249.243" src_port="5050"/>
      <filter src_ip="41.150.249.243" src_port="20"/>
      <filter dst_port="1817" src_ip="41.150.249.243" src_port="23"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.176.244"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.105.12.245"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.45.245"/>
    </slice>
    <from sec="1241500199" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.72.58.245"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.68.81.245"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.43.189.245"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.105.217.245"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.93.223.245"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3491{
style=filled;
color=gray75;
19933[label="217.204.18.246;2pkt 2fpkt", shape=pentagon, color=darkviolet];
25439[label="217.204.18.246;2pkt 2fpkt", shape=invtriangle, color=brown];
stat3491[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.204.18.246:30194, 214.170.80.25:53}[50%]&lt;BR/&gt;{217.204.18.246:52481, 215.66.209.138:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 52481: (25%)&lt;BR/&gt; 30194: (25%)&gt;];
}
19933--25439[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.209.138" dst_port="53" src_ip="217.204.18.246" src_port="52481"/>
      <filter dst_ip="214.170.80.25" dst_port="53" src_ip="217.204.18.246" src_port="30194"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.72.33.246"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.167.102.246"/>
    </slice>
    <from sec="1241500084" usec="0"/>
    <to sec="1241500250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.233.114.246"/>
    </slice>
    <from sec="1241499895" usec="0"/>
    <to sec="1241500434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.210.247.246"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.88.52.247"/>
    </slice>
    <from sec="1241499816" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3497{
style=filled;
color=gray75;
19960[label="12.15.117.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25458[label="12.15.117.247;1pkt 1fpkt", shape=invtriangle, color=brown];
stat3497[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.15.117.247:17483, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17483: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19960--25458[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="12.15.117.247" src_port="17483"/>
    </slice>
    <from sec="1241500242" usec="0"/>
    <to sec="1241500337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.192.128.247"/>
    </slice>
    <from sec="1241499844" usec="0"/>
    <to sec="1241499874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.69.229.247"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.87.64.248"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.6.97.248"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.172.178.248"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3503{
style=filled;
color=gray75;
19990[label="41.150.249.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25476[label="41.150.249.248;1pkt 1fpkt", shape=invtriangle, color=brown];
28583[label="41.150.249.248;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3503[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.150.249.248:5050, 172.204.134.36:1300}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1300: (50%)&gt;];
}
19990--25476[label="1;1pkt 1fpkt"];
19990--28583[label="1;1pkt 1fpkt"];
25476--28583[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.134.36" dst_port="1300" src_ip="41.150.249.248" src_port="5050"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3504{
style=filled;
color=gray75;
19992[label="1.161.9.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25478[label="1.161.9.249;1pkt 1fpkt", shape=invtriangle, color=brown];
28585[label="1.161.9.249;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3504[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.161.9.249:64995, 215.66.219.235:22575}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64995: (50%)&lt;BR/&gt; 22575: (50%)&gt;];
}
19992--25478[label="1;1pkt 1fpkt"];
19992--28585[label="1;1pkt 1fpkt"];
25478--28585[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="22575" src_ip="1.161.9.249" src_port="64995"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.232.26.249"/>
    </slice>
    <from sec="1241500217" usec="0"/>
    <to sec="1241500275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.184.146.249"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.238.172.249"/>
    </slice>
    <from sec="1241500053" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.135.25.250"/>
    </slice>
    <from sec="1241499806" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.186.32.250"/>
    </slice>
    <from sec="1241499768" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.225.56.250"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.66.117.250"/>
    </slice>
    <from sec="1241500312" usec="0"/>
    <to sec="1241500364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3512{
style=filled;
color=gray75;
20034[label="51.161.174.250;264pkt 264fpkt", shape=pentagon, color=darkviolet];
25511[label="51.161.174.250;264pkt 264fpkt", shape=invtriangle, color=brown];
28600[label="51.161.174.250;264pkt 264fpkt", shape=invhouse, color=bisque];
stat3512[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.161.174.250:*, 168.46.227.166:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2998: (0.189394%)&lt;BR/&gt; 2984: (0.189394%)&lt;BR/&gt; 2971: (0.189394%)&lt;BR/&gt; 2966: (0.189394%)&gt;];
}
20034--25511[label="1;264pkt 264fpkt"];
20034--28600[label="1;264pkt 264fpkt"];
25511--28600[label="1;264pkt 264fpkt"];
</description>
    <slice>
      <filter dst_ip="168.46.227.166" dst_port="80" src_ip="51.161.174.250"/>
    </slice>
    <from sec="1241499715" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.34.228.250"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.38.102.251"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3515{
style=filled;
color=gray75;
20054[label="41.213.116.251;25pkt 25fpkt", shape=pentagon, color=darkviolet];
25523[label="41.213.116.251;25pkt 25fpkt", shape=invtriangle, color=brown];
28607[label="41.213.116.251;25pkt 25fpkt", shape=invhouse, color=bisque];
stat3515[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.213.116.251:*, 215.66.209.90:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62864: (2%)&lt;BR/&gt; 60317: (2%)&lt;BR/&gt; 59466: (2%)&lt;BR/&gt; 59448: (2%)&gt;];
}
20054--25523[label="1;25pkt 25fpkt"];
20054--28607[label="1;25pkt 25fpkt"];
25523--28607[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.209.90" dst_port="80" src_ip="41.213.116.251"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.164.164.251"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.182.171.251"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.110.40.252"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.3.64.252"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20925,4.46425,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3520{
style=filled;
color=gray75;
4585[label="128.156.127.136;d;43pkt 43fpkt", shape=diamond, color=yellow];
14513[label="67.137.206.69;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15807[label="68.178.20.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
16001[label="194.214.159.111;4pkt 4fpkt", shape=pentagon, color=darkviolet];
20074[label="9.242.66.252;10pkt 10fpkt", shape=pentagon, color=darkviolet];
22849[label="194.214.159.111;4pkt 4fpkt", shape=invtriangle, color=brown];
25536[label="9.242.66.252;10pkt 10fpkt", shape=invtriangle, color=brown];
stat3520[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.156.127.136:993}[67.4419%]&lt;BR/&gt;{9.242.66.252:*, 128.156.127.136:443}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (28.2051%)&lt;BR/&gt; 443: (20.5128%)&lt;BR/&gt; 49630: (1.92308%)&lt;BR/&gt; 49629: (1.92308%)&lt;BR/&gt; 49626: (1.92308%)&gt;];
}
4585--14513[label="1;4pkt 4fpkt"];
4585--15807[label="1;3pkt 3fpkt"];
4585--16001[label="1;4pkt 4fpkt"];
4585--20074[label="1;10pkt 10fpkt"];
4585--22849[label="1;4pkt 4fpkt"];
4585--25536[label="1;10pkt 10fpkt"];
16001--22849[label="1;4pkt 4fpkt"];
20074--25536[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="128.156.127.136" dst_port="993"/>
      <filter dst_ip="128.156.127.136" dst_port="443" src_ip="9.242.66.252"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.253.122.252"/>
    </slice>
    <from sec="1241499720" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.208.128.253"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500919,4.53785,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_3523{
style=filled;
color=gray75;
20102[label="59.68.153.253;18pkt 18fpkt", shape=pentagon, color=darkviolet];
25553[label="59.68.153.253;18pkt 18fpkt", shape=invtriangle, color=brown];
stat3523[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.68.153.253:*, 172.204.138.211:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4783: (2.77778%)&lt;BR/&gt; 4781: (2.77778%)&lt;BR/&gt; 4779: (2.77778%)&lt;BR/&gt; 4777: (2.77778%)&gt;];
}
20102--25553[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.138.211" dst_port="80" src_ip="59.68.153.253"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.172.178.253"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="2.1069,4.34312,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3525{
style=filled;
color=gray75;
451[label="172.204.160.1;d;188pkt 188fpkt", shape=diamond, color=yellow];
578[label="37.0.229.253;s;79pkt 79fpkt", shape=diamond, color=yellow];
1398[label="91.224.79.9;s;57pkt 57fpkt", shape=diamond, color=yellow];
2162[label="215.98.8.85;s;21pkt 21fpkt", shape=diamond, color=yellow];
4933[label="20.203.149.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
4971[label="38.125.95.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
5106[label="38.200.97.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
5112[label="103.16.209.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
5602[label="20.235.119.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
5842[label="23.72.106.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
6766[label="51.216.21.6;s;2pkt 2fpkt", shape=diamond, color=yellow];
7675[label="23.173.35.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
8495[label="38.108.193.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
10406[label="20.235.119.94;s;1pkt 1fpkt", shape=hexagon, color=black];
10554[label="103.16.209.185;s;1pkt 1fpkt", shape=hexagon, color=black];
12196[label="51.216.21.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12352[label="91.224.79.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13847[label="45.97.146.50;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15964[label="20.203.149.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16511[label="41.199.193.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18405[label="35.91.93.186;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18919[label="38.200.97.205;3pkt 3fpkt", shape=pentagon, color=darkviolet];
20110[label="37.0.229.253;85pkt 85fpkt", shape=pentagon, color=darkviolet];
20327[label="51.216.21.6;1pkt 1fpkt", shape=invtriangle, color=brown];
21422[label="45.97.146.50;4pkt 4fpkt", shape=invtriangle, color=brown];
23176[label="41.199.193.128;1pkt 1fpkt", shape=invtriangle, color=brown];
25561[label="37.0.229.253;85pkt 85fpkt", shape=invtriangle, color=brown];
26268[label="45.97.146.50;4pkt 4fpkt", shape=invhouse, color=bisque];
28626[label="37.0.229.253;85pkt 85fpkt", shape=invhouse, color=bisque];
stat3525[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.0.229.253:*, 172.204.160.1:80}[42.9293%]&lt;BR/&gt;{91.224.79.9:*, 172.204.160.1:80}[29.2929%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9215%)&lt;BR/&gt; 59594: (0.392465%)&lt;BR/&gt; 59593: (0.392465%)&lt;BR/&gt; 59591: (0.392465%)&lt;BR/&gt; 59590: (0.392465%)&gt;];
}
451--578[label="1;79pkt 79fpkt"];
451--1398[label="1;57pkt 57fpkt"];
451--2162[label="0.952381;20pkt 20fpkt"];
451--4933[label="1;1pkt 1fpkt"];
451--4971[label="1;1pkt 1fpkt"];
451--5106[label="1;2pkt 2fpkt"];
451--5112[label="1;1pkt 1fpkt"];
451--5602[label="1;1pkt 1fpkt"];
451--5842[label="1;1pkt 1fpkt"];
451--6766[label="1;2pkt 2fpkt"];
451--7675[label="1;1pkt 1fpkt"];
451--7930[label="0.00952381;1pkt 1fpkt"];
451--8495[label="1;1pkt 1fpkt"];
451--10406[label="1;1pkt 1fpkt"];
451--10554[label="1;1pkt 1fpkt"];
451--12196[label="1;1pkt 1fpkt"];
451--12352[label="0.5;1pkt 1fpkt"];
451--13847[label="1;4pkt 4fpkt"];
451--15964[label="1;1pkt 1fpkt"];
451--16511[label="1;1pkt 1fpkt"];
451--18405[label="0.5;1pkt 1fpkt"];
451--18919[label="0.666667;2pkt 2fpkt"];
451--19171[label="0.00943396;1pkt 1fpkt"];
451--20110[label="0.929412;79pkt 79fpkt"];
451--20327[label="1;1pkt 1fpkt"];
451--21422[label="1;4pkt 4fpkt"];
451--23176[label="1;1pkt 1fpkt"];
451--24931[label="0.00943396;1pkt 1fpkt"];
451--25561[label="0.929412;79pkt 79fpkt"];
451--26268[label="1;4pkt 4fpkt"];
451--28626[label="0.929412;79pkt 79fpkt"];
578--20110[label="1;79pkt 79fpkt"];
578--25561[label="1;79pkt 79fpkt"];
578--28626[label="1;79pkt 79fpkt"];
1398--12352[label="0.5;1pkt 1fpkt"];
4933--15964[label="1;1pkt 1fpkt"];
5106--18919[label="1;2pkt 2fpkt"];
5112--10554[label="1;1pkt 1fpkt"];
5602--10406[label="1;1pkt 1fpkt"];
6766--12196[label="1;1pkt 1fpkt"];
6766--20327[label="1;1pkt 1fpkt"];
12196--20327[label="1;1pkt 1fpkt"];
13847--21422[label="1;4pkt 4fpkt"];
13847--26268[label="1;4pkt 4fpkt"];
16511--23176[label="1;1pkt 1fpkt"];
20110--25561[label="1;85pkt 85fpkt"];
20110--28626[label="1;85pkt 85fpkt"];
21422--26268[label="1;4pkt 4fpkt"];
25561--28626[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="172.204.160.1" dst_port="80" src_ip="37.0.229.253"/>
      <filter dst_ip="172.204.160.1" dst_port="80" src_ip="91.224.79.9"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.220.244.253"/>
    </slice>
    <from sec="1241500326" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.161.194.254"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716108,4.51812,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3528{
style=filled;
color=gray75;
20128[label="181.230.220.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
25572[label="181.230.220.254;1pkt 1fpkt", shape=invtriangle, color=brown];
28634[label="181.230.220.254;1pkt 1fpkt", shape=invhouse, color=bisque];
stat3528[shape=component, label=&lt;Rules:&lt;BR/&gt;{181.230.220.254:52569, 215.66.220.66:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52569: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
20128--25572[label="1;1pkt 1fpkt"];
20128--28634[label="1;1pkt 1fpkt"];
25572--28634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.220.66" dst_port="80" src_ip="181.230.220.254" src_port="52569"/>
    </slice>
    <from sec="1241500029" usec="0"/>
    <to sec="1241500067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.515521,4.55909,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.128.192.255"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31308,4.44419,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_3530{
style=filled;
color=gray75;
3485[label="128.1.202.74;d;2825pkt 2825fpkt", shape=diamond, color=yellow];
15119[label="67.161.196.86;180pkt 180fpkt", shape=pentagon, color=darkviolet];
18272[label="67.160.201.181;267pkt 267fpkt", shape=pentagon, color=darkviolet];
19755[label="205.2.71.239;349pkt 349fpkt", shape=pentagon, color=darkviolet];
20145[label="66.85.204.255;177pkt 177fpkt", shape=pentagon, color=darkviolet];
22270[label="67.161.196.86;180pkt 180fpkt", shape=invtriangle, color=brown];
25321[label="205.2.71.239;349pkt 349fpkt", shape=invtriangle, color=brown];
25579[label="66.85.204.255;177pkt 177fpkt", shape=invtriangle, color=brown];
26724[label="67.161.196.86;180pkt 180fpkt", shape=invhouse, color=bisque];
28637[label="66.85.204.255;177pkt 177fpkt", shape=invhouse, color=bisque];
stat3530[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.1.202.74:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27959: (12.1889%)&lt;BR/&gt; 28734: (7.99218%)&lt;BR/&gt; 33593: (7.26188%)&lt;BR/&gt; 62049: (6.94302%)&lt;BR/&gt; 11385: (2.5612%)&gt;];
}
3485--15119[label="0.922222;166pkt 166fpkt"];
3485--18272[label="0.921348;246pkt 246fpkt"];
3485--19755[label="0.919771;321pkt 321fpkt"];
3485--20145[label="0.920904;163pkt 163fpkt"];
3485--22270[label="0.922222;166pkt 166fpkt"];
3485--25321[label="0.919771;321pkt 321fpkt"];
3485--25579[label="0.920904;163pkt 163fpkt"];
3485--26724[label="0.922222;166pkt 166fpkt"];
3485--28637[label="0.920904;163pkt 163fpkt"];
15119--22270[label="1;180pkt 180fpkt"];
15119--26724[label="1;180pkt 180fpkt"];
19755--25321[label="1;349pkt 349fpkt"];
20145--25579[label="1;177pkt 177fpkt"];
20145--28637[label="1;177pkt 177fpkt"];
22270--26724[label="1;180pkt 180fpkt"];
25579--28637[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_ip="128.1.202.74"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.94.40.0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.231.83.0"/>
    </slice>
    <from sec="1241500178" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.19.92.0"/>
    </slice>
    <from sec="1241499687" usec="0"/>
    <to sec="1241499697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.168.99.0"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.32.136.0"/>
    </slice>
    <from sec="1241499957" usec="0"/>
    <to sec="1241499994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.45.137.0"/>
    </slice>
    <from sec="1241500124" usec="0"/>
    <to sec="1241500146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.68.197.0"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.138.199.0"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.138.229.0"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241500219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.12.106.1"/>
    </slice>
    <from sec="1241500150" usec="0"/>
    <to sec="1241500230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.5.198.1"/>
    </slice>
    <from sec="1241500263" usec="0"/>
    <to sec="1241500324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.52.238.1"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.88.5.2"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.185.20.2"/>
    </slice>
    <from sec="1241499912" usec="0"/>
    <to sec="1241500091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.221.75.2"/>
    </slice>
    <from sec="1241499922" usec="0"/>
    <to sec="1241500054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.89.76.2"/>
    </slice>
    <from sec="1241499713" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.42.157.2"/>
    </slice>
    <from sec="1241500229" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.86.251.2"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.229.16.3"/>
    </slice>
    <from sec="1241499906" usec="0"/>
    <to sec="1241499929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.75.105.3"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.241.160.3"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241499901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.171.211.3"/>
    </slice>
    <from sec="1241500451" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.228.244.3"/>
    </slice>
    <from sec="1241499741" usec="0"/>
    <to sec="1241499803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.111.13.4"/>
    </slice>
    <from sec="1241500338" usec="0"/>
    <to sec="1241500418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.64.38.4"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.51.64.4"/>
    </slice>
    <from sec="1241499894" usec="0"/>
    <to sec="1241499910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.67.106.4"/>
    </slice>
    <from sec="1241500186" usec="0"/>
    <to sec="1241500214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.161.143.4"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.15.169.4"/>
    </slice>
    <from sec="1241499715" usec="0"/>
    <to sec="1241499727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.9.189.4"/>
    </slice>
    <from sec="1241499962" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.183.250.4"/>
    </slice>
    <from sec="1241500452" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.19.77.5"/>
    </slice>
    <from sec="1241499943" usec="0"/>
    <to sec="1241500009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.125.83.5"/>
    </slice>
    <from sec="1241499656" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.239.93.5"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.65.179.5"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.247.38.6"/>
    </slice>
    <from sec="1241499905" usec="0"/>
    <to sec="1241499975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.161.143.6"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.8.21.7"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.24.7"/>
    </slice>
    <from sec="1241499959" usec="0"/>
    <to sec="1241499969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.27.53.7"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.72.78.7"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.64.86.7"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.68.95.7"/>
    </slice>
    <from sec="1241499664" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.185.145.7"/>
    </slice>
    <from sec="1241499812" usec="0"/>
    <to sec="1241500010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.193.158.7"/>
    </slice>
    <from sec="1241500031" usec="0"/>
    <to sec="1241500239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.5.198.7"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.70.217.7"/>
    </slice>
    <from sec="1241499710" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.110.218.7"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.54.5.8"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.32.15.8"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.107.58.8"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.129.60.8"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241499790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.86.182.8"/>
    </slice>
    <from sec="1241500213" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.156.128.9"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.145.154.9"/>
    </slice>
    <from sec="1241500400" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.184.46.10"/>
    </slice>
    <from sec="1241500297" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.104.132.10"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.164.139.10"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.138.153.10"/>
    </slice>
    <from sec="1241500400" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.88.154.10"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.52.194.10"/>
    </slice>
    <from sec="1241499601" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.90.237.10"/>
    </slice>
    <from sec="1241499943" usec="0"/>
    <to sec="1241499977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.64.30.11"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.189.33.11"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.91.48.11"/>
    </slice>
    <from sec="1241499889" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="181.164.81.11"/>
    </slice>
    <from sec="1241500040" usec="0"/>
    <to sec="1241500046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.26.152.11"/>
    </slice>
    <from sec="1241500153" usec="0"/>
    <to sec="1241500199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.53.164.11"/>
    </slice>
    <from sec="1241499775" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.202.192.11"/>
    </slice>
    <from sec="1241500288" usec="0"/>
    <to sec="1241500298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.87.10.12"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.10.153.12"/>
    </slice>
    <from sec="1241499973" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.53.156.12"/>
    </slice>
    <from sec="1241500115" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.161.209.12"/>
    </slice>
    <from sec="1241499631" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.96.11.13"/>
    </slice>
    <from sec="1241500054" usec="0"/>
    <to sec="1241500314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.26.19.13"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.21.31.13"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.66.64.13"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.55.65.15"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.68.94.15"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.86.189.15"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.238.7.16"/>
    </slice>
    <from sec="1241500032" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.153.11.16"/>
    </slice>
    <from sec="1241500035" usec="0"/>
    <to sec="1241500070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.139.14.16"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.59.37.17"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.174.99.17"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.82.244.17"/>
    </slice>
    <from sec="1241499901" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.131.138.18"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.69.139.18"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.70.72.19"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.70.137.19"/>
    </slice>
    <from sec="1241500071" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.29.70.20"/>
    </slice>
    <from sec="1241499717" usec="0"/>
    <to sec="1241499759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.140.94.20"/>
    </slice>
    <from sec="1241499727" usec="0"/>
    <to sec="1241500431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.160.6.21"/>
    </slice>
    <from sec="1241499886" usec="0"/>
    <to sec="1241500003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.68.17.21"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.62.104.21"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="157.136.159.21"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.171.172.21"/>
    </slice>
    <from sec="1241499783" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.74.173.21"/>
    </slice>
    <from sec="1241499839" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.179.32.22"/>
    </slice>
    <from sec="1241499909" usec="0"/>
    <to sec="1241499928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.171.56.22"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241499714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.169.57.22"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.216.96.22"/>
    </slice>
    <from sec="1241500003" usec="0"/>
    <to sec="1241500014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.68.168.23"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.2.176.23"/>
    </slice>
    <from sec="1241500128" usec="0"/>
    <to sec="1241500222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.141.41.24"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.116.69.24"/>
    </slice>
    <from sec="1241499968" usec="0"/>
    <to sec="1241499978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.52.164.24"/>
    </slice>
    <from sec="1241499627" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.64.185.24"/>
    </slice>
    <from sec="1241500243" usec="0"/>
    <to sec="1241500454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.143.49.25"/>
    </slice>
    <from sec="1241499664" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.60.72.25"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.77.209.25"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.181.38.26"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.238.91.26"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.244.145.26"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.91.160.26"/>
    </slice>
    <from sec="1241500058" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.10.234.26"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.5.175.27"/>
    </slice>
    <from sec="1241499677" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.75.177.27"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241499806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.91.208.27"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.164.16.28"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.101.156.28"/>
    </slice>
    <from sec="1241500103" usec="0"/>
    <to sec="1241500120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.167.204.28"/>
    </slice>
    <from sec="1241500330" usec="0"/>
    <to sec="1241500335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.110.229.28"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.80.173.29"/>
    </slice>
    <from sec="1241500248" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.100.176.29"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.86.187.29"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.184.213.29"/>
    </slice>
    <from sec="1241499658" usec="0"/>
    <to sec="1241500394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.104.34.30"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.52.103.30"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241499720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.88.146.31"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.64.10.32"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.19.161.32"/>
    </slice>
    <from sec="1241499996" usec="0"/>
    <to sec="1241500082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.135.202.32"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.138.29.33"/>
    </slice>
    <from sec="1241499647" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.120.105.33"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.111.132.33"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.69.33.34"/>
    </slice>
    <from sec="1241499781" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.27.162.34"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.36.17.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.109.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.80.234.35"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.110.6.36"/>
    </slice>
    <from sec="1241500245" usec="0"/>
    <to sec="1241500466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.59.174.37"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.214.21.38"/>
    </slice>
    <from sec="1241500321" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.149.31.39"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.66.68.39"/>
    </slice>
    <from sec="1241500361" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.32.72.39"/>
    </slice>
    <from sec="1241499617" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.42.207.39"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.82.55.40"/>
    </slice>
    <from sec="1241500434" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.91.233.40"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.93.130.41"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.67.79.42"/>
    </slice>
    <from sec="1241499682" usec="0"/>
    <to sec="1241499778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.82.132.42"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.238.32.43"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.59.246.43"/>
    </slice>
    <from sec="1241500114" usec="0"/>
    <to sec="1241500131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.19.123.44"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.192.34.45"/>
    </slice>
    <from sec="1241499902" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.143.161.45"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.210.200.45"/>
    </slice>
    <from sec="1241499879" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.87.59.46"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.86.32.47"/>
    </slice>
    <from sec="1241499850" usec="0"/>
    <to sec="1241499875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.93.8.48"/>
    </slice>
    <from sec="1241499963" usec="0"/>
    <to sec="1241499988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.241.8.48"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.107.38.48"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241500181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.49.97.48"/>
    </slice>
    <from sec="1241500305" usec="0"/>
    <to sec="1241500438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.128.0.49"/>
    </slice>
    <from sec="1241499853" usec="0"/>
    <to sec="1241499983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.53.131.49"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.171.169.49"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.179.208.49"/>
    </slice>
    <from sec="1241499619" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.238.176.50"/>
    </slice>
    <from sec="1241499916" usec="0"/>
    <to sec="1241499927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.29.9.51"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.211.25.51"/>
    </slice>
    <from sec="1241499864" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.66.61.51"/>
    </slice>
    <from sec="1241500442" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.252.90.51"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.63.75.53"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.187.202.53"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.162.27.54"/>
    </slice>
    <from sec="1241500036" usec="0"/>
    <to sec="1241500041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.40.13.55"/>
    </slice>
    <from sec="1241499998" usec="0"/>
    <to sec="1241500163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.250.158.55"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.254.14.57"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.217.34.57"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.24.96.58"/>
    </slice>
    <from sec="1241499627" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.65.141.58"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.36.163.58"/>
    </slice>
    <from sec="1241499876" usec="0"/>
    <to sec="1241500061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.87.226.59"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.103.231.59"/>
    </slice>
    <from sec="1241499775" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.226.91.60"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.16.219.60"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.8.237.60"/>
    </slice>
    <from sec="1241500183" usec="0"/>
    <to sec="1241500192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.88.85.61"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.81.101.61"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.110.140.62"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.88.160.62"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.131.0.63"/>
    </slice>
    <from sec="1241500218" usec="0"/>
    <to sec="1241500479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.172.119.63"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.66.135.63"/>
    </slice>
    <from sec="1241499710" usec="0"/>
    <to sec="1241500442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.5.242.63"/>
    </slice>
    <from sec="1241499939" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.78.203.64"/>
    </slice>
    <from sec="1241500077" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.200.7.65"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.240.48.65"/>
    </slice>
    <from sec="1241499868" usec="0"/>
    <to sec="1241500279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.100.21.66"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.238.45.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.172.71.66"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.74.34.67"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.110.218.67"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.37.4.68"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241499846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.54.81.68"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241499827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.206.225.68"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.54.234.68"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.6.4.69"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.62.37.69"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.148.116.69"/>
    </slice>
    <from sec="1241500220" usec="0"/>
    <to sec="1241500395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.84.128.70"/>
    </slice>
    <from sec="1241500082" usec="0"/>
    <to sec="1241500106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.77.19.71"/>
    </slice>
    <from sec="1241500363" usec="0"/>
    <to sec="1241500373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.36.24.71"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.87.42.71"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.20.88.71"/>
    </slice>
    <from sec="1241500296" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.123.153.71"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.194.114.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.90.168.72"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.54.76.73"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.89.20.74"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.136.37.74"/>
    </slice>
    <from sec="1241500456" usec="0"/>
    <to sec="1241500477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.51.126.74"/>
    </slice>
    <from sec="1241500128" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.65.161.74"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.137.170.74"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.9.247.74"/>
    </slice>
    <from sec="1241500141" usec="0"/>
    <to sec="1241500464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.134.116.75"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.64.100.76"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.57.11.78"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.208.167.78"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.141.223.78"/>
    </slice>
    <from sec="1241499892" usec="0"/>
    <to sec="1241500222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.138.230.78"/>
    </slice>
    <from sec="1241499762" usec="0"/>
    <to sec="1241500456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.149.17.79"/>
    </slice>
    <from sec="1241499933" usec="0"/>
    <to sec="1241499937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.72.75.79"/>
    </slice>
    <from sec="1241499755" usec="0"/>
    <to sec="1241499775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.141.111.80"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241499791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.110.194.80"/>
    </slice>
    <from sec="1241500198" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.109.110.81"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.108.193.81"/>
    </slice>
    <from sec="1241499883" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.42.214.81"/>
    </slice>
    <from sec="1241499721" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.30.248.81"/>
    </slice>
    <from sec="1241499870" usec="0"/>
    <to sec="1241499984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.208.10.82"/>
    </slice>
    <from sec="1241499859" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.127.49.82"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.68.64.82"/>
    </slice>
    <from sec="1241499851" usec="0"/>
    <to sec="1241499968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642779,4.53739,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_3775{
style=filled;
color=gray75;
14963[label="103.36.135.82;2pkt 2fpkt", shape=pentagon, color=darkviolet];
26666[label="103.36.135.82;2pkt 2fpkt", shape=invhouse, color=bisque];
stat3775[shape=component, label=&lt;Rules:&lt;BR/&gt;{103.36.135.82:14184, 215.66.219.235:61712}[50%]&lt;BR/&gt;{103.36.135.82:14184, 215.66.219.235:63145}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14184: (50%)&lt;BR/&gt; 63145: (25%)&lt;BR/&gt; 61712: (25%)&gt;];
}
14963--26666[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="63145" src_ip="103.36.135.82" src_port="14184"/>
      <filter dst_ip="215.66.219.235" dst_port="61712" src_ip="103.36.135.82" src_port="14184"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.71.169.82"/>
    </slice>
    <from sec="1241499667" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.54.171.82"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.137.9.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.175.83"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.202.83"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.41.17.84"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241499654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.66.57.84"/>
    </slice>
    <from sec="1241499633" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.167.136.84"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.210.209.84"/>
    </slice>
    <from sec="1241499686" usec="0"/>
    <to sec="1241500077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.69.36.85"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.85.74.85"/>
    </slice>
    <from sec="1241499923" usec="0"/>
    <to sec="1241499927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.31.241.85"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.88.226.86"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.116.88.87"/>
    </slice>
    <from sec="1241499930" usec="0"/>
    <to sec="1241499934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.253.104.87"/>
    </slice>
    <from sec="1241499840" usec="0"/>
    <to sec="1241500174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.135.165.87"/>
    </slice>
    <from sec="1241500131" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.243.1.88"/>
    </slice>
    <from sec="1241499681" usec="0"/>
    <to sec="1241499689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="139.218.8.88"/>
    </slice>
    <from sec="1241500390" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.19.13.89"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.32.15.89"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.101.24.89"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.0.34.89"/>
    </slice>
    <from sec="1241499982" usec="0"/>
    <to sec="1241500006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.232.37.90"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.216.51.90"/>
    </slice>
    <from sec="1241499766" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.139.87.90"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.191.158.90"/>
    </slice>
    <from sec="1241499764" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.206.247.90"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.84.135.91"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,501,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.5.174.91"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.50.43.92"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.236.91.92"/>
    </slice>
    <from sec="1241500377" usec="0"/>
    <to sec="1241500389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.66.225.92"/>
    </slice>
    <from sec="1241499961" usec="0"/>
    <to sec="1241499968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.142.32.93"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.115.93.93"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.160.37.94"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.70.141.94"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.171.210.94"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.170.0.95"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.70.1.95"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.194.80.95"/>
    </slice>
    <from sec="1241499626" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.63.160.95"/>
    </slice>
    <from sec="1241500199" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.202.170.95"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.231.162.96"/>
    </slice>
    <from sec="1241499676" usec="0"/>
    <to sec="1241499741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.89.171.96"/>
    </slice>
    <from sec="1241499641" usec="0"/>
    <to sec="1241500361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.70.8.97"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.38.56.97"/>
    </slice>
    <from sec="1241500296" usec="0"/>
    <to sec="1241500338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.75.163.97"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.90.189.97"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.56.10.98"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.172.118.99"/>
    </slice>
    <from sec="1241500137" usec="0"/>
    <to sec="1241500225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.88.8.100"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.161.22.100"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.154.161.100"/>
    </slice>
    <from sec="1241500171" usec="0"/>
    <to sec="1241500339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.132.219.100"/>
    </slice>
    <from sec="1241499807" usec="0"/>
    <to sec="1241499818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.66.16.101"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.179.49.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.73.79.101"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.59.129.101"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.214.211.101"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.42.19.102"/>
    </slice>
    <from sec="1241499966" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.129.89.102"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.128.20.103"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.187.21.103"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.90.50.103"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.166.67.103"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241500414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.163.88.103"/>
    </slice>
    <from sec="1241499805" usec="0"/>
    <to sec="1241499824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.212.109.103"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.225.210.103"/>
    </slice>
    <from sec="1241500090" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.193.43.104"/>
    </slice>
    <from sec="1241499801" usec="0"/>
    <to sec="1241499830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.65.92.104"/>
    </slice>
    <from sec="1241500299" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.67.100.104"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.75.148.104"/>
    </slice>
    <from sec="1241500046" usec="0"/>
    <to sec="1241500057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.226.152.104"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.87.244.104"/>
    </slice>
    <from sec="1241500069" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.142.248.104"/>
    </slice>
    <from sec="1241499936" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.82.15.105"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.28.66.105"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.66.198.105"/>
    </slice>
    <from sec="1241500172" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.254.244.105"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.67.0.106"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.61.23.106"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.232.38.106"/>
    </slice>
    <from sec="1241499887" usec="0"/>
    <to sec="1241500104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.61.78.106"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.69.80.107"/>
    </slice>
    <from sec="1241500240" usec="0"/>
    <to sec="1241500292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.42.155.107"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.75.166.107"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.210.193.107"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241499678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.177.36.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.138.41.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.162.72.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.128.199.108"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.214.25.109"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.10.154.109"/>
    </slice>
    <from sec="1241500029" usec="0"/>
    <to sec="1241500102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.202.117.110"/>
    </slice>
    <from sec="1241500060" usec="0"/>
    <to sec="1241500446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.225.139.110"/>
    </slice>
    <from sec="1241499764" usec="0"/>
    <to sec="1241499899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.68.8.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.111.15.111"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.147.33.111"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.129.63.111"/>
    </slice>
    <from sec="1241500285" usec="0"/>
    <to sec="1241500355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.36.135.111"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.193.102.112"/>
    </slice>
    <from sec="1241500293" usec="0"/>
    <to sec="1241500325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.13.184.112"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.56.12.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.85.156.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.15.186.113"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.41.236.115"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.90.24.116"/>
    </slice>
    <from sec="1241499638" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.2.72.116"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="151.186.23.117"/>
    </slice>
    <from sec="1241499881" usec="0"/>
    <to sec="1241499982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.215.29.117"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.69.77.117"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.54.71.118"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.90.213.118"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.110.9.119"/>
    </slice>
    <from sec="1241499777" usec="0"/>
    <to sec="1241500459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.231.42.120"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.132.61.120"/>
    </slice>
    <from sec="1241499727" usec="0"/>
    <to sec="1241499960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.81.65.120"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.74.192.120"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.119.19.121"/>
    </slice>
    <from sec="1241500405" usec="0"/>
    <to sec="1241500423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.65.99.122"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.52.8.125"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.93.31.125"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.110.74.126"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.138.103.126"/>
    </slice>
    <from sec="1241499677" usec="0"/>
    <to sec="1241499754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.138.134.126"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.85.203.127"/>
    </slice>
    <from sec="1241499744" usec="0"/>
    <to sec="1241500411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.220.2.128"/>
    </slice>
    <from sec="1241499630" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.218.50.128"/>
    </slice>
    <from sec="1241500253" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.128.95.128"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.145.41.129"/>
    </slice>
    <from sec="1241500156" usec="0"/>
    <to sec="1241500208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.205.21.130"/>
    </slice>
    <from sec="1241500353" usec="0"/>
    <to sec="1241500440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.80.27.130"/>
    </slice>
    <from sec="1241499761" usec="0"/>
    <to sec="1241500407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.213.214.130"/>
    </slice>
    <from sec="1241499696" usec="0"/>
    <to sec="1241500363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.136.37.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.128.95.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.31.131.131"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.52.196.131"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.16.224.131"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.44.204.132"/>
    </slice>
    <from sec="1241500266" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.138.232.132"/>
    </slice>
    <from sec="1241500232" usec="0"/>
    <to sec="1241500282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.100.150.133"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241499789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.65.158.134"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.71.193.134"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.112.238.134"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.67.124.135"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.98.34.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.27.53.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.214.196.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.61.230.136"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.32.232.136"/>
    </slice>
    <from sec="1241499674" usec="0"/>
    <to sec="1241499685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.203.51.137"/>
    </slice>
    <from sec="1241499943" usec="0"/>
    <to sec="1241499976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.66.136.137"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.12.41.138"/>
    </slice>
    <from sec="1241499988" usec="0"/>
    <to sec="1241500184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.6.97.138"/>
    </slice>
    <from sec="1241499832" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.12.225.138"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.110.107.139"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.60.177.139"/>
    </slice>
    <from sec="1241500042" usec="0"/>
    <to sec="1241500176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.80.131.140"/>
    </slice>
    <from sec="1241500272" usec="0"/>
    <to sec="1241500333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.5.227.140"/>
    </slice>
    <from sec="1241500300" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.49.14.141"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241499976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.76.122.141"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.181.20.142"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.237.233.142"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.172.142.143"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.89.168.143"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.30.213.143"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.92.20.144"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.64.64.144"/>
    </slice>
    <from sec="1241500080" usec="0"/>
    <to sec="1241500205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.214.130.144"/>
    </slice>
    <from sec="1241499840" usec="0"/>
    <to sec="1241499939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.218.173.144"/>
    </slice>
    <from sec="1241499722" usec="0"/>
    <to sec="1241499814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.123.24.145"/>
    </slice>
    <from sec="1241500005" usec="0"/>
    <to sec="1241500457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.140.78.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.89.193.145"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.8.3.146"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.29.130.146"/>
    </slice>
    <from sec="1241500210" usec="0"/>
    <to sec="1241500229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.138.199.146"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.0.147"/>
    </slice>
    <from sec="1241499897" usec="0"/>
    <to sec="1241499907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.131.129.147"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.31.168.147"/>
    </slice>
    <from sec="1241500217" usec="0"/>
    <to sec="1241500331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.53.41.148"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.185.4.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.77.33.149"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.6.76.149"/>
    </slice>
    <from sec="1241499866" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.80.172.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.111.206.149"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.66.146.150"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.20.67.151"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.66.1.152"/>
    </slice>
    <from sec="1241500159" usec="0"/>
    <to sec="1241500273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.172.106.152"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.72.74.153"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.105.224.153"/>
    </slice>
    <from sec="1241499871" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.100.241.153"/>
    </slice>
    <from sec="1241500001" usec="0"/>
    <to sec="1241500050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.149.23.154"/>
    </slice>
    <from sec="1241500255" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.128.199.154"/>
    </slice>
    <from sec="1241500065" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.142.89.155"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.218.16.156"/>
    </slice>
    <from sec="1241499760" usec="0"/>
    <to sec="1241499886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.146.34.158"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.15.161.158"/>
    </slice>
    <from sec="1241500157" usec="0"/>
    <to sec="1241500210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.160.254.158"/>
    </slice>
    <from sec="1241499918" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.8.35.159"/>
    </slice>
    <from sec="1241499979" usec="0"/>
    <to sec="1241500022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.86.213.159"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.89.3.160"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.226.37.160"/>
    </slice>
    <from sec="1241499642" usec="0"/>
    <to sec="1241499682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.33.84.160"/>
    </slice>
    <from sec="1241500315" usec="0"/>
    <to sec="1241500370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.70.216.160"/>
    </slice>
    <from sec="1241499875" usec="0"/>
    <to sec="1241499896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.82.96.161"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.214.102.161"/>
    </slice>
    <from sec="1241499615" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.80.27.162"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241499854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.138.43.162"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.164.68.162"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.161.83.162"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.66.139.162"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.2.153.162"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.199.250.162"/>
    </slice>
    <from sec="1241500141" usec="0"/>
    <to sec="1241500237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.189.232.163"/>
    </slice>
    <from sec="1241499611" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.211.27.164"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.142.64.164"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.129.115.164"/>
    </slice>
    <from sec="1241499618" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.55.186.165"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.230.208.165"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.54.66.166"/>
    </slice>
    <from sec="1241500220" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.77.216.166"/>
    </slice>
    <from sec="1241499639" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.62.167"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.66.131.167"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.165.110.168"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.65.192.168"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.137.243.168"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241500403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.138.124.169"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.71.235.169"/>
    </slice>
    <from sec="1241500041" usec="0"/>
    <to sec="1241500068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.67.236.169"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.89.2.170"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.185.136.170"/>
    </slice>
    <from sec="1241500244" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.208.160.170"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.59.23.171"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.196.23.171"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="160.56.57.171"/>
    </slice>
    <from sec="1241499688" usec="0"/>
    <to sec="1241500445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.234.148.171"/>
    </slice>
    <from sec="1241500153" usec="0"/>
    <to sec="1241500162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.146.220.171"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.2.235.171"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.83.0.172"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.143.42.172"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241499940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.177.54.172"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.20.160.172"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241499971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.11.25.173"/>
    </slice>
    <from sec="1241499620" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.171.173.173"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.245.4.174"/>
    </slice>
    <from sec="1241499622" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.42.16.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.105.169.174"/>
    </slice>
    <from sec="1241499780" usec="0"/>
    <to sec="1241500467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.90.187.174"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.90.196.174"/>
    </slice>
    <from sec="1241499845" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.2.158.175"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.178.202.175"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.1.114.176"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.61.150.176"/>
    </slice>
    <from sec="1241499941" usec="0"/>
    <to sec="1241500089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.81.222.176"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.73.144.177"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.58.195.177"/>
    </slice>
    <from sec="1241499632" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.68.164.178"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.66.225.178"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.78.237.178"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.37.6.179"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.210.33.179"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.215.6.180"/>
    </slice>
    <from sec="1241500093" usec="0"/>
    <to sec="1241500126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.88.21.180"/>
    </slice>
    <from sec="1241499738" usec="0"/>
    <to sec="1241499806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.68.58.180"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.149.43.181"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.54.161.181"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.230.208.181"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.85.12.183"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.164.95.183"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.132.96.183"/>
    </slice>
    <from sec="1241499958" usec="0"/>
    <to sec="1241499998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.115.62.184"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.215.83.184"/>
    </slice>
    <from sec="1241499623" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.240.151.184"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.177.1.185"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.138.125.185"/>
    </slice>
    <from sec="1241499935" usec="0"/>
    <to sec="1241499951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.16.209.185"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.236.173.186"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="181.129.65.187"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.195.238.187"/>
    </slice>
    <from sec="1241500281" usec="0"/>
    <to sec="1241500311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.14.19.188"/>
    </slice>
    <from sec="1241500081" usec="0"/>
    <to sec="1241500150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.118.31.188"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.188.150.188"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.16.197.188"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.32.227.188"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.171.166.189"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.162.92.190"/>
    </slice>
    <from sec="1241499643" usec="0"/>
    <to sec="1241499684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.205.78.191"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.89.85.192"/>
    </slice>
    <from sec="1241499714" usec="0"/>
    <to sec="1241499988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.17.94.192"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.144.124.192"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.107.136.192"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.49.55.194"/>
    </slice>
    <from sec="1241499621" usec="0"/>
    <to sec="1241500490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.24.242.194"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.87.30.195"/>
    </slice>
    <from sec="1241499891" usec="0"/>
    <to sec="1241499985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.146.80.195"/>
    </slice>
    <from sec="1241499936" usec="0"/>
    <to sec="1241500182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.214.145.195"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.208.195"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.110.162.196"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.77.6.197"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642779,4.53739,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_4076{
style=filled;
color=gray75;
18705[label="12.112.52.197;2pkt 2fpkt", shape=pentagon, color=darkviolet];
28075[label="12.112.52.197;2pkt 2fpkt", shape=invhouse, color=bisque];
stat4076[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.112.52.197:65182, 215.66.219.235:61733}[50%]&lt;BR/&gt;{12.112.52.197:65182, 215.66.219.235:62595}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65182: (50%)&lt;BR/&gt; 62595: (25%)&lt;BR/&gt; 61733: (25%)&gt;];
}
18705--28075[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.66.219.235" dst_port="62595" src_ip="12.112.52.197" src_port="65182"/>
      <filter dst_ip="215.66.219.235" dst_port="61733" src_ip="12.112.52.197" src_port="65182"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.24.67.197"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.71.108.197"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.107.44.198"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.73.98.198"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.2.165.198"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.0.199"/>
    </slice>
    <from sec="1241499614" usec="0"/>
    <to sec="1241500390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.171.75.199"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241500016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.89.117.199"/>
    </slice>
    <from sec="1241499772" usec="0"/>
    <to sec="1241500072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.193.175.199"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.59.183.199"/>
    </slice>
    <from sec="1241500074" usec="0"/>
    <to sec="1241500084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.5.210.199"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.12.148.201"/>
    </slice>
    <from sec="1241499718" usec="0"/>
    <to sec="1241500405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.107.60.202"/>
    </slice>
    <from sec="1241500135" usec="0"/>
    <to sec="1241500144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.64.118.202"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.39.192.202"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.105.199.202"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.70.194.203"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.35.62.205"/>
    </slice>
    <from sec="1241500453" usec="0"/>
    <to sec="1241500472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.117.12.206"/>
    </slice>
    <from sec="1241499730" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.202.21.206"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.55.113.206"/>
    </slice>
    <from sec="1241499640" usec="0"/>
    <to sec="1241499761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.58.27.207"/>
    </slice>
    <from sec="1241500134" usec="0"/>
    <to sec="1241500142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.15.130.207"/>
    </slice>
    <from sec="1241500317" usec="0"/>
    <to sec="1241500354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.216.9.208"/>
    </slice>
    <from sec="1241499960" usec="0"/>
    <to sec="1241499965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.181.20.208"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.226.138.208"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.105.169.208"/>
    </slice>
    <from sec="1241500010" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.150.1.210"/>
    </slice>
    <from sec="1241499867" usec="0"/>
    <to sec="1241500066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.6.19.210"/>
    </slice>
    <from sec="1241499729" usec="0"/>
    <to sec="1241500463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.125.144.210"/>
    </slice>
    <from sec="1241499743" usec="0"/>
    <to sec="1241499748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.26.205.210"/>
    </slice>
    <from sec="1241499692" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.125.95.211"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.84.132.211"/>
    </slice>
    <from sec="1241499625" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.114.193.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.25.206.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.34.217.211"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.242.46.212"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.235.236.212"/>
    </slice>
    <from sec="1241500043" usec="0"/>
    <to sec="1241500057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.149.130.214"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.70.1.215"/>
    </slice>
    <from sec="1241499628" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.197.27.216"/>
    </slice>
    <from sec="1241499925" usec="0"/>
    <to sec="1241500241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.233.136.216"/>
    </slice>
    <from sec="1241499704" usec="0"/>
    <to sec="1241499851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.111.0.217"/>
    </slice>
    <from sec="1241499880" usec="0"/>
    <to sec="1241500036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.140.3.217"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="63.142.41.217"/>
    </slice>
    <from sec="1241500018" usec="0"/>
    <to sec="1241500030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.65.73.217"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.86.246.217"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241499882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.128.95.218"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.70.21.219"/>
    </slice>
    <from sec="1241499802" usec="0"/>
    <to sec="1241500113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.62.120.219"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.211.210.219"/>
    </slice>
    <from sec="1241499603" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.166.211.219"/>
    </slice>
    <from sec="1241500170" usec="0"/>
    <to sec="1241500177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.80.20.220"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.10.77.221"/>
    </slice>
    <from sec="1241499850" usec="0"/>
    <to sec="1241499884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.217.80.222"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241499788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.188.85.223"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.209.145.223"/>
    </slice>
    <from sec="1241500047" usec="0"/>
    <to sec="1241500067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.156.153.223"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.180.181.223"/>
    </slice>
    <from sec="1241499629" usec="0"/>
    <to sec="1241499973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.111.207.223"/>
    </slice>
    <from sec="1241499895" usec="0"/>
    <to sec="1241500288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.106.67.225"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.60.80.225"/>
    </slice>
    <from sec="1241500261" usec="0"/>
    <to sec="1241500468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.143.188.225"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.0.59.226"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.89.64.226"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.54.224.226"/>
    </slice>
    <from sec="1241500079" usec="0"/>
    <to sec="1241500086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.84.51.227"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.121.112.227"/>
    </slice>
    <from sec="1241500136" usec="0"/>
    <to sec="1241500160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.224.203.227"/>
    </slice>
    <from sec="1241499880" usec="0"/>
    <to sec="1241500474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.189.240.227"/>
    </slice>
    <from sec="1241499729" usec="0"/>
    <to sec="1241499736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.96.81.228"/>
    </slice>
    <from sec="1241499779" usec="0"/>
    <to sec="1241499955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.70.218.229"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.133.111.230"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.59.142.230"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.4.136.231"/>
    </slice>
    <from sec="1241499898" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.162.147.231"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.69.6.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.18.166.232"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.200.181.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.10.188.232"/>
    </slice>
    <from sec="1241499924" usec="0"/>
    <to sec="1241499959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="24.110.210.232"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.234.95.233"/>
    </slice>
    <from sec="1241499650" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.189.239.233"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.74.25.234"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.64.17.235"/>
    </slice>
    <from sec="1241500306" usec="0"/>
    <to sec="1241500308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.30.32.235"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.176.137.235"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.145.151.235"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241499993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.217.36.236"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.153.197.236"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.43.226.236"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.80.0.237"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241499675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.65.97.237"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.6.41.238"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.189.89.238"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.209.196.238"/>
    </slice>
    <from sec="1241499905" usec="0"/>
    <to sec="1241499975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.211.240.239"/>
    </slice>
    <from sec="1241499924" usec="0"/>
    <to sec="1241500118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.152.54.240"/>
    </slice>
    <from sec="1241499608" usec="0"/>
    <to sec="1241499729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.227.178.240"/>
    </slice>
    <from sec="1241499967" usec="0"/>
    <to sec="1241500414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.162.204.240"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.186.8.241"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.8.13.241"/>
    </slice>
    <from sec="1241499612" usec="0"/>
    <to sec="1241500485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.143.40.241"/>
    </slice>
    <from sec="1241499616" usec="0"/>
    <to sec="1241500496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.185.92.241"/>
    </slice>
    <from sec="1241499607" usec="0"/>
    <to sec="1241500493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.119.147.242"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.147.206.242"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.171.210.243"/>
    </slice>
    <from sec="1241500463" usec="0"/>
    <to sec="1241500478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.128.176.244"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.105.12.245"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.72.58.245"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.68.81.245"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.93.223.245"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.72.33.246"/>
    </slice>
    <from sec="1241499606" usec="0"/>
    <to sec="1241500385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.167.102.246"/>
    </slice>
    <from sec="1241500084" usec="0"/>
    <to sec="1241500250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.210.247.246"/>
    </slice>
    <from sec="1241499605" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.88.52.247"/>
    </slice>
    <from sec="1241499816" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.192.128.247"/>
    </slice>
    <from sec="1241499844" usec="0"/>
    <to sec="1241499874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.69.229.247"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.87.64.248"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.6.97.248"/>
    </slice>
    <from sec="1241499610" usec="0"/>
    <to sec="1241500125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.82.98.248"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.172.178.248"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.184.146.249"/>
    </slice>
    <from sec="1241500501" usec="0"/>
    <to sec="1241500502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.238.172.249"/>
    </slice>
    <from sec="1241500053" usec="0"/>
    <to sec="1241500500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.186.32.250"/>
    </slice>
    <from sec="1241499768" usec="0"/>
    <to sec="1241500498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.34.228.250"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241499952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.38.102.251"/>
    </slice>
    <from sec="1241500030" usec="0"/>
    <to sec="1241500254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.164.164.251"/>
    </slice>
    <from sec="1241499609" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.110.40.252"/>
    </slice>
    <from sec="1241499613" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.3.64.252"/>
    </slice>
    <from sec="1241499604" usec="0"/>
    <to sec="1241500499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.253.122.252"/>
    </slice>
    <from sec="1241499720" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.172.178.253"/>
    </slice>
    <from sec="1241499602" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.654223,4.55864,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.220.244.253"/>
    </slice>
    <from sec="1241500326" usec="0"/>
    <to sec="1241500501" usec="0"/>
  </anomaly>

</admd:annotation>
